$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: cN1sxURkVtsuEqMzn+7GegUAKKj7n25okR3xG5/fuBU= Subject key identifier: D1:32:CC:16:53:87:34:C4:A6:04:A4:FD:0B:2E:99:2C:B7:E4:D0:A6 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 0B726D989A2F166B3701EC83B6A1F481BCB69CAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 02E2 Signing time: Thu 19 Jun 2025 07:40:49 +0000 Manifest this update: Thu 19 Jun 2025 07:35:49 +0000 Manifest next update: Sun 22 Jun 2025 17:22:49 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: kQvwhxRIr0c9iOlMTcfmOkNMf8BdxcPNv83PJwJ+47k=) 2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: Rp05uR1CoHrYh0DRbANeYdzPdkrcOao8EsD51H17hT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 17:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:72:6d:98:9a:2f:16:6b:37:01:ec:83:b6:a1:f4:81:bc:b6:9c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Jun 19 07:35:49 2025 GMT Not After : Jun 22 17:22:49 2025 GMT Subject: CN=D132CC16538734C4A604A4FD0B2E992CB7E4D0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:ab:40:43:5a:63:3e:e6:17:90:44:ed:46: 24:26:24:dc:dd:fd:2b:70:9f:77:35:2c:0d:dc:11: a8:e6:41:4f:bc:ee:0a:57:97:e2:34:a3:c1:28:02: ea:65:cf:20:fc:98:1f:73:ee:0d:4c:a2:ee:55:ac: 9f:13:f8:d9:d3:7b:1e:f1:fc:bd:ed:93:b1:83:d2: 26:bd:40:33:46:e5:c7:84:77:93:d7:d2:7a:5c:dd: 37:62:a4:d6:4c:64:15:b3:51:0e:b2:63:35:4a:0a: 43:e7:92:42:10:b3:dd:88:0d:41:e0:7d:e7:ac:7e: 63:a0:a2:b2:c8:a5:6f:0d:ce:cc:16:08:a6:de:23: e2:e1:f9:ab:77:d7:26:a3:48:63:5c:19:68:d6:c5: 78:9a:e7:17:81:41:0d:15:92:3b:9b:3d:78:10:ee: 8a:7c:c2:36:b4:90:02:c8:90:19:60:21:be:8e:08: 11:8e:2f:2c:1f:6b:17:f3:2c:a2:db:b0:6c:6c:60: 84:3b:ed:69:8c:21:10:8d:d3:af:37:42:95:00:ce: e1:3b:8b:08:32:a6:1d:03:f6:b3:4f:5c:82:18:2a: 74:c6:01:54:52:e6:01:73:bb:35:19:9a:a3:69:4c: 47:fd:4e:57:11:56:5f:96:5a:b5:e6:d2:15:57:5a: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:32:CC:16:53:87:34:C4:A6:04:A4:FD:0B:2E:99:2C:B7:E4:D0:A6 X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:3b:ef:23:c0:f5:fe:aa:48:5c:70:3c:be:c4:94:d8:34:51: a5:59:97:49:37:32:ae:2c:7a:07:f3:5d:51:66:d0:3f:9d:85: b0:67:b2:d9:d8:4f:fd:a9:b6:bf:2c:63:00:ab:54:ad:f0:70: 94:f9:46:e1:6c:2e:23:e4:c7:2d:68:d7:9d:1e:47:93:e1:a8: bb:94:e0:ba:3f:94:a3:31:e6:dd:c3:98:8e:c3:d4:91:af:8a: a5:bc:b6:a8:0c:ff:d7:37:7c:e9:45:ae:ad:c4:01:bf:f6:79: e2:b7:fc:ae:85:7d:7c:0a:c6:2c:35:6d:0e:b0:95:65:7f:3e: b4:cb:36:90:05:24:0a:1a:95:f8:90:0b:22:38:3a:c1:9f:d6: a2:98:97:3c:70:bf:5f:a3:85:b4:cd:a0:c4:1f:27:a2:7c:90: 85:85:a8:bd:b5:ff:6e:fa:99:0d:83:f3:da:04:96:83:09:67: 34:b2:5b:58:ae:be:e4:6b:09:e6:79:9e:8a:27:0a:25:70:bc: 9d:b1:d3:2a:1a:7b:e7:8a:71:cb:63:59:a6:82:f7:d3:ef:62: b9:ea:a2:1b:5b:e5:9f:e3:61:ed:cc:d1:55:8c:47:5d:ac:c7: 40:17:29:43:3b:67:8d:2a:f4:d8:34:23:35:40:e0:51:3d:0c: 71:19:e3:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3JtmJovFms3AeyDtqH0gby2nK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTA2MTkwNzM1NDlaFw0yNTA2MjIxNzIyNDlaMDMxMTAvBgNV BAMTKEQxMzJDQzE2NTM4NzM0QzRBNjA0QTRGRDBCMkU5OTJDQjdFNEQwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbatAQ1pjPuYXkETtRiQmJNzd /Stwn3c1LA3cEajmQU+87gpXl+I0o8EoAuplzyD8mB9z7g1Mou5VrJ8T+NnTex7x /L3tk7GD0ia9QDNG5ceEd5PX0npc3TdipNZMZBWzUQ6yYzVKCkPnkkIQs92IDUHg feesfmOgorLIpW8NzswWCKbeI+Lh+at31yajSGNcGWjWxXia5xeBQQ0VkjubPXgQ 7op8wja0kALIkBlgIb6OCBGOLywfaxfzLKLbsGxsYIQ77WmMIRCN0683QpUAzuE7 iwgyph0D9rNPXIIYKnTGAVRS5gFzuzUZmqNpTEf9TlcRVl+WWrXm0hVXWlDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0TLMFlOHNMSmBKT9Cy6ZLLfk0KYwHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALU77yPA9f6qSFxwPL7ElNg0UaVZl0k3Mq4s egfzXVFm0D+dhbBnstnYT/2ptr8sYwCrVK3wcJT5RuFsLiPkxy1o150eR5PhqLuU 4Lo/lKMx5t3DmI7D1JGviqW8tqgM/9c3fOlFrq3EAb/2eeK3/K6FfXwKxiw1bQ6w lWV/PrTLNpAFJAoalfiQCyI4OsGf1qKYlzxwv1+jhbTNoMQfJ6J8kIWFqL21/276 mQ2D89oEloMJZzSyW1iuvuRrCeZ5noonCiVwvJ2x0yoae+eKcctjWaaC99PvYrnq ohtb5Z/jYe3M0VWMR12sx0AXKUM7Z40q9Ng0IzVA4FE9DHEZ4zc= -----END CERTIFICATE-----Generated at Fri Jun 20 09:30:59 2025 by rpki-client