$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: QS2cOp5XO0n4JuDeMyYGd2zEnFUVnmNN26xUjWJHBSs= Subject key identifier: 70:C6:60:71:B3:33:1D:BC:87:46:BF:A1:75:C5:90:14:AF:44:E9:46 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 2B76D63B65E17A46AE2A346BF9F7E79AD10242A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 039D Signing time: Tue 05 Aug 2025 09:50:01 +0000 Manifest this update: Tue 05 Aug 2025 09:45:01 +0000 Manifest next update: Fri 08 Aug 2025 20:24:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 2: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: yCjcrROMVk8+rJ1ow+wInPwCQwntKJkDopuk2qG/giU=) 3: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 4: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:76:d6:3b:65:e1:7a:46:ae:2a:34:6b:f9:f7:e7:9a:d1:02:42:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Aug 5 09:45:01 2025 GMT Not After : Aug 8 20:24:01 2025 GMT Subject: CN=70C66071B3331DBC8746BFA175C59014AF44E946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:77:dc:fd:74:d0:12:9f:ec:d2:ac:17:8d:bd: 1e:3a:c3:fb:f1:cc:f8:7a:34:d7:ac:96:d1:41:f4: 1e:3b:20:9c:f7:c7:da:2b:aa:81:29:c2:b6:8c:f9: 64:66:da:f9:34:8e:2b:ce:88:a7:b6:2f:42:31:f6: 18:f0:1a:21:24:d7:25:a2:9d:1f:cc:ab:b7:37:6f: 8a:16:01:f3:21:ed:2f:84:2a:13:f8:2e:04:d8:06: 9f:9c:44:88:54:d4:d5:79:b8:b7:12:1b:58:47:cb: a8:1a:75:d5:80:e8:d4:76:63:01:6b:70:f2:19:a0: 48:6a:b5:88:a5:f2:de:19:e6:22:6d:45:67:96:0f: 81:16:89:8d:e8:20:9e:a2:58:c3:a3:f6:f8:80:67: a7:3f:56:5c:ad:ef:fd:e7:15:79:40:08:f4:51:f3: a1:d4:4d:5a:87:ca:c1:cb:e9:73:6b:bc:97:c1:fd: 9f:54:60:47:dd:d7:bf:43:0c:70:24:b0:f4:43:b7: 0d:62:97:74:a4:bd:e0:a8:04:77:03:9d:24:9f:a7: 76:b5:56:ef:48:20:b1:b4:1a:01:77:99:65:49:15: 0c:cf:c0:e1:95:81:2b:f7:65:ac:30:b5:9e:4c:c9: d7:49:b1:fa:72:c5:cc:9e:05:4c:7f:4a:c0:03:f1: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:60:71:B3:33:1D:BC:87:46:BF:A1:75:C5:90:14:AF:44:E9:46 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:db:44:52:4f:96:c3:45:72:1d:bd:f7:00:9a:c7:e4:96:3f: 90:1f:b9:5e:bc:b6:11:e9:f2:eb:a8:58:57:4d:53:cf:be:b2: 61:18:25:20:49:7e:17:9f:63:a9:37:2a:d4:90:4d:c3:eb:c1: a9:53:bb:f8:14:bd:d0:72:7b:19:34:9b:67:e9:12:3e:81:27: c8:23:8c:86:44:93:db:44:c7:e3:f2:94:fc:ae:6e:ee:fd:ee: f0:78:f4:82:6d:5c:da:0f:6e:c0:85:76:69:c0:1e:b1:e8:48: 1d:4e:a2:96:a5:88:39:a2:c6:31:99:03:89:46:d2:32:a0:8c: 26:8c:a4:e4:02:a6:c3:5b:99:83:11:06:cd:27:30:ae:35:e8: 33:58:b5:a7:65:54:1a:f6:cf:d8:81:cb:c4:24:c5:48:25:81: 1d:7d:6e:c3:02:2d:4f:1e:3c:72:39:48:ad:1a:a6:36:58:7c: d2:d5:0c:3f:5b:b1:20:25:6e:c3:31:9e:02:b3:59:41:7a:0d: 96:ef:e1:bb:b6:43:86:7d:b8:e9:9d:70:82:43:28:f3:e7:a1: c8:7c:3f:72:02:d0:e1:8b:b8:a1:a7:29:55:c1:8a:be:a3:ad: 9d:da:5e:6e:a5:ec:f9:a9:b0:90:1d:7c:b5:e3:79:e3:d1:47: fe:74:11:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3bWO2XhekauKjRr+ffnmtECQqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTA4MDUwOTQ1MDFaFw0yNTA4MDgyMDI0MDFaMDMxMTAvBgNV BAMTKDcwQzY2MDcxQjMzMzFEQkM4NzQ2QkZBMTc1QzU5MDE0QUY0NEU5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjd9z9dNASn+zSrBeNvR46w/vx zPh6NNesltFB9B47IJz3x9orqoEpwraM+WRm2vk0jivOiKe2L0Ix9hjwGiEk1yWi nR/Mq7c3b4oWAfMh7S+EKhP4LgTYBp+cRIhU1NV5uLcSG1hHy6gaddWA6NR2YwFr cPIZoEhqtYil8t4Z5iJtRWeWD4EWiY3oIJ6iWMOj9viAZ6c/Vlyt7/3nFXlACPRR 86HUTVqHysHL6XNrvJfB/Z9UYEfd179DDHAksPRDtw1il3SkveCoBHcDnSSfp3a1 Vu9IILG0GgF3mWVJFQzPwOGVgSv3ZawwtZ5MyddJsfpyxcyeBUx/SsAD8Z6ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMZgcbMzHbyHRr+hdcWQFK9E6UYwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfbRFJPlsNFch299wCax+SWP5AfuV68thHp 8uuoWFdNU8++smEYJSBJfhefY6k3KtSQTcPrwalTu/gUvdByexk0m2fpEj6BJ8gj jIZEk9tEx+PylPyubu797vB49IJtXNoPbsCFdmnAHrHoSB1OopaliDmixjGZA4lG 0jKgjCaMpOQCpsNbmYMRBs0nMK416DNYtadlVBr2z9iBy8QkxUglgR19bsMCLU8e PHI5SK0apjZYfNLVDD9bsSAlbsMxngKzWUF6DZbv4bu2Q4Z9uOmdcIJDKPPnoch8 P3IC0OGLuKGnKVXBir6jrZ3aXm6l7PmpsJAdfLXjeePRR/50ERY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:28:24 2025 by rpki-client