$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: l9R5dgzXuH48eDA12R+geeceAE+8Zq1LfcazBrJxadE= Subject key identifier: A4:1C:82:3F:25:81:C1:A3:94:2F:43:E5:63:6E:3C:AA:3E:6E:D0:2A Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 7636A4231D69042CC0AE409D6655D7B2DABD4A27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 0386 Signing time: Sat 14 Jun 2025 08:20:34 +0000 Manifest this update: Sat 14 Jun 2025 08:15:34 +0000 Manifest next update: Tue 17 Jun 2025 19:28:34 +0000 Files and hashes: 1: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 2: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: atmkUa8ka2ubWCF/m999/CWEqkQEkFMaT4Lh4QQBo78=) 3: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 4: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:36:a4:23:1d:69:04:2c:c0:ae:40:9d:66:55:d7:b2:da:bd:4a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Jun 14 08:15:34 2025 GMT Not After : Jun 17 19:28:34 2025 GMT Subject: CN=A41C823F2581C1A3942F43E5636E3CAA3E6ED02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:43:dd:1b:f2:1e:6e:61:60:e6:6a:ad:76: 0b:e0:99:8a:74:a2:b0:3a:06:9d:11:2f:44:92:01: c4:26:c8:8b:50:9b:b8:11:08:74:06:25:6c:b7:d7: 7b:25:6d:19:b2:ff:9c:22:9d:8b:59:28:23:48:9a: 4d:cf:d5:21:26:e1:21:be:d9:87:b5:45:da:6f:63: d3:cd:b7:b8:34:96:a8:bf:21:de:de:35:8a:57:3e: 5c:48:a6:5a:b5:c3:b6:c1:62:82:d9:2f:6c:68:35: dc:f0:7e:0e:d0:22:8a:e5:8d:ab:7d:4c:1c:e1:54: 50:57:78:d9:c8:7c:af:83:7a:af:22:c6:5a:b7:bb: 05:8f:63:0f:10:9c:d1:91:d6:01:70:83:eb:74:38: 4a:dc:0b:d4:c3:8c:2c:bd:0c:b2:27:a7:a1:9b:04: 3a:34:0c:ac:64:45:d2:21:45:fd:28:2c:7e:2e:96: c3:25:50:d6:12:f1:59:31:53:6f:98:d5:f6:7e:f5: ae:94:2a:7b:4d:29:43:12:dc:d0:23:aa:ae:7c:95: de:1c:03:39:34:c9:3d:d6:82:08:d1:b2:7f:80:6d: 9e:ae:35:ed:79:75:33:e8:b7:87:2d:91:97:bf:f1: 6c:44:55:3e:ff:7b:7a:da:13:a7:f9:af:f7:c4:39: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1C:82:3F:25:81:C1:A3:94:2F:43:E5:63:6E:3C:AA:3E:6E:D0:2A X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:66:0e:2c:0d:03:68:d2:1a:44:cd:40:ec:79:f0:ad:b9:b9: b9:0d:76:66:21:47:55:98:4a:5c:6b:55:73:81:16:8c:65:34: 15:0b:8f:3a:a4:ae:4f:83:a0:63:30:28:c6:95:cf:15:93:24: e2:db:76:9b:42:2f:c0:30:07:9f:05:18:da:00:6b:21:f8:6d: e0:72:45:03:93:22:11:a7:69:aa:d4:f4:72:f7:4f:15:71:ed: 7e:3e:5b:86:38:a0:c6:c8:ee:14:e8:08:69:20:33:0b:e4:7f: 2e:7c:83:4d:d4:7c:b4:19:79:3a:4d:37:89:43:6b:74:8f:0a: 95:81:17:88:d0:d2:c5:e2:71:f7:5c:b5:ea:f2:52:77:64:a7: db:fd:2e:07:69:1c:c6:5d:33:d7:49:0d:b2:e1:40:b1:d3:6f: 43:e6:98:9d:af:c3:43:bc:a8:45:a6:2e:4d:29:ae:69:72:d6: 6d:29:16:a6:66:61:16:9e:3b:5e:b1:01:2f:1c:22:c7:cd:0f: d5:6c:23:d1:d8:42:53:8d:2a:a8:e7:aa:9e:c7:58:42:58:f8: 75:cf:33:a4:42:1a:56:ee:57:d3:2f:df:57:70:c8:61:17:50: 29:93:56:13:c3:35:7f:b4:3a:08:99:ce:15:26:11:c0:b0:f6: 50:e1:5b:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjakIx1pBCzArkCdZlXXstq9SicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTA2MTQwODE1MzRaFw0yNTA2MTcxOTI4MzRaMDMxMTAvBgNV BAMTKEE0MUM4MjNGMjU4MUMxQTM5NDJGNDNFNTYzNkUzQ0FBM0U2RUQwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrs0PdG/IebmFg5mqtdgvgmYp0 orA6Bp0RL0SSAcQmyItQm7gRCHQGJWy313slbRmy/5winYtZKCNImk3P1SEm4SG+ 2Ye1RdpvY9PNt7g0lqi/Id7eNYpXPlxIplq1w7bBYoLZL2xoNdzwfg7QIorljat9 TBzhVFBXeNnIfK+Deq8ixlq3uwWPYw8QnNGR1gFwg+t0OErcC9TDjCy9DLInp6Gb BDo0DKxkRdIhRf0oLH4ulsMlUNYS8VkxU2+Y1fZ+9a6UKntNKUMS3NAjqq58ld4c Azk0yT3WggjRsn+AbZ6uNe15dTPot4ctkZe/8WxEVT7/e3raE6f5r/fEOQIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpByCPyWBwaOUL0PlY248qj5u0CowHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFmDiwNA2jSGkTNQOx58K25ubkNdmYhR1WY SlxrVXOBFoxlNBULjzqkrk+DoGMwKMaVzxWTJOLbdptCL8AwB58FGNoAayH4beBy RQOTIhGnaarU9HL3TxVx7X4+W4Y4oMbI7hToCGkgMwvkfy58g03UfLQZeTpNN4lD a3SPCpWBF4jQ0sXicfdcteryUndkp9v9LgdpHMZdM9dJDbLhQLHTb0PmmJ2vw0O8 qEWmLk0prmly1m0pFqZmYRaeO16xAS8cIsfND9VsI9HYQlONKqjnqp7HWEJY+HXP M6RCGlbuV9Mv31dwyGEXUCmTVhPDNX+0OgiZzhUmEcCw9lDhW1E= -----END CERTIFICATE-----Generated at Mon Jun 16 14:17:00 2025 by rpki-client