$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: 3U+lhrfA0J2rS0Bi/JaSJAphWOjwUW/ucMhxo4u4ObU= Subject key identifier: 3F:54:E4:7E:64:29:48:40:95:91:94:BE:4A:76:A3:DE:09:9E:58:D1 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 766EC2F946014AE329829F3E927005A054C59218 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 01B3 Signing time: Mon 03 Nov 2025 23:10:45 +0000 Manifest this update: Mon 03 Nov 2025 23:05:45 +0000 Manifest next update: Fri 07 Nov 2025 05:03:45 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: tINbAc9HDjSpoAbUVGHeVfMj/G8Z9MR+6S0Y/Dc7HUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6e:c2:f9:46:01:4a:e3:29:82:9f:3e:92:70:05:a0:54:c5:92:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Nov 3 23:05:45 2025 GMT Not After : Nov 7 05:03:45 2025 GMT Subject: CN=3F54E47E64294840959194BE4A76A3DE099E58D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:c7:df:ec:07:81:f7:4d:48:6a:db:0b:83: 92:27:01:1a:5d:0b:59:2f:6d:20:7a:17:ea:70:e3: f9:67:92:77:6a:cd:24:7d:10:e1:fa:d9:78:0b:44: 21:ff:15:b4:c6:b4:07:0f:f1:da:8f:64:c0:4b:7c: 44:8a:46:bd:f9:1f:83:e4:24:34:1c:81:93:ca:f1: 6f:d6:58:a9:d6:54:b8:a3:7c:f4:ad:d4:5b:0a:6a: bb:37:c9:57:bc:6a:7e:fc:80:22:c1:df:87:f2:7b: ec:36:8b:8e:e0:32:2e:f5:b5:1e:13:39:b9:78:ca: 46:a5:0a:39:c2:a3:56:8a:f7:5f:48:7c:89:56:67: 74:8b:a0:36:ac:cc:07:5d:31:80:4f:14:b5:ca:8b: cc:8e:57:f7:5a:9f:8e:12:f8:75:17:28:05:0e:0d: 50:f4:98:dd:bf:8a:1f:78:a0:3f:80:57:dd:0d:7f: 5a:7e:8c:ec:0c:e8:9b:ff:2b:83:9a:c3:5b:c2:a3: 2f:76:4f:90:66:27:cb:3d:a2:1a:9d:bd:e5:02:12: ab:cb:70:21:f4:38:45:2c:a5:f1:70:04:27:ef:a5: 43:fc:c1:a4:3d:eb:b7:9e:cd:fe:d6:49:54:66:3a: 6d:8e:5a:f2:3f:c7:5c:79:bd:d1:f0:54:d6:0f:b9: f3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:54:E4:7E:64:29:48:40:95:91:94:BE:4A:76:A3:DE:09:9E:58:D1 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:13:43:7f:18:0c:16:9e:f8:5e:93:6c:a0:2d:3e:26:30:fe: 0e:90:ce:d4:20:3b:ff:01:9a:35:80:d5:bc:3f:93:83:02:17: 40:e3:41:98:6c:6b:6e:b8:fe:5d:e7:b6:89:01:da:00:f0:08: ed:50:5a:e8:74:7d:39:a6:d0:8d:16:80:82:f1:f0:64:06:c7: 89:79:e6:83:fb:24:d2:91:52:26:89:c8:2f:72:36:2c:03:21: 84:16:0d:61:7f:01:2d:d0:08:a6:03:03:50:61:95:cd:ba:1c: a3:c0:ab:c0:99:e3:d1:d4:c3:8b:39:b4:1d:e4:fe:4b:4a:a6: 6a:e8:18:69:55:0d:16:2c:56:98:6d:51:41:95:85:2f:d2:4a: a2:24:76:77:fc:5b:5c:a9:2d:0d:13:a0:76:2e:16:92:ef:19: 42:60:47:2d:1a:0c:b4:c8:bc:eb:b3:8d:36:43:33:8f:cf:90: dd:35:a6:f2:fa:63:15:84:ea:51:6f:7a:c9:4d:1e:32:84:26: f7:1d:6f:60:0e:ea:db:0f:c7:3e:7a:0e:63:72:3f:29:b4:e8: dc:27:c2:e2:f8:04:cb:90:32:ed:ea:0c:36:61:fc:dc:83:24: 17:f1:0a:a4:34:96:64:0e:1c:4d:72:8a:b0:ef:da:19:bf:a2: ed:bc:c1:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdm7C+UYBSuMpgp8+knAFoFTFkhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTExMDMyMzA1NDVaFw0yNTExMDcwNTAzNDVaMDMxMTAvBgNV BAMTKDNGNTRFNDdFNjQyOTQ4NDA5NTkxOTRCRTRBNzZBM0RFMDk5RTU4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1sff7AeB901IatsLg5InARpd C1kvbSB6F+pw4/lnkndqzSR9EOH62XgLRCH/FbTGtAcP8dqPZMBLfESKRr35H4Pk JDQcgZPK8W/WWKnWVLijfPSt1FsKars3yVe8an78gCLB34fye+w2i47gMi71tR4T Obl4ykalCjnCo1aK919IfIlWZ3SLoDaszAddMYBPFLXKi8yOV/dan44S+HUXKAUO DVD0mN2/ih94oD+AV90Nf1p+jOwM6Jv/K4Oaw1vCoy92T5BmJ8s9ohqdveUCEqvL cCH0OEUspfFwBCfvpUP8waQ967eezf7WSVRmOm2OWvI/x1x5vdHwVNYPufM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1TkfmQpSECVkZS+Snaj3gmeWNEwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMETQ38YDBae+F6TbKAtPiYw/g6QztQgO/8B mjWA1bw/k4MCF0DjQZhsa264/l3ntokB2gDwCO1QWuh0fTmm0I0WgILx8GQGx4l5 5oP7JNKRUiaJyC9yNiwDIYQWDWF/AS3QCKYDA1Bhlc26HKPAq8CZ49HUw4s5tB3k /ktKpmroGGlVDRYsVphtUUGVhS/SSqIkdnf8W1ypLQ0ToHYuFpLvGUJgRy0aDLTI vOuzjTZDM4/PkN01pvL6YxWE6lFveslNHjKEJvcdb2AO6tsPxz56DmNyPym06Nwn wuL4BMuQMu3qDDZh/NyDJBfxCqQ0lmQOHE1yirDv2hm/ou28wSc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:27 2025 by rpki-client