$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: vLEsP5ru86FbzBQbSibYM4KMk7IeCg9dLZTp0EnzfEA= Subject key identifier: 76:67:C3:52:1D:D9:18:64:22:96:72:A5:42:0E:73:52:FD:64:08:A0 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 0AEC4F915D8DC70AA0F08C0F7EA96D6A149A3005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 0172 Signing time: Sun 15 Jun 2025 18:20:43 +0000 Manifest this update: Sun 15 Jun 2025 18:15:43 +0000 Manifest next update: Wed 18 Jun 2025 23:26:43 +0000 Files and hashes: 1: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: AzlMFbzrHGcEG4v19yHIw2cVpPbbaGWfk/zoDkydCtA=) 2: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: 3M+qehQhPJtRx+AWVv45lLS8rU8qsKaeaYio/75TNPk=) 3: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: DG8j9ef7nfIIFiGVtSenkzqNoAffZfzM7pKD+Dnqhp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ec:4f:91:5d:8d:c7:0a:a0:f0:8c:0f:7e:a9:6d:6a:14:9a:30:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Jun 15 18:15:43 2025 GMT Not After : Jun 18 23:26:43 2025 GMT Subject: CN=7667C3521DD91864229672A5420E7352FD6408A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:a1:26:7a:07:fa:6f:91:1e:8d:56:ee:48: 85:be:b6:ce:4c:55:f9:86:43:db:9d:81:24:76:ee: b7:72:e1:e2:41:9b:c1:0c:6e:3c:f4:8c:a2:ae:06: 7e:05:e9:02:8a:5c:03:8d:28:44:8e:aa:0f:06:ca: 3b:cc:48:44:2e:1d:ec:5e:0b:d4:a4:c0:d7:4a:a3: 5a:a2:67:b9:03:20:01:b4:e8:75:c2:e3:72:ce:16: cd:f3:b7:2c:a6:12:4d:f3:c5:09:4d:34:1b:5a:41: c7:8a:ec:26:d9:95:8d:a8:a3:b9:c0:83:49:62:8f: 2d:14:04:51:6b:c2:99:28:6b:2e:12:9f:88:60:9e: 5f:ba:30:ab:fa:1e:26:f5:b1:15:40:79:ae:89:63: 71:9f:7e:e1:d1:73:61:68:c1:c8:26:66:2d:e0:df: c9:f4:db:4a:34:ba:a7:ab:f6:28:b1:6f:af:21:59: 45:f6:26:b3:df:d5:b2:22:fa:b5:00:b4:1b:7f:d1: b3:e7:f8:26:a2:87:8d:7c:e0:d5:63:06:7d:fa:e7: ce:3d:f7:fc:4a:ad:90:c2:0d:e6:99:58:8f:86:a0: ce:7f:df:33:f4:bc:76:89:a9:03:a1:dc:10:fe:a6: dd:65:d8:41:65:56:0c:49:ff:a1:dc:ed:ce:e3:8b: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:67:C3:52:1D:D9:18:64:22:96:72:A5:42:0E:73:52:FD:64:08:A0 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cb:ea:3d:49:7f:f5:6a:04:f4:04:8a:62:53:5e:5f:48:6e: f5:63:f1:c8:f5:e6:ea:bd:1a:bc:74:1f:e4:cc:90:45:71:c9: 1d:c9:5b:00:47:23:5d:50:6e:4b:21:74:a2:4a:48:8b:2c:3d: 0b:00:92:4a:36:f4:3c:ea:79:7f:e4:8a:8b:05:d9:e5:a1:ee: e9:71:33:a9:8b:16:70:ba:0b:cf:d3:64:20:60:17:4e:18:47: 3a:ce:6c:22:dc:00:47:63:cb:76:e8:5e:d9:0e:16:51:6e:8c: 75:18:0d:61:91:73:fc:fc:ba:9f:c0:20:98:6d:d0:dc:e0:36: 93:3c:13:97:2d:74:1b:64:83:a8:f8:6d:f6:59:1c:eb:ac:69: 1a:d1:0e:82:c4:eb:92:56:83:f3:a3:45:ac:2f:cd:53:e2:90: 34:ad:30:71:fd:16:08:82:ec:7e:46:ca:11:63:86:52:4b:b7: cb:4f:93:7d:e7:44:14:db:f3:ff:44:f3:5e:0b:6b:e4:8a:3d: 76:ba:71:f1:08:54:13:86:13:91:0c:e7:dd:bc:eb:65:c2:ac: 70:22:23:0d:25:da:6f:85:31:b8:4b:41:6c:a6:8a:73:2a:bb: ae:36:cf:8d:dc:ec:2b:ce:e6:e4:57:b6:13:64:93:bf:0a:87: 14:b7:d4:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuxPkV2Nxwqg8IwPfqltahSaMAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA2MTUxODE1NDNaFw0yNTA2MTgyMzI2NDNaMDMxMTAvBgNV BAMTKDc2NjdDMzUyMUREOTE4NjQyMjk2NzJBNTQyMEU3MzUyRkQ2NDA4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3qEmegf6b5EejVbuSIW+ts5M VfmGQ9udgSR27rdy4eJBm8EMbjz0jKKuBn4F6QKKXAONKESOqg8GyjvMSEQuHexe C9SkwNdKo1qiZ7kDIAG06HXC43LOFs3ztyymEk3zxQlNNBtaQceK7CbZlY2oo7nA g0lijy0UBFFrwpkoay4Sn4hgnl+6MKv6Hib1sRVAea6JY3GffuHRc2FowcgmZi3g 38n020o0uqer9iixb68hWUX2JrPf1bIi+rUAtBt/0bPn+Caih4184NVjBn365849 9/xKrZDCDeaZWI+GoM5/3zP0vHaJqQOh3BD+pt1l2EFlVgxJ/6Hc7c7jiw6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmfDUh3ZGGQilnKlQg5zUv1kCKAwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLL6j1Jf/VqBPQEimJTXl9IbvVj8cj15uq9 Grx0H+TMkEVxyR3JWwBHI11QbkshdKJKSIssPQsAkko29DzqeX/kiosF2eWh7ulx M6mLFnC6C8/TZCBgF04YRzrObCLcAEdjy3boXtkOFlFujHUYDWGRc/z8up/AIJht 0NzgNpM8E5ctdBtkg6j4bfZZHOusaRrRDoLE65JWg/OjRawvzVPikDStMHH9FgiC 7H5GyhFjhlJLt8tPk33nRBTb8/9E814La+SKPXa6cfEIVBOGE5EM592862XCrHAi Iw0l2m+FMbhLQWyminMqu642z43c7CvO5uRXthNkk78KhxS31Oc= -----END CERTIFICATE-----Generated at Tue Jun 17 01:56:25 2025 by rpki-client