$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: kWu3sN4dvKt4qjz4s5Iwx6U/52K7XxeVPycx2p7ul6g= Subject key identifier: 26:2E:84:D1:58:DA:A7:12:2C:72:06:62:92:1F:7F:5C:CF:3B:4E:7E Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 2B57CFFCFD43BAD0A482EE1F0642F9F702CF1EA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 015C Signing time: Sun 27 Apr 2025 17:10:43 +0000 Manifest this update: Sun 27 Apr 2025 17:05:43 +0000 Manifest next update: Wed 30 Apr 2025 23:16:43 +0000 Files and hashes: 1: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: 3M+qehQhPJtRx+AWVv45lLS8rU8qsKaeaYio/75TNPk=) 2: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: gEyRQySt0iCDyPZAvQ445tnwlWNjgpxV244mM9wBdZc=) 3: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: AzlMFbzrHGcEG4v19yHIw2cVpPbbaGWfk/zoDkydCtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 23:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:57:cf:fc:fd:43:ba:d0:a4:82:ee:1f:06:42:f9:f7:02:cf:1e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Apr 27 17:05:43 2025 GMT Not After : Apr 30 23:16:43 2025 GMT Subject: CN=262E84D158DAA7122C720662921F7F5CCF3B4E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:85:37:13:43:e5:55:7a:ac:0c:cc:4d:8d: 51:2c:33:29:48:f5:32:70:f1:7c:48:bd:88:fc:9d: fa:c0:6a:0d:f6:f4:c6:f4:f6:c5:f1:ee:eb:64:36: e2:9d:ac:7f:50:d2:a5:96:b1:7e:80:33:ba:fc:0c: 27:1c:cc:87:b7:74:16:cd:3d:d5:92:11:20:02:fd: 51:c5:a5:c3:0e:41:36:e7:4a:7f:1d:68:d7:70:e5: cd:df:20:66:4c:4d:c1:33:de:96:f3:ff:49:84:9f: 4a:63:22:47:5e:d2:30:13:8d:44:36:ef:17:d6:ef: 59:6c:15:f6:04:39:19:b3:ab:06:1a:78:d5:ef:59: 2a:a5:54:0b:36:c5:d7:ac:14:d3:f2:d0:61:4a:fc: ee:f5:e8:42:9d:7a:c0:44:a9:61:76:74:bb:30:03: b0:bd:82:c0:fe:35:1f:bc:a4:13:bf:41:13:ba:36: 55:b8:70:59:b6:f8:9d:06:f9:53:33:d5:b7:7c:a5: 69:04:13:ce:c1:9f:c2:e3:f2:54:21:3d:f4:b2:be: bc:3c:f6:da:15:45:cc:b1:c0:f7:0e:e4:1b:12:be: 9d:85:df:a2:db:81:10:39:07:57:fd:6a:4b:ad:13: 61:3f:f7:8d:99:78:ba:6b:bc:80:14:e8:ed:7f:3e: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2E:84:D1:58:DA:A7:12:2C:72:06:62:92:1F:7F:5C:CF:3B:4E:7E X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:16:cb:2f:22:11:3b:bf:33:1a:e7:1d:7e:d9:5e:20:3f:cc: b4:bb:91:f0:2c:5b:66:78:9d:ac:48:9c:23:41:00:9f:b8:71: 36:01:e0:13:6b:86:14:08:52:60:7b:e9:e8:c0:ea:57:93:05: 05:83:8f:ad:2f:e4:87:4f:7b:89:9f:78:82:6b:90:18:7e:c5: d5:6d:aa:e5:90:8f:6d:bd:d5:a2:97:8a:8c:72:36:78:12:a7: ff:29:68:b3:6f:08:58:1e:3f:2d:45:4f:f6:f3:d5:b0:0f:31: 0f:93:93:c6:27:c2:bb:7e:03:af:6d:7c:f2:aa:c6:80:bd:7a: f7:f3:6d:8d:f0:7a:ee:ea:80:36:8e:ec:b0:bd:2e:ad:2e:dc: db:aa:6a:2a:87:e8:28:58:c2:ae:1b:62:00:3f:5e:f9:f3:c6: e9:8c:00:9b:61:87:13:c5:a7:59:0d:e1:e0:d7:4a:3f:de:7e: 47:8b:28:85:a5:73:6e:89:02:97:61:d9:90:08:4a:a3:98:67: 73:df:b2:ff:dc:08:4b:5c:d1:5b:dd:19:f5:18:e9:7b:a1:af: 24:34:82:e3:b0:54:4f:8a:6a:f7:50:1b:d1:b2:7b:65:bc:5e: ad:5c:70:67:dc:3f:3a:6e:de:17:18:b2:b8:34:6c:39:03:f5: 87:b2:19:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1fP/P1DutCkgu4fBkL59wLPHqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA0MjcxNzA1NDNaFw0yNTA0MzAyMzE2NDNaMDMxMTAvBgNV BAMTKDI2MkU4NEQxNThEQUE3MTIyQzcyMDY2MjkyMUY3RjVDQ0YzQjRFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBIU3E0PlVXqsDMxNjVEsMylI 9TJw8XxIvYj8nfrAag329Mb09sXx7utkNuKdrH9Q0qWWsX6AM7r8DCcczIe3dBbN PdWSESAC/VHFpcMOQTbnSn8daNdw5c3fIGZMTcEz3pbz/0mEn0pjIkde0jATjUQ2 7xfW71lsFfYEORmzqwYaeNXvWSqlVAs2xdesFNPy0GFK/O716EKdesBEqWF2dLsw A7C9gsD+NR+8pBO/QRO6NlW4cFm2+J0G+VMz1bd8pWkEE87Bn8Lj8lQhPfSyvrw8 9toVRcyxwPcO5BsSvp2F36LbgRA5B1f9akutE2E/942ZeLprvIAU6O1/Pl55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJi6E0VjapxIscgZikh9/XM87Tn4wHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcWyy8iETu/MxrnHX7ZXiA/zLS7kfAsW2Z4 naxInCNBAJ+4cTYB4BNrhhQIUmB76ejA6leTBQWDj60v5IdPe4mfeIJrkBh+xdVt quWQj2291aKXioxyNngSp/8paLNvCFgePy1FT/bz1bAPMQ+Tk8Ynwrt+A69tfPKq xoC9evfzbY3weu7qgDaO7LC9Lq0u3NuqaiqH6ChYwq4bYgA/XvnzxumMAJthhxPF p1kN4eDXSj/efkeLKIWlc26JApdh2ZAISqOYZ3Pfsv/cCEtc0VvdGfUY6XuhryQ0 guOwVE+KavdQG9Gye2W8Xq1ccGfcPzpu3hcYsrg0bDkD9YeyGTU= -----END CERTIFICATE-----Generated at Tue Apr 29 12:49:41 2025 by rpki-client