$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: /wJNc2pIATZKDr3noDkYaXKzdMteQHiOfrdOkLYDxoo= Subject key identifier: 8E:64:B5:CB:EE:2E:D2:88:4A:09:45:8E:3D:2A:B0:02:59:D2:2D:CF Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 1669D8AA099BB57C89560A8353747BB9B1233F86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 018B Signing time: Wed 06 Aug 2025 19:20:45 +0000 Manifest this update: Wed 06 Aug 2025 19:15:45 +0000 Manifest next update: Sun 10 Aug 2025 06:22:45 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: 2849Z22OX5WW7Viqvfp5Gtcc+us5hGQdtGFy6XjfY04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:69:d8:aa:09:9b:b5:7c:89:56:0a:83:53:74:7b:b9:b1:23:3f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Aug 6 19:15:45 2025 GMT Not After : Aug 10 06:22:45 2025 GMT Subject: CN=8E64B5CBEE2ED2884A09458E3D2AB00259D22DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:aa:dd:e9:f4:03:12:c0:27:8a:8d:43:d8: 8a:9b:97:2d:d1:ef:df:0f:39:23:92:c1:1c:b8:49: 37:16:ee:71:f4:92:de:01:08:bf:25:2e:7f:c1:11: 4e:49:e5:bd:60:82:eb:9e:d2:21:83:e8:7e:0d:e8: db:42:1f:78:84:83:e0:fa:f5:a2:c7:e2:21:83:2a: 51:04:3e:75:6c:3e:d7:c5:1f:4d:bd:91:51:98:8f: 39:65:bd:0b:c0:4d:0e:1b:a9:35:1d:85:39:ff:85: 25:ff:f4:e9:cf:74:83:13:cd:08:80:4d:22:ab:c8: 08:65:62:89:0f:23:f3:d6:af:ae:d9:35:b8:6d:7c: 7e:0d:f7:6e:38:21:73:c3:f6:7f:8f:6d:bf:54:8e: c2:fe:40:35:cf:87:aa:dc:93:55:63:9a:b5:f1:c1: da:a2:58:20:43:bf:0d:98:ba:6a:b5:12:85:de:b5: 05:6c:68:39:64:5f:73:04:8b:76:ca:d8:da:c2:f7: 79:4a:2f:34:34:80:28:31:6b:af:c1:45:95:91:7f: c1:d3:e9:0d:88:73:4d:af:5f:ae:90:1b:67:8a:8a: 43:7c:b2:96:9f:92:03:3a:66:b2:10:26:8c:e1:86: 10:63:55:f1:83:97:39:39:8a:76:3f:e3:6c:36:88: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:64:B5:CB:EE:2E:D2:88:4A:09:45:8E:3D:2A:B0:02:59:D2:2D:CF X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:45:14:24:d0:4f:59:d8:4e:d9:7a:a3:6d:f5:b3:df:48:67: eb:3c:5b:45:e1:01:40:24:f4:a2:75:e5:8a:39:d6:c3:de:f8: 4b:f6:03:d6:d6:e2:57:e3:64:b5:7d:d0:46:b9:53:7c:62:7d: ad:4f:32:3e:6f:e6:f3:b2:ab:65:a8:4b:e9:c5:78:ea:ac:59: d5:92:c0:6f:bc:8c:74:70:ee:e4:4f:50:e0:22:ab:74:65:5a: 2a:48:92:40:15:99:33:8e:8e:7e:90:62:93:e1:93:34:00:30: 88:0a:56:57:8e:79:82:d8:02:d7:ad:d7:26:69:0d:f6:43:88: 78:48:7d:a2:54:df:53:51:9a:c4:8d:b1:ca:14:a6:33:d1:f3: 88:50:76:fb:7f:0c:c8:4b:79:a0:f0:a9:d0:48:99:e9:75:59: 2e:40:c5:0f:65:f2:88:b4:29:d2:12:c2:70:2f:3a:8b:f8:05: 82:8c:64:9b:46:ff:3f:d0:83:1e:ad:02:e3:a8:a3:8a:af:58: 6d:1f:e2:fd:70:99:e3:2b:b8:d6:20:94:32:48:3b:ac:a2:c1: 6e:d5:7f:5b:90:35:89:52:1b:25:17:b2:92:67:2d:6e:60:ae: 08:56:d9:71:86:de:39:82:4b:ce:aa:b2:7d:8a:c4:fd:fa:af: 15:29:9e:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmnYqgmbtXyJVgqDU3R7ubEjP4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA4MDYxOTE1NDVaFw0yNTA4MTAwNjIyNDVaMDMxMTAvBgNV BAMTKDhFNjRCNUNCRUUyRUQyODg0QTA5NDU4RTNEMkFCMDAyNTlEMjJEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbKrd6fQDEsAnio1D2Iqbly3R 798POSOSwRy4STcW7nH0kt4BCL8lLn/BEU5J5b1gguue0iGD6H4N6NtCH3iEg+D6 9aLH4iGDKlEEPnVsPtfFH029kVGYjzllvQvATQ4bqTUdhTn/hSX/9OnPdIMTzQiA TSKryAhlYokPI/PWr67ZNbhtfH4N9244IXPD9n+Pbb9UjsL+QDXPh6rck1VjmrXx wdqiWCBDvw2Yumq1EoXetQVsaDlkX3MEi3bK2NrC93lKLzQ0gCgxa6/BRZWRf8HT 6Q2Ic02vX66QG2eKikN8spafkgM6ZrIQJozhhhBjVfGDlzk5inY/42w2iASNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmS1y+4u0ohKCUWOPSqwAlnSLc8wHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJFFCTQT1nYTtl6o231s99IZ+s8W0XhAUAk 9KJ15Yo51sPe+Ev2A9bW4lfjZLV90Ea5U3xifa1PMj5v5vOyq2WoS+nFeOqsWdWS wG+8jHRw7uRPUOAiq3RlWipIkkAVmTOOjn6QYpPhkzQAMIgKVleOeYLYAtet1yZp DfZDiHhIfaJU31NRmsSNscoUpjPR84hQdvt/DMhLeaDwqdBImel1WS5AxQ9l8oi0 KdISwnAvOov4BYKMZJtG/z/Qgx6tAuOoo4qvWG0f4v1wmeMruNYglDJIO6yiwW7V f1uQNYlSGyUXspJnLW5grghW2XGG3jmCS86qsn2KxP36rxUpnhI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:23 2025 by rpki-client