$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: TJZrq1p5yvfitJhU3yKrVPq+gxIqOqBC8WirySW/cEg= Subject key identifier: F6:46:DC:F6:08:AE:60:35:AC:19:8D:A3:7C:27:C4:7F:0F:50:FB:C2 Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 386AA8B54BE80AD4C268C378D68A78248582DC8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: E9 Signing time: Sun 02 Nov 2025 16:52:04 +0000 Manifest this update: Sun 02 Nov 2025 16:47:04 +0000 Manifest next update: Wed 05 Nov 2025 20:14:04 +0000 Files and hashes: 1: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: RkYzi+ZeVyNQh7IZhUypfPfRpRflY17QJ/C9GciKECQ=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6a:a8:b5:4b:e8:0a:d4:c2:68:c3:78:d6:8a:78:24:85:82:dc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Nov 2 16:47:04 2025 GMT Not After : Nov 5 20:14:04 2025 GMT Subject: CN=F646DCF608AE6035AC198DA37C27C47F0F50FBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:fe:ed:6b:36:c4:93:7e:9b:b7:f7:c6:99: 5c:6c:e0:fc:32:32:5a:65:5b:7e:d1:0f:f5:95:76: a9:41:3c:5b:71:8f:1d:8d:0c:e6:a1:e9:f4:1d:87: 97:41:a3:25:4a:36:18:cd:dd:39:ee:d0:c2:fe:e6: 24:4f:60:d6:86:25:0b:fc:7d:3b:dc:6f:2c:b2:2b: 2b:53:31:34:5c:f1:1e:0e:59:12:6e:b2:cd:9f:fe: 6b:1f:ef:b7:b5:36:55:12:e9:e3:b0:8d:d1:36:8a: 7a:a5:7f:79:c6:5c:b3:24:0c:12:e9:ac:71:d6:b8: 55:c2:37:ec:53:0b:65:40:3f:98:25:0a:82:3a:6a: 93:53:33:03:4e:7c:46:e7:c6:2e:44:d6:15:7a:32: 03:ab:b4:36:34:89:ad:81:c0:3d:74:e2:b6:90:80: c0:d2:f0:cb:f7:f2:b3:c4:5f:84:8d:63:d3:ad:3c: 17:d1:b3:20:1c:a4:ea:88:24:f0:29:05:35:b8:8e: 4f:bc:13:ee:a2:17:c3:e9:3b:2a:f0:14:07:0b:69: 30:da:81:c0:5d:4a:6d:e6:81:24:59:07:15:26:3d: 95:da:ea:7e:09:2d:fe:1c:22:b7:f6:95:e1:34:bc: d9:aa:7d:6e:6c:3c:a0:c4:bc:f0:65:a0:1e:a6:6b: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:46:DC:F6:08:AE:60:35:AC:19:8D:A3:7C:27:C4:7F:0F:50:FB:C2 X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:70:64:7c:53:10:fa:71:c3:0e:90:d6:9e:cc:12:fd:7a:0e: 14:dd:b9:01:77:95:15:80:e3:8c:2b:a8:f3:9b:0f:bb:24:86: fc:bf:df:be:cb:08:86:9b:dc:1b:0d:7b:09:7f:a0:c8:d2:c1: 22:f1:7d:d9:67:0d:de:1b:57:0a:36:98:e7:23:3f:28:21:a5: 0e:bb:01:59:31:c7:71:3e:a4:9a:f1:82:8c:20:0a:f7:37:ba: 49:fe:ec:70:eb:97:e0:ac:12:21:b8:0f:58:5d:e2:02:ee:3c: 6d:d8:a1:70:fe:4f:a5:91:73:91:b1:a0:cf:7b:a2:ab:2a:5b: 80:74:36:17:d6:1f:ea:2b:8a:82:bd:2d:a4:54:5b:fd:42:71: b0:fb:f7:40:76:3e:20:f6:be:8c:4f:75:bc:b0:96:a7:0d:7b: a5:e6:e6:1a:6e:3e:40:81:fc:2e:61:01:f1:e9:a6:7f:a4:27: 22:e8:eb:a7:41:28:83:72:3f:88:a8:83:28:34:a8:32:11:f1: 7a:4f:0b:e1:ee:54:70:55:2a:fc:e0:8f:aa:2a:4d:a2:8d:82: d1:b6:3c:1c:2e:a4:03:14:02:21:75:70:8c:b1:06:84:44:ed: 16:c7:0d:e2:0e:7a:6f:3d:6d:18:cb:34:bc:d3:97:46:cc:a1: 33:cf:f5:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGqotUvoCtTCaMN41op4JIWC3I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTExMDIxNjQ3MDRaFw0yNTExMDUyMDE0MDRaMDMxMTAvBgNV BAMTKEY2NDZEQ0Y2MDhBRTYwMzVBQzE5OERBMzdDMjdDNDdGMEY1MEZCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lf7tazbEk36bt/fGmVxs4Pwy MlplW37RD/WVdqlBPFtxjx2NDOah6fQdh5dBoyVKNhjN3Tnu0ML+5iRPYNaGJQv8 fTvcbyyyKytTMTRc8R4OWRJuss2f/msf77e1NlUS6eOwjdE2inqlf3nGXLMkDBLp rHHWuFXCN+xTC2VAP5glCoI6apNTMwNOfEbnxi5E1hV6MgOrtDY0ia2BwD104raQ gMDS8Mv38rPEX4SNY9OtPBfRsyAcpOqIJPApBTW4jk+8E+6iF8PpOyrwFAcLaTDa gcBdSm3mgSRZBxUmPZXa6n4JLf4cIrf2leE0vNmqfW5sPKDEvPBloB6ma98zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9kbc9giuYDWsGY2jfCfEfw9Q+8IwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRwZHxTEPpxww6Q1p7MEv16DhTduQF3lRWA 44wrqPObD7skhvy/377LCIab3BsNewl/oMjSwSLxfdlnDd4bVwo2mOcjPyghpQ67 AVkxx3E+pJrxgowgCvc3ukn+7HDrl+CsEiG4D1hd4gLuPG3YoXD+T6WRc5GxoM97 oqsqW4B0NhfWH+orioK9LaRUW/1CcbD790B2PiD2voxPdbywlqcNe6Xm5hpuPkCB /C5hAfHppn+kJyLo66dBKINyP4iogyg0qDIR8XpPC+HuVHBVKvzgj6oqTaKNgtG2 PBwupAMUAiF1cIyxBoRE7RbHDeIOem89bRjLNLzTl0bMoTPP9Yo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:12:32 2025 by rpki-client