$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: uKlV6KTvMsIptzuKgcpq6qb9wecNtKpv6dZNB0t9YvY= Subject key identifier: 5B:BA:81:D9:B8:28:00:8F:80:CD:BD:B1:E3:4B:26:CE:B7:A4:58:EC Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 15AFBD4D8093C750EEEEFF1CE3CE2288E1429BE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: C1 Signing time: Tue 05 Aug 2025 14:32:02 +0000 Manifest this update: Tue 05 Aug 2025 14:27:02 +0000 Manifest next update: Fri 08 Aug 2025 22:36:02 +0000 Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) 2: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: 8VmNTRUPTd9QIhSKpk8fJt1Vlgr7+GUALWRXOXSfnYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:af:bd:4d:80:93:c7:50:ee:ee:ff:1c:e3:ce:22:88:e1:42:9b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Aug 5 14:27:02 2025 GMT Not After : Aug 8 22:36:02 2025 GMT Subject: CN=5BBA81D9B828008F80CDBDB1E34B26CEB7A458EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:d2:c1:b3:7c:1e:16:f2:58:60:90:a1:3e: bc:55:be:15:14:1f:d3:94:0b:bc:f0:db:a5:cf:9b: e9:ca:03:67:46:ad:4f:68:58:e9:a8:25:2a:c8:cc: 3b:f1:bc:b3:d7:c2:a4:12:0b:6a:d1:bb:66:57:ee: c0:90:d5:30:c2:78:54:93:54:ba:dc:81:80:02:6f: 56:a9:67:86:a4:30:95:23:d3:d9:5b:0e:65:f5:2b: 28:0d:cf:70:b2:13:1e:5f:1b:59:0c:ab:d4:3e:2c: 4b:f0:10:cd:bc:a1:1d:e5:aa:c0:88:fe:e1:43:8b: ee:8e:5a:b9:53:54:30:a5:89:0b:ab:6c:01:d5:c5: c4:80:68:30:7b:9c:2d:99:58:f9:9e:87:d8:9d:2b: 24:ad:b0:b1:ec:d8:ab:a6:1f:47:b6:4d:79:f9:2b: 76:2d:5b:08:c3:11:a1:04:a1:34:51:df:3a:79:d0: a1:4e:66:de:7f:93:46:7d:fa:00:36:4a:5f:74:28: 55:31:2d:8b:1d:40:d2:ac:de:a2:89:ea:82:e2:97: 1c:ed:40:2d:3a:4e:f9:9f:a3:34:c8:24:da:2d:c0: 78:8a:5f:8b:8c:35:bb:ba:b9:95:90:e9:4a:a4:e3: 84:db:ee:fd:d4:c4:4f:37:84:e6:68:b2:39:52:58: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:81:D9:B8:28:00:8F:80:CD:BD:B1:E3:4B:26:CE:B7:A4:58:EC X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:54:55:8f:7c:62:e6:68:25:8a:c2:c9:85:af:45:9b:34:a8: 17:ab:b8:f0:87:c1:e7:09:7b:26:4c:13:1c:1c:77:04:1f:23: 5f:ec:35:6b:8d:ca:dd:a8:70:87:4a:3a:e1:76:0f:76:fe:bc: 37:eb:d1:6c:71:1b:b0:3b:31:74:5c:26:81:39:7d:31:12:74: 3c:04:04:49:e0:8f:53:51:45:c2:83:ed:fe:84:a4:1f:dc:ec: 0e:5b:7f:43:78:cb:ad:5d:05:21:f2:b3:e4:3a:3e:a1:5c:0a: 36:56:57:00:c0:3b:fb:32:58:fe:84:66:70:42:02:a1:f4:c7: bc:51:81:89:6d:4c:09:f7:ea:d6:89:c6:ba:c5:87:fd:58:e9: f5:26:6a:b1:32:24:b2:e2:91:9e:de:74:7a:0f:60:d6:dc:69: 27:dd:2c:3f:93:3b:ec:61:4b:91:7c:90:bb:64:8e:e0:59:05: 0c:b5:bd:fc:89:db:32:9b:48:d2:02:5c:a4:04:46:10:66:6d: 8c:e6:f7:d5:be:93:8a:b9:8f:6d:56:4d:12:9f:11:ad:e9:c7: cc:fe:f3:3e:20:17:d8:e4:c2:5d:00:74:25:ef:03:61:1b:29: 3f:ad:e6:5e:ff:c9:15:d9:35:ba:4c:1a:7d:43:e7:71:53:c4: b8:9c:bf:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFa+9TYCTx1Du7v8c484iiOFCm+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTA4MDUxNDI3MDJaFw0yNTA4MDgyMjM2MDJaMDMxMTAvBgNV BAMTKDVCQkE4MUQ5QjgyODAwOEY4MENEQkRCMUUzNEIyNkNFQjdBNDU4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOM9LBs3weFvJYYJChPrxVvhUU H9OUC7zw26XPm+nKA2dGrU9oWOmoJSrIzDvxvLPXwqQSC2rRu2ZX7sCQ1TDCeFST VLrcgYACb1apZ4akMJUj09lbDmX1KygNz3CyEx5fG1kMq9Q+LEvwEM28oR3lqsCI /uFDi+6OWrlTVDCliQurbAHVxcSAaDB7nC2ZWPmeh9idKyStsLHs2KumH0e2TXn5 K3YtWwjDEaEEoTRR3zp50KFOZt5/k0Z9+gA2Sl90KFUxLYsdQNKs3qKJ6oLilxzt QC06TvmfozTIJNotwHiKX4uMNbu6uZWQ6Uqk44Tb7v3UxE83hOZosjlSWGpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW7qB2bgoAI+Azb2x40smzrekWOwwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANtUVY98YuZoJYrCyYWvRZs0qBeruPCHwecJ eyZMExwcdwQfI1/sNWuNyt2ocIdKOuF2D3b+vDfr0WxxG7A7MXRcJoE5fTESdDwE BEngj1NRRcKD7f6EpB/c7A5bf0N4y61dBSHys+Q6PqFcCjZWVwDAO/syWP6EZnBC AqH0x7xRgYltTAn36taJxrrFh/1Y6fUmarEyJLLikZ7edHoPYNbcaSfdLD+TO+xh S5F8kLtkjuBZBQy1vfyJ2zKbSNICXKQERhBmbYzm99W+k4q5j21WTRKfEa3px8z+ 8z4gF9jkwl0AdCXvA2EbKT+t5l7/yRXZNbpMGn1D53FTxLicvxo= -----END CERTIFICATE-----Generated at Tue Aug 5 22:55:05 2025 by rpki-client