$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: 9cT1y+EJ8oQP+jPZQBmXAln83C6wyKAhfpW3fQYAp7Y= Subject key identifier: 47:94:FA:23:66:83:D0:E5:4D:FA:E4:7D:73:06:73:1B:FC:CD:3D:4E Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 0F305932B0F9E222792CA74B3E3C2AA7317A4B42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: 95 Signing time: Mon 28 Apr 2025 04:51:59 +0000 Manifest this update: Mon 28 Apr 2025 04:46:59 +0000 Manifest next update: Thu 01 May 2025 05:30:59 +0000 Files and hashes: 1: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: JIte45rS1j/dBfO2xVDbL7x5r5Ghn8qsgDnQ8q+vOIc=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: y71ZhCBj0ZFKWRv/ArGsOF0ogDJDqOvjhhVCZLjfrqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:30:59:32:b0:f9:e2:22:79:2c:a7:4b:3e:3c:2a:a7:31:7a:4b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Apr 28 04:46:59 2025 GMT Not After : May 1 05:30:59 2025 GMT Subject: CN=4794FA236683D0E54DFAE47D7306731BFCCD3D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:a7:a0:70:7e:55:65:8c:8f:0f:1d:89:07: 53:86:b9:21:3a:e9:0f:ed:78:eb:62:5b:95:3f:1f: 28:3e:1c:cb:45:81:5c:fc:f8:66:cb:c4:80:2a:a9: fd:da:f1:cc:02:1a:b3:95:3e:fa:bf:f7:eb:91:de: af:19:48:2c:9f:55:29:91:70:de:be:43:15:23:bb: 52:bc:31:e9:79:51:31:83:8d:67:94:fa:5c:3a:e1: 04:0d:cb:e9:80:42:dc:dc:dd:d4:f9:43:ac:95:f4: d1:f8:af:86:cc:ab:80:f5:bb:ec:d3:c7:fc:54:ec: ba:2d:61:6c:65:cd:0c:cf:4d:d9:6f:95:b3:b1:f7: 19:d6:4a:35:14:bf:69:ab:2e:e5:62:87:72:99:10: 55:31:cb:87:66:63:49:8f:21:89:34:03:c5:cf:8b: 38:93:de:8b:68:a8:99:8b:25:d0:6e:b5:bc:74:72: 44:b6:cb:b2:70:41:c2:79:b8:a2:dc:b8:ff:b3:dd: 32:d6:a0:b0:c0:c7:a5:19:38:ad:f4:f7:ec:38:dd: 66:14:20:50:ac:49:7a:d0:65:bf:47:a4:ec:d8:d6: fc:9a:65:62:f3:af:34:8d:36:f5:df:12:26:1f:13: 88:c2:87:37:f0:4f:ae:8c:e1:d8:fa:0c:ed:00:14: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:94:FA:23:66:83:D0:E5:4D:FA:E4:7D:73:06:73:1B:FC:CD:3D:4E X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a5:3b:19:9a:83:ed:8a:b1:9b:d1:58:ca:85:09:2b:43:81: 3b:39:83:7c:23:42:6b:e6:23:b3:85:35:39:ac:db:de:c1:d8: df:85:0e:b1:c8:26:75:e6:f3:24:a5:2e:d6:93:71:56:69:05: 5d:21:b8:23:cc:0d:bb:57:2e:5d:81:f4:f8:f3:a6:d3:ec:43: 2b:57:a3:1a:9f:ce:4f:a9:dc:6d:0e:ab:9d:75:1e:28:5f:ca: a4:f2:96:6c:89:f0:e1:54:00:e2:2d:24:d9:79:8f:89:40:e0: 45:5c:c1:5f:b4:bc:2e:15:b6:b4:84:a6:c5:23:84:85:9f:6a: 03:0d:b1:e1:1c:3d:62:dd:01:e3:eb:cd:f1:15:43:16:51:b3: 6a:fa:bd:6f:d5:5a:16:20:a8:67:c5:9f:02:92:ec:f6:19:ca: a4:13:df:f7:ae:9d:51:d5:64:26:78:20:25:4e:73:ce:0d:2a: 94:54:96:9e:6e:11:3e:e2:f0:7c:4d:7b:ad:7f:92:02:0e:91: 39:c4:86:0b:9f:07:10:34:50:74:88:0d:d1:fe:b7:9a:d1:8f: 14:18:64:96:b4:e8:98:11:eb:12:44:27:df:fb:38:9c:e2:be: 0e:15:d7:55:cc:1e:a6:d6:fa:5b:ac:93:4c:bc:7a:b7:2d:2a: 59:e3:7a:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzBZMrD54iJ5LKdLPjwqpzF6S0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTA0MjgwNDQ2NTlaFw0yNTA1MDEwNTMwNTlaMDMxMTAvBgNV BAMTKDQ3OTRGQTIzNjY4M0QwRTU0REZBRTQ3RDczMDY3MzFCRkNDRDNENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNqegcH5VZYyPDx2JB1OGuSE6 6Q/teOtiW5U/Hyg+HMtFgVz8+GbLxIAqqf3a8cwCGrOVPvq/9+uR3q8ZSCyfVSmR cN6+QxUju1K8Mel5UTGDjWeU+lw64QQNy+mAQtzc3dT5Q6yV9NH4r4bMq4D1u+zT x/xU7LotYWxlzQzPTdlvlbOx9xnWSjUUv2mrLuVih3KZEFUxy4dmY0mPIYk0A8XP iziT3otoqJmLJdButbx0ckS2y7JwQcJ5uKLcuP+z3TLWoLDAx6UZOK309+w43WYU IFCsSXrQZb9HpOzY1vyaZWLzrzSNNvXfEiYfE4jChzfwT66M4dj6DO0AFPNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5T6I2aD0OVN+uR9cwZzG/zNPU4wHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSlOxmag+2KsZvRWMqFCStDgTs5g3wjQmvm I7OFNTms297B2N+FDrHIJnXm8ySlLtaTcVZpBV0huCPMDbtXLl2B9PjzptPsQytX oxqfzk+p3G0Oq511HihfyqTylmyJ8OFUAOItJNl5j4lA4EVcwV+0vC4VtrSEpsUj hIWfagMNseEcPWLdAePrzfEVQxZRs2r6vW/VWhYgqGfFnwKS7PYZyqQT3/eunVHV ZCZ4ICVOc84NKpRUlp5uET7i8HxNe61/kgIOkTnEhgufBxA0UHSIDdH+t5rRjxQY ZJa06JgR6xJEJ9/7OJzivg4V11XMHqbW+lusk0y8erctKlnjeso= -----END CERTIFICATE-----Generated at Mon Apr 28 09:43:49 2025 by rpki-client