$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: a/DZfaFXYEeqNaiFbQebHnQMW/MWg83OOJhU0F52T8Y= Subject key identifier: 26:E1:3C:40:45:C9:C8:88:41:12:44:A1:9D:0B:9E:00:48:48:C6:95 Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 358AE70889FB10F9BF86B8D601E9E7A6F34E0416 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: AA Signing time: Sat 14 Jun 2025 19:02:08 +0000 Manifest this update: Sat 14 Jun 2025 18:57:08 +0000 Manifest next update: Wed 18 Jun 2025 04:26:08 +0000 Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) 2: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: 7pyWsu0YcDudOhYyiaU9mZE6RprQBAUzxULOFeXq3mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8a:e7:08:89:fb:10:f9:bf:86:b8:d6:01:e9:e7:a6:f3:4e:04:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Jun 14 18:57:08 2025 GMT Not After : Jun 18 04:26:08 2025 GMT Subject: CN=26E13C4045C9C888411244A19D0B9E004848C695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:78:71:09:a8:35:e8:dd:80:50:ff:34:83: ef:74:09:68:08:08:64:ea:5f:64:99:b0:86:13:eb: 3f:ac:e8:89:61:02:2a:cf:01:c7:e6:a5:4d:0f:d4: 72:f6:1f:4b:9e:86:c8:33:5e:1e:30:ba:50:7e:e4: 1b:65:08:af:80:ae:15:15:02:24:34:54:b6:39:88: 57:08:b1:1a:96:ed:db:5e:1c:ee:1b:43:b1:65:89: b3:71:c2:98:00:8c:0e:33:80:ef:c8:de:37:0a:ef: 2f:c3:0d:dd:f6:69:c4:ee:55:08:e8:ef:c6:52:75: ef:79:91:ca:25:b4:1c:dd:a6:ae:70:75:a8:f3:c2: bd:9e:d7:62:bf:28:62:ab:95:76:ac:fb:0d:c7:8e: d2:c7:55:32:7e:12:d5:7a:11:2a:c7:42:32:af:75: da:70:3b:40:68:44:5a:ee:a6:0c:c1:d1:ab:c0:ba: 66:29:15:30:ea:01:07:82:7a:ef:a5:b5:f5:65:ad: ff:18:69:d8:65:4d:49:56:96:13:54:d3:d3:b5:62: 40:da:16:1d:ea:da:bf:52:c8:03:79:9e:e0:80:fa: 7d:c4:84:21:29:e8:d2:42:71:73:ef:f9:88:c1:77: 0b:7d:98:79:93:fd:a3:57:0b:e9:23:78:4f:b9:c0: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E1:3C:40:45:C9:C8:88:41:12:44:A1:9D:0B:9E:00:48:48:C6:95 X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:71:59:53:69:6a:c0:d6:84:76:2a:9a:6b:03:58:94:70:60: 8e:d9:1c:df:25:fd:21:0a:bc:83:da:d4:70:17:d9:34:e2:18: 1e:4c:92:be:48:69:da:08:8e:56:3e:84:27:04:15:d4:ef:42: 24:c5:77:b8:43:ca:15:d7:37:d5:b0:4c:90:4e:63:28:11:78: cf:38:87:49:2c:70:6a:21:fa:cc:5e:db:0e:ef:3c:d8:f8:de: 72:d6:21:c4:43:d2:7c:ee:e2:13:54:d3:09:f8:87:d7:1b:07: dc:bc:f6:04:cd:3a:30:75:48:f0:99:f2:13:a0:49:9b:11:1d: 97:7f:90:ca:4f:43:7f:8f:90:ee:db:e9:86:41:86:c7:7b:4c: 08:31:21:8c:db:41:97:0d:96:03:dc:45:1c:75:5a:b9:25:04: 71:9d:e1:d8:f0:0a:9f:ac:b0:4e:9a:20:96:7f:e0:e6:d3:b3: 0f:5d:cf:da:d7:3f:75:c2:41:56:b7:fc:fc:63:47:d2:38:71: 5b:4e:9d:4e:6d:1b:57:00:54:01:e9:89:dc:9f:03:72:e9:d2: 2b:d4:4f:ca:74:55:f3:e2:b3:15:15:f5:9f:7a:07:1e:a9:fa: 11:2c:3d:36:5d:cd:04:4a:8e:79:b3:2d:f6:1d:36:aa:41:c2: 38:7a:1c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYrnCIn7EPm/hrjWAennpvNOBBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTA2MTQxODU3MDhaFw0yNTA2MTgwNDI2MDhaMDMxMTAvBgNV BAMTKDI2RTEzQzQwNDVDOUM4ODg0MTEyNDRBMTlEMEI5RTAwNDg0OEM2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2n3hxCag16N2AUP80g+90CWgI CGTqX2SZsIYT6z+s6IlhAirPAcfmpU0P1HL2H0uehsgzXh4wulB+5BtlCK+ArhUV AiQ0VLY5iFcIsRqW7dteHO4bQ7FlibNxwpgAjA4zgO/I3jcK7y/DDd32acTuVQjo 78ZSde95kcoltBzdpq5wdajzwr2e12K/KGKrlXas+w3HjtLHVTJ+EtV6ESrHQjKv ddpwO0BoRFrupgzB0avAumYpFTDqAQeCeu+ltfVlrf8YadhlTUlWlhNU09O1YkDa Fh3q2r9SyAN5nuCA+n3EhCEp6NJCcXPv+YjBdwt9mHmT/aNXC+kjeE+5wNSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJuE8QEXJyIhBEkShnQueAEhIxpUwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtxWVNpasDWhHYqmmsDWJRwYI7ZHN8l/SEK vIPa1HAX2TTiGB5Mkr5IadoIjlY+hCcEFdTvQiTFd7hDyhXXN9WwTJBOYygReM84 h0kscGoh+sxe2w7vPNj43nLWIcRD0nzu4hNU0wn4h9cbB9y89gTNOjB1SPCZ8hOg SZsRHZd/kMpPQ3+PkO7b6YZBhsd7TAgxIYzbQZcNlgPcRRx1WrklBHGd4djwCp+s sE6aIJZ/4ObTsw9dz9rXP3XCQVa3/PxjR9I4cVtOnU5tG1cAVAHpidyfA3Lp0ivU T8p0VfPisxUV9Z96Bx6p+hEsPTZdzQRKjnmzLfYdNqpBwjh6HO4= -----END CERTIFICATE-----Generated at Mon Jun 16 01:29:30 2025 by rpki-client