$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: Ji3WbybfFWzaisBhvP88BidRQBCSP8uALqEri4UH8qg= Subject key identifier: DB:B1:40:41:29:1E:44:43:25:BA:3F:59:4C:D0:78:6A:2D:01:D5:38 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 3B9A1A6D44D304CC435069FDA2B230CEC2780788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 038D Signing time: Mon 30 Jun 2025 15:20:01 +0000 Manifest this update: Mon 30 Jun 2025 15:15:01 +0000 Manifest next update: Thu 03 Jul 2025 17:26:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 2: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: 9teXxRy7a5+p1GjTweeZ/k+EZV905Niw1JbbMkX0uSg=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 4: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 17:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9a:1a:6d:44:d3:04:cc:43:50:69:fd:a2:b2:30:ce:c2:78:07:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Jun 30 15:15:01 2025 GMT Not After : Jul 3 17:26:01 2025 GMT Subject: CN=DBB14041291E444325BA3F594CD0786A2D01D538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:6f:2e:15:de:00:01:ef:8c:73:24:15:47: 0a:6b:0a:23:de:5e:48:35:63:78:4d:78:19:f0:3d: 04:56:02:4f:37:34:53:f4:e1:ef:fe:d1:1a:69:79: 57:45:30:e7:cc:4d:11:a0:df:9b:ae:9b:d8:20:cc: 44:83:64:71:dc:17:e8:81:3e:ea:e8:23:41:0f:00: a7:3d:41:c8:56:68:7b:3b:da:47:6d:80:b5:b1:31: ba:51:49:5d:53:b6:c2:aa:4e:ab:4d:c5:de:a3:fd: 08:37:fc:88:0a:58:84:07:32:5f:24:03:47:bf:a2: 6a:6e:94:f3:e2:47:df:66:d4:03:62:c0:27:70:4f: dd:58:fb:1e:f8:5e:6c:70:9e:d9:3c:ad:02:3c:6b: f6:86:b0:35:47:2a:89:c5:4a:00:e0:a4:3b:06:71: a1:3c:de:50:8d:5c:8c:41:05:fd:78:db:13:7e:05: f4:5c:5c:0c:a0:dc:d7:c0:9c:af:f4:12:a0:c5:7d: 8a:8f:44:71:c8:0e:27:c4:b7:90:8b:53:0e:af:d9: 04:8f:73:c2:53:ad:69:45:60:c6:b6:03:e7:48:83: ac:e7:45:81:67:2b:78:66:80:43:f7:00:9a:35:e8: ec:52:e3:bf:55:4f:6c:d3:0c:80:1b:a1:00:50:b9: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B1:40:41:29:1E:44:43:25:BA:3F:59:4C:D0:78:6A:2D:01:D5:38 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:78:b5:3c:52:60:3b:a4:96:e9:f9:be:23:56:c8:03:c5:ea: 0c:dc:63:43:50:19:23:ac:81:35:be:32:e8:49:9f:49:67:d6: 8b:40:4b:cd:b9:ad:5d:e7:85:96:b4:0e:48:47:4f:82:3b:0e: 31:ee:89:33:10:71:e7:1f:cf:64:85:f5:8a:af:41:aa:66:68: 0c:3f:59:31:66:8d:65:30:7a:36:81:4d:40:92:5f:94:83:d5: 03:e4:ff:4e:b5:63:41:03:86:21:fe:17:ca:19:8f:a1:d3:92: 13:7d:bb:0f:b7:fe:0b:95:08:9b:1b:1b:63:da:72:35:e4:6b: c2:50:fa:50:19:1a:37:56:12:8f:82:13:37:18:41:f5:f1:f9: 81:39:30:f0:2d:5e:0b:36:24:f2:53:66:ac:d2:d5:0f:37:7f: 13:f3:7f:18:1e:f7:8e:3d:b4:41:84:4b:a0:36:bc:e6:e9:40: 94:d4:f3:af:94:70:82:94:67:c7:b8:73:21:dd:59:54:4b:9a: bb:75:88:96:b2:ac:9b:87:ce:5c:2f:03:23:d7:12:68:d0:52: 99:93:b4:38:2f:4e:3e:03:58:41:65:24:ed:f9:ae:83:5d:a1: af:7b:d7:3f:19:c2:d2:15:61:e9:fc:9d:3b:4f:30:b7:40:81: 28:5f:f9:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5oabUTTBMxDUGn9orIwzsJ4B4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTA2MzAxNTE1MDFaFw0yNTA3MDMxNzI2MDFaMDMxMTAvBgNV BAMTKERCQjE0MDQxMjkxRTQ0NDMyNUJBM0Y1OTRDRDA3ODZBMkQwMUQ1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaE28uFd4AAe+McyQVRwprCiPe Xkg1Y3hNeBnwPQRWAk83NFP04e/+0RppeVdFMOfMTRGg35uum9ggzESDZHHcF+iB PuroI0EPAKc9QchWaHs72kdtgLWxMbpRSV1TtsKqTqtNxd6j/Qg3/IgKWIQHMl8k A0e/ompulPPiR99m1ANiwCdwT91Y+x74Xmxwntk8rQI8a/aGsDVHKonFSgDgpDsG caE83lCNXIxBBf142xN+BfRcXAyg3NfAnK/0EqDFfYqPRHHIDifEt5CLUw6v2QSP c8JTrWlFYMa2A+dIg6znRYFnK3hmgEP3AJo16OxS479VT2zTDIAboQBQuTxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27FAQSkeREMluj9ZTNB4ai0B1TgwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl4tTxSYDuklun5viNWyAPF6gzcY0NQGSOs gTW+MuhJn0ln1otAS825rV3nhZa0DkhHT4I7DjHuiTMQcecfz2SF9YqvQapmaAw/ WTFmjWUwejaBTUCSX5SD1QPk/061Y0EDhiH+F8oZj6HTkhN9uw+3/guVCJsbG2Pa cjXka8JQ+lAZGjdWEo+CEzcYQfXx+YE5MPAtXgs2JPJTZqzS1Q83fxPzfxge9449 tEGES6A2vObpQJTU86+UcIKUZ8e4cyHdWVRLmrt1iJayrJuHzlwvAyPXEmjQUpmT tDgvTj4DWEFlJO35roNdoa971z8ZwtIVYen8nTtPMLdAgShf+a0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:47:27 2025 by rpki-client