$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: wmurBVa2ROV9kczMWo+iFlfLDf39pvD4U6D4oWMZ5dE= Subject key identifier: A3:48:3F:5A:9E:9E:AF:79:0A:03:7F:3A:6C:2B:EF:AF:CC:23:2D:DF Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 34C30F78BA04F144E981BD471D6B211BBFEEB831 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 0268 Signing time: Thu 03 Jul 2025 22:20:41 +0000 Manifest this update: Thu 03 Jul 2025 22:15:40 +0000 Manifest next update: Mon 07 Jul 2025 06:03:40 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: fslym1t7rFHN2uLNEeTtdT07ujbf7ivf3fV4qyKgt+A=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 06:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c3:0f:78:ba:04:f1:44:e9:81:bd:47:1d:6b:21:1b:bf:ee:b8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Jul 3 22:15:40 2025 GMT Not After : Jul 7 06:03:40 2025 GMT Subject: CN=A3483F5A9E9EAF790A037F3A6C2BEFAFCC232DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:77:36:b4:13:86:0e:28:e1:bc:0b:8d:4f:4d: fb:da:34:cf:69:37:8f:d1:6d:7b:0c:8c:a5:a4:a2: 06:53:98:8f:68:45:c9:45:79:34:dc:87:b9:9a:c5: b4:f3:78:14:92:88:30:e2:4d:7b:4a:ff:0c:bb:2a: b3:cf:75:45:7d:76:50:16:07:2a:2b:85:84:18:ac: f3:bf:d7:60:8c:7b:7a:43:44:6a:f2:57:33:a3:f7: d3:4a:f9:1f:48:74:0f:74:c1:f6:8f:dc:7d:49:1b: 78:c7:b9:0e:fc:d4:46:11:9f:e3:16:df:3a:1d:b8: 34:46:cc:64:93:16:86:65:06:8a:3d:8b:b2:a3:9f: 97:c1:fc:2c:f6:33:17:28:b5:48:d8:d6:ce:09:cd: 1e:71:dc:26:2e:36:9e:e8:15:17:b6:ef:ef:bf:db: ae:dd:b1:13:33:08:47:10:60:40:ed:79:5a:97:fd: 91:ab:92:08:a8:2a:e8:00:05:44:b2:88:a5:b4:2c: 8a:a1:c5:d2:d3:29:df:5b:d6:0b:b3:64:ca:20:23: 52:0b:aa:f7:61:02:95:c4:49:b2:f3:84:51:9d:c6: d1:25:c6:13:61:49:25:37:8c:8d:f5:cb:3b:e4:8d: c6:9c:6f:0f:47:75:85:98:bc:2a:d5:39:1e:72:39: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:48:3F:5A:9E:9E:AF:79:0A:03:7F:3A:6C:2B:EF:AF:CC:23:2D:DF X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:48:75:99:3a:ba:ef:d2:8b:37:96:b8:fa:de:25:41:41:71: 8d:1d:7f:07:37:d2:65:df:e8:23:3e:34:c0:58:47:42:50:88: 8c:5a:6f:3b:7b:79:32:4a:db:ff:03:e0:1d:dc:84:73:6c:28: 8f:bd:9a:a3:bb:46:36:02:74:b1:38:57:97:d8:49:ad:a3:0f: ab:0c:94:6d:0f:a6:e8:98:c4:e0:5c:3e:c9:42:ac:dc:75:93: 95:bb:be:8b:d8:c7:8a:35:f8:27:3d:85:ed:02:a6:e2:46:2c: d7:9f:14:6a:65:a7:13:1d:78:8e:e5:09:c4:57:84:21:a9:8a: e7:f1:0f:75:61:d7:cd:d2:92:38:6e:a8:22:e0:96:1d:06:14: 57:da:82:ef:e2:62:8d:4c:cd:c7:47:ad:8d:ab:de:41:05:d2: f5:90:72:6e:9d:c0:74:54:37:08:70:66:c0:f7:8c:a2:03:88: df:7e:43:39:6c:7d:40:cf:68:d0:67:e2:b2:36:1c:ca:58:74: 10:6c:89:c0:4d:fe:85:90:aa:3f:fa:0f:96:84:9a:70:ce:ba: cf:99:78:87:af:a0:00:f6:55:d2:af:09:f5:38:78:ea:f9:13: 5d:d1:2f:1c:10:31:25:a7:e5:ff:70:7f:c3:3b:f7:3c:cb:4f: 24:3f:07:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMMPeLoE8UTpgb1HHWshG7/uuDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTA3MDMyMjE1NDBaFw0yNTA3MDcwNjAzNDBaMDMxMTAvBgNV BAMTKEEzNDgzRjVBOUU5RUFGNzkwQTAzN0YzQTZDMkJFRkFGQ0MyMzJEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdza0E4YOKOG8C41PTfvaNM9p N4/RbXsMjKWkogZTmI9oRclFeTTch7maxbTzeBSSiDDiTXtK/wy7KrPPdUV9dlAW ByorhYQYrPO/12CMe3pDRGryVzOj99NK+R9IdA90wfaP3H1JG3jHuQ781EYRn+MW 3zoduDRGzGSTFoZlBoo9i7Kjn5fB/Cz2MxcotUjY1s4JzR5x3CYuNp7oFRe27++/ 267dsRMzCEcQYEDteVqX/ZGrkgioKugABUSyiKW0LIqhxdLTKd9b1guzZMogI1IL qvdhApXESbLzhFGdxtElxhNhSSU3jI31yzvkjcacbw9HdYWYvCrVOR5yOY1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo0g/Wp6er3kKA386bCvvr8wjLd8wHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1IdZk6uu/SizeWuPreJUFBcY0dfwc30mXf 6CM+NMBYR0JQiIxabzt7eTJK2/8D4B3chHNsKI+9mqO7RjYCdLE4V5fYSa2jD6sM lG0PpuiYxOBcPslCrNx1k5W7vovYx4o1+Cc9he0CpuJGLNefFGplpxMdeI7lCcRX hCGpiufxD3Vh183SkjhuqCLglh0GFFfagu/iYo1MzcdHrY2r3kEF0vWQcm6dwHRU NwhwZsD3jKIDiN9+QzlsfUDPaNBn4rI2HMpYdBBsicBN/oWQqj/6D5aEmnDOus+Z eIevoAD2VdKvCfU4eOr5E13RLxwQMSWn5f9wf8M79zzLTyQ/B/8= -----END CERTIFICATE-----Generated at Sat Jul 5 08:01:52 2025 by rpki-client