$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json) Hash identifier: HQp0pjqE3h5TreXYJL7WIuP47j8i9S/+XCgLZKFS0VA= Subject key identifier: 67:8A:A0:F7:73:00:81:59:D9:D3:65:2D:D2:1E:0B:02:92:54:38:EC Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 3552FD4305C5B48F9B63813825E215F36BD4B1F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft Manifest number: 049A Signing time: Sun 11 May 2025 13:31:24 +0000 Manifest this update: Sun 11 May 2025 13:26:24 +0000 Manifest next update: Wed 14 May 2025 15:10:24 +0000 Files and hashes: 1: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: +kMIsYkkYBL9JgD87llrjtp6E+ZI80VFKUP+9fwyfhI=) 2: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: waFtA9Rs9fa9JmBcejLpW23akTf5m+TT3YHpTZiNW5g=) 3: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: APphhlnhWLdhchw0FKgk/0YLrJO8rNiiHyW23m7Qy5Y=) 4: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 3G3cuIsUsC93A5VqDBrlhjA6pHEL2QIiEv1ZbgGfh7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 15:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:52:fd:43:05:c5:b4:8f:9b:63:81:38:25:e2:15:f3:6b:d4:b1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: May 11 13:26:24 2025 GMT Not After : May 14 15:10:24 2025 GMT Subject: CN=678AA0F773008159D9D3652DD21E0B02925438EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:8b:b7:3a:d8:00:1a:a9:6f:1e:be:d1:5f: 6e:71:bd:0e:d0:a7:61:67:1f:c7:7a:97:53:da:ce: 4b:c1:91:21:a8:2a:d4:8d:bf:ae:27:81:67:d3:cb: 66:3f:ba:7b:27:96:fe:98:1b:6c:16:a3:98:a4:04: c4:02:a8:58:82:ac:1c:37:67:d2:a1:70:c0:b3:79: 47:c0:51:9d:f8:a6:5c:91:9d:d1:19:10:0b:85:f1: 71:aa:cd:93:84:3a:02:be:21:32:9f:04:46:24:9f: 66:fa:88:02:be:2e:96:27:e9:4c:04:41:54:b1:d0: fc:e2:dc:6f:4f:d6:38:04:f6:14:42:a7:41:3a:fb: 84:26:17:d3:74:4c:4b:35:a0:87:ae:2a:dc:6f:9a: 1c:25:78:32:8b:36:7d:fb:5d:4a:ff:c6:3c:eb:29: a7:cf:df:d1:0a:1b:4f:5b:40:aa:d9:34:9f:35:7e: a6:20:58:7a:78:79:e7:76:bf:1b:7a:19:85:c9:1c: c9:5c:a1:31:e0:47:60:db:41:66:8e:bd:99:fa:25: 87:23:2b:b9:95:8b:91:64:21:d0:17:0f:b2:f0:11: 4f:06:0d:b6:58:4e:a3:af:ba:20:30:7a:3f:26:ab: 6c:fa:e3:db:98:a8:67:1a:94:e9:d0:df:bd:92:8d: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8A:A0:F7:73:00:81:59:D9:D3:65:2D:D2:1E:0B:02:92:54:38:EC X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:03:4d:98:2b:57:60:7a:a3:58:4d:46:69:64:52:6d:b0:d8: 31:22:86:e9:7c:34:5d:7e:cf:48:a0:7e:b2:e2:37:76:66:8f: 2b:57:bb:73:36:81:25:dc:b0:41:8f:54:10:c1:3e:83:6e:d5: 99:5d:c0:bf:91:6d:6b:29:07:5f:77:c0:be:3e:ce:16:65:ef: ac:64:96:f3:31:bf:44:b3:c3:8e:77:9b:89:e4:8d:11:55:42: a0:36:21:db:38:ce:d6:1a:5f:2f:f4:83:06:2a:ab:ad:00:12: c9:05:e2:7d:73:21:f7:84:90:95:f3:eb:11:96:b1:a8:24:87: 01:58:75:a4:ed:85:25:42:15:55:eb:f0:6a:e8:e8:d1:2b:b4: 6f:d2:4a:3f:eb:dc:cd:b0:0c:ed:c6:f2:66:30:91:7c:77:0b: 51:82:8b:71:48:3f:85:b2:35:44:87:87:a6:d3:f1:03:a0:0a: 6e:54:e5:d6:df:10:b4:78:74:42:21:0a:4b:f5:dc:46:b2:d3: 02:f3:df:89:7b:0c:6a:5b:8c:77:35:03:2b:49:19:54:9b:11: 23:68:a1:85:53:aa:91:d2:81:22:ab:2a:4b:46:07:51:57:89: 86:40:02:af:5d:7b:15:21:f5:14:f8:78:20:9c:42:96:9d:38: 5f:20:9e:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVL9QwXFtI+bY4E4JeIV82vUsfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNTA1MTExMzI2MjRaFw0yNTA1MTQxNTEwMjRaMDMxMTAvBgNV BAMTKDY3OEFBMEY3NzMwMDgxNTlEOUQzNjUyREQyMUUwQjAyOTI1NDM4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXYu3OtgAGqlvHr7RX25xvQ7Q p2FnH8d6l1PazkvBkSGoKtSNv64ngWfTy2Y/unsnlv6YG2wWo5ikBMQCqFiCrBw3 Z9KhcMCzeUfAUZ34plyRndEZEAuF8XGqzZOEOgK+ITKfBEYkn2b6iAK+LpYn6UwE QVSx0Pzi3G9P1jgE9hRCp0E6+4QmF9N0TEs1oIeuKtxvmhwleDKLNn37XUr/xjzr KafP39EKG09bQKrZNJ81fqYgWHp4eed2vxt6GYXJHMlcoTHgR2DbQWaOvZn6JYcj K7mVi5FkIdAXD7LwEU8GDbZYTqOvuiAwej8mq2z649uYqGcalOnQ372SjVG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ4qg93MAgVnZ02Ut0h4LApJUOOwwHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8DTZgrV2B6o1hNRmlkUm2w2DEihul8NF1+ z0igfrLiN3ZmjytXu3M2gSXcsEGPVBDBPoNu1ZldwL+RbWspB193wL4+zhZl76xk lvMxv0Szw453m4nkjRFVQqA2Ids4ztYaXy/0gwYqq60AEskF4n1zIfeEkJXz6xGW sagkhwFYdaTthSVCFVXr8Gro6NErtG/SSj/r3M2wDO3G8mYwkXx3C1GCi3FIP4Wy NUSHh6bT8QOgCm5U5dbfELR4dEIhCkv13Eay0wLz34l7DGpbjHc1AytJGVSbESNo oYVTqpHSgSKrKktGB1FXiYZAAq9dexUh9RT4eCCcQpadOF8gnrM= -----END CERTIFICATE-----Generated at Mon May 12 11:20:49 2025 by rpki-client