$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json) Hash identifier: uInliluzo8ECSLzkxWvtbgDI4+pVuLDOoOa4hT8OzE4= Subject key identifier: 6C:E1:C1:A8:12:50:23:B2:14:43:2E:A5:5D:DF:8A:6A:92:19:52:C0 Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 282099E3284BC698E1EF40170431B88ECB4B905D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft Manifest number: 04C9 Signing time: Fri 22 Aug 2025 01:41:25 +0000 Manifest this update: Fri 22 Aug 2025 01:36:25 +0000 Manifest next update: Mon 25 Aug 2025 08:00:25 +0000 Files and hashes: 1: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: VWZBwU3RWnROUShcpW3L74G67TSj+wYP3BWSlSltpjo=) 2: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 34Zwk2rQxI6/8F/IkX/shAQb+olpsRnc3h6OinfJJ/w=) 3: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: QomP9JS280dklS4VAZHGAYiBUtY2Let4SERH507jpFA=) 4: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 778Q5HjUkZ/WVTVzYaqPWOxb/BdNeOK8Id+aBKl0ego=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:20:99:e3:28:4b:c6:98:e1:ef:40:17:04:31:b8:8e:cb:4b:90:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: Aug 22 01:36:25 2025 GMT Not After : Aug 25 08:00:25 2025 GMT Subject: CN=6CE1C1A8125023B214432EA55DDF8A6A921952C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:82:05:1d:a6:1a:85:e4:61:6e:08:d1:6d:97: af:fa:a3:cd:40:ca:4b:af:5e:04:40:eb:b3:19:5b: b2:22:63:d3:ac:6e:3d:ec:f6:21:48:05:bf:02:a5: 1c:2d:c9:bd:7f:47:4d:a7:27:74:7d:af:44:57:b6: e7:be:20:71:94:ee:fb:5c:21:2d:7c:b6:39:eb:c4: e9:73:12:8b:e8:04:a1:38:83:0f:d6:9d:ff:3a:c4: 3e:c2:9c:e0:f8:b1:05:77:4c:48:1f:f1:78:f9:2e: 34:5a:6e:e9:af:27:e0:d1:f4:bb:d5:9e:59:25:95: 1b:0f:c8:b6:8b:6c:8a:80:31:f5:8b:b5:d2:19:d2: 15:33:58:4b:ae:78:c2:2f:a7:07:d9:70:aa:b5:31: 5b:de:39:28:6a:54:25:ee:54:5e:e1:d9:0c:b0:6b: 00:b4:c3:ec:90:00:2a:81:17:09:18:17:40:01:91: cf:2a:6f:6b:cc:e7:1c:e7:a2:a5:54:b2:b5:8d:0a: 0b:b9:eb:1d:7c:c3:dd:35:07:0b:e8:49:68:10:f3: 19:2c:58:fe:38:68:5b:b6:07:51:9b:eb:2a:6e:2f: 5a:ae:c9:d4:99:ab:92:8d:2a:52:b4:6f:6d:1f:62: d9:fc:81:75:66:7e:44:60:c0:a4:77:f1:fd:9d:43: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E1:C1:A8:12:50:23:B2:14:43:2E:A5:5D:DF:8A:6A:92:19:52:C0 X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:50:21:38:4a:8e:80:3f:7b:af:7a:bc:83:a7:69:1c:a0:1b: cf:0b:af:3c:29:d4:05:15:c8:7d:6e:c7:0f:b3:00:2b:d1:9c: a6:f1:ad:c0:88:b5:49:a4:86:25:8e:0c:73:42:be:e0:60:c6: e5:64:aa:06:b7:9f:b1:25:62:2e:7b:2f:cc:2c:03:8b:69:cf: 22:f5:22:17:0f:07:93:81:80:0c:80:72:90:d6:25:19:41:2e: 39:1a:de:cf:40:40:83:63:cc:ed:e2:f9:3d:a0:b9:a4:3e:db: e4:30:88:ad:34:4b:a5:5e:10:a5:13:99:10:4d:51:d8:fd:3c: d9:31:72:52:53:fa:ee:05:af:93:b4:40:4d:b6:61:01:91:e7: b0:96:1b:c2:d2:5a:be:d4:cb:8d:9e:3c:ff:8b:c1:8a:4a:f6: c9:a3:4c:9f:a5:cd:4f:72:85:d3:0e:ae:bc:50:7f:66:04:57: 23:f6:e2:b2:7c:05:66:c7:4d:75:2f:6d:88:1f:98:4e:0b:ef: 08:c6:28:42:ed:9f:17:e1:6a:a2:a6:95:ea:a0:60:eb:58:70: 06:eb:ca:82:7d:f3:bc:a8:6a:86:ff:d7:68:28:2f:4e:da:7a: 3b:68:30:bf:ce:be:95:2b:99:48:d8:25:c1:3e:10:cb:46:78: 9e:88:fa:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCCZ4yhLxpjh70AXBDG4jstLkF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNTA4MjIwMTM2MjVaFw0yNTA4MjUwODAwMjVaMDMxMTAvBgNV BAMTKDZDRTFDMUE4MTI1MDIzQjIxNDQzMkVBNTVEREY4QTZBOTIxOTUyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhggUdphqF5GFuCNFtl6/6o81A ykuvXgRA67MZW7IiY9Osbj3s9iFIBb8CpRwtyb1/R02nJ3R9r0RXtue+IHGU7vtc IS18tjnrxOlzEovoBKE4gw/Wnf86xD7CnOD4sQV3TEgf8Xj5LjRabumvJ+DR9LvV nlkllRsPyLaLbIqAMfWLtdIZ0hUzWEuueMIvpwfZcKq1MVveOShqVCXuVF7h2Qyw awC0w+yQACqBFwkYF0ABkc8qb2vM5xznoqVUsrWNCgu56x18w901BwvoSWgQ8xks WP44aFu2B1Gb6ypuL1quydSZq5KNKlK0b20fYtn8gXVmfkRgwKR38f2dQwPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbOHBqBJQI7IUQy6lXd+KapIZUsAwHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChQIThKjoA/e696vIOnaRygG88Lrzwp1AUV yH1uxw+zACvRnKbxrcCItUmkhiWODHNCvuBgxuVkqga3n7ElYi57L8wsA4tpzyL1 IhcPB5OBgAyAcpDWJRlBLjka3s9AQINjzO3i+T2guaQ+2+QwiK00S6VeEKUTmRBN Udj9PNkxclJT+u4Fr5O0QE22YQGR57CWG8LSWr7Uy42ePP+LwYpK9smjTJ+lzU9y hdMOrrxQf2YEVyP24rJ8BWbHTXUvbYgfmE4L7wjGKELtnxfhaqKmleqgYOtYcAbr yoJ987yoaob/12goL07aejtoML/OvpUrmUjYJcE+EMtGeJ6I+ps= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:16 2025 by rpki-client