$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json) Hash identifier: WLb3JkMNtx4z+lz3/7BgifgKjzQHGE358eKljIygsos= Subject key identifier: 97:E7:3B:77:13:2E:CE:FC:0E:07:65:76:54:14:0D:0F:53:33:B0:79 Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 017FB7D86C7C842B2D4D024E10E1486672F43990 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft Manifest number: 04E3 Signing time: Sun 19 Oct 2025 17:21:26 +0000 Manifest this update: Sun 19 Oct 2025 17:16:26 +0000 Manifest next update: Wed 22 Oct 2025 21:37:26 +0000 Files and hashes: 1: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 34Zwk2rQxI6/8F/IkX/shAQb+olpsRnc3h6OinfJJ/w=) 2: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: VWZBwU3RWnROUShcpW3L74G67TSj+wYP3BWSlSltpjo=) 3: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: qEEQq+oCtevrD57pklYRlB+t0W5UOTyS67orEfI0Sss=) 4: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 778Q5HjUkZ/WVTVzYaqPWOxb/BdNeOK8Id+aBKl0ego=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7f:b7:d8:6c:7c:84:2b:2d:4d:02:4e:10:e1:48:66:72:f4:39:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: Oct 19 17:16:26 2025 GMT Not After : Oct 22 21:37:26 2025 GMT Subject: CN=97E73B77132ECEFC0E07657654140D0F5333B079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:08:cc:ca:c1:e9:fe:29:99:a0:60:83:71: 7b:6a:83:71:65:4a:11:98:a0:fd:ca:86:39:19:1d: 12:70:b4:da:df:e1:1d:ed:4d:5f:6e:86:d7:2d:54: 24:3e:a5:6e:4a:1b:86:b4:4a:07:2e:66:c1:0c:ec: f9:2a:86:6d:e2:4a:dd:5b:f9:d8:20:a4:61:43:cc: 88:4e:64:6d:05:21:0e:75:7e:86:43:ed:b1:02:ed: bb:8d:29:28:ae:5f:f1:b7:3a:66:89:fe:c0:cf:eb: 76:5e:0e:3a:7a:21:3b:3d:00:61:96:f9:4f:0d:ac: 6e:65:1e:27:6d:cb:a0:66:79:e7:97:f9:3c:4e:f1: a8:1e:58:ad:de:12:fe:bf:df:97:cf:94:76:77:6d: b8:8f:19:07:46:21:51:8a:be:d5:fe:16:f5:af:dd: 2c:80:2c:18:83:a7:45:82:ab:da:68:34:16:3f:21: 34:db:d3:62:4b:a1:26:e4:2a:c0:61:3c:0e:f0:7d: 85:d9:19:ee:9d:75:be:75:95:a3:89:7e:ee:45:35: 41:9d:5d:64:ef:74:e2:40:a3:e0:87:a0:ff:94:7f: 88:d8:2b:6d:05:5e:20:2d:e3:33:0d:f8:da:de:0a: 26:0b:a7:de:d2:00:40:5c:78:2d:ac:82:6f:5f:0d: 3b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E7:3B:77:13:2E:CE:FC:0E:07:65:76:54:14:0D:0F:53:33:B0:79 X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ed:97:bc:cb:86:af:5b:17:fa:1f:c4:e2:5b:9c:0f:09:91: f0:7a:66:1d:b2:9e:4b:18:d5:96:db:68:54:12:2f:b3:7b:c2: 64:98:9a:fc:94:56:63:6e:f8:7b:8e:55:8b:4f:b1:d9:f3:9e: 58:01:cc:d9:cf:0f:32:cd:58:ad:1b:7e:39:35:a8:e3:54:5b: 9d:e7:8f:46:1e:7e:d4:05:09:f7:1c:8c:ba:f5:5f:72:ad:55: 1c:3c:9c:66:9c:06:ed:34:d3:b6:09:b3:b7:df:d0:2e:4a:b2: 0e:10:8d:a9:6d:e2:12:6a:4f:9d:e2:c4:54:61:be:b8:b8:d4: c6:58:d0:97:37:46:85:8c:64:e7:7d:c5:a3:12:8c:bd:fc:7d: 49:9b:d6:cf:95:cb:09:f7:3a:ca:ae:82:c2:23:6b:70:07:cf: 29:92:ed:f8:7e:1e:9c:30:cc:7c:66:fc:4e:82:e0:7e:2e:a9: fd:fd:1c:22:95:aa:44:6b:36:42:7b:f1:b8:94:59:a0:ca:68: 71:42:28:55:08:4a:0b:18:f4:e7:16:00:6a:1f:5e:bb:a3:44: cd:5a:e8:f5:37:c3:5f:43:c8:e9:1e:84:72:a2:e9:41:b5:05: 9c:34:1e:41:22:fd:00:6c:e0:ab:b2:a5:8c:ef:8d:d4:29:fe: 5c:dc:00:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAX+32Gx8hCstTQJOEOFIZnL0OZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNTEwMTkxNzE2MjZaFw0yNTEwMjIyMTM3MjZaMDMxMTAvBgNV BAMTKDk3RTczQjc3MTMyRUNFRkMwRTA3NjU3NjU0MTQwRDBGNTMzM0IwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12QjMysHp/imZoGCDcXtqg3Fl ShGYoP3KhjkZHRJwtNrf4R3tTV9uhtctVCQ+pW5KG4a0SgcuZsEM7Pkqhm3iSt1b +dggpGFDzIhOZG0FIQ51foZD7bEC7buNKSiuX/G3OmaJ/sDP63ZeDjp6ITs9AGGW +U8NrG5lHidty6BmeeeX+TxO8ageWK3eEv6/35fPlHZ3bbiPGQdGIVGKvtX+FvWv 3SyALBiDp0WCq9poNBY/ITTb02JLoSbkKsBhPA7wfYXZGe6ddb51laOJfu5FNUGd XWTvdOJAo+CHoP+Uf4jYK20FXiAt4zMN+NreCiYLp97SAEBceC2sgm9fDTsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl+c7dxMuzvwOB2V2VBQND1MzsHkwHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvtl7zLhq9bF/ofxOJbnA8JkfB6Zh2ynksY 1ZbbaFQSL7N7wmSYmvyUVmNu+HuOVYtPsdnznlgBzNnPDzLNWK0bfjk1qONUW53n j0YeftQFCfccjLr1X3KtVRw8nGacBu0007YJs7ff0C5Ksg4Qjalt4hJqT53ixFRh vri41MZY0Jc3RoWMZOd9xaMSjL38fUmb1s+Vywn3OsqugsIja3AHzymS7fh+Hpww zHxm/E6C4H4uqf39HCKVqkRrNkJ78biUWaDKaHFCKFUISgsY9OcWAGofXrujRM1a 6PU3w19DyOkehHKi6UG1BZw0HkEi/QBs4KuypYzvjdQp/lzcANg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:07:22 2025 by rpki-client