$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: UFEEafuVWnGfAxyah68bZNHw1c0F+Lb97cl+/dLFm5s= Subject key identifier: D9:23:2D:01:27:0B:FB:6E:B2:E0:15:59:B1:56:A1:F5:CC:80:1D:F8 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 53B8F05A51261C93097BFDECB80CE57BAD93864C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 0178 Signing time: Sun 29 Jun 2025 02:10:43 +0000 Manifest this update: Sun 29 Jun 2025 02:05:43 +0000 Manifest next update: Wed 02 Jul 2025 03:57:43 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: GJEblT30ZcKpL7eOfgZVf77LwsFPCywLFFIbOOvAqVA=) 2: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: 3M+qehQhPJtRx+AWVv45lLS8rU8qsKaeaYio/75TNPk=) 3: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: AzlMFbzrHGcEG4v19yHIw2cVpPbbaGWfk/zoDkydCtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b8:f0:5a:51:26:1c:93:09:7b:fd:ec:b8:0c:e5:7b:ad:93:86:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Jun 29 02:05:43 2025 GMT Not After : Jul 2 03:57:43 2025 GMT Subject: CN=D9232D01270BFB6EB2E01559B156A1F5CC801DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:49:fc:ed:13:61:0f:1d:7a:54:0e:bb:07:7a: 43:0b:3e:43:d3:eb:91:f6:78:b4:90:54:df:49:08: ef:70:67:a8:f5:a3:f4:c2:31:4a:1b:9d:ec:f5:1b: 58:ee:02:87:0c:82:8e:4f:02:4f:80:60:a7:ca:37: 5e:70:f1:5d:53:43:1a:5b:88:ff:14:33:20:f5:df: 9a:a6:6b:1f:51:21:47:f5:33:60:1b:79:39:09:c3: 8c:94:b1:68:e3:25:8e:c8:2c:84:5f:1c:66:b8:9f: 9a:63:5b:b1:36:6b:a3:67:8f:c0:b4:6a:b6:24:43: 48:ea:bb:c6:99:b0:2d:f7:89:d2:87:b0:24:19:e1: e9:81:dc:25:1e:06:1d:27:56:26:bb:6c:be:fd:29: e7:7d:ff:97:f4:a3:6e:4a:81:37:6d:3e:fa:f2:b7: 1c:0e:69:60:dc:95:34:34:94:70:3f:10:c0:bc:9f: cb:04:8f:c3:85:c4:1f:27:78:54:eb:97:ef:e1:27: 63:e1:a2:de:f4:96:77:f5:f9:40:c0:e7:05:35:f6: a0:8a:b3:e5:7f:32:b5:85:0e:47:b0:a6:56:a5:53: bc:d6:5b:ef:3a:d1:24:62:f7:35:a8:7e:33:6f:d9: 11:b3:2d:8a:6c:92:86:aa:0b:76:4f:39:97:4f:ef: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:23:2D:01:27:0B:FB:6E:B2:E0:15:59:B1:56:A1:F5:CC:80:1D:F8 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5e:c6:5e:e2:f3:f4:14:0f:90:a8:8b:9e:40:63:a5:ce:8f: 3d:73:31:64:4d:6c:a7:89:e6:fd:0c:2f:e1:88:01:a0:40:b1: 8f:d9:58:af:59:8a:eb:be:88:ba:df:6d:48:74:6d:81:0b:90: 37:49:a1:11:5b:56:78:9e:96:f5:25:e7:c9:50:5a:57:3b:a4: b9:59:45:86:56:9b:63:04:1f:18:c1:9e:2b:e5:33:2b:db:e9: f4:d9:67:6c:26:1a:70:d0:f2:da:73:b4:af:d7:dc:d5:5e:8c: bf:2e:26:4f:96:cb:f0:d9:02:5a:30:67:23:be:4c:9a:42:a5: 1b:69:90:a1:35:01:46:ed:09:70:58:67:71:aa:94:05:4a:33: 60:58:e1:41:19:c9:81:d2:3a:21:b7:fe:af:89:d0:04:9b:b6: c7:79:50:ec:b8:07:ec:50:03:03:2e:ce:4f:78:a7:1d:96:0a: 8d:97:23:f5:af:6d:31:b8:d3:40:6e:c7:e4:a7:4d:7e:49:fc: f7:9e:0b:2d:34:3d:83:37:5a:f4:e8:c9:c5:e6:62:52:97:d2: 20:65:ab:36:c1:83:25:7a:f6:5e:c8:92:e2:9e:d4:ce:1f:57: 75:5d:f3:49:3f:3b:72:4f:24:c7:a4:90:92:94:3b:8f:a2:1c: 9a:03:bf:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7jwWlEmHJMJe/3suAzle62ThkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA2MjkwMjA1NDNaFw0yNTA3MDIwMzU3NDNaMDMxMTAvBgNV BAMTKEQ5MjMyRDAxMjcwQkZCNkVCMkUwMTU1OUIxNTZBMUY1Q0M4MDFERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSfztE2EPHXpUDrsHekMLPkPT 65H2eLSQVN9JCO9wZ6j1o/TCMUobnez1G1juAocMgo5PAk+AYKfKN15w8V1TQxpb iP8UMyD135qmax9RIUf1M2AbeTkJw4yUsWjjJY7ILIRfHGa4n5pjW7E2a6Nnj8C0 arYkQ0jqu8aZsC33idKHsCQZ4emB3CUeBh0nVia7bL79Ked9/5f0o25KgTdtPvry txwOaWDclTQ0lHA/EMC8n8sEj8OFxB8neFTrl+/hJ2Phot70lnf1+UDA5wU19qCK s+V/MrWFDkewplalU7zWW+860SRi9zWofjNv2RGzLYpskoaqC3ZPOZdP7+udAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2SMtAScL+26y4BVZsVah9cyAHfgwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClexl7i8/QUD5Coi55AY6XOjz1zMWRNbKeJ 5v0ML+GIAaBAsY/ZWK9Ziuu+iLrfbUh0bYELkDdJoRFbVnielvUl58lQWlc7pLlZ RYZWm2MEHxjBnivlMyvb6fTZZ2wmGnDQ8tpztK/X3NVejL8uJk+Wy/DZAlowZyO+ TJpCpRtpkKE1AUbtCXBYZ3GqlAVKM2BY4UEZyYHSOiG3/q+J0ASbtsd5UOy4B+xQ AwMuzk94px2WCo2XI/WvbTG400Bux+SnTX5J/PeeCy00PYM3WvToycXmYlKX0iBl qzbBgyV69l7IkuKe1M4fV3Vd80k/O3JPJMekkJKUO4+iHJoDv2c= -----END CERTIFICATE-----Generated at Mon Jun 30 01:11:33 2025 by rpki-client