$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: 7E6GyJbtgDlX/t7jnrCYKaVuVoK7FxiDHygTt/vYhD8= Subject key identifier: EF:3E:B8:0B:AB:8F:70:6B:78:F2:5D:4B:D6:6D:39:F5:A1:2B:28:F3 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 4A0028A79F43DE58114DFE645A0C9E42D5C0FCF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 01AC Signing time: Sun 19 Oct 2025 10:20:45 +0000 Manifest this update: Sun 19 Oct 2025 10:15:45 +0000 Manifest next update: Wed 22 Oct 2025 16:06:45 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: EYa+vIkigQ5MIF5twoP2Z3S93ORP9b++ErLFhNnsasQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:00:28:a7:9f:43:de:58:11:4d:fe:64:5a:0c:9e:42:d5:c0:fc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Oct 19 10:15:45 2025 GMT Not After : Oct 22 16:06:45 2025 GMT Subject: CN=EF3EB80BAB8F706B78F25D4BD66D39F5A12B28F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:90:f5:60:a6:d2:9f:15:9c:ed:cd:c2:a9: c2:69:94:b1:e9:31:28:fc:bd:bd:6c:71:e9:99:77: da:ef:04:a7:e4:e6:28:2d:27:2f:05:2f:f1:13:0f: 9c:48:b7:87:ab:4f:25:9c:11:3f:8d:22:d2:64:19: 08:e9:d9:50:99:5f:89:1c:0e:3b:d1:b4:8a:ea:ec: 5e:07:22:dd:b8:ba:7e:2a:db:68:07:ac:a6:e4:82: 4a:dc:58:69:bd:50:89:91:cc:ce:9a:1b:78:2c:d2: 6d:83:39:da:49:fd:eb:f9:c8:b8:72:28:6e:8d:50: 00:42:bd:a2:74:aa:1a:66:9d:73:bd:03:37:82:f6: ba:83:fc:7e:d4:b3:89:50:30:0d:a6:d2:f4:bd:a4: 1e:c0:de:43:19:62:41:d8:bf:c3:d5:75:44:66:1f: 0c:ea:80:7a:3d:19:d9:a4:80:0b:a8:e6:35:e8:e0: 51:f1:56:be:2c:e2:41:d6:56:99:be:18:a8:b4:4f: 54:58:a1:c4:ad:b4:87:03:1b:4e:e3:42:62:ca:b9: c6:42:38:dc:60:06:c7:58:cd:14:ba:53:6d:7a:2c: b0:77:1d:be:8b:3c:49:69:6d:ee:90:42:0a:bd:78: e1:a6:f7:43:de:31:34:ea:f4:66:ab:d2:5f:c1:f0: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3E:B8:0B:AB:8F:70:6B:78:F2:5D:4B:D6:6D:39:F5:A1:2B:28:F3 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:30:aa:4e:9b:7b:c9:e0:82:06:d4:68:3d:c3:1b:3a:4d:57: 99:4a:cf:cf:da:cb:35:4b:75:fe:fa:5c:67:99:44:f6:5c:2f: e2:2f:69:f6:1c:e1:6b:3c:b3:01:83:4e:03:f8:42:e3:2c:69: 62:16:e3:49:46:50:2b:63:a7:e7:a3:6f:81:c4:57:4c:ba:5d: 91:bd:c6:34:90:9b:08:75:35:1e:9e:2e:03:ba:17:bc:df:7c: 24:52:88:39:97:04:44:9b:f0:56:c9:a1:23:77:bc:45:be:ad: 6c:66:99:77:85:75:85:ed:96:cb:37:a5:17:6a:18:ca:5a:f7: 34:bf:e0:fd:bd:a6:ea:d5:43:23:62:f2:70:4a:8a:d0:34:75: fa:ea:49:5a:a5:03:d0:51:08:a7:62:94:60:53:eb:da:f4:19: e4:04:ca:ea:e4:71:c0:14:a3:20:7c:d9:e5:56:9c:ce:40:f4: b9:06:dc:28:f0:9e:98:8f:89:91:ff:de:1d:68:e9:7d:d8:77: 4b:fb:68:36:9d:de:97:2e:db:b6:91:ed:54:b2:47:f3:68:2d: df:45:e9:c9:84:7c:02:26:1c:69:5a:e2:49:b8:82:91:5d:15: 75:2e:7c:d2:34:d1:96:4f:9b:5d:86:3a:6b:11:79:8b:eb:53: b8:31:f8:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSgAop59D3lgRTf5kWgyeQtXA/PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTEwMTkxMDE1NDVaFw0yNTEwMjIxNjA2NDVaMDMxMTAvBgNV BAMTKEVGM0VCODBCQUI4RjcwNkI3OEYyNUQ0QkQ2NkQzOUY1QTEyQjI4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0pD1YKbSnxWc7c3CqcJplLHp MSj8vb1scemZd9rvBKfk5igtJy8FL/ETD5xIt4erTyWcET+NItJkGQjp2VCZX4kc DjvRtIrq7F4HIt24un4q22gHrKbkgkrcWGm9UImRzM6aG3gs0m2DOdpJ/ev5yLhy KG6NUABCvaJ0qhpmnXO9AzeC9rqD/H7Us4lQMA2m0vS9pB7A3kMZYkHYv8PVdURm HwzqgHo9GdmkgAuo5jXo4FHxVr4s4kHWVpm+GKi0T1RYocSttIcDG07jQmLKucZC ONxgBsdYzRS6U216LLB3Hb6LPElpbe6QQgq9eOGm90PeMTTq9Gar0l/B8AkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7z64C6uPcGt48l1L1m059aErKPMwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEwqk6be8ngggbUaD3DGzpNV5lKz8/ayzVL df76XGeZRPZcL+IvafYc4Ws8swGDTgP4QuMsaWIW40lGUCtjp+ejb4HEV0y6XZG9 xjSQmwh1NR6eLgO6F7zffCRSiDmXBESb8FbJoSN3vEW+rWxmmXeFdYXtlss3pRdq GMpa9zS/4P29purVQyNi8nBKitA0dfrqSVqlA9BRCKdilGBT69r0GeQEyurkccAU oyB82eVWnM5A9LkG3CjwnpiPiZH/3h1o6X3Yd0v7aDad3pcu27aR7VSyR/NoLd9F 6cmEfAImHGla4km4gpFdFXUufNI00ZZPm12GOmsReYvrU7gx+Ik= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:02 2025 by rpki-client