$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: QWCpeYU9E2uzDaDo+rBJ+ZiMj214Gi8C7lnmxdh9bAQ= Subject key identifier: AD:A5:81:84:43:EB:5C:B8:65:72:9B:01:C1:AB:DB:12:76:46:F3:28 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 609F1F8A19984CC6851699E6DE6BFC577926ED8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 0192 Signing time: Fri 22 Aug 2025 16:40:47 +0000 Manifest this update: Fri 22 Aug 2025 16:35:47 +0000 Manifest next update: Mon 25 Aug 2025 21:52:47 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: y712PU+t6rBZy9e75Co9JjNos1FuDD1YUH56nFE1UcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9f:1f:8a:19:98:4c:c6:85:16:99:e6:de:6b:fc:57:79:26:ed:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Aug 22 16:35:47 2025 GMT Not After : Aug 25 21:52:47 2025 GMT Subject: CN=ADA5818443EB5CB865729B01C1ABDB127646F328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:d8:7f:ae:0f:26:0b:b6:1c:17:06:18:04: bf:b1:0c:84:ea:2d:c2:17:d4:fd:44:70:b4:d9:ab: ce:2c:d3:6d:2b:14:83:a9:c4:06:ec:0c:a6:2c:f1: 54:1f:5c:e9:e5:e0:d0:bd:01:92:be:6e:f8:1a:57: ed:52:8a:6f:10:dd:e5:b5:13:be:a5:82:07:41:08: ea:20:ec:a0:81:84:31:c5:48:06:ef:06:7c:77:b1: 4b:a4:49:e4:ea:3e:54:33:09:8f:bc:68:e9:03:91: 68:98:d7:3d:7f:72:de:95:16:9b:82:1b:a0:5a:8e: 2d:64:5e:e8:bf:0d:d6:08:63:56:b2:d1:1e:98:20: 30:e4:95:3b:1c:13:ae:bd:2b:bc:ba:6a:1d:f4:5f: 7e:5c:ab:8f:1b:1d:b6:a6:58:ce:9c:d2:69:8a:b6: e5:f6:46:75:47:dc:2b:b8:37:88:14:2c:d4:d1:fa: 19:e1:a7:01:fa:33:76:a3:29:ca:19:3a:1c:33:f4: 5a:ba:44:06:45:df:4f:ea:f1:68:cc:e6:e8:68:82: 39:38:4e:2b:3a:66:08:e0:10:75:d7:e1:fe:73:f7: 4c:11:e5:e1:f7:40:82:a0:70:f2:43:4d:6b:c3:2a: 32:e8:36:de:dc:72:19:ff:2c:9c:bf:8e:ac:43:eb: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A5:81:84:43:EB:5C:B8:65:72:9B:01:C1:AB:DB:12:76:46:F3:28 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4e:1f:a9:3c:c9:ff:7a:31:00:c5:69:3c:79:78:90:d4:7f: 91:be:a6:df:7a:ee:39:d6:9e:d1:67:67:0d:cb:34:a0:e9:68: e8:a4:c3:d0:96:bc:e8:37:0e:00:ac:ad:77:46:ab:05:0b:91: 51:1b:af:0f:de:4c:cc:2a:bd:59:f6:5d:16:e1:a8:a3:07:b1: 95:ee:73:db:48:a2:f5:b9:88:36:5b:c5:a9:b6:56:34:04:81: 84:83:8c:f4:ea:91:7b:16:55:06:d0:20:c6:84:58:fc:cc:84: 83:79:ca:66:ec:30:23:20:b4:dc:8f:1a:c5:ff:b3:24:2b:32: ae:01:0b:a7:2d:d9:cf:c1:da:87:5f:85:0d:db:5e:23:1e:c0: 5e:b2:78:ae:16:eb:3f:9e:89:f6:fe:3a:f2:05:8b:7e:88:76: bc:2d:16:34:f1:69:e7:89:dc:08:ef:30:a9:4b:bc:fc:2a:cb: 25:a3:e7:ed:e9:ae:89:f8:9d:1c:a5:65:c1:87:81:e3:a6:f9: a1:aa:f3:e5:43:d8:ec:d3:9d:d3:48:76:a1:9e:9c:25:cf:fa: a1:30:ea:f4:ef:6b:a2:0d:81:f0:1b:8f:ef:84:23:fc:00:bc: 37:23:d0:81:01:d4:bd:73:62:e2:f1:3d:c0:77:28:53:a5:e4: 94:07:17:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJ8fihmYTMaFFpnm3mv8V3km7Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA4MjIxNjM1NDdaFw0yNTA4MjUyMTUyNDdaMDMxMTAvBgNV BAMTKEFEQTU4MTg0NDNFQjVDQjg2NTcyOUIwMUMxQUJEQjEyNzY0NkYzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByNh/rg8mC7YcFwYYBL+xDITq LcIX1P1EcLTZq84s020rFIOpxAbsDKYs8VQfXOnl4NC9AZK+bvgaV+1Sim8Q3eW1 E76lggdBCOog7KCBhDHFSAbvBnx3sUukSeTqPlQzCY+8aOkDkWiY1z1/ct6VFpuC G6Baji1kXui/DdYIY1ay0R6YIDDklTscE669K7y6ah30X35cq48bHbamWM6c0mmK tuX2RnVH3Cu4N4gULNTR+hnhpwH6M3ajKcoZOhwz9Fq6RAZF30/q8WjM5uhogjk4 Tis6ZgjgEHXX4f5z90wR5eH3QIKgcPJDTWvDKjLoNt7cchn/LJy/jqxD69q5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUraWBhEPrXLhlcpsBwavbEnZG8ygwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlOH6k8yf96MQDFaTx5eJDUf5G+pt967jnW ntFnZw3LNKDpaOikw9CWvOg3DgCsrXdGqwULkVEbrw/eTMwqvVn2XRbhqKMHsZXu c9tIovW5iDZbxam2VjQEgYSDjPTqkXsWVQbQIMaEWPzMhIN5ymbsMCMgtNyPGsX/ syQrMq4BC6ct2c/B2odfhQ3bXiMewF6yeK4W6z+eifb+OvIFi36IdrwtFjTxaeeJ 3AjvMKlLvPwqyyWj5+3pron4nRylZcGHgeOm+aGq8+VD2OzTndNIdqGenCXP+qEw 6vTva6INgfAbj++EI/wAvDcj0IEB1L1zYuLxPcB3KFOl5JQHF3A= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:37 2025 by rpki-client