$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: Dp9wstUnQZJucuyl5sI1E5UrS7USevi+PFUWxL1XQUE= Subject key identifier: 32:9D:11:B7:D2:E8:17:3B:0F:4C:C5:C7:E3:68:08:CB:E9:66:E2:CE Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 26DCA5DC01DA98AFB0800228C173F72233A93C37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 015F Signing time: Sun 04 May 2025 14:40:43 +0000 Manifest this update: Sun 04 May 2025 14:35:43 +0000 Manifest next update: Wed 07 May 2025 18:16:43 +0000 Files and hashes: 1: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: AzlMFbzrHGcEG4v19yHIw2cVpPbbaGWfk/zoDkydCtA=) 2: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: 3M+qehQhPJtRx+AWVv45lLS8rU8qsKaeaYio/75TNPk=) 3: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: /5qcNzZ+XNgNgRDn58ASWtXqKf9Hx1h5TUiBTvtgEDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 18:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:dc:a5:dc:01:da:98:af:b0:80:02:28:c1:73:f7:22:33:a9:3c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: May 4 14:35:43 2025 GMT Not After : May 7 18:16:43 2025 GMT Subject: CN=329D11B7D2E8173B0F4CC5C7E36808CBE966E2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:ea:fb:46:a4:34:8d:a8:a9:de:a2:08:3e: ff:7c:45:36:11:83:46:96:6a:c7:c1:db:0d:2b:44: da:6a:ef:29:20:ce:9a:9e:70:4e:cd:b0:67:c6:90: 6f:5a:63:2d:94:ad:a2:89:57:6a:37:5f:e1:a0:62: 4e:b5:55:df:cc:18:4a:1f:dd:43:a2:05:a0:ca:c0: 15:d5:fe:5d:70:d4:90:36:29:42:4c:43:c4:fe:76: 6b:aa:a4:3a:72:4e:df:8b:6a:d2:57:53:bb:14:6b: 43:f5:0e:1b:d8:76:12:23:a3:98:4b:8c:af:e3:e4: 48:20:4a:56:c0:62:43:d7:f5:66:2a:6b:a4:e3:7e: 93:e9:53:dd:e8:fd:09:8d:a5:22:28:21:76:81:ca: c3:20:e2:47:3e:49:cc:e4:7d:2f:47:03:5b:ff:25: a9:f7:87:06:21:e8:2a:9f:67:7e:60:10:d9:75:be: 8d:9c:72:98:e0:4e:d5:bd:d7:60:17:0a:52:70:c1: 34:90:3c:7b:73:73:9c:99:d5:6c:e7:43:fb:50:41: 26:e3:ef:34:38:33:df:bd:4c:14:11:3e:62:bb:d3: 11:2b:79:23:51:60:52:18:23:df:c8:f0:ba:05:8d: db:4d:09:a7:a6:6c:41:2e:51:02:c6:39:df:90:8f: cb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9D:11:B7:D2:E8:17:3B:0F:4C:C5:C7:E3:68:08:CB:E9:66:E2:CE X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:83:6d:e6:fd:d1:c3:57:1f:d8:65:03:87:a4:4f:08:51:05: a0:8c:9d:b7:3c:43:37:5a:1f:e6:0d:ff:19:d8:d7:c9:d5:ca: 53:4b:71:0d:06:c4:ac:da:c6:18:a8:b5:10:af:9a:c7:35:51: b0:ba:c9:72:4e:11:e0:c1:55:29:9a:64:69:88:3c:9f:85:8d: 55:ef:f1:cd:c7:8a:d7:43:f0:26:21:be:06:c1:d1:a4:ae:8a: b8:c8:f5:64:50:81:9a:42:d0:08:a4:9f:3e:df:13:b3:97:46: e2:20:de:5c:40:67:7f:e3:8e:c1:08:66:a7:44:68:32:7c:99: 61:f8:0b:20:ea:e8:bc:39:45:ad:48:fb:ab:28:9a:8e:c9:c1: 7a:fa:bc:20:81:61:ba:01:8b:96:6e:26:aa:70:2d:02:ea:82: 21:12:a8:19:d1:9d:36:4f:f2:a7:e6:d2:50:82:f8:0d:23:81: 30:f9:6f:df:99:d6:98:57:53:26:46:87:88:b9:51:93:8e:b1: 42:7f:a7:d7:12:ae:a1:f1:8d:d6:ae:e3:07:fb:56:9c:59:3f: 3a:95:ca:0c:20:89:d8:fa:63:9d:79:ad:10:78:37:1d:68:aa: a5:4f:41:4a:6b:23:62:9e:d8:3c:9d:2d:10:ef:c1:bc:79:fb: f7:ee:61:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtyl3AHamK+wgAIowXP3IjOpPDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA1MDQxNDM1NDNaFw0yNTA1MDcxODE2NDNaMDMxMTAvBgNV BAMTKDMyOUQxMUI3RDJFODE3M0IwRjRDQzVDN0UzNjgwOENCRTk2NkUyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAOr7RqQ0jaip3qIIPv98RTYR g0aWasfB2w0rRNpq7ykgzpqecE7NsGfGkG9aYy2UraKJV2o3X+GgYk61Vd/MGEof 3UOiBaDKwBXV/l1w1JA2KUJMQ8T+dmuqpDpyTt+LatJXU7sUa0P1DhvYdhIjo5hL jK/j5EggSlbAYkPX9WYqa6TjfpPpU93o/QmNpSIoIXaBysMg4kc+SczkfS9HA1v/ Jan3hwYh6CqfZ35gENl1vo2ccpjgTtW912AXClJwwTSQPHtzc5yZ1WznQ/tQQSbj 7zQ4M9+9TBQRPmK70xEreSNRYFIYI9/I8LoFjdtNCaembEEuUQLGOd+Qj8vdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMp0Rt9LoFzsPTMXH42gIy+lm4s4wHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqDbeb90cNXH9hlA4ekTwhRBaCMnbc8Qzda H+YN/xnY18nVylNLcQ0GxKzaxhiotRCvmsc1UbC6yXJOEeDBVSmaZGmIPJ+FjVXv 8c3HitdD8CYhvgbB0aSuirjI9WRQgZpC0Aiknz7fE7OXRuIg3lxAZ3/jjsEIZqdE aDJ8mWH4CyDq6Lw5Ra1I+6somo7JwXr6vCCBYboBi5ZuJqpwLQLqgiESqBnRnTZP 8qfm0lCC+A0jgTD5b9+Z1phXUyZGh4i5UZOOsUJ/p9cSrqHxjdau4wf7VpxZPzqV ygwgidj6Y515rRB4Nx1oqqVPQUprI2Ke2DydLRDvwbx5+/fuYbY= -----END CERTIFICATE-----Generated at Tue May 6 18:27:52 2025 by rpki-client