$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft File: 1E40BE2B668DAE3E7271E835148386D785E3724C.mft (raw, json) Hash identifier: A0+YI5LWZrKxvGRY/wbyj0rEpw7A0wfcX9Crim8Q5Yk= Subject key identifier: A7:0B:F4:90:E2:0E:B2:85:C8:B1:BD:FB:95:A2:D8:17:4C:14:FA:AC Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C Certificate serial: 20BAA452FF506C333EEA312B65CCB6CA270B9C98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft Manifest number: A7 Signing time: Sat 28 Jun 2025 17:32:04 +0000 Manifest this update: Sat 28 Jun 2025 17:27:04 +0000 Manifest next update: Wed 02 Jul 2025 05:00:04 +0000 Files and hashes: 1: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: hfp0R3ELBQf5z/8Cte4K8Vl+BAiPG2EB5Pp1Bo96E+c=) 2: 1E40BE2B668DAE3E7271E835148386D785E3724C.crl (hash: 78NYeogkGBBCrxOeuYqcVyJMOVoEEB8xWYxiy4omhKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ba:a4:52:ff:50:6c:33:3e:ea:31:2b:65:cc:b6:ca:27:0b:9c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C Validity Not Before: Jun 28 17:27:04 2025 GMT Not After : Jul 2 05:00:04 2025 GMT Subject: CN=A70BF490E20EB285C8B1BDFB95A2D8174C14FAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:c2:61:5f:48:11:5d:5c:ce:0c:86:6b:07: bd:47:d5:48:29:6f:d2:4d:15:a8:f3:f3:93:03:ce: 46:17:1b:30:4b:4c:5f:7f:7a:3b:11:05:74:4e:bc: e0:ff:53:dd:c7:b8:ca:a8:fd:60:88:63:27:1a:7d: 2c:e4:13:03:ae:b5:c5:9c:42:47:69:d9:72:b1:2d: 53:f0:b7:5c:b5:30:24:27:ac:3a:75:73:9a:b3:7c: 57:37:78:28:84:3a:3e:27:2a:2c:8f:20:0f:d5:66: 70:d7:0e:5b:57:72:9a:1a:91:51:02:4e:8c:b3:e3: 3a:8d:b1:88:76:cd:a3:7f:26:da:6e:15:17:58:5a: fd:b5:d6:79:4c:34:3d:b8:f9:db:c4:a6:d3:b7:d7: ce:ba:51:ff:3c:1f:e3:53:2b:57:bd:16:eb:14:f9: 30:7e:0e:56:ca:6a:94:60:10:93:eb:ba:35:32:b4: 01:40:a9:a7:be:bb:09:81:85:2f:81:49:0b:ed:91: a6:62:1d:12:d3:01:b8:dd:43:6e:2c:b7:ca:41:91: 2e:70:31:27:dd:44:03:b6:ca:56:59:86:21:98:65: e4:90:32:3c:43:1c:99:c1:ec:5b:d9:b2:bf:14:19: 1f:02:78:fa:6d:0f:a8:ce:7a:d4:12:ae:b4:1d:57: cd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0B:F4:90:E2:0E:B2:85:C8:B1:BD:FB:95:A2:D8:17:4C:14:FA:AC X509v3 Authority Key Identifier: keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f2:9f:4e:02:f4:ec:2b:7a:5c:d0:b7:32:f5:cc:9e:61:12: 51:ad:9f:da:3e:84:45:f7:e7:a1:f1:ac:86:e9:80:05:0f:a0: c9:06:b0:d7:99:50:f2:fe:5e:59:53:e4:5c:b7:20:cd:a6:27: 58:f3:99:ff:0c:c0:30:09:82:f7:da:09:b2:76:d4:95:f7:fe: d4:e5:20:94:f1:89:87:1a:40:23:a0:ba:97:22:c3:2d:ab:b3: a3:9f:0f:f8:bd:9c:cb:0c:45:fb:20:7c:47:62:8e:d1:5d:22: 7d:b4:26:1f:79:b8:d4:98:60:60:e4:4f:21:22:0f:37:e1:6c: c9:27:9e:07:1f:4b:07:8d:c0:95:87:86:72:e7:02:ad:42:40: fa:2e:6b:b8:b4:cc:90:f6:0c:ed:95:49:fd:92:95:ac:8a:97: b8:39:c6:26:86:b0:9b:56:e7:26:cd:6f:00:53:a1:92:81:d7: 12:65:9c:19:82:ef:ee:28:6c:a8:2e:a0:f9:ca:01:8d:0a:09: b3:cd:f0:bd:a8:f4:3f:fb:3f:4c:36:a1:ed:5d:b4:f6:11:a8: f6:74:f1:9a:c6:33:f7:55:51:3f:18:3c:a1:e9:14:4f:ea:de: 64:14:de:19:9f:47:13:7a:43:69:d5:d6:88:84:ea:5c:8a:b8: f0:9a:37:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILqkUv9QbDM+6jErZcy2yicLnJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4 NUUzNzI0QzAeFw0yNTA2MjgxNzI3MDRaFw0yNTA3MDIwNTAwMDRaMDMxMTAvBgNV BAMTKEE3MEJGNDkwRTIwRUIyODVDOEIxQkRGQjk1QTJEODE3NEMxNEZBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuo8JhX0gRXVzODIZrB71H1Ugp b9JNFajz85MDzkYXGzBLTF9/ejsRBXROvOD/U93HuMqo/WCIYycafSzkEwOutcWc Qkdp2XKxLVPwt1y1MCQnrDp1c5qzfFc3eCiEOj4nKiyPIA/VZnDXDltXcpoakVEC Toyz4zqNsYh2zaN/JtpuFRdYWv211nlMND24+dvEptO31866Uf88H+NTK1e9FusU +TB+DlbKapRgEJPrujUytAFAqae+uwmBhS+BSQvtkaZiHRLTAbjdQ24st8pBkS5w MSfdRAO2ylZZhiGYZeSQMjxDHJnB7FvZsr8UGR8CePptD6jOetQSrrQdV80JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpwv0kOIOsoXIsb37laLYF0wU+qwwHwYDVR0j BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2 OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz NzI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzAvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2 RDc4NUUzNzI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnyn04C9OwrelzQtzL1zJ5hElGtn9o+hEX3 56HxrIbpgAUPoMkGsNeZUPL+XllT5Fy3IM2mJ1jzmf8MwDAJgvfaCbJ21JX3/tTl IJTxiYcaQCOgupciwy2rs6OfD/i9nMsMRfsgfEdijtFdIn20Jh95uNSYYGDkTyEi DzfhbMknngcfSweNwJWHhnLnAq1CQPoua7i0zJD2DO2VSf2SlayKl7g5xiaGsJtW 5ybNbwBToZKB1xJlnBmC7+4obKguoPnKAY0KCbPN8L2o9D/7P0w2oe1dtPYRqPZ0 8ZrGM/dVUT8YPKHpFE/q3mQU3hmfRxN6Q2nV1oiE6lyKuPCaNyk= -----END CERTIFICATE-----Generated at Mon Jun 30 06:01:58 2025 by rpki-client