$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: QpQNTuTkeq02sW2RqaifzGyiEnlPXDvOM6l1Towjcq4= Subject key identifier: 2B:F6:D6:9C:13:6E:99:12:42:5D:79:D3:03:8E:34:96:AC:C3:CB:55 Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 0CBB7CE8B75408249D6937C16C36BC4B999AFC94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: B0 Signing time: Sat 28 Jun 2025 07:11:57 +0000 Manifest this update: Sat 28 Jun 2025 07:06:57 +0000 Manifest next update: Tue 01 Jul 2025 11:22:57 +0000 Files and hashes: 1: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: 7s53i+rSoduZ8O3MKLhzWtcG+YGiMy42SbhEk4PQjAs=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bb:7c:e8:b7:54:08:24:9d:69:37:c1:6c:36:bc:4b:99:9a:fc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Jun 28 07:06:57 2025 GMT Not After : Jul 1 11:22:57 2025 GMT Subject: CN=2BF6D69C136E9912425D79D3038E3496ACC3CB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:e0:6d:f8:60:ca:f5:ff:b2:fd:21:13:e5: d5:8c:c7:89:cc:16:2c:56:8c:5c:93:14:99:10:f2: d4:14:cb:b7:0d:e3:bd:65:b0:ed:13:d3:3a:b3:37: 6a:ed:77:20:d2:d9:0d:75:a1:ba:19:70:ff:a6:05: fe:2d:a8:17:74:dd:ad:00:52:2f:ca:da:97:37:39: d9:f3:be:bb:d9:d8:6e:16:c6:ad:ca:5c:5c:cc:ca: 78:a8:3f:5e:bb:d6:b4:38:04:e0:81:54:f6:52:b3: 5a:63:a7:c8:6b:c1:3a:bb:69:69:af:6f:b5:a9:21: 62:50:b5:b7:25:9c:7c:d4:1a:a4:f9:6f:a7:7c:bd: 4e:30:fd:9c:38:7a:2a:8f:0f:85:a3:7b:2f:ab:53: fe:ed:6e:47:e6:8f:c4:b2:ed:84:18:ac:7a:a4:c8: b9:a5:e3:13:dd:06:70:31:f5:db:c2:7c:60:cb:84: 1c:cc:60:cb:4a:bb:ee:8c:e1:a3:fe:db:f4:2a:77: 8d:0d:96:15:1e:b8:ba:39:be:56:39:61:cb:92:15: 79:a4:ca:75:b4:63:12:e6:2d:72:80:a2:1c:34:2f: 35:0d:26:9a:93:55:c7:e3:4d:7e:d5:53:77:60:55: 78:25:93:4d:7f:dc:f1:11:16:bf:c4:fd:1f:ac:4b: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F6:D6:9C:13:6E:99:12:42:5D:79:D3:03:8E:34:96:AC:C3:CB:55 X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0e:c9:fd:5e:48:0c:97:1b:b9:90:c2:00:de:49:d4:67:1f: a3:02:72:d4:84:61:00:b0:41:84:a2:90:0c:3b:2b:b4:85:75: 79:0c:0d:06:f5:b3:a2:3c:25:42:ba:52:d0:c6:2a:93:45:7c: 30:97:5a:da:e9:73:d1:71:6a:ed:4e:ab:f4:ec:8d:47:ee:5c: d7:74:86:ac:bc:3a:cc:f9:fa:59:3b:79:84:97:f1:fc:19:f3: 35:b5:e5:23:9c:d6:5b:a7:95:25:77:19:df:30:7a:c5:77:ee: c9:e8:7c:fe:20:93:7c:cb:b7:6e:92:cc:0c:58:12:c8:e5:10: f0:17:d3:93:cf:5b:79:e6:06:6b:4f:f8:d5:b8:b3:14:9a:6e: 95:5b:6c:ff:b5:a5:9b:37:57:5c:8b:ea:ed:45:c6:dd:2b:1a: 8f:a3:d0:0d:37:34:28:f3:10:0d:ca:0a:bd:2e:30:62:7a:07: 48:05:61:7e:75:57:33:de:0c:53:b3:53:f3:a7:bb:1a:31:b8: e7:ef:69:6e:16:67:1a:93:fb:98:83:ab:8d:7a:41:23:48:db: f1:95:be:b4:a1:f0:58:14:56:d2:8d:6c:7c:8e:2d:f9:3c:b8: ae:9e:cb:87:f2:65:b4:a6:77:9c:1f:42:81:21:a9:e3:00:c5: c7:6e:f4:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLt86LdUCCSdaTfBbDa8S5ma/JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTA2MjgwNzA2NTdaFw0yNTA3MDExMTIyNTdaMDMxMTAvBgNV BAMTKDJCRjZENjlDMTM2RTk5MTI0MjVENzlEMzAzOEUzNDk2QUNDM0NCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdeBt+GDK9f+y/SET5dWMx4nM FixWjFyTFJkQ8tQUy7cN471lsO0T0zqzN2rtdyDS2Q11oboZcP+mBf4tqBd03a0A Ui/K2pc3OdnzvrvZ2G4Wxq3KXFzMynioP1671rQ4BOCBVPZSs1pjp8hrwTq7aWmv b7WpIWJQtbclnHzUGqT5b6d8vU4w/Zw4eiqPD4Wjey+rU/7tbkfmj8Sy7YQYrHqk yLml4xPdBnAx9dvCfGDLhBzMYMtKu+6M4aP+2/Qqd40NlhUeuLo5vlY5YcuSFXmk ynW0YxLmLXKAohw0LzUNJpqTVcfjTX7VU3dgVXglk01/3PERFr/E/R+sSw1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/bWnBNumRJCXXnTA440lqzDy1UwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoOyf1eSAyXG7mQwgDeSdRnH6MCctSEYQCw QYSikAw7K7SFdXkMDQb1s6I8JUK6UtDGKpNFfDCXWtrpc9Fxau1Oq/TsjUfuXNd0 hqy8Osz5+lk7eYSX8fwZ8zW15SOc1lunlSV3Gd8wesV37snofP4gk3zLt26SzAxY EsjlEPAX05PPW3nmBmtP+NW4sxSabpVbbP+1pZs3V1yL6u1Fxt0rGo+j0A03NCjz EA3KCr0uMGJ6B0gFYX51VzPeDFOzU/OnuxoxuOfvaW4WZxqT+5iDq416QSNI2/GV vrSh8FgUVtKNbHyOLfk8uK6ey4fyZbSmd5wfQoEhqeMAxcdu9F8= -----END CERTIFICATE-----Generated at Mon Jun 30 03:44:14 2025 by rpki-client