$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: MnporIDYb7CYOJP1ff7q4ND/wHqDJbgnsAV8CBPcLzw= Subject key identifier: 75:9F:26:40:08:56:75:05:2A:7F:C8:45:0F:01:AA:E4:23:44:73:DC Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 76279EA5AEA8CFA6CFCC981EB53D0DF34A080C0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: C9 Signing time: Sat 23 Aug 2025 14:12:04 +0000 Manifest this update: Sat 23 Aug 2025 14:07:04 +0000 Manifest next update: Tue 26 Aug 2025 16:47:04 +0000 Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) 2: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: by/RRoqSV4tojwnFsCDPorSTgkae/DSeSyAQBckny9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:27:9e:a5:ae:a8:cf:a6:cf:cc:98:1e:b5:3d:0d:f3:4a:08:0c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Aug 23 14:07:04 2025 GMT Not After : Aug 26 16:47:04 2025 GMT Subject: CN=759F2640085675052A7FC8450F01AAE4234473DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:78:af:a9:71:27:d3:62:ae:f9:d6:99:63: 76:f4:51:db:c8:70:9a:4a:7a:50:e3:08:41:9e:33: 8c:00:9e:d8:6d:e9:3f:ee:cd:93:b3:d8:f2:7e:eb: dd:f9:e8:01:65:ad:38:94:ef:6b:ce:f5:9f:a1:9d: c6:a9:14:0e:49:bf:12:d8:2d:b8:c5:e6:6a:3e:d7: f9:d9:0c:c9:0b:d7:dd:d0:31:9f:4e:bc:40:67:95: bc:ea:b7:f8:31:55:45:82:30:43:ea:f1:36:d6:e0: 50:32:5c:cf:7c:17:16:ec:ff:9b:de:0c:31:43:40: 28:38:f8:aa:25:a5:2b:63:bb:90:32:05:ee:63:9e: 9c:0d:1a:39:19:a8:69:ae:63:cf:b7:07:79:33:85: 84:34:f0:ec:58:7c:df:c6:76:27:d2:66:8d:6a:bb: 39:20:72:53:0a:65:8c:2a:90:09:f4:26:ef:a4:71: da:48:1a:09:9e:1d:06:ce:e8:53:38:2a:1f:79:4b: e8:8b:f3:e1:fa:9b:c9:1f:ed:0f:a8:96:8f:3a:ac: dd:49:c0:0f:b8:6f:0d:45:94:26:4c:b2:b1:b2:33: 54:dc:72:b9:d3:9e:76:e3:98:5a:49:18:55:25:d3: 70:72:6e:50:3e:3e:2f:e0:7c:5c:55:b0:91:44:46: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9F:26:40:08:56:75:05:2A:7F:C8:45:0F:01:AA:E4:23:44:73:DC X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:52:6c:eb:fb:38:00:0c:71:8d:f0:e3:53:d4:af:02:e4:99: 46:dc:17:8e:94:1a:05:4d:e2:c6:0f:63:0c:8c:c2:1e:b5:21: 6e:ee:ec:59:9b:d6:15:c5:8d:80:41:62:41:1b:69:69:24:07: 1e:df:47:55:f3:7f:81:8e:ba:a7:fb:3a:f7:ed:c8:95:fa:8f: 1a:2f:c3:d4:4e:38:92:e2:da:98:01:d5:31:1d:99:5a:a6:87: f2:1e:1e:88:64:8a:ff:72:b9:c3:ff:0d:ee:5c:1b:d4:df:a4: 85:0f:8c:f9:d1:fe:73:84:48:af:df:53:73:1c:52:2a:68:b9: c9:f0:b5:52:91:3c:b7:85:7f:cd:de:8b:f2:e1:37:96:97:9e: 1b:35:b0:a1:8e:dd:46:7b:6f:b9:fe:09:b7:36:79:8a:5c:72: cd:b1:64:ba:a6:5f:8d:b9:a2:73:89:92:df:e1:3c:83:bb:db: cd:13:f6:39:f8:e7:d8:33:c3:de:c4:23:bc:1a:18:47:42:97: c5:15:23:71:7f:59:07:0b:d0:02:ff:84:b0:86:25:49:3e:d0: c5:70:fe:f1:af:eb:b4:82:ec:d3:28:49:7f:9b:ab:6e:b3:25: 94:5e:92:3e:c2:ed:fa:c2:73:63:38:82:35:79:3e:92:25:04: 27:e4:6e:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdieepa6oz6bPzJgetT0N80oIDAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTA4MjMxNDA3MDRaFw0yNTA4MjYxNjQ3MDRaMDMxMTAvBgNV BAMTKDc1OUYyNjQwMDg1Njc1MDUyQTdGQzg0NTBGMDFBQUU0MjM0NDczREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2l3ivqXEn02Ku+daZY3b0UdvI cJpKelDjCEGeM4wAntht6T/uzZOz2PJ+69356AFlrTiU72vO9Z+hncapFA5JvxLY LbjF5mo+1/nZDMkL193QMZ9OvEBnlbzqt/gxVUWCMEPq8TbW4FAyXM98Fxbs/5ve DDFDQCg4+KolpStju5AyBe5jnpwNGjkZqGmuY8+3B3kzhYQ08OxYfN/GdifSZo1q uzkgclMKZYwqkAn0Ju+kcdpIGgmeHQbO6FM4Kh95S+iL8+H6m8kf7Q+olo86rN1J wA+4bw1FlCZMsrGyM1TccrnTnnbjmFpJGFUl03ByblA+Pi/gfFxVsJFERmVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdZ8mQAhWdQUqf8hFDwGq5CNEc9wwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNSbOv7OAAMcY3w41PUrwLkmUbcF46UGgVN 4sYPYwyMwh61IW7u7Fmb1hXFjYBBYkEbaWkkBx7fR1Xzf4GOuqf7OvftyJX6jxov w9ROOJLi2pgB1TEdmVqmh/IeHohkiv9yucP/De5cG9TfpIUPjPnR/nOESK/fU3Mc UipoucnwtVKRPLeFf83ei/LhN5aXnhs1sKGO3UZ7b7n+Cbc2eYpccs2xZLqmX425 onOJkt/hPIO7280T9jn459gzw97EI7waGEdCl8UVI3F/WQcL0AL/hLCGJUk+0MVw /vGv67SC7NMoSX+bq26zJZRekj7C7frCc2M4gjV5PpIlBCfkbjg= -----END CERTIFICATE-----Generated at Sat Aug 23 19:19:49 2025 by rpki-client