$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: nDqIkmn58eeYmAoh/cbwfVvr8fUcdiero3Zbm6PJQ18= Subject key identifier: 3A:C3:E3:AA:76:39:A9:FA:09:F5:C1:C3:75:EB:0A:EC:1A:5D:22:EA Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 096E282EA20DCADF5D2C66C3083F12ACC4025912 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: E2 Signing time: Sat 18 Oct 2025 02:42:00 +0000 Manifest this update: Sat 18 Oct 2025 02:37:00 +0000 Manifest next update: Tue 21 Oct 2025 11:14:00 +0000 Files and hashes: 1: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: +ZZ0ioLPdbo4KFn3Efr6OlP+B6/jY10+H6LlVuWKk6c=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6e:28:2e:a2:0d:ca:df:5d:2c:66:c3:08:3f:12:ac:c4:02:59:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Oct 18 02:37:00 2025 GMT Not After : Oct 21 11:14:00 2025 GMT Subject: CN=3AC3E3AA7639A9FA09F5C1C375EB0AEC1A5D22EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:87:68:68:d6:84:fa:db:74:b6:6b:2b:60: ca:97:6c:9f:7f:a6:18:11:ad:1a:9f:b6:76:63:6a: f0:07:13:89:b5:0d:9d:89:f7:d2:9c:ed:0d:ee:31: bb:e9:ca:a7:56:f5:03:6e:30:c9:61:25:82:fc:6a: 78:4e:4e:13:0f:31:c6:af:54:b7:07:fa:28:fd:c2: 65:a3:b0:aa:10:45:ce:7a:5e:1b:42:3d:86:d2:ff: 46:f5:e6:f3:0d:a7:37:46:78:b9:ae:9b:ad:58:22: 1e:6d:f2:97:36:69:d6:8b:b5:59:d5:0b:0d:0d:56: 35:e0:1b:de:29:26:17:bb:c1:d8:cf:5f:d8:00:63: d1:2e:7d:55:8f:5c:d3:cb:54:5e:44:a8:bd:f5:93: 64:4e:a6:5f:de:98:d4:d2:a7:f2:67:ca:6c:6e:de: dc:e3:52:e9:3c:7a:7c:2c:51:b9:73:6b:70:e1:06: 09:32:fc:94:3f:65:97:24:01:8b:3b:11:a5:bb:97: 6c:15:96:78:1b:3c:b2:8f:e4:5a:8b:6f:95:1d:aa: 7f:86:b0:f7:b1:23:05:e2:f2:00:94:ae:59:51:6b: 1a:f3:1a:a5:2b:43:58:1c:fb:28:f8:88:a3:9e:6b: af:7e:ac:ed:ce:e2:1d:97:cd:e4:45:99:44:1a:f3: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C3:E3:AA:76:39:A9:FA:09:F5:C1:C3:75:EB:0A:EC:1A:5D:22:EA X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:91:5b:b0:23:77:68:a8:4a:a1:b1:b6:31:11:d4:33:8a:50: 0a:e3:68:91:1c:41:16:93:9e:ca:17:71:4d:1c:ac:5e:2a:73: 74:a4:d0:ac:16:68:28:9d:98:d8:31:22:22:29:e8:0a:50:a3: 47:a2:7d:1d:5a:cd:7f:e4:fb:19:f1:da:b4:dc:b8:35:23:dc: c7:ef:99:14:c3:af:22:61:1a:4d:96:aa:4e:55:1d:47:9b:bd: 15:d7:67:1c:1a:52:72:86:eb:e3:3f:8d:2d:2b:09:de:9b:2d: 16:16:83:23:a3:4c:bd:ee:81:01:9b:d5:c1:a6:68:f8:ff:5c: e8:7a:83:fc:3b:81:14:fe:b8:91:57:c6:3b:41:b2:bc:e2:a7: e6:b2:5b:f0:23:4c:46:a2:d3:18:85:1a:52:1c:78:d7:c5:1c: e4:7b:78:4a:e5:ca:9a:46:fc:79:4a:1d:a8:05:86:c5:46:54: f2:b5:96:59:ea:17:f8:75:bf:5d:b8:d4:31:41:25:8d:30:ab: 84:ca:bb:e8:85:0d:f2:91:3f:99:1d:92:d3:cf:44:54:e0:91: d1:1f:75:07:38:b3:90:0e:e5:74:d9:45:2f:17:36:b7:ab:c0: ad:a2:da:55:8c:76:d0:41:75:4a:39:41:80:7a:34:13:62:6d: 27:8d:aa:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCW4oLqINyt9dLGbDCD8SrMQCWRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTEwMTgwMjM3MDBaFw0yNTEwMjExMTE0MDBaMDMxMTAvBgNV BAMTKDNBQzNFM0FBNzYzOUE5RkEwOUY1QzFDMzc1RUIwQUVDMUE1RDIyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTodoaNaE+tt0tmsrYMqXbJ9/ phgRrRqftnZjavAHE4m1DZ2J99Kc7Q3uMbvpyqdW9QNuMMlhJYL8anhOThMPMcav VLcH+ij9wmWjsKoQRc56XhtCPYbS/0b15vMNpzdGeLmum61YIh5t8pc2adaLtVnV Cw0NVjXgG94pJhe7wdjPX9gAY9EufVWPXNPLVF5EqL31k2ROpl/emNTSp/Jnymxu 3tzjUuk8enwsUblza3DhBgky/JQ/ZZckAYs7EaW7l2wVlngbPLKP5FqLb5Udqn+G sPexIwXi8gCUrllRaxrzGqUrQ1gc+yj4iKOea69+rO3O4h2XzeRFmUQa83DVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOsPjqnY5qfoJ9cHDdesK7BpdIuowHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGRW7Ajd2ioSqGxtjER1DOKUArjaJEcQRaT nsoXcU0crF4qc3Sk0KwWaCidmNgxIiIp6ApQo0eifR1azX/k+xnx2rTcuDUj3Mfv mRTDryJhGk2Wqk5VHUebvRXXZxwaUnKG6+M/jS0rCd6bLRYWgyOjTL3ugQGb1cGm aPj/XOh6g/w7gRT+uJFXxjtBsrzip+ayW/AjTEai0xiFGlIceNfFHOR7eErlyppG /HlKHagFhsVGVPK1llnqF/h1v1241DFBJY0wq4TKu+iFDfKRP5kdktPPRFTgkdEf dQc4s5AO5XTZRS8XNrerwK2i2lWMdtBBdUo5QYB6NBNibSeNqvk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:15:13 2025 by rpki-client