$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: n3eSqvfLtKvilf/pF7yKVDU+r4BBOn0RDxYF6hwGsf8= Subject key identifier: 59:BB:01:48:21:AF:67:96:A6:7C:5F:83:EA:AE:8F:01:30:F8:CE:19 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 578E2A9A8F70F4813D6BBD147AFD1C93A831F2A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 02F0 Signing time: Mon 21 Jul 2025 01:30:49 +0000 Manifest this update: Mon 21 Jul 2025 01:25:49 +0000 Manifest next update: Thu 24 Jul 2025 03:16:49 +0000 Files and hashes: 1: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: Jv020FtWlGjsgSYh8E/dDFacN7ruyTEckeFJVb5pscw=) 2: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8e:2a:9a:8f:70:f4:81:3d:6b:bd:14:7a:fd:1c:93:a8:31:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Jul 21 01:25:49 2025 GMT Not After : Jul 24 03:16:49 2025 GMT Subject: CN=59BB014821AF6796A67C5F83EAAE8F0130F8CE19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:93:b0:85:2a:5e:28:be:81:4d:39:7f:52: a6:0c:32:3a:56:74:e9:27:e4:85:d6:77:f1:bd:46: 65:2d:37:b6:80:6b:2c:8f:60:7d:72:55:44:c0:78: 8d:f6:61:ae:f2:31:68:11:b1:7e:65:16:44:90:4b: 37:57:97:10:7b:89:cc:da:c9:f4:07:8e:d1:8a:b4: fa:9f:06:9e:14:51:5c:04:c2:c7:f1:b1:ed:10:f3: 98:24:9c:c2:ab:fd:9a:54:d4:6c:69:69:4f:37:b5: 96:15:a4:22:0d:ea:70:52:57:61:15:7e:31:f3:b4: 27:a2:ac:bb:b4:12:1c:36:ec:76:8f:a8:33:6a:b5: 5d:82:49:18:42:75:b5:52:46:50:ac:39:76:33:ef: 6a:fa:d6:29:0d:83:98:e7:1a:40:bd:c9:d3:b9:67: bf:b1:4b:ca:f5:92:66:5f:77:de:de:30:1a:72:50: 7c:f5:40:3b:67:cc:85:ad:4e:aa:d1:4a:d2:38:c4: ed:a3:97:84:b2:30:f7:80:33:f1:1e:c1:c0:1b:09: 19:9f:da:e1:1c:40:d1:ec:e6:63:bb:c2:8d:2f:86: 8e:fd:65:d4:c4:79:43:42:63:5e:f2:97:c2:00:31: 34:ca:1f:b5:31:88:1c:e3:b7:be:64:40:7d:df:85: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BB:01:48:21:AF:67:96:A6:7C:5F:83:EA:AE:8F:01:30:F8:CE:19 X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6b:bd:79:5a:5f:e7:5e:96:52:99:22:c7:b9:28:a2:a6:15: 56:2d:48:67:84:77:70:74:72:6b:8b:db:3e:5a:25:3c:85:d3: 45:85:78:0c:6a:d1:32:f8:cb:58:42:3b:a4:3c:47:0e:b6:ef: 1a:57:51:fe:06:2c:e1:ff:83:c3:0c:e5:71:ed:e6:e6:1e:07: 1c:f3:92:84:86:9b:33:e2:e9:0b:4c:d9:36:6f:6a:2b:ac:cb: c2:bb:30:73:05:16:31:60:22:01:21:56:a7:00:b6:36:89:f5: e9:08:02:d3:be:16:35:11:76:2d:a5:d4:65:6b:71:a7:84:6a: 5b:a5:e1:d9:44:19:dc:43:26:71:bf:f9:76:54:a6:b8:a9:ce: c6:43:d8:63:16:ba:9b:e9:7a:93:51:67:e7:01:9e:78:e4:71: 85:e6:06:c9:ee:74:3f:87:af:77:76:89:f6:58:b8:d4:12:f9: 30:9e:e0:20:8a:e8:e3:c3:b4:6c:0b:fb:3c:f1:87:4c:89:72: 8f:3e:1c:d4:bd:60:bf:ee:fc:46:c3:08:76:be:6c:96:df:76: 6b:2f:ca:c0:d9:7e:2a:f7:2c:b4:75:96:dd:f0:58:5d:81:ff: 43:60:3f:ba:b1:29:7e:1e:56:62:75:60:80:c8:80:8e:b6:8d: 5d:60:61:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV44qmo9w9IE9a70Uev0ck6gx8qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTA3MjEwMTI1NDlaFw0yNTA3MjQwMzE2NDlaMDMxMTAvBgNV BAMTKDU5QkIwMTQ4MjFBRjY3OTZBNjdDNUY4M0VBQUU4RjAxMzBGOENFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5ZOwhSpeKL6BTTl/UqYMMjpW dOkn5IXWd/G9RmUtN7aAayyPYH1yVUTAeI32Ya7yMWgRsX5lFkSQSzdXlxB7icza yfQHjtGKtPqfBp4UUVwEwsfxse0Q85gknMKr/ZpU1GxpaU83tZYVpCIN6nBSV2EV fjHztCeirLu0Ehw27HaPqDNqtV2CSRhCdbVSRlCsOXYz72r61ikNg5jnGkC9ydO5 Z7+xS8r1kmZfd97eMBpyUHz1QDtnzIWtTqrRStI4xO2jl4SyMPeAM/EewcAbCRmf 2uEcQNHs5mO7wo0vho79ZdTEeUNCY17yl8IAMTTKH7UxiBzjt75kQH3fheY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWbsBSCGvZ5amfF+D6q6PATD4zhkwHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBrvXlaX+dellKZIse5KKKmFVYtSGeEd3B0 cmuL2z5aJTyF00WFeAxq0TL4y1hCO6Q8Rw627xpXUf4GLOH/g8MM5XHt5uYeBxzz koSGmzPi6QtM2TZvaiusy8K7MHMFFjFgIgEhVqcAtjaJ9ekIAtO+FjURdi2l1GVr caeEalul4dlEGdxDJnG/+XZUpripzsZD2GMWupvpepNRZ+cBnnjkcYXmBsnudD+H r3d2ifZYuNQS+TCe4CCK6OPDtGwL+zzxh0yJco8+HNS9YL/u/EbDCHa+bJbfdmsv ysDZfir3LLR1lt3wWF2B/0NgP7qxKX4eVmJ1YIDIgI62jV1gYTI= -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:08 2025 by rpki-client