$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft (raw, json) Hash identifier: JjyH+yfOGX5mv4s/32sTuWWVGJw0BNBlgF0z1KKTyys= Subject key identifier: D2:D7:B7:FD:58:12:A1:87:57:CB:1D:51:5D:36:79:97:3F:00:D1:2B Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Certificate serial: 0FECBD1124292408CF44D549EA28D13512750FA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft Manifest number: 01E0 Signing time: Sun 20 Jul 2025 14:21:22 +0000 Manifest this update: Sun 20 Jul 2025 14:16:22 +0000 Manifest next update: Thu 24 Jul 2025 00:10:22 +0000 Files and hashes: 1: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: hy+/jpVeqW5ZdBPpsEQxih0c4zQVAJjPaRw4KAPp/Ro=) 2: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl (hash: Qusw8xTCFeWdhzblweHPNCrkeRBrUPR3DDb0hupaHow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ec:bd:11:24:29:24:08:cf:44:d5:49:ea:28:d1:35:12:75:0f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Validity Not Before: Jul 20 14:16:22 2025 GMT Not After : Jul 24 00:10:22 2025 GMT Subject: CN=D2D7B7FD5812A18757CB1D515D3679973F00D12B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:f1:04:e4:7f:c6:18:55:72:df:e8:99:5f: 33:fc:8d:53:48:28:ed:a4:b3:fa:d1:a6:73:83:cc: 46:7d:69:83:83:fa:1f:98:0c:ca:c3:ce:cc:bc:c2: 96:91:f5:9d:8d:92:30:4d:58:81:09:1f:7c:0d:26: fe:fa:a0:18:a6:78:3e:78:c9:51:23:37:28:9b:98: 39:f1:31:51:48:85:08:b8:44:9b:b7:0d:8e:09:89: 74:50:c7:4c:4f:3f:dc:94:40:23:4d:db:e1:73:50: 3a:47:8f:73:b6:9a:41:43:36:c9:ee:50:38:37:cd: 3e:fe:9d:3b:3e:82:53:ae:93:4a:31:73:61:b9:6e: bb:8f:e9:19:80:d2:69:53:a6:e6:98:57:20:2e:f8: 53:48:1c:19:9d:c6:e4:b5:ef:8b:5a:6f:92:5c:7a: 9b:87:0b:7d:fe:d4:80:74:03:87:69:06:7c:03:e1: 5f:87:c8:14:5a:3e:7e:85:13:be:be:8d:99:06:4c: f9:08:25:d1:04:a7:82:0b:a3:ae:b2:27:8d:a1:b3: fd:6d:4e:d5:a3:b9:11:d7:60:25:28:ba:53:c6:4e: 67:89:6f:55:03:c6:9c:30:f7:84:5d:9b:db:05:31: 50:91:50:cf:0f:ca:7c:04:c6:d1:82:8d:9a:9e:d3: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:B7:FD:58:12:A1:87:57:CB:1D:51:5D:36:79:97:3F:00:D1:2B X509v3 Authority Key Identifier: keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:73:25:9b:74:d2:0e:5c:0a:fe:00:8b:44:8c:78:34:c8:ba: 11:f1:72:62:54:18:07:8a:11:12:bc:d5:e2:59:4d:b3:76:61: 37:f0:7c:0c:ad:13:13:c4:c7:aa:77:d7:98:0b:a5:09:63:f3: 68:e2:58:b3:b7:c4:05:f1:1a:bb:33:cf:b5:e5:8b:7c:7a:5e: 10:35:dd:a0:89:55:53:8a:29:21:b8:34:cf:6f:a0:7d:f7:2a: 4c:48:68:d2:0e:ab:62:29:b9:34:01:a8:48:65:61:b7:16:d0: 87:5a:28:9e:18:71:3d:62:46:31:b7:47:9d:4e:1f:c4:f6:fb: 3e:f9:3f:4f:89:92:d6:dc:30:e4:66:5c:da:dc:90:40:41:bc: d8:39:44:8a:47:7c:6d:b3:1a:43:bd:f9:9b:02:a0:05:58:63: 60:1d:49:45:1d:a1:3d:8a:5c:99:92:02:8e:0e:99:67:7c:9c: 40:0b:47:ad:f4:92:bc:2d:36:2e:25:67:47:5c:23:7a:4b:11: c7:dc:e2:b6:cb:eb:a8:45:d1:93:f7:6c:3e:25:55:75:c5:a9: 0c:78:6a:87:6e:2f:39:c7:2f:ce:52:d3:6c:0c:78:2f:bd:6e: 49:e1:ca:96:c8:b1:9d:92:89:84:87:7b:33:a7:76:75:13:42: 0c:0b:56:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+y9ESQpJAjPRNVJ6ijRNRJ1D6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5 MTVBQzc2RDAeFw0yNTA3MjAxNDE2MjJaFw0yNTA3MjQwMDEwMjJaMDMxMTAvBgNV BAMTKEQyRDdCN0ZENTgxMkExODc1N0NCMUQ1MTVEMzY3OTk3M0YwMEQxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E/EE5H/GGFVy3+iZXzP8jVNI KO2ks/rRpnODzEZ9aYOD+h+YDMrDzsy8wpaR9Z2NkjBNWIEJH3wNJv76oBimeD54 yVEjNyibmDnxMVFIhQi4RJu3DY4JiXRQx0xPP9yUQCNN2+FzUDpHj3O2mkFDNsnu UDg3zT7+nTs+glOuk0oxc2G5bruP6RmA0mlTpuaYVyAu+FNIHBmdxuS174tab5Jc epuHC33+1IB0A4dpBnwD4V+HyBRaPn6FE76+jZkGTPkIJdEEp4ILo66yJ42hs/1t TtWjuRHXYCUoulPGTmeJb1UDxpww94Rdm9sFMVCRUM8PynwExtGCjZqe0zEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0te3/VgSoYdXyx1RXTZ5lz8A0SswHwYDVR0j BBgwFoAUQHBqXM+olsjuDB+aW23NoZFax20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMC80MDcwNkE1Q0NG QTg5NkM4RUUwQzFGOUE1QjZEQ0RBMTkxNUFDNzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5MTVB Qzc2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENE QTE5MTVBQzc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBzJZt00g5cCv4Ai0SMeDTIuhHxcmJUGAeK ERK81eJZTbN2YTfwfAytExPEx6p315gLpQlj82jiWLO3xAXxGrszz7Xli3x6XhA1 3aCJVVOKKSG4NM9voH33KkxIaNIOq2IpuTQBqEhlYbcW0IdaKJ4YcT1iRjG3R51O H8T2+z75P0+JktbcMORmXNrckEBBvNg5RIpHfG2zGkO9+ZsCoAVYY2AdSUUdoT2K XJmSAo4OmWd8nEALR630krwtNi4lZ0dcI3pLEcfc4rbL66hF0ZP3bD4lVXXFqQx4 aoduLznHL85S02wMeC+9bknhypbIsZ2SiYSHezOndnUTQgwLVqk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:23:05 2025 by rpki-client