$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json) Hash identifier: h3dnTB7pNvI34NV7oNJcKI7hNf/l2d1Y2xRfilhy26k= Subject key identifier: DC:9D:25:AF:47:6B:B5:F9:04:17:01:EC:1E:09:30:FB:CC:FF:73:8A Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 7A6250C7F8AEFB711797351FEC2FBD462FE1C8BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft Manifest number: 04BC Signing time: Tue 22 Jul 2025 21:11:25 +0000 Manifest this update: Tue 22 Jul 2025 21:06:25 +0000 Manifest next update: Sat 26 Jul 2025 08:59:25 +0000 Files and hashes: 1: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 34Zwk2rQxI6/8F/IkX/shAQb+olpsRnc3h6OinfJJ/w=) 2: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 778Q5HjUkZ/WVTVzYaqPWOxb/BdNeOK8Id+aBKl0ego=) 3: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: YgdnK4bpmZEwGPw3RMY+3f0ki33DQMy9OQZSZ0IcPVE=) 4: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: VWZBwU3RWnROUShcpW3L74G67TSj+wYP3BWSlSltpjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:62:50:c7:f8:ae:fb:71:17:97:35:1f:ec:2f:bd:46:2f:e1:c8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: Jul 22 21:06:25 2025 GMT Not After : Jul 26 08:59:25 2025 GMT Subject: CN=DC9D25AF476BB5F9041701EC1E0930FBCCFF738A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:8d:2d:cc:04:8b:dc:7d:89:8e:9c:04:a6: ca:f4:bb:d9:3e:f3:65:da:39:21:93:94:08:f5:ca: 2f:84:20:1b:b6:f6:27:ec:87:28:3f:0a:50:a6:b2: 65:3b:70:f2:4c:80:0c:b8:ab:58:1f:26:8e:1c:96: 6f:e6:ac:c9:58:5d:7c:ea:6c:e2:5f:0d:a8:98:f2: be:51:e2:78:16:78:66:0d:4f:33:2d:b8:7b:b0:0c: 6b:78:80:c2:da:09:c8:47:00:d7:1d:d2:79:1e:45: 73:6c:89:21:95:f0:76:6e:62:56:82:0c:c6:7e:b7: ff:7a:f4:1d:1f:4f:f2:52:69:e4:01:b3:d9:b1:4c: 82:f4:6b:19:b8:28:dd:c7:ad:22:71:17:e7:4e:96: 00:11:d3:c3:98:f8:1a:48:21:6e:f2:72:5f:2e:a8: 66:4b:20:eb:0f:94:9d:33:2d:72:f4:f4:71:53:2f: c6:df:29:4a:0f:e2:8d:41:9a:67:ba:dd:e3:ef:cf: 49:7c:4b:12:1a:f8:fa:77:97:c2:8f:12:c3:ea:46: 86:f9:c8:fd:c5:31:32:bf:1e:b9:c0:28:dd:ba:32: 53:96:87:c9:71:5f:5e:e9:bc:79:1d:72:de:af:d2: 55:f1:9c:c3:34:00:80:41:4a:8d:91:e3:c1:07:8d: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9D:25:AF:47:6B:B5:F9:04:17:01:EC:1E:09:30:FB:CC:FF:73:8A X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ed:f2:96:17:bb:f7:c4:fa:f8:f1:c6:8a:c6:23:99:dc:dd: bc:4f:10:c4:45:ee:3c:94:3c:4a:37:a9:dd:82:bf:ac:ec:bb: c5:19:ae:65:7d:89:5e:ac:5e:97:4a:2d:5d:65:5a:0e:f2:05: 27:5c:fa:04:89:48:5e:c9:5f:f2:2a:4b:16:c0:2d:f1:45:46: 80:ac:28:52:61:cd:fe:f1:dc:85:6b:3c:5c:d4:ec:64:62:d5: bd:87:01:e3:e3:b3:ef:61:3b:05:e8:15:44:84:39:67:d5:f3: c8:20:5e:d0:02:5e:a0:60:e7:2f:04:9e:60:69:c0:26:52:c4: a7:a9:99:d7:c8:c6:9d:67:85:90:5d:b2:44:b9:c8:7c:c8:4f: c9:8b:bd:ee:83:98:1e:7e:8d:86:91:29:d5:71:f3:df:f8:14: 9b:15:fd:ad:4b:86:59:ef:94:ff:43:0e:66:a5:39:75:87:55: 2a:59:99:d6:13:8d:a7:d5:62:f4:0a:18:b8:3f:ac:e1:ad:f1: 01:04:dd:c0:fb:3d:cf:9a:e9:a0:db:a9:3b:69:96:0b:b6:d0: 1f:ff:5d:e5:f9:39:53:1e:ba:c5:a0:f3:ec:6b:c5:79:15:73: 52:42:58:88:4e:a2:e0:4a:a9:e3:0c:12:f7:36:18:bd:34:0c: e1:34:3c:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemJQx/iu+3EXlzUf7C+9Ri/hyLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNTA3MjIyMTA2MjVaFw0yNTA3MjYwODU5MjVaMDMxMTAvBgNV BAMTKERDOUQyNUFGNDc2QkI1RjkwNDE3MDFFQzFFMDkzMEZCQ0NGRjczOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64Y0tzASL3H2JjpwEpsr0u9k+ 82XaOSGTlAj1yi+EIBu29ifshyg/ClCmsmU7cPJMgAy4q1gfJo4clm/mrMlYXXzq bOJfDaiY8r5R4ngWeGYNTzMtuHuwDGt4gMLaCchHANcd0nkeRXNsiSGV8HZuYlaC DMZ+t/969B0fT/JSaeQBs9mxTIL0axm4KN3HrSJxF+dOlgAR08OY+BpIIW7ycl8u qGZLIOsPlJ0zLXL09HFTL8bfKUoP4o1Bmme63ePvz0l8SxIa+Pp3l8KPEsPqRob5 yP3FMTK/HrnAKN26MlOWh8lxX17pvHkdct6v0lXxnMM0AIBBSo2R48EHjYvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3J0lr0drtfkEFwHsHgkw+8z/c4owHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzt8pYXu/fE+vjxxorGI5nc3bxPEMRF7jyU PEo3qd2Cv6zsu8UZrmV9iV6sXpdKLV1lWg7yBSdc+gSJSF7JX/IqSxbALfFFRoCs KFJhzf7x3IVrPFzU7GRi1b2HAePjs+9hOwXoFUSEOWfV88ggXtACXqBg5y8EnmBp wCZSxKepmdfIxp1nhZBdskS5yHzIT8mLve6DmB5+jYaRKdVx89/4FJsV/a1Lhlnv lP9DDmalOXWHVSpZmdYTjafVYvQKGLg/rOGt8QEE3cD7Pc+a6aDbqTtplgu20B// XeX5OVMeusWg8+xrxXkVc1JCWIhOouBKqeMMEvc2GL00DOE0PK4= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:09 2025 by rpki-client