$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: ujuU1VndcKbTnoDsBur9wz2V8SphS9C29KGup4RwHyc= Subject key identifier: AD:95:5E:10:63:7B:B1:EA:17:9F:90:F2:FE:55:52:39:79:82:82:54 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 5646A1258479A2D7A6C03E123E8AFA4926A42734 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 0183 Signing time: Sun 20 Jul 2025 06:20:43 +0000 Manifest this update: Sun 20 Jul 2025 06:15:43 +0000 Manifest next update: Wed 23 Jul 2025 09:07:43 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: TyP6V6+ztqqE9mwqF+76ObG+ApKisDGU2oEDYSVC7jQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:46:a1:25:84:79:a2:d7:a6:c0:3e:12:3e:8a:fa:49:26:a4:27:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Jul 20 06:15:43 2025 GMT Not After : Jul 23 09:07:43 2025 GMT Subject: CN=AD955E10637BB1EA179F90F2FE55523979828254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:3c:82:cd:69:45:e0:d1:11:43:c7:cb:57: c7:95:98:3c:93:65:d8:5c:be:27:77:2c:73:46:b5: 14:19:f7:ca:3b:c3:79:0e:ad:ce:27:0d:d5:3f:af: 02:fb:d1:23:35:91:e9:17:24:9c:cd:e7:d8:f1:34: 49:5c:b8:7e:1b:52:a5:47:70:28:47:b5:b6:95:8c: b7:f4:35:b2:f5:3c:ff:52:8e:ba:ae:07:e5:f3:95: a9:ac:b1:98:a9:18:d8:59:aa:d4:1a:bc:d0:93:ed: da:98:22:b8:68:a7:e4:ff:d1:47:46:64:cd:89:ac: cb:c7:e1:91:86:fe:fc:3a:e7:26:f2:e2:4c:b1:90: a2:bb:ec:fa:2a:ae:43:08:54:6a:2f:14:d4:5f:29: 9b:70:d2:c2:5e:6d:8b:ae:48:7a:c2:6a:e0:f5:f1: b6:f3:aa:41:06:81:16:0f:cd:80:09:a6:64:61:89: e0:01:8d:74:f8:19:d5:55:17:10:cc:32:9b:41:2f: af:d8:cd:2d:bf:2e:47:89:83:78:0c:31:0c:b1:3c: 88:c3:d4:79:2a:c5:5b:6a:29:7c:1d:25:9f:72:a3: 88:69:91:e9:ca:3f:b3:d2:4f:e5:dd:51:43:1c:af: cc:79:58:2b:30:91:f8:ae:3c:a5:9d:a6:af:78:ba: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:95:5E:10:63:7B:B1:EA:17:9F:90:F2:FE:55:52:39:79:82:82:54 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:02:df:a5:fe:9b:6c:59:03:97:53:7c:17:81:5c:54:ac:52: 1a:07:1c:93:29:0d:9f:a9:25:fb:44:f8:24:93:fd:83:52:92: 38:18:46:79:08:ec:91:28:fc:da:09:2d:89:6f:b2:18:1d:d7: f7:50:06:db:87:7c:f8:f5:36:4b:11:d9:77:72:03:3c:d1:0b: 2e:12:b2:15:55:af:32:8d:27:47:2c:e6:0b:bb:98:1a:1f:8c: 34:05:b3:72:ba:34:89:61:19:30:88:5a:ee:11:7e:8e:32:cf: 1f:cd:e3:cd:b9:e8:4f:e9:31:80:1e:d6:6e:f1:dd:20:cb:28: 32:3e:da:e3:03:c8:e7:86:ed:bf:c2:ca:1b:2c:82:f5:19:a5: c5:4c:e4:ca:95:08:83:8f:55:63:c5:55:aa:16:08:5a:14:ca: 9b:2a:69:2f:71:40:2e:ee:b3:fe:fa:af:14:3b:c3:74:cc:55: 4d:c6:46:8a:d4:28:73:87:a2:c5:32:08:b6:ef:27:f0:b2:3d: 4d:d7:bf:7e:11:83:1c:98:a4:4c:c0:50:ce:ad:78:b6:e1:ff: 57:0e:fc:01:f7:d8:bc:4b:db:28:30:ea:8d:ba:dd:84:6d:d9: 57:f0:b9:38:98:15:43:1f:ec:70:1a:70:ab:aa:1d:04:c6:71: 5f:ae:42:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkahJYR5otemwD4SPor6SSakJzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA3MjAwNjE1NDNaFw0yNTA3MjMwOTA3NDNaMDMxMTAvBgNV BAMTKEFEOTU1RTEwNjM3QkIxRUExNzlGOTBGMkZFNTU1MjM5Nzk4MjgyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5zyCzWlF4NERQ8fLV8eVmDyT Zdhcvid3LHNGtRQZ98o7w3kOrc4nDdU/rwL70SM1kekXJJzN59jxNElcuH4bUqVH cChHtbaVjLf0NbL1PP9SjrquB+XzlamssZipGNhZqtQavNCT7dqYIrhop+T/0UdG ZM2JrMvH4ZGG/vw65yby4kyxkKK77PoqrkMIVGovFNRfKZtw0sJebYuuSHrCauD1 8bbzqkEGgRYPzYAJpmRhieABjXT4GdVVFxDMMptBL6/YzS2/LkeJg3gMMQyxPIjD 1HkqxVtqKXwdJZ9yo4hpkenKP7PST+XdUUMcr8x5WCswkfiuPKWdpq94uvTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZVeEGN7seoXn5Dy/lVSOXmCglQwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQC36X+m2xZA5dTfBeBXFSsUhoHHJMpDZ+p JftE+CST/YNSkjgYRnkI7JEo/NoJLYlvshgd1/dQBtuHfPj1NksR2XdyAzzRCy4S shVVrzKNJ0cs5gu7mBofjDQFs3K6NIlhGTCIWu4Rfo4yzx/N48256E/pMYAe1m7x 3SDLKDI+2uMDyOeG7b/CyhssgvUZpcVM5MqVCIOPVWPFVaoWCFoUypsqaS9xQC7u s/76rxQ7w3TMVU3GRorUKHOHosUyCLbvJ/CyPU3Xv34RgxyYpEzAUM6teLbh/1cO /AH32LxL2ygw6o263YRt2VfwuTiYFUMf7HAacKuqHQTGcV+uQnw= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:20 2025 by rpki-client