$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft File: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft (raw, json) Hash identifier: mLvPYK3Ys2CVZDeFq9nc09G77WQtBTP6RtqRVM+xd7M= Subject key identifier: 6C:36:30:A5:34:AE:C0:0E:C4:8C:3B:77:D0:23:72:EA:38:31:BC:F6 Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3 Certificate issuer: /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3 Certificate serial: 13B205B633BD9D49F050DB34F70C8BE88C84D4F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft Manifest number: 0236 Signing time: Fri 06 Jun 2025 18:52:21 +0000 Manifest this update: Fri 06 Jun 2025 18:47:21 +0000 Manifest next update: Tue 10 Jun 2025 05:53:21 +0000 Files and hashes: 1: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 1AXu9VMwS+8knSVXl2hI8iHOcYa+VjnkUxjjL7VCI30=) 2: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: Ai97/AeZ67d5F3AYWobNbu9wLgxWIRH2a6eXmHZgojQ=) 3: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl (hash: KpV9pNWI2/18Mib+kuUZJjewMvzenqZOf/fTVUXRGxU=) 4: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: kwL1JREwxH10sgLMYdlWUdKS0D8gYxJYzVh+9DEMKo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b2:05:b6:33:bd:9d:49:f0:50:db:34:f7:0c:8b:e8:8c:84:d4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3 Validity Not Before: Jun 6 18:47:21 2025 GMT Not After : Jun 10 05:53:21 2025 GMT Subject: CN=6C3630A534AEC00EC48C3B77D02372EA3831BCF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:6a:71:45:65:b5:5c:36:2e:5b:36:4f:09: 59:35:db:8e:c2:14:55:d6:88:0f:80:bd:89:22:a5: f9:6a:90:f9:54:82:f4:71:d4:55:13:e2:b4:a4:74: 87:3f:01:27:a2:00:85:61:9e:75:11:1a:9c:15:0f: 6e:bf:3b:80:a8:d8:32:a8:42:47:a3:6c:b2:f7:36: 85:88:7d:30:67:ac:37:27:d5:ec:4e:e0:3e:a2:29: a7:e7:ed:4a:c2:20:ad:e7:5c:88:92:11:f9:a1:48: 24:78:9b:9e:fb:7e:29:78:58:e4:c7:f0:ee:1d:09: b2:32:7b:9c:5c:8c:3c:92:52:e5:0b:26:18:5b:6d: 68:20:e6:4b:26:a3:b7:46:78:45:70:ef:a5:db:f3: 1d:8d:66:c0:76:0c:6c:4b:11:23:22:af:40:7c:5d: 32:bc:06:91:3e:f4:b2:cf:27:2e:8f:e1:3e:01:d5: 5c:c5:64:ff:a6:52:ca:8c:6f:7f:2b:c0:6d:b2:26: 67:24:72:87:27:42:3a:e6:dc:5f:68:e3:34:dc:c5: 3a:f7:2b:b9:bc:5d:69:0d:ab:75:0b:4f:f9:ed:57: cf:a5:7f:17:62:5e:07:e3:b5:6d:d3:7b:6b:dc:13: e9:15:7b:9b:ea:90:a3:4f:b3:26:d5:8b:cb:e0:c8: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:36:30:A5:34:AE:C0:0E:C4:8C:3B:77:D0:23:72:EA:38:31:BC:F6 X509v3 Authority Key Identifier: keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4e:de:0b:b0:99:8a:5e:c9:be:97:85:fe:10:cc:ac:f0:b9: fb:9c:b8:80:33:b5:79:aa:7a:63:31:b1:b6:2d:43:c3:8f:5d: a5:68:07:0e:0c:8c:ec:bb:e9:8c:55:ac:ca:09:8c:6d:19:f0: f9:3f:5f:c3:b8:3b:c7:0c:51:79:7c:7d:ed:98:35:24:84:64: d6:2c:e6:09:90:7a:2b:58:03:0d:11:10:dd:73:13:fe:5b:f3: 0d:01:2f:8e:1e:ed:25:00:4b:0e:bc:8a:b0:ee:f9:53:c6:5c: 4a:95:e3:4d:3f:29:b6:3d:5a:2b:62:b5:75:58:fa:16:61:4c: 56:76:a3:2f:4d:ef:37:a0:2e:8a:fe:11:85:d2:42:a2:9f:d1: 86:dd:3e:16:0e:00:eb:bc:2b:73:20:e9:f4:cf:82:9c:41:52: a3:ae:7e:a5:7e:5c:f5:dc:7c:f9:93:89:1b:59:f6:cb:f0:c7: 75:c0:d9:8e:2a:2c:25:e5:45:63:0f:53:51:f4:c1:e4:a8:27: 59:73:7a:dc:b1:56:70:4b:18:47:40:b1:0b:0a:31:2a:6c:aa: 26:28:9b:9e:35:e4:d2:4a:59:75:d5:93:5c:5f:8f:8f:b9:35: 1f:62:48:54:94:d0:18:8c:a0:98:a8:b6:c0:63:d2:06:8a:dc: af:83:9d:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7IFtjO9nUnwUNs09wyL6IyE1PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0 NzBCNDFGMzAeFw0yNTA2MDYxODQ3MjFaFw0yNTA2MTAwNTUzMjFaMDMxMTAvBgNV BAMTKDZDMzYzMEE1MzRBRUMwMEVDNDhDM0I3N0QwMjM3MkVBMzgzMUJDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcWpxRWW1XDYuWzZPCVk1247C FFXWiA+AvYkipflqkPlUgvRx1FUT4rSkdIc/ASeiAIVhnnURGpwVD26/O4Co2DKo QkejbLL3NoWIfTBnrDcn1exO4D6iKafn7UrCIK3nXIiSEfmhSCR4m577fil4WOTH 8O4dCbIye5xcjDySUuULJhhbbWgg5ksmo7dGeEVw76Xb8x2NZsB2DGxLESMir0B8 XTK8BpE+9LLPJy6P4T4B1VzFZP+mUsqMb38rwG2yJmckcocnQjrm3F9o4zTcxTr3 K7m8XWkNq3ULT/ntV8+lfxdiXgfjtW3Te2vcE+kVe5vqkKNPsybVi8vgyFslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbDYwpTSuwA7EjDt30CNy6jgxvPYwHwYDVR0j BBgwFoAUQMBVPJCX7EpPI+7cBSBbxUcLQfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGNjNjllOS1lZjc0LTRiODEtOTFmNC03YmZkZjkzZjdiYWEvMC80MEMwNTUzQzkw OTdFQzRBNEYyM0VFREMwNTIwNUJDNTQ3MEI0MUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0NzBC NDFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVC QzU0NzBCNDFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5O3guwmYpeyb6Xhf4QzKzwufucuIAztXmq emMxsbYtQ8OPXaVoBw4MjOy76YxVrMoJjG0Z8Pk/X8O4O8cMUXl8fe2YNSSEZNYs 5gmQeitYAw0REN1zE/5b8w0BL44e7SUASw68irDu+VPGXEqV400/KbY9WititXVY +hZhTFZ2oy9N7zegLor+EYXSQqKf0YbdPhYOAOu8K3Mg6fTPgpxBUqOufqV+XPXc fPmTiRtZ9svwx3XA2Y4qLCXlRWMPU1H0weSoJ1lzetyxVnBLGEdAsQsKMSpsqiYo m5415NJKWXXVk1xfj4+5NR9iSFSU0BiMoJiotsBj0gaK3K+Dnbo= -----END CERTIFICATE-----Generated at Sun Jun 8 11:09:53 2025 by rpki-client