$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: d7ZmvCEk2tX3ISIF7vT0FjwJQNvOxAZX32fbztoRoB4= Subject key identifier: 86:BB:80:26:98:AE:01:B4:60:0F:71:95:FD:B6:F7:06:37:9D:A3:B3 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 483A2F7E473D0C66206417EF88B1E4394E3A3D97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 02DC Signing time: Thu 05 Jun 2025 09:50:49 +0000 Manifest this update: Thu 05 Jun 2025 09:45:49 +0000 Manifest next update: Sun 08 Jun 2025 21:30:49 +0000 Files and hashes: 1: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: yJ1jVo+eqDscdPVCalAKj9zsDaCklpvu4KERifyDsCc=) 2: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: kQvwhxRIr0c9iOlMTcfmOkNMf8BdxcPNv83PJwJ+47k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3a:2f:7e:47:3d:0c:66:20:64:17:ef:88:b1:e4:39:4e:3a:3d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Jun 5 09:45:49 2025 GMT Not After : Jun 8 21:30:49 2025 GMT Subject: CN=86BB802698AE01B4600F7195FDB6F706379DA3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7f:84:69:5f:1b:22:2b:20:96:8c:b5:74:c8: 84:91:e5:aa:76:71:e7:98:13:8d:0a:8d:68:7c:67: c7:55:53:77:cd:69:4b:b5:e1:12:f2:10:3a:e8:d3: 44:17:fd:7b:e0:9a:15:fb:b4:07:6a:fe:ae:c4:d3: 9c:ee:4f:d0:6f:f3:ba:27:95:cd:59:b5:05:dd:3d: dd:56:29:0e:73:bd:89:e8:b8:1b:7c:d7:66:c4:1f: 23:03:e6:71:ef:38:f4:97:57:56:cd:bd:88:e9:4d: ee:03:3a:1d:c9:64:50:51:93:a0:3b:a2:49:b7:7f: 3f:3b:6a:a1:6f:6b:92:e1:35:e3:63:ec:b6:e6:5a: 3b:25:fd:e5:ac:26:05:0f:2b:42:6a:aa:b1:35:20: f0:80:b0:cd:df:95:98:51:26:94:37:0a:23:8b:0a: 45:15:27:5d:21:24:94:cb:ff:59:55:50:af:f7:c8: e1:24:84:e0:0f:7f:89:1e:cc:d6:a9:47:59:69:89: 6a:d1:56:50:e9:a3:6a:64:56:14:d5:18:93:07:8b: ac:9f:e3:b1:e2:3c:51:f1:fa:a9:53:5e:10:aa:fc: f9:a2:2d:98:c9:55:99:c9:eb:3f:a9:ea:18:30:37: a7:10:6e:af:d8:ba:66:f4:8b:fa:1a:4c:ed:1f:6f: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BB:80:26:98:AE:01:B4:60:0F:71:95:FD:B6:F7:06:37:9D:A3:B3 X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:13:e8:3d:8a:bb:61:bd:2e:9c:48:ae:eb:4a:bc:72:e6:67: 8b:36:f1:46:86:d7:95:0b:2f:af:02:58:40:c8:d1:32:16:d0: a0:27:ea:a9:23:88:03:1f:02:ca:28:e2:43:fe:6a:8a:98:89: ec:b4:ac:07:41:5c:94:0c:bd:7e:f5:c5:79:80:9e:ef:3c:4e: ba:d9:b2:7b:4e:d6:69:24:95:a3:74:12:be:8f:4b:4c:07:e3: fd:64:0d:07:a4:03:8b:51:b1:b1:65:e7:01:26:13:64:d2:b1: 0b:b6:03:45:03:c2:5e:b8:55:4e:4e:85:8b:2a:8f:17:c8:09: f0:e8:2b:78:87:4e:55:8a:9d:70:c6:46:01:07:86:fe:5c:da: d4:6e:f1:e8:e4:a1:9a:6e:47:e2:de:c5:a5:91:15:5d:c5:61: 07:00:3c:55:28:ee:75:e0:79:c1:1f:de:0d:65:7b:ab:7b:86: 29:40:24:72:5e:d3:c7:9f:14:20:cc:4d:8b:4a:93:19:8f:5d: af:19:52:ff:9b:bd:b3:1c:e4:2b:26:e3:ce:57:86:2f:62:35: bb:09:a0:3b:1d:4a:33:5f:2f:0d:c5:be:e4:14:7c:3c:96:69: a1:00:38:6c:c0:59:4f:81:80:17:41:8c:eb:41:72:55:e2:da: 27:ae:27:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDovfkc9DGYgZBfviLHkOU46PZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTA2MDUwOTQ1NDlaFw0yNTA2MDgyMTMwNDlaMDMxMTAvBgNV BAMTKDg2QkI4MDI2OThBRTAxQjQ2MDBGNzE5NUZEQjZGNzA2Mzc5REEzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDef4RpXxsiKyCWjLV0yISR5ap2 ceeYE40KjWh8Z8dVU3fNaUu14RLyEDro00QX/XvgmhX7tAdq/q7E05zuT9Bv87on lc1ZtQXdPd1WKQ5zvYnouBt812bEHyMD5nHvOPSXV1bNvYjpTe4DOh3JZFBRk6A7 okm3fz87aqFva5LhNeNj7LbmWjsl/eWsJgUPK0JqqrE1IPCAsM3flZhRJpQ3CiOL CkUVJ10hJJTL/1lVUK/3yOEkhOAPf4kezNapR1lpiWrRVlDpo2pkVhTVGJMHi6yf 47HiPFHx+qlTXhCq/PmiLZjJVZnJ6z+p6hgwN6cQbq/Yumb0i/oaTO0fb4sxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhruAJpiuAbRgD3GV/bb3Bjedo7MwHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYT6D2Ku2G9LpxIrutKvHLmZ4s28UaG15UL L68CWEDI0TIW0KAn6qkjiAMfAsoo4kP+aoqYiey0rAdBXJQMvX71xXmAnu88TrrZ sntO1mkklaN0Er6PS0wH4/1kDQekA4tRsbFl5wEmE2TSsQu2A0UDwl64VU5OhYsq jxfICfDoK3iHTlWKnXDGRgEHhv5c2tRu8ejkoZpuR+LexaWRFV3FYQcAPFUo7nXg ecEf3g1le6t7hilAJHJe08efFCDMTYtKkxmPXa8ZUv+bvbMc5Csm485Xhi9iNbsJ oDsdSjNfLw3FvuQUfDyWaaEAOGzAWU+BgBdBjOtBclXi2ieuJy0= -----END CERTIFICATE-----Generated at Thu Jun 5 19:55:27 2025 by rpki-client