$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json) Hash identifier: MjIipJG5nSpy+zssKlUQ0G8qMq2TuCGX0QRCRcr433I= Subject key identifier: 27:BE:14:AF:A7:A4:0A:B0:70:3E:B1:4D:99:60:66:6B:D0:B5:18:4B Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 4A55B0E223871FFBD430E47FEF759E6F843DC9C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft Manifest number: 04A5 Signing time: Thu 05 Jun 2025 00:51:25 +0000 Manifest this update: Thu 05 Jun 2025 00:46:25 +0000 Manifest next update: Sun 08 Jun 2025 12:47:25 +0000 Files and hashes: 1: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: Fe1n4b4H/angn7E+D2fFKkyuPGc4MfcqM0jnxAAmG90=) 2: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: +kMIsYkkYBL9JgD87llrjtp6E+ZI80VFKUP+9fwyfhI=) 3: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 3G3cuIsUsC93A5VqDBrlhjA6pHEL2QIiEv1ZbgGfh7c=) 4: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: waFtA9Rs9fa9JmBcejLpW23akTf5m+TT3YHpTZiNW5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:55:b0:e2:23:87:1f:fb:d4:30:e4:7f:ef:75:9e:6f:84:3d:c9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: Jun 5 00:46:25 2025 GMT Not After : Jun 8 12:47:25 2025 GMT Subject: CN=27BE14AFA7A40AB0703EB14D9960666BD0B5184B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:e1:74:31:7e:7d:66:69:5c:66:78:6a:05: ba:4c:00:e0:cb:4d:f4:47:af:73:a8:a7:f4:3e:57: c6:0f:79:9c:af:ae:c1:ce:c6:ac:38:33:9a:d0:b2: bf:98:f5:85:f0:51:09:b2:84:4c:1c:d6:30:90:96: 12:a7:4f:8c:d3:62:8c:d5:fe:6d:d0:26:e9:b2:81: a3:c0:2b:b6:ac:50:32:ae:93:75:ae:81:1a:6a:a8: f5:ac:0b:5c:00:68:d5:64:de:6a:1a:e2:fb:da:56: 4d:e3:a2:85:29:60:3b:b6:1a:84:c7:f7:b4:fa:3a: 1b:fa:77:38:a5:6c:3a:b0:cf:5a:29:c6:2d:7c:f2: aa:fb:5c:01:44:1c:dc:7f:59:fa:e3:24:41:35:c9: 67:41:ae:1b:9c:ad:be:c6:1b:42:2e:3e:1a:58:20: 8a:f9:27:58:98:94:02:17:f9:7e:01:7b:15:68:d7: 47:92:7d:81:ec:e6:52:7e:70:7d:5e:25:06:e8:55: 74:ae:2e:ff:13:c5:93:8d:42:6d:bd:b2:8f:ed:0d: af:c0:7d:51:f6:33:fe:3a:3d:41:07:ac:ce:82:63: d3:71:7a:01:8c:16:a5:a5:d5:17:52:a4:fa:5b:8b: 8b:9d:fa:73:fc:ad:db:33:aa:3d:c2:34:85:13:2c: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BE:14:AF:A7:A4:0A:B0:70:3E:B1:4D:99:60:66:6B:D0:B5:18:4B X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:64:b6:86:80:fa:9a:f0:c3:3f:32:da:6c:c5:47:e4:00:c2: de:5b:fb:02:73:b9:99:7e:45:8e:93:37:42:a8:d8:d2:a0:31: 69:7e:4e:cc:85:31:d1:79:43:93:21:69:96:49:ad:84:c9:03: a5:86:52:41:72:7b:09:6d:da:40:c2:58:82:df:34:34:73:2f: 54:68:0c:6f:71:04:0f:e5:a4:35:4f:37:d9:de:00:fa:e2:84: 70:67:34:12:ee:dd:76:20:c1:91:31:e7:da:9d:90:e5:31:f3: 10:e1:02:ea:f3:03:a3:42:00:bc:18:32:c9:7c:cd:b2:b5:f2: 95:9f:17:95:3c:ef:6f:cd:52:f1:35:e8:f0:7f:8f:ac:28:be: cd:0b:2e:77:95:c8:3e:21:10:ac:4e:2c:50:e7:8a:65:ea:dc: 30:df:7a:48:b9:f8:8d:a7:65:50:1f:c9:d5:a2:41:b2:f5:13: 6a:ab:e9:cf:fe:31:f9:5a:52:23:7a:d4:a7:09:d1:de:81:f1: 38:0a:96:59:6e:ac:67:b4:56:b0:0d:64:53:8c:f8:c6:04:f5: 38:f9:5e:b7:2a:36:f6:a5:1a:1a:a3:75:25:af:27:ba:50:d1: 2a:98:58:2c:83:67:5a:94:b5:71:6a:5c:db:1f:8c:37:f0:de: 83:a2:b6:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlWw4iOHH/vUMOR/73Web4Q9yccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNTA2MDUwMDQ2MjVaFw0yNTA2MDgxMjQ3MjVaMDMxMTAvBgNV BAMTKDI3QkUxNEFGQTdBNDBBQjA3MDNFQjE0RDk5NjA2NjZCRDBCNTE4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2uF0MX59ZmlcZnhqBbpMAODL TfRHr3Oop/Q+V8YPeZyvrsHOxqw4M5rQsr+Y9YXwUQmyhEwc1jCQlhKnT4zTYozV /m3QJumygaPAK7asUDKuk3WugRpqqPWsC1wAaNVk3moa4vvaVk3jooUpYDu2GoTH 97T6Ohv6dzilbDqwz1opxi188qr7XAFEHNx/WfrjJEE1yWdBrhucrb7GG0IuPhpY IIr5J1iYlAIX+X4BexVo10eSfYHs5lJ+cH1eJQboVXSuLv8TxZONQm29so/tDa/A fVH2M/46PUEHrM6CY9NxegGMFqWl1RdSpPpbi4ud+nP8rdszqj3CNIUTLPvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ74Ur6ekCrBwPrFNmWBma9C1GEswHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdktoaA+prwwz8y2mzFR+QAwt5b+wJzuZl+ RY6TN0Ko2NKgMWl+TsyFMdF5Q5MhaZZJrYTJA6WGUkFyewlt2kDCWILfNDRzL1Ro DG9xBA/lpDVPN9neAPrihHBnNBLu3XYgwZEx59qdkOUx8xDhAurzA6NCALwYMsl8 zbK18pWfF5U872/NUvE16PB/j6wovs0LLneVyD4hEKxOLFDnimXq3DDfeki5+I2n ZVAfydWiQbL1E2qr6c/+MflaUiN61KcJ0d6B8TgKlllurGe0VrANZFOM+MYE9Tj5 XrcqNvalGhqjdSWvJ7pQ0SqYWCyDZ1qUtXFqXNsfjDfw3oOitpw= -----END CERTIFICATE-----Generated at Fri Jun 6 16:51:18 2025 by rpki-client