$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json) Hash identifier: YhK9IzVjhEYb8MwKY8iHPp2tEhBZXo2582AbuBxAJqI= Subject key identifier: 45:D1:89:E0:FE:8E:98:FF:C1:A8:87:3C:01:F0:A0:D5:CE:D1:0C:9D Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 4BABD9873B36F4DB4C3DC64EC9D6048ED6CA662A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft Manifest number: 04D5 Signing time: Wed 17 Sep 2025 18:51:25 +0000 Manifest this update: Wed 17 Sep 2025 18:46:25 +0000 Manifest next update: Sun 21 Sep 2025 01:05:25 +0000 Files and hashes: 1: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: VWZBwU3RWnROUShcpW3L74G67TSj+wYP3BWSlSltpjo=) 2: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 34Zwk2rQxI6/8F/IkX/shAQb+olpsRnc3h6OinfJJ/w=) 3: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 778Q5HjUkZ/WVTVzYaqPWOxb/BdNeOK8Id+aBKl0ego=) 4: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: 6BdIfQFww/FfAR6TJI3SK8/ufYafMbVC4bZkm5rCckY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 01:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ab:d9:87:3b:36:f4:db:4c:3d:c6:4e:c9:d6:04:8e:d6:ca:66:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: Sep 17 18:46:25 2025 GMT Not After : Sep 21 01:05:25 2025 GMT Subject: CN=45D189E0FE8E98FFC1A8873C01F0A0D5CED10C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:37:02:f2:e9:53:54:55:ab:30:c3:c7:55:83: 9e:48:16:74:dd:32:ab:48:64:cd:a7:2c:b2:ed:b0: 6f:8a:12:2a:f9:b1:0f:37:76:45:c4:b6:74:b0:0e: c4:ec:fa:df:7e:20:c4:07:ca:4e:16:30:1b:b8:d8: 11:48:de:e0:fa:25:9e:ad:ec:a4:89:8e:b1:41:33: 6d:47:81:3b:90:c4:0e:b0:c7:d6:5a:68:50:02:9e: 7b:00:28:2f:09:c8:48:3e:6c:ce:70:6b:df:36:74: b1:43:c2:22:51:a3:99:53:5f:2c:82:5e:2a:43:2e: cf:b4:41:63:9c:48:a5:3f:98:05:78:03:ab:c0:5b: ba:1e:20:ac:1c:0f:ec:c1:87:b4:7b:79:95:ea:27: 4f:ba:00:ad:8f:0c:0e:83:30:fc:d0:2b:2c:9c:4f: ed:a8:ae:d1:b9:0a:81:c2:17:7f:6b:94:1d:cb:4a: 60:36:1b:77:e6:9e:f1:a0:0d:65:8c:25:c4:d3:77: 71:b8:38:ed:ee:e9:87:a7:34:e0:0c:49:9e:eb:5b: 3a:31:84:a2:72:6c:f6:05:fa:c9:45:2b:7f:fc:63: 06:ef:ce:df:1e:dd:b3:8b:dc:c3:a9:b6:db:da:e2: 9e:df:af:46:1d:16:83:bb:d6:cf:5c:46:6e:cb:55: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D1:89:E0:FE:8E:98:FF:C1:A8:87:3C:01:F0:A0:D5:CE:D1:0C:9D X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a8:c9:d9:6e:df:16:eb:30:dd:25:36:d5:d0:7a:52:e4:c7: 9c:7b:f1:23:42:e4:d6:26:0e:69:cc:71:3b:c7:27:6f:dd:d7: 55:2d:b2:69:80:88:f9:81:4d:ba:45:f9:22:a2:9a:bc:71:76: 31:56:c1:00:3c:72:6b:14:60:34:1c:51:77:e3:54:cd:9d:17: a1:ea:0e:8f:7d:af:17:f9:de:0b:e0:87:6a:4b:9b:ab:f1:3f: c2:79:06:1d:e5:7c:2d:af:1f:a6:6a:ab:ac:d9:e9:c5:12:0a: 67:72:66:8b:e8:ab:2c:e1:86:ba:56:41:3f:28:e5:e1:64:25: f2:de:d5:ad:33:91:08:1b:80:2a:c5:bd:ca:ab:99:b7:8a:4c: 60:59:87:29:a2:3a:28:4c:38:77:dd:0a:d2:78:96:fb:53:75: 5e:dd:28:55:1b:9a:ce:a6:13:2f:df:3b:01:93:e4:b5:88:9a: 7d:f9:29:d3:70:09:43:be:1b:2b:4d:40:e0:dd:53:42:04:0b: 55:cc:30:59:f7:ca:40:bc:bd:2c:20:06:fe:ab:de:9d:d3:c4: 36:28:a1:3b:76:ec:4b:d4:28:93:f9:8f:2a:3a:ee:91:a8:21: 39:92:65:e5:36:63:d0:53:ee:22:a3:57:a7:81:1d:f9:f1:d2: 10:7e:78:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6vZhzs29NtMPcZOydYEjtbKZiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNTA5MTcxODQ2MjVaFw0yNTA5MjEwMTA1MjVaMDMxMTAvBgNV BAMTKDQ1RDE4OUUwRkU4RTk4RkZDMUE4ODczQzAxRjBBMEQ1Q0VEMTBDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWNwLy6VNUVasww8dVg55IFnTd MqtIZM2nLLLtsG+KEir5sQ83dkXEtnSwDsTs+t9+IMQHyk4WMBu42BFI3uD6JZ6t 7KSJjrFBM21HgTuQxA6wx9ZaaFACnnsAKC8JyEg+bM5wa982dLFDwiJRo5lTXyyC XipDLs+0QWOcSKU/mAV4A6vAW7oeIKwcD+zBh7R7eZXqJ0+6AK2PDA6DMPzQKyyc T+2ortG5CoHCF39rlB3LSmA2G3fmnvGgDWWMJcTTd3G4OO3u6YenNOAMSZ7rWzox hKJybPYF+slFK3/8Ywbvzt8e3bOL3MOpttva4p7fr0YdFoO71s9cRm7LVfadAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURdGJ4P6OmP/BqIc8AfCg1c7RDJ0wHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuoydlu3xbrMN0lNtXQelLkx5x78SNC5NYm DmnMcTvHJ2/d11UtsmmAiPmBTbpF+SKimrxxdjFWwQA8cmsUYDQcUXfjVM2dF6Hq Do99rxf53gvgh2pLm6vxP8J5Bh3lfC2vH6Zqq6zZ6cUSCmdyZovoqyzhhrpWQT8o 5eFkJfLe1a0zkQgbgCrFvcqrmbeKTGBZhymiOihMOHfdCtJ4lvtTdV7dKFUbms6m Ey/fOwGT5LWImn35KdNwCUO+GytNQODdU0IEC1XMMFn3ykC8vSwgBv6r3p3TxDYo oTt27EvUKJP5jyo67pGoITmSZeU2Y9BT7iKjV6eBHfnx0hB+eNs= -----END CERTIFICATE-----Generated at Thu Sep 18 14:44:16 2025 by rpki-client