$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: 40RbaqDmHJ7C9RhCDHVyUDjshJOTwcplmSzntHbHzdU= Subject key identifier: FB:70:DB:3D:18:44:9F:B4:35:97:D7:B2:2D:A4:06:5F:AA:C2:CE:C3 Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 78A2E4FDD949F07B69784A588405DE976B268F24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: AD Signing time: Sun 31 Aug 2025 05:21:10 +0000 Manifest this update: Sun 31 Aug 2025 05:16:10 +0000 Manifest next update: Wed 03 Sep 2025 15:19:10 +0000 Files and hashes: 1: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: DVfc1eVlQXpGeEajstYVE0Bfl7MN0o9teNg0/J3xnrI=) 2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a2:e4:fd:d9:49:f0:7b:69:78:4a:58:84:05:de:97:6b:26:8f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Aug 31 05:16:10 2025 GMT Not After : Sep 3 15:19:10 2025 GMT Subject: CN=FB70DB3D18449FB43597D7B22DA4065FAAC2CEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:8d:43:e7:5e:8b:86:e7:18:6a:a9:f3:f2: ea:a0:03:a4:75:08:aa:18:02:f3:47:8c:e7:e5:35: 87:9d:63:95:9d:d6:6b:c6:b6:b3:c6:23:2a:df:0c: 25:5c:8b:d4:a4:e7:3c:57:a2:3f:01:8f:db:46:6f: 9a:71:0f:98:c0:02:56:ae:46:2e:cd:8e:c7:61:eb: af:18:94:32:68:01:99:ab:31:aa:35:5c:c0:f5:a6: b5:13:12:7d:3d:f5:94:42:7c:0a:7d:7e:c8:45:84: f3:1b:bf:b5:97:65:4b:25:02:df:e7:77:71:29:70: 4a:e6:27:4f:31:46:dd:2f:77:03:83:76:2d:33:59: 48:fc:12:49:fa:4d:60:fc:33:de:22:8b:8d:3e:7d: c3:86:f6:b1:11:36:2a:57:28:de:91:16:7f:6d:22: 58:16:c1:33:88:d0:d2:ab:91:68:4e:9d:51:45:c7: e8:2d:66:d9:9e:2a:f2:f2:ec:d1:fb:8c:ae:39:b7: f5:46:6b:f8:64:4c:0d:1f:21:5c:ed:ad:c0:d8:f1: 57:36:53:e9:59:02:da:e5:58:93:a4:4f:cc:28:97: 36:7a:0a:43:15:68:68:93:af:98:fd:b1:bb:1e:44: 13:78:f0:01:17:d4:8c:02:8d:7a:b5:32:7a:9a:fb: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:70:DB:3D:18:44:9F:B4:35:97:D7:B2:2D:A4:06:5F:AA:C2:CE:C3 X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a4:f1:2b:b1:94:89:be:cf:6c:7a:04:f4:a4:19:b3:59:02: 94:02:7c:2b:2e:69:2f:c9:7f:81:2a:bc:13:55:06:66:ad:b1: 35:81:58:93:a3:6e:32:30:d7:cd:d6:f2:77:37:6b:43:3c:a3: 5e:63:49:d2:12:ea:6e:7f:61:40:7b:1e:b9:6f:e7:67:2d:de: dc:48:2b:ec:19:ae:28:c7:5a:1a:97:3e:41:22:57:1f:91:19: ca:b4:e9:f3:da:48:19:3e:3a:cd:8b:f4:57:28:74:fe:29:3a: 75:8c:08:31:14:21:d5:76:b7:fb:b5:e4:97:8f:18:14:0a:b1: 55:d9:05:6d:28:da:f6:dd:55:22:61:30:f2:09:66:97:23:fe: df:71:ef:2b:a3:4f:1b:2e:9a:92:d8:e3:88:75:fc:59:1f:14: a0:c7:b0:48:49:6c:1c:0b:bd:60:47:6e:c5:0f:d1:de:c2:86: 11:c0:57:04:77:71:dd:b7:2d:0c:84:fa:43:83:e3:0d:7f:48: 23:5f:a2:32:12:44:29:ee:12:42:79:75:bd:67:7f:d8:1e:c5: 87:6a:4d:d6:c8:82:2b:ca:d1:3f:01:97:89:0c:53:b7:00:15: 32:a0:1b:38:c6:72:77:a4:53:29:18:ed:a7:6a:28:f6:af:40: e8:95:24:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKLk/dlJ8HtpeEpYhAXel2smjyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNTA4MzEwNTE2MTBaFw0yNTA5MDMxNTE5MTBaMDMxMTAvBgNV BAMTKEZCNzBEQjNEMTg0NDlGQjQzNTk3RDdCMjJEQTQwNjVGQUFDMkNFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAT41D516LhucYaqnz8uqgA6R1 CKoYAvNHjOflNYedY5Wd1mvGtrPGIyrfDCVci9Sk5zxXoj8Bj9tGb5pxD5jAAlau Ri7Njsdh668YlDJoAZmrMao1XMD1prUTEn099ZRCfAp9fshFhPMbv7WXZUslAt/n d3EpcErmJ08xRt0vdwODdi0zWUj8Ekn6TWD8M94ii40+fcOG9rERNipXKN6RFn9t IlgWwTOI0NKrkWhOnVFFx+gtZtmeKvLy7NH7jK45t/VGa/hkTA0fIVztrcDY8Vc2 U+lZAtrlWJOkT8wolzZ6CkMVaGiTr5j9sbseRBN48AEX1IwCjXq1Mnqa+7HFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+3DbPRhEn7Q1l9eyLaQGX6rCzsMwHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADak8SuxlIm+z2x6BPSkGbNZApQCfCsuaS/J f4EqvBNVBmatsTWBWJOjbjIw183W8nc3a0M8o15jSdIS6m5/YUB7Hrlv52ct3txI K+wZrijHWhqXPkEiVx+RGcq06fPaSBk+Os2L9FcodP4pOnWMCDEUIdV2t/u15JeP GBQKsVXZBW0o2vbdVSJhMPIJZpcj/t9x7yujTxsumpLY44h1/FkfFKDHsEhJbBwL vWBHbsUP0d7ChhHAVwR3cd23LQyE+kOD4w1/SCNfojISRCnuEkJ5db1nf9gexYdq TdbIgivK0T8Bl4kMU7cAFTKgGzjGcnekUykY7adqKPavQOiVJFk= -----END CERTIFICATE-----Generated at Sun Aug 31 16:26:54 2025 by rpki-client