$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: vIaYKdTJ4AO3iAuW/y2PQz3+/kg5zebDsH9TQsVoPkk= Subject key identifier: 14:C6:18:40:2B:9E:9D:62:8D:1B:09:82:85:E6:B6:9D:82:A4:09:BC Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 53D61CD6B00DF840930C333B8B4E3DF17AA659B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 016C Signing time: Mon 02 Jun 2025 08:20:43 +0000 Manifest this update: Mon 02 Jun 2025 08:15:43 +0000 Manifest next update: Thu 05 Jun 2025 10:46:43 +0000 Files and hashes: 1: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: AzlMFbzrHGcEG4v19yHIw2cVpPbbaGWfk/zoDkydCtA=) 2: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: 3M+qehQhPJtRx+AWVv45lLS8rU8qsKaeaYio/75TNPk=) 3: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: t5NTEbeMuissxOfsDt/V2+uHHFZA+PpBqFv0kweNJzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 10:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d6:1c:d6:b0:0d:f8:40:93:0c:33:3b:8b:4e:3d:f1:7a:a6:59:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Jun 2 08:15:43 2025 GMT Not After : Jun 5 10:46:43 2025 GMT Subject: CN=14C618402B9E9D628D1B098285E6B69D82A409BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:24:5b:48:72:8f:9a:57:31:8f:63:03:90: a9:db:ac:15:58:af:b4:54:62:27:b8:1a:78:ea:17: 2e:da:42:79:5e:ef:e4:6c:70:8e:10:4e:ba:61:96: fc:b6:60:2e:a6:fd:b2:4a:2c:85:c4:74:7e:f6:6c: 8a:b1:69:9c:b6:7c:5f:d0:8f:d8:7d:66:e6:d1:84: b1:67:0a:e8:fe:a9:9d:9f:2d:bc:1a:18:46:f2:28: d8:bc:69:33:e8:c3:6a:55:a7:9f:74:96:fa:ad:92: 5d:eb:85:fe:55:d9:21:d0:dc:52:1a:69:3a:77:cb: 6c:47:3a:5a:49:66:5a:0f:74:ff:7a:50:e7:6a:2b: d2:84:78:39:6a:73:f4:e4:1e:e2:64:7c:f3:cb:1c: 38:6c:f3:b4:4f:75:d5:da:5d:a7:d0:53:e1:61:10: 08:2d:f0:63:7d:3a:ad:af:fa:f7:3d:27:23:1d:2c: 96:32:7f:00:b8:e4:b5:06:02:09:9b:fc:67:6a:35: b3:1c:c9:71:69:49:cf:b6:43:1c:68:97:c3:65:ca: 9f:39:67:a2:6d:69:05:25:16:0f:c3:8c:81:d8:e6: 78:32:a7:31:a8:aa:46:87:c7:6f:f2:d3:65:b8:8f: 4e:d3:67:a2:ea:23:c1:94:31:70:25:36:2a:c8:1d: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C6:18:40:2B:9E:9D:62:8D:1B:09:82:85:E6:B6:9D:82:A4:09:BC X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c1:b8:ae:da:8c:68:1a:fd:e6:44:f9:3f:29:69:8c:b8:8e: 1a:20:f8:f4:64:f6:ec:46:09:d8:6c:4b:b6:d2:6b:ab:ff:8e: 44:3e:36:7e:57:5e:42:93:af:44:f5:6c:89:20:b2:dc:7c:65: 33:59:08:0f:13:d8:9d:0c:54:c7:6d:3a:a3:7c:d2:fd:93:42: 0b:10:83:6b:7c:bd:f4:30:03:0d:a1:36:48:74:00:3c:87:10: 8e:4e:9a:7c:35:19:4f:07:0d:e8:50:b4:4b:c0:2d:05:04:76: a6:98:f3:2d:18:40:01:7d:89:32:0f:ed:b0:3b:48:ba:e7:88: 11:07:45:2f:c9:89:d7:ea:98:f8:0b:90:4f:42:50:56:bd:d0: 35:84:f0:96:78:26:0b:ab:57:6c:1a:ac:45:66:4f:2a:ab:b4: a3:72:6e:3f:1c:0f:12:f6:82:b7:08:36:ee:df:81:52:67:1e: c3:cc:77:34:af:ca:fd:7e:07:ed:52:2e:7f:58:49:a5:cd:80: fc:25:a5:59:2a:31:0d:21:d8:83:93:93:4c:bb:57:b0:7f:b1: 93:da:53:f9:aa:6a:43:19:0f:1e:2f:e0:46:b9:6b:71:b8:e5: 90:51:e3:3c:52:da:5c:45:86:b7:43:44:30:8f:8a:f4:dc:e3: cd:43:21:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9Yc1rAN+ECTDDM7i0498XqmWbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA2MDIwODE1NDNaFw0yNTA2MDUxMDQ2NDNaMDMxMTAvBgNV BAMTKDE0QzYxODQwMkI5RTlENjI4RDFCMDk4Mjg1RTZCNjlEODJBNDA5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFSRbSHKPmlcxj2MDkKnbrBVY r7RUYie4GnjqFy7aQnle7+RscI4QTrphlvy2YC6m/bJKLIXEdH72bIqxaZy2fF/Q j9h9ZubRhLFnCuj+qZ2fLbwaGEbyKNi8aTPow2pVp590lvqtkl3rhf5V2SHQ3FIa aTp3y2xHOlpJZloPdP96UOdqK9KEeDlqc/TkHuJkfPPLHDhs87RPddXaXafQU+Fh EAgt8GN9Oq2v+vc9JyMdLJYyfwC45LUGAgmb/GdqNbMcyXFpSc+2Qxxol8Nlyp85 Z6JtaQUlFg/DjIHY5ngypzGoqkaHx2/y02W4j07TZ6LqI8GUMXAlNirIHUilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFMYYQCuenWKNGwmChea2nYKkCbwwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHBuK7ajGga/eZE+T8paYy4jhog+PRk9uxG CdhsS7bSa6v/jkQ+Nn5XXkKTr0T1bIkgstx8ZTNZCA8T2J0MVMdtOqN80v2TQgsQ g2t8vfQwAw2hNkh0ADyHEI5Omnw1GU8HDehQtEvALQUEdqaY8y0YQAF9iTIP7bA7 SLrniBEHRS/JidfqmPgLkE9CUFa90DWE8JZ4JgurV2warEVmTyqrtKNybj8cDxL2 grcINu7fgVJnHsPMdzSvyv1+B+1SLn9YSaXNgPwlpVkqMQ0h2IOTk0y7V7B/sZPa U/mqakMZDx4v4Ea5a3G45ZBR4zxS2lxFhrdDRDCPivTc481DIes= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:49 2025 by rpki-client