$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: jQXud5oqrqye+gUDP1JatMAUYUfYdCvb+0MGLOc+UK8= Subject key identifier: FB:14:C9:BC:12:0C:19:E1:BE:0C:D6:E2:1F:D5:C2:63:4D:29:7D:F6 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 7D4456B5557F6DC4A542C73AA0D2BDE9F810416E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 0199 Signing time: Sun 07 Sep 2025 11:40:44 +0000 Manifest this update: Sun 07 Sep 2025 11:35:44 +0000 Manifest next update: Wed 10 Sep 2025 17:58:44 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: saIEeqEWVd8YlQnKVnlPYQuOiaIK1BzLqx+9d+IqPjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:44:56:b5:55:7f:6d:c4:a5:42:c7:3a:a0:d2:bd:e9:f8:10:41:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Sep 7 11:35:44 2025 GMT Not After : Sep 10 17:58:44 2025 GMT Subject: CN=FB14C9BC120C19E1BE0CD6E21FD5C2634D297DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:60:82:91:3f:c6:e1:34:74:ff:b4:72:c9: cc:0c:b7:43:ad:46:6e:28:97:c0:88:ac:99:d0:a5: 9d:f7:75:6b:cd:41:12:d2:46:81:39:2d:78:2b:d3: 55:a7:51:6d:e7:39:46:ca:fc:73:a7:59:69:50:18: fd:02:ad:81:d7:6f:45:0d:3c:34:36:c6:0c:d5:fa: 6f:b0:cb:0d:65:cf:78:81:9a:8c:dc:a6:a6:46:49: 8b:7b:0d:01:50:40:db:9e:ed:b2:56:d8:fe:c7:58: d1:7e:2d:6c:85:27:1c:56:d9:0b:c7:64:b5:d3:70: b5:91:db:8b:09:14:6d:c0:35:11:5a:35:d4:be:ef: 8a:55:9b:d4:d4:99:30:74:fe:8a:3c:4d:76:3c:26: ac:aa:5f:27:b7:02:27:f0:10:3c:9d:bc:ec:0f:89: 5b:c9:4d:47:08:8b:94:4c:45:b0:cb:2a:ec:41:df: ee:71:73:a0:33:38:71:b9:17:09:de:aa:d8:7d:bd: 9b:98:93:85:c4:95:74:20:73:66:e7:f4:a9:2f:c8: 60:32:20:12:09:3e:56:37:ac:f1:53:50:99:a7:61: 0f:8a:57:56:e1:35:92:9d:82:5e:04:15:55:cf:05: c3:36:ef:e1:d5:07:92:33:17:28:80:f5:ea:0f:d5: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:14:C9:BC:12:0C:19:E1:BE:0C:D6:E2:1F:D5:C2:63:4D:29:7D:F6 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:39:60:af:18:0b:55:4c:ad:36:84:e4:e0:c0:1f:48:83:5f: 3a:df:f7:02:05:ff:bc:31:01:d6:14:04:e4:a0:f3:db:b5:1b: 4e:b9:a3:a9:8a:b3:39:71:a1:4e:52:46:eb:90:bc:92:0b:b5: d3:e9:ce:5e:5f:91:77:41:b7:39:58:44:1e:9f:03:80:86:74: 05:32:83:8c:5d:44:24:a6:88:0f:ce:eb:4e:71:06:5c:d8:1a: e6:12:8c:9f:48:85:9e:dd:86:76:c9:84:59:f3:07:4d:b4:b2: 5a:90:7b:d9:eb:5b:eb:0a:d6:96:c8:72:38:b4:aa:b3:c8:6b: 8a:48:70:9b:7a:aa:6a:95:31:7f:1b:d2:99:aa:46:8a:06:af: 19:0e:da:8f:75:75:dc:bb:2e:ad:18:c5:f3:47:74:d2:f7:1b: 18:eb:47:7d:bf:b6:7e:fb:ff:58:8d:26:22:67:57:49:fc:03: 9b:fb:a4:d4:49:d3:67:78:7f:67:04:d0:b8:17:4c:68:d0:fa: 43:a9:83:e8:ad:33:72:cc:10:06:76:43:e2:77:5d:c7:6b:dc: 7e:3f:f2:b8:7a:ef:43:c7:28:d5:0c:e8:04:b4:4c:62:dc:14: f3:9c:18:98:25:0d:94:17:c8:fe:80:49:76:64:d2:c2:07:2d: d8:8e:28:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfURWtVV/bcSlQsc6oNK96fgQQW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTA5MDcxMTM1NDRaFw0yNTA5MTAxNzU4NDRaMDMxMTAvBgNV BAMTKEZCMTRDOUJDMTIwQzE5RTFCRTBDRDZFMjFGRDVDMjYzNEQyOTdERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGeGCCkT/G4TR0/7RyycwMt0Ot Rm4ol8CIrJnQpZ33dWvNQRLSRoE5LXgr01WnUW3nOUbK/HOnWWlQGP0CrYHXb0UN PDQ2xgzV+m+wyw1lz3iBmozcpqZGSYt7DQFQQNue7bJW2P7HWNF+LWyFJxxW2QvH ZLXTcLWR24sJFG3ANRFaNdS+74pVm9TUmTB0/oo8TXY8JqyqXye3AifwEDydvOwP iVvJTUcIi5RMRbDLKuxB3+5xc6AzOHG5Fwneqth9vZuYk4XElXQgc2bn9KkvyGAy IBIJPlY3rPFTUJmnYQ+KV1bhNZKdgl4EFVXPBcM27+HVB5IzFyiA9eoP1TElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+xTJvBIMGeG+DNbiH9XCY00pffYwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY5YK8YC1VMrTaE5ODAH0iDXzrf9wIF/7wx AdYUBOSg89u1G065o6mKszlxoU5SRuuQvJILtdPpzl5fkXdBtzlYRB6fA4CGdAUy g4xdRCSmiA/O605xBlzYGuYSjJ9IhZ7dhnbJhFnzB020slqQe9nrW+sK1pbIcji0 qrPIa4pIcJt6qmqVMX8b0pmqRooGrxkO2o91ddy7Lq0YxfNHdNL3GxjrR32/tn77 /1iNJiJnV0n8A5v7pNRJ02d4f2cE0LgXTGjQ+kOpg+itM3LMEAZ2Q+J3Xcdr3H4/ 8rh670PHKNUM6AS0TGLcFPOcGJglDZQXyP6ASXZk0sIHLdiOKL8= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:48 2025 by rpki-client