$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: O7pqZjX3y4SQlyU8t0jGsQS98/GMvKIfnXvVo43yPGk= Subject key identifier: A3:F9:B3:6A:82:39:EA:44:31:C3:D9:83:BD:E5:69:EB:B4:FD:41:43 Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 754D78F2F7494561C353489F9F4CB79F7C17953E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 03CE Signing time: Tue 05 Aug 2025 12:52:03 +0000 Manifest this update: Tue 05 Aug 2025 12:47:03 +0000 Manifest next update: Fri 08 Aug 2025 17:31:03 +0000 Files and hashes: 1: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: ALeAVOwnv7QP86yFpN03LPz3L2QRUFP9seukgwfoToM=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4d:78:f2:f7:49:45:61:c3:53:48:9f:9f:4c:b7:9f:7c:17:95:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Aug 5 12:47:03 2025 GMT Not After : Aug 8 17:31:03 2025 GMT Subject: CN=A3F9B36A8239EA4431C3D983BDE569EBB4FD4143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:48:3c:1e:86:86:2c:1c:72:da:32:71:63: 65:c4:5c:7b:e0:e1:ea:f9:2e:45:20:8b:02:6f:e3: d6:f9:e8:79:a5:8c:93:26:a5:b0:d7:2b:73:f1:95: ba:19:de:d9:51:09:ee:cc:89:1a:3f:90:70:7e:10: 83:e2:97:2f:fd:f4:27:b1:43:06:7c:f7:1d:3c:71: e9:b8:dd:6a:a3:6e:52:63:18:a5:f0:18:2b:a5:37: e3:7e:f0:d1:9b:98:4b:3e:41:e7:b7:82:41:8d:6d: c6:70:58:a9:c5:50:d0:26:84:84:bb:6d:d1:5a:c5: 9d:00:8c:f8:b1:92:c8:9a:d0:c6:d0:c5:e6:23:09: 71:fd:5e:24:fb:8c:6a:a2:f0:02:68:d1:9d:17:f5: 59:8d:00:2a:24:32:d1:7d:14:c8:2d:16:49:1b:22: f6:d0:2e:1b:31:cd:16:9e:da:c5:68:81:4d:0b:5d: 8c:fa:04:06:2b:4e:8f:1e:4b:c8:be:75:16:68:42: 32:88:c3:f0:bf:09:fc:3b:50:df:c1:89:84:fc:65: c8:44:7c:bf:17:82:98:a7:7b:39:92:84:87:c1:41: 56:1a:04:e3:8d:2b:4b:dc:e5:c4:81:a3:d7:87:75: be:90:11:eb:dc:e8:f5:15:e7:85:a1:d1:8e:6a:af: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F9:B3:6A:82:39:EA:44:31:C3:D9:83:BD:E5:69:EB:B4:FD:41:43 X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:98:d3:ca:e9:38:8e:5b:d6:d1:ea:4a:6e:48:9e:43:6a:28: c9:00:88:3b:55:9e:1b:6c:19:ba:97:7c:92:32:55:7d:af:d0: 60:47:aa:fb:91:fe:af:56:bd:3e:ce:fd:3f:f2:fb:f8:f8:6d: f4:44:80:a9:68:38:0d:a1:67:52:2f:40:5c:92:d8:e5:06:5b: d7:75:4e:52:cd:5b:b9:90:ef:df:75:0d:be:6f:98:23:a7:4d: 44:dc:6c:18:37:8c:43:fd:5e:32:9c:be:72:55:23:e8:c7:bb: 0f:5b:9b:ec:6e:38:d6:8c:d8:74:31:f4:db:21:e0:19:13:32: 0c:9c:e6:60:78:ef:6c:b4:dc:43:09:0f:d5:0e:da:23:8b:4d: 02:4c:6f:05:81:01:6c:8c:40:ea:bf:23:4f:6b:b2:d0:bb:9e: 2e:5d:64:1c:46:a7:0f:0e:36:f8:34:0d:f7:2f:d3:84:db:76: ed:37:46:fd:ad:b3:9f:25:77:5f:c4:7b:6d:1d:d9:54:e6:c9: 70:43:03:21:b2:ab:68:62:1c:57:59:6f:30:3c:8a:96:0a:25: 98:18:3b:7d:12:54:39:9a:9c:67:e9:65:13:7b:65:9d:45:89: 12:c7:ec:cf:c4:ab:18:d6:aa:51:a6:bb:3c:ab:39:f5:09:02: 95:c4:3c:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdU148vdJRWHDU0ifn0y3n3wXlT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTA4MDUxMjQ3MDNaFw0yNTA4MDgxNzMxMDNaMDMxMTAvBgNV BAMTKEEzRjlCMzZBODIzOUVBNDQzMUMzRDk4M0JERTU2OUVCQjRGRDQxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVUg8HoaGLBxy2jJxY2XEXHvg 4er5LkUgiwJv49b56HmljJMmpbDXK3PxlboZ3tlRCe7MiRo/kHB+EIPily/99Cex QwZ89x08cem43WqjblJjGKXwGCulN+N+8NGbmEs+Qee3gkGNbcZwWKnFUNAmhIS7 bdFaxZ0AjPixksia0MbQxeYjCXH9XiT7jGqi8AJo0Z0X9VmNACokMtF9FMgtFkkb IvbQLhsxzRae2sVogU0LXYz6BAYrTo8eS8i+dRZoQjKIw/C/Cfw7UN/BiYT8ZchE fL8XgpinezmShIfBQVYaBOONK0vc5cSBo9eHdb6QEevc6PUV54Wh0Y5qr2+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo/mzaoI56kQxw9mDveVp67T9QUMwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6Y08rpOI5b1tHqSm5InkNqKMkAiDtVnhts GbqXfJIyVX2v0GBHqvuR/q9WvT7O/T/y+/j4bfREgKloOA2hZ1IvQFyS2OUGW9d1 TlLNW7mQ7991Db5vmCOnTUTcbBg3jEP9XjKcvnJVI+jHuw9bm+xuONaM2HQx9Nsh 4BkTMgyc5mB472y03EMJD9UO2iOLTQJMbwWBAWyMQOq/I09rstC7ni5dZBxGpw8O Nvg0Dfcv04Tbdu03Rv2ts58ld1/Ee20d2VTmyXBDAyGyq2hiHFdZbzA8ipYKJZgY O30SVDmanGfpZRN7ZZ1FiRLH7M/EqxjWqlGmuzyrOfUJApXEPCo= -----END CERTIFICATE-----Generated at Thu Aug 7 05:00:05 2025 by rpki-client