$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: zLT0FOI5NbVrr1mHjr4pFZICQiVMExslYonTmmiDXpE= Subject key identifier: 12:10:37:57:75:49:A6:41:12:F0:0A:F6:5F:8B:23:E8:C5:10:AB:DC Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 0B2057D77FEEBDB6A44ACAAA67DC79FBE2C079BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 03B9 Signing time: Thu 19 Jun 2025 00:32:00 +0000 Manifest this update: Thu 19 Jun 2025 00:27:00 +0000 Manifest next update: Sun 22 Jun 2025 05:52:00 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: LGRx8NZIdQ24iuB2SEs3UUVk4ljzTLyKWzx6a4ZdDVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:57:d7:7f:ee:bd:b6:a4:4a:ca:aa:67:dc:79:fb:e2:c0:79:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Jun 19 00:27:00 2025 GMT Not After : Jun 22 05:52:00 2025 GMT Subject: CN=121037577549A64112F00AF65F8B23E8C510ABDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:de:60:4a:e5:46:6a:45:1d:5c:47:c8:4f: 35:1e:9e:8c:9b:3b:2a:4b:7f:70:5d:ba:76:5f:96: 75:44:e7:0d:d1:b5:7b:bf:e0:fd:7a:d4:20:f0:12: 30:1b:2c:e7:b6:93:0c:d9:c5:dc:11:95:db:38:9c: 5b:05:e8:bc:e2:4d:81:4d:ed:cb:0c:dc:78:a2:aa: cb:0a:e4:21:a0:a0:d3:0f:39:15:7f:5c:2d:e7:c4: 80:e7:61:9f:47:d9:e6:fe:31:b5:37:9d:2b:3d:f7: 17:33:a3:9b:8a:05:4d:a2:50:d6:73:96:17:80:73: 6c:fc:d1:63:6a:6d:e5:7c:37:57:a9:3b:4d:a4:30: d2:65:d8:98:5f:1e:f1:f7:6b:c5:c5:18:f0:7e:5e: 6d:64:20:d8:2e:e7:0b:0c:7e:1b:a1:f6:e8:f2:a2: 1d:54:8a:55:90:81:54:f8:db:1b:98:6a:3e:d1:c0: f2:7b:63:93:ee:63:e7:c2:79:52:c9:66:0d:e6:e6: 31:cd:84:f8:aa:86:81:f8:27:ea:44:9f:8a:7b:36: 78:0b:13:16:74:66:77:b0:ec:76:03:04:94:73:4e: 0d:6c:27:4e:38:51:28:07:77:9e:e0:bf:9f:d2:9c: 2c:43:7b:7a:2f:9e:77:80:34:7e:98:12:4e:49:dd: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:10:37:57:75:49:A6:41:12:F0:0A:F6:5F:8B:23:E8:C5:10:AB:DC X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:37:3b:76:90:d6:24:35:1b:56:62:01:db:73:60:4c:b4:67: 34:60:1c:a9:aa:4a:f2:5f:cd:1e:d8:a0:1d:5d:5b:b3:e2:47: 3a:f6:a8:99:9e:93:66:97:b0:e6:25:82:5c:e9:4f:c7:c8:03: 5c:ec:10:3d:95:ac:20:f1:21:40:f2:fd:58:3c:a7:b2:f2:fc: 02:d3:8c:6e:38:3f:be:8f:5b:88:ac:64:51:7d:5a:34:90:33: 47:77:bd:52:3d:30:03:72:af:34:8e:86:7d:d8:3d:fc:6c:c1: 1a:68:fb:1b:61:a7:e1:62:0c:62:2a:df:f9:7a:6f:d9:56:4e: 32:13:90:6d:dd:63:de:54:85:d9:0a:a3:e7:19:b3:f2:71:5f: e8:52:7d:12:2e:b4:60:5d:bf:c7:6e:15:e1:60:c7:e0:f2:ad: d3:f4:e3:44:4a:38:b9:e2:65:87:b0:c5:96:c9:64:30:eb:56: 0d:8a:a7:93:b7:c9:54:2c:a2:a8:77:ec:b4:9f:a5:d7:47:99: 06:ad:d0:46:7d:39:71:c3:1f:a2:a2:98:56:51:9a:ec:ff:52: 16:e4:e0:2b:7f:00:b8:af:9e:ef:e2:3d:b4:54:1e:bf:d9:80: 8c:cc:8d:5c:0e:b1:4a:af:92:74:a9:0f:d2:af:26:74:fd:0b: 7f:69:6d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCyBX13/uvbakSsqqZ9x5++LAebwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTA2MTkwMDI3MDBaFw0yNTA2MjIwNTUyMDBaMDMxMTAvBgNV BAMTKDEyMTAzNzU3NzU0OUE2NDExMkYwMEFGNjVGOEIyM0U4QzUxMEFCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRN5gSuVGakUdXEfITzUenoyb OypLf3BdunZflnVE5w3RtXu/4P161CDwEjAbLOe2kwzZxdwRlds4nFsF6LziTYFN 7csM3HiiqssK5CGgoNMPORV/XC3nxIDnYZ9H2eb+MbU3nSs99xczo5uKBU2iUNZz lheAc2z80WNqbeV8N1epO02kMNJl2JhfHvH3a8XFGPB+Xm1kINgu5wsMfhuh9ujy oh1UilWQgVT42xuYaj7RwPJ7Y5PuY+fCeVLJZg3m5jHNhPiqhoH4J+pEn4p7NngL ExZ0Znew7HYDBJRzTg1sJ044USgHd57gv5/SnCxDe3ovnneANH6YEk5J3cbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEhA3V3VJpkES8Ar2X4sj6MUQq9wwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ03O3aQ1iQ1G1ZiAdtzYEy0ZzRgHKmqSvJf zR7YoB1dW7PiRzr2qJmek2aXsOYlglzpT8fIA1zsED2VrCDxIUDy/Vg8p7Ly/ALT jG44P76PW4isZFF9WjSQM0d3vVI9MANyrzSOhn3YPfxswRpo+xthp+FiDGIq3/l6 b9lWTjITkG3dY95UhdkKo+cZs/JxX+hSfRIutGBdv8duFeFgx+DyrdP040RKOLni ZYewxZbJZDDrVg2Kp5O3yVQsoqh37LSfpddHmQat0EZ9OXHDH6KimFZRmuz/Uhbk 4Ct/ALivnu/iPbRUHr/ZgIzMjVwOsUqvknSpD9KvJnT9C39pbaY= -----END CERTIFICATE-----Generated at Thu Jun 19 23:10:23 2025 by rpki-client