$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: amn7FflWRRNUndE4hZfhBmxnmjIUrTkWFg8PWHHq04A= Subject key identifier: 40:B0:44:77:18:61:82:E8:85:FB:24:4B:8D:7F:23:68:D0:16:03:6F Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 0E9842912DAB8840847BC38FDEF4384049D017D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 03A2 Signing time: Mon 28 Apr 2025 09:51:57 +0000 Manifest this update: Mon 28 Apr 2025 09:46:57 +0000 Manifest next update: Thu 01 May 2025 19:21:57 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: WoeEJUru+Rd94edpPQgJoZZNXLdI97QdR0YwiEmr27U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:98:42:91:2d:ab:88:40:84:7b:c3:8f:de:f4:38:40:49:d0:17:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Apr 28 09:46:57 2025 GMT Not After : May 1 19:21:57 2025 GMT Subject: CN=40B04477186182E885FB244B8D7F2368D016036F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:d1:b3:d7:6f:bf:11:c0:01:b5:f6:53:0d: 5b:30:3e:0d:e4:d2:92:99:ee:aa:11:ac:e6:14:ed: de:89:8f:1a:0f:16:89:d5:0e:2e:d5:59:6b:45:bf: c9:aa:ee:d1:a9:be:5f:af:98:30:f9:32:17:df:ad: 3e:62:a2:f0:86:77:16:ba:11:48:d8:f9:cc:32:34: 27:71:98:39:f7:e9:81:4f:81:77:a2:23:1b:4a:56: 1d:fd:71:ac:ea:68:51:07:05:64:a5:df:9d:d4:f7: c6:c5:fb:cf:2b:96:53:fe:33:4c:87:4b:38:b9:d5: 44:62:b7:41:f8:a2:1c:eb:5f:4a:f2:d3:d3:b2:1b: ab:9c:17:0a:32:9a:8a:5a:b5:65:a6:49:10:40:af: a6:9b:d2:62:45:1c:2b:99:95:cd:22:10:f7:8a:56: 97:75:e4:e3:31:63:a0:ed:24:e3:f7:19:a3:c6:01: e3:aa:af:34:3d:4a:0f:63:c7:ba:c0:61:53:f3:e2: f3:07:ef:30:da:8f:19:e3:ee:f2:a2:14:af:3c:b3: a4:78:9a:99:b9:ca:78:2b:aa:ea:fb:e0:17:83:fc: 1f:d6:1a:e7:eb:4d:b1:33:58:1b:6b:a1:00:e4:d3: 45:5b:a2:f9:5a:32:01:29:66:5d:74:f8:2c:83:1d: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:44:77:18:61:82:E8:85:FB:24:4B:8D:7F:23:68:D0:16:03:6F X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:98:72:ae:53:14:bd:de:bf:de:b6:16:4a:23:56:4c:a8:93: 74:fb:12:af:74:52:5c:3a:75:ab:94:fc:0e:da:dd:cc:19:96: 1a:ee:99:a9:b5:6a:c3:70:de:65:0b:93:bf:68:55:64:e5:ee: 35:0a:a0:3f:d4:c7:7d:fd:73:27:3a:07:9b:1a:72:20:e9:a6: f0:24:53:d0:4a:10:14:c7:9d:ca:52:59:a9:ef:39:0f:ce:bc: ab:c7:e2:eb:c1:85:74:85:03:49:45:39:e2:84:1c:7e:18:45: c6:69:c4:ce:94:93:09:7f:1a:bd:eb:66:aa:6f:89:96:1e:3e: 62:fe:a7:b3:00:14:da:70:cc:47:35:fa:1a:0f:40:f2:e0:0a: 86:6b:83:f1:67:49:a1:6a:42:06:2a:25:b5:9d:25:ed:81:bb: 80:d2:79:4c:0a:51:be:2d:bc:27:75:8b:15:79:81:35:15:dd: 14:d1:32:18:31:43:1d:78:2b:19:13:c9:f4:db:72:44:a4:f3: 3b:ab:a9:c6:fd:57:74:ef:3b:d4:6d:a5:ce:21:0c:f0:5b:20: 54:a8:a1:3b:17:33:02:3c:1c:2c:a9:ba:2e:9a:91:ae:17:c9: 31:09:cb:7b:01:e9:c5:ba:fa:0d:04:1d:8f:7e:33:a4:60:5e: 2b:b9:a1:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDphCkS2riECEe8OP3vQ4QEnQF9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTA0MjgwOTQ2NTdaFw0yNTA1MDExOTIxNTdaMDMxMTAvBgNV BAMTKDQwQjA0NDc3MTg2MTgyRTg4NUZCMjQ0QjhEN0YyMzY4RDAxNjAzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxedGz12+/EcABtfZTDVswPg3k 0pKZ7qoRrOYU7d6JjxoPFonVDi7VWWtFv8mq7tGpvl+vmDD5MhffrT5iovCGdxa6 EUjY+cwyNCdxmDn36YFPgXeiIxtKVh39cazqaFEHBWSl353U98bF+88rllP+M0yH Szi51URit0H4ohzrX0ry09OyG6ucFwoymopatWWmSRBAr6ab0mJFHCuZlc0iEPeK Vpd15OMxY6DtJOP3GaPGAeOqrzQ9Sg9jx7rAYVPz4vMH7zDajxnj7vKiFK88s6R4 mpm5yngrqur74BeD/B/WGufrTbEzWBtroQDk00VbovlaMgEpZl10+CyDHVRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLBEdxhhguiF+yRLjX8jaNAWA28wHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmYcq5TFL3ev962FkojVkyok3T7Eq90Ulw6 dauU/A7a3cwZlhrumam1asNw3mULk79oVWTl7jUKoD/Ux339cyc6B5saciDppvAk U9BKEBTHncpSWanvOQ/OvKvH4uvBhXSFA0lFOeKEHH4YRcZpxM6Ukwl/Gr3rZqpv iZYePmL+p7MAFNpwzEc1+hoPQPLgCoZrg/FnSaFqQgYqJbWdJe2Bu4DSeUwKUb4t vCd1ixV5gTUV3RTRMhgxQx14KxkTyfTbckSk8zurqcb9V3TvO9Rtpc4hDPBbIFSo oTsXMwI8HCypui6aka4XyTEJy3sB6cW6+g0EHY9+M6RgXiu5oXw= -----END CERTIFICATE-----Generated at Wed Apr 30 05:33:27 2025 by rpki-client