$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: 1EinMMquckdKqOGY0/Z6aZw3/p7KWmDLjVJdVIzDfro= Subject key identifier: 7E:0B:0E:E6:91:52:4A:32:AE:A0:E1:5E:72:9D:30:95:EA:3F:96:58 Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 54E4C62DA48DEB03E42F5BDB95D1C36500D828A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 0115 Signing time: Tue 05 Aug 2025 17:50:43 +0000 Manifest this update: Tue 05 Aug 2025 17:45:43 +0000 Manifest next update: Sat 09 Aug 2025 01:27:43 +0000 Files and hashes: 1: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: mlm0SolLqnMtlaWb6nitJ7lQ7tVpvmeB46yge5QqnWw=) 2: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 01:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e4:c6:2d:a4:8d:eb:03:e4:2f:5b:db:95:d1:c3:65:00:d8:28:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Aug 5 17:45:43 2025 GMT Not After : Aug 9 01:27:43 2025 GMT Subject: CN=7E0B0EE691524A32AEA0E15E729D3095EA3F9658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:4c:5b:97:04:72:8f:95:83:c3:87:5c:7e: 1e:86:60:ec:ea:49:82:8d:f0:c9:95:32:50:ee:7f: 68:0e:1b:6b:51:0d:b3:24:63:84:cf:d0:45:5a:b8: 70:7b:33:5c:5c:b7:df:4e:e7:b4:52:d8:5e:79:9c: b7:ec:0f:c9:6b:c0:44:32:da:d1:30:0c:f8:a5:8a: 4d:17:56:7b:79:14:1f:ec:64:be:6d:25:76:31:2e: 93:fe:d6:91:c6:b8:ab:bf:51:ac:6a:b9:cc:84:a8: af:db:2e:f7:a2:81:78:cf:12:e9:93:3c:fe:d9:2b: 90:25:41:60:f5:38:2d:62:56:e1:91:93:4c:c4:1d: ac:02:cb:d1:d5:a2:32:ec:d3:43:3e:04:d7:29:bd: ef:b5:aa:ce:96:62:ea:96:f8:7b:f2:f9:bc:17:16: cf:e9:be:32:1b:4f:cf:d7:ac:ab:76:52:ad:20:b8: df:19:4e:57:d3:19:ab:dc:b7:f2:9c:6b:73:46:67: d3:1d:15:68:f6:79:89:f2:93:83:73:57:5c:e6:91: e9:34:a1:81:86:a9:6a:1f:9c:bd:08:92:a7:41:53: 8a:e1:ab:ce:5d:88:f9:84:22:7c:7b:ca:30:d1:9c: d5:fd:a0:97:57:65:df:1b:8c:30:29:58:c0:95:b0: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0B:0E:E6:91:52:4A:32:AE:A0:E1:5E:72:9D:30:95:EA:3F:96:58 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:39:ae:3d:44:90:ff:1e:c1:37:1a:35:c9:da:b6:3f:9b:23: 04:2b:5b:f6:af:a8:d8:82:e8:c0:27:62:a5:36:af:43:0a:29: d8:27:de:e2:1b:1f:19:81:54:5b:b1:6f:e2:05:cd:c3:cf:80: 3f:20:82:34:20:69:9c:23:ec:d4:11:c6:b8:81:61:60:ff:f2: da:61:15:aa:dc:ed:23:79:a2:c2:40:73:3b:f9:49:e0:6d:b6: 8d:37:41:b1:fb:b7:04:93:74:3c:0f:04:99:24:bb:90:e1:70: f3:bc:63:fd:15:18:7f:1c:50:95:6e:da:9e:22:49:68:c6:6c: d7:f9:58:be:f4:c0:5e:98:b3:d2:9b:54:19:b6:1c:35:fb:02: e7:b5:a4:0d:80:6a:38:df:1d:3f:81:c7:de:37:01:e3:ec:0a: 0c:16:bd:36:d5:ad:0f:29:db:9a:6b:cb:cc:20:7d:3e:31:eb: 37:df:51:cd:75:99:13:5f:ba:c1:c5:f3:b7:35:1e:e8:4a:31: f0:25:47:0d:aa:a6:18:e1:17:e5:18:3c:ef:1f:f0:09:44:71: 76:66:cb:e0:51:ad:cf:eb:4d:5b:8c:f2:76:97:21:98:53:25: ff:e2:cf:ed:13:e1:4f:4e:3c:92:90:d9:e8:f8:8f:c3:8c:38: 4a:21:81:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOTGLaSN6wPkL1vbldHDZQDYKKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNTA4MDUxNzQ1NDNaFw0yNTA4MDkwMTI3NDNaMDMxMTAvBgNV BAMTKDdFMEIwRUU2OTE1MjRBMzJBRUEwRTE1RTcyOUQzMDk1RUEzRjk2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEkxblwRyj5WDw4dcfh6GYOzq SYKN8MmVMlDuf2gOG2tRDbMkY4TP0EVauHB7M1xct99O57RS2F55nLfsD8lrwEQy 2tEwDPilik0XVnt5FB/sZL5tJXYxLpP+1pHGuKu/UaxqucyEqK/bLveigXjPEumT PP7ZK5AlQWD1OC1iVuGRk0zEHawCy9HVojLs00M+BNcpve+1qs6WYuqW+Hvy+bwX Fs/pvjIbT8/XrKt2Uq0guN8ZTlfTGavct/Kca3NGZ9MdFWj2eYnyk4NzV1zmkek0 oYGGqWofnL0IkqdBU4rhq85diPmEInx7yjDRnNX9oJdXZd8bjDApWMCVsHLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfgsO5pFSSjKuoOFecp0wleo/llgwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHE5rj1EkP8ewTcaNcnatj+bIwQrW/avqNiC 6MAnYqU2r0MKKdgn3uIbHxmBVFuxb+IFzcPPgD8ggjQgaZwj7NQRxriBYWD/8tph Farc7SN5osJAczv5SeBtto03QbH7twSTdDwPBJkku5DhcPO8Y/0VGH8cUJVu2p4i SWjGbNf5WL70wF6Ys9KbVBm2HDX7Aue1pA2AajjfHT+Bx943AePsCgwWvTbVrQ8p 25pry8wgfT4x6zffUc11mRNfusHF87c1HuhKMfAlRw2qphjhF+UYPO8f8AlEcXZm y+BRrc/rTVuM8naXIZhTJf/iz+0T4U9OPJKQ2ej4j8OMOEohgbQ= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:47 2025 by rpki-client