$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: qcDfF1RSRjo3ICyA3LzOjyP8GmIZs88BdpoaMTGJRRw= Subject key identifier: 86:E7:5A:33:D5:DF:62:32:8F:0F:0A:CB:DD:FF:54:27:24:04:91:19 Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 68EE9143DC369BDD09366EFD1D1EC6B18F0FF3DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: EA Signing time: Tue 29 Apr 2025 04:40:43 +0000 Manifest this update: Tue 29 Apr 2025 04:35:43 +0000 Manifest next update: Fri 02 May 2025 09:37:43 +0000 Files and hashes: 1: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: 7HmVPii9ene6DpGJE/ARecb2WziBrjGEwMJyz8zUgjA=) 2: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 09:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ee:91:43:dc:36:9b:dd:09:36:6e:fd:1d:1e:c6:b1:8f:0f:f3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Apr 29 04:35:43 2025 GMT Not After : May 2 09:37:43 2025 GMT Subject: CN=86E75A33D5DF62328F0F0ACBDDFF542724049119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:49:b7:c2:dd:6f:f3:6d:f6:f6:09:9d:2d: 5f:05:b9:c7:b8:5f:88:48:bb:c9:d4:b8:52:90:46: a3:14:b7:7d:b3:6c:a0:74:ed:83:89:39:17:70:22: 5b:81:50:3f:e2:d5:a7:c6:2c:62:68:28:60:b0:b2: 71:c9:b5:46:48:94:6a:80:52:04:e4:8a:5d:1a:41: 3c:a8:a4:5f:97:f5:9c:6f:11:a8:01:51:0b:5c:81: 79:9d:b5:30:36:98:1b:d1:58:88:59:af:de:d8:a5: 73:58:ff:9d:cb:60:c0:0c:1b:bb:23:24:25:f9:cc: fc:fa:46:6e:98:1c:4a:0f:85:2f:5d:3b:52:cf:c7: 54:5d:71:a5:39:44:e6:be:5a:7e:32:f4:56:db:8a: 22:10:ba:5a:fe:c4:fb:eb:54:ef:35:80:20:22:81: 96:6d:03:a2:f8:96:b6:80:a1:89:15:fe:74:4e:cc: 9d:ac:48:4e:c7:cf:50:ae:aa:e2:89:ba:31:57:a4: f4:f2:36:ec:34:a7:e2:e0:d6:6a:c6:77:24:18:32: 95:10:13:ea:45:08:17:90:ee:0e:59:1a:71:6e:4b: a6:91:d2:2e:2a:60:d1:96:59:d3:a7:92:ac:26:90: 3e:7b:23:b1:cc:52:cd:83:8a:1d:f9:fb:2b:4e:6e: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E7:5A:33:D5:DF:62:32:8F:0F:0A:CB:DD:FF:54:27:24:04:91:19 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:55:b3:57:da:90:4d:7e:86:c8:f8:3e:6a:57:0a:0b:77:68: 92:db:3b:4f:77:18:5d:86:9a:6b:d8:0a:f2:c9:2b:ce:72:99: 1d:81:87:37:fd:17:de:f2:51:c9:c4:a8:d0:9e:f5:f6:a2:3c: 1a:9b:81:c4:f8:e5:5f:88:ba:37:6b:7f:77:c2:a3:3d:1a:75: 56:d6:71:b1:53:7c:0d:7e:23:e0:02:75:4e:5e:a1:76:c1:6d: 24:7e:c7:f7:5e:a0:bb:8c:ab:6e:24:83:0f:9f:dc:26:71:f7: 41:43:c4:82:a9:5d:dd:80:f9:14:b2:dd:cb:f3:a2:11:44:ab: 19:cf:be:7b:aa:91:9e:90:a9:b7:41:33:85:4e:30:c7:df:5e: 3d:e9:31:e2:33:65:bf:db:3a:a2:4e:dc:0d:60:a1:95:64:20: f9:24:21:a6:0e:d5:04:f7:ba:61:04:ad:18:38:1a:fe:e3:a4: ce:75:c3:23:d7:7f:1d:09:9b:f7:ca:14:a0:ef:cc:21:0a:a1: 55:db:90:bf:92:ce:96:68:70:26:4b:7f:86:59:3e:7a:14:fa: 51:0c:cd:56:7d:29:10:79:18:28:9f:3b:8b:34:73:ad:ad:9c: e0:2f:d3:f7:74:4d:26:e3:19:88:01:12:17:fb:e0:bf:0d:07: e1:cb:b4:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO6RQ9w2m90JNm79HR7GsY8P890wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNTA0MjkwNDM1NDNaFw0yNTA1MDIwOTM3NDNaMDMxMTAvBgNV BAMTKDg2RTc1QTMzRDVERjYyMzI4RjBGMEFDQkRERkY1NDI3MjQwNDkxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOkm3wt1v82329gmdLV8Fuce4 X4hIu8nUuFKQRqMUt32zbKB07YOJORdwIluBUD/i1afGLGJoKGCwsnHJtUZIlGqA UgTkil0aQTyopF+X9ZxvEagBUQtcgXmdtTA2mBvRWIhZr97YpXNY/53LYMAMG7sj JCX5zPz6Rm6YHEoPhS9dO1LPx1RdcaU5ROa+Wn4y9FbbiiIQulr+xPvrVO81gCAi gZZtA6L4lraAoYkV/nROzJ2sSE7Hz1CuquKJujFXpPTyNuw0p+Lg1mrGdyQYMpUQ E+pFCBeQ7g5ZGnFuS6aR0i4qYNGWWdOnkqwmkD57I7HMUs2Dih35+ytObggHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhudaM9XfYjKPDwrL3f9UJyQEkRkwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVVs1fakE1+hsj4PmpXCgt3aJLbO093GF2G mmvYCvLJK85ymR2Bhzf9F97yUcnEqNCe9faiPBqbgcT45V+Iujdrf3fCoz0adVbW cbFTfA1+I+ACdU5eoXbBbSR+x/deoLuMq24kgw+f3CZx90FDxIKpXd2A+RSy3cvz ohFEqxnPvnuqkZ6QqbdBM4VOMMffXj3pMeIzZb/bOqJO3A1goZVkIPkkIaYO1QT3 umEErRg4Gv7jpM51wyPXfx0Jm/fKFKDvzCEKoVXbkL+SzpZocCZLf4ZZPnoU+lEM zVZ9KRB5GCifO4s0c62tnOAv0/d0TSbjGYgBEhf74L8NB+HLtPs= -----END CERTIFICATE-----Generated at Wed Apr 30 17:38:05 2025 by rpki-client