$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: QTaa5/kN6Bn/I3W4AHBMf6a1Qy+wieEmC+6b8afTP4g= Subject key identifier: 03:64:B8:63:18:46:CD:54:D5:23:D7:EF:FD:D5:E9:9A:77:44:62:D2 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 3D231BC547C80D99A829129AADE754D1A49B04A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 8E Signing time: Sun 27 Apr 2025 07:32:05 +0000 Manifest this update: Sun 27 Apr 2025 07:27:05 +0000 Manifest next update: Wed 30 Apr 2025 19:27:05 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: GmOFMzAjvKi/R6Ihcjui8Ly/R+qTvmjieLr7Vq9tAb8=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: IEr2G/xDWEZNRv1I+PBfG/nMAFXCL2IcRrflFPV9Wxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:23:1b:c5:47:c8:0d:99:a8:29:12:9a:ad:e7:54:d1:a4:9b:04:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Apr 27 07:27:05 2025 GMT Not After : Apr 30 19:27:05 2025 GMT Subject: CN=0364B8631846CD54D523D7EFFDD5E99A774462D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:73:b1:74:65:55:aa:be:5f:c6:9d:3b:15: 9a:c5:b8:d9:16:22:b5:cc:e4:bc:b6:9a:7e:a7:cc: 2b:e9:16:f5:3c:19:9b:d6:11:6b:83:e6:6a:45:49: ea:88:ec:30:1e:f2:e5:5a:2f:57:56:85:70:d5:7b: f4:6f:d9:dc:49:3d:75:30:6a:9d:e2:83:17:ee:70: f9:65:16:54:75:58:cb:00:fd:4c:22:f8:1f:3c:fd: 03:f2:01:1e:9d:ba:fd:ee:8b:11:64:29:d0:2e:85: bc:02:d2:d1:10:7d:93:cc:46:06:2f:ec:43:72:d7: 92:2c:24:63:df:71:ee:f3:f3:ad:b6:be:70:6c:b6: 3a:2b:ee:19:58:f0:1b:c5:c2:5a:22:71:4b:6d:22: 58:5a:a0:a4:10:88:75:f0:c1:2f:39:10:5a:a5:02: 0c:26:74:f5:fc:00:9c:ea:57:a1:32:8b:9a:4a:40: 0e:33:75:91:94:45:d3:c6:de:0d:98:e8:fb:17:e2: 84:15:a7:8f:6d:ed:01:5f:77:58:29:d8:08:74:01: 19:51:cc:a3:e8:f0:87:95:45:e1:95:f6:ab:f9:ab: c0:2d:2f:fd:77:4d:93:75:8a:38:ad:e4:36:1b:e4: c6:8b:22:42:98:eb:56:2d:44:da:74:e6:cc:b4:9f: ce:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:64:B8:63:18:46:CD:54:D5:23:D7:EF:FD:D5:E9:9A:77:44:62:D2 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6f:dd:26:a8:96:60:c9:ad:a7:29:5b:00:91:07:5b:ef:a8: a1:fe:79:62:68:28:f4:95:65:26:af:e2:e8:d6:41:dd:53:d7: 27:84:2c:31:23:53:7f:00:47:52:82:0f:9d:5f:19:4f:40:63: f7:db:db:e1:13:e0:e5:ac:2a:57:62:3e:5c:b0:be:32:a9:98: de:62:68:11:0c:ed:2c:a4:82:b6:2c:d9:da:01:17:21:87:5a: c6:c4:9d:11:cb:e9:54:52:f7:7c:97:a5:d2:17:e4:57:80:05: 12:44:26:cd:a7:2c:d0:35:16:a5:08:c5:70:6a:15:59:c7:66: 36:11:18:ea:53:f9:aa:6e:ac:49:4c:1a:a9:3a:0f:e8:c3:69: 79:a5:97:7b:b6:75:66:1b:db:19:d7:a4:55:d3:ff:f5:16:29: 41:d8:5b:cf:72:8e:3b:81:f5:f9:3f:01:0b:29:a0:e2:bf:d5: dd:ec:58:57:0e:7d:44:0c:69:3e:a6:e2:1e:4a:05:a0:77:75: 25:30:74:2c:07:62:e5:8f:6c:7d:98:64:78:a3:7c:52:30:1d: 66:0e:4a:3e:1c:36:71:66:cb:34:50:40:f9:98:d8:ca:cd:c1: f4:99:1f:94:19:cf:ff:e6:4c:9a:08:db:96:77:c1:a3:4c:4b: cf:c0:80:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSMbxUfIDZmoKRKaredU0aSbBKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA0MjcwNzI3MDVaFw0yNTA0MzAxOTI3MDVaMDMxMTAvBgNV BAMTKDAzNjRCODYzMTg0NkNENTRENTIzRDdFRkZERDVFOTlBNzc0NDYyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcHOxdGVVqr5fxp07FZrFuNkW IrXM5Ly2mn6nzCvpFvU8GZvWEWuD5mpFSeqI7DAe8uVaL1dWhXDVe/Rv2dxJPXUw ap3igxfucPllFlR1WMsA/Uwi+B88/QPyAR6duv3uixFkKdAuhbwC0tEQfZPMRgYv 7ENy15IsJGPfce7z8622vnBstjor7hlY8BvFwloicUttIlhaoKQQiHXwwS85EFql AgwmdPX8AJzqV6Eyi5pKQA4zdZGURdPG3g2Y6PsX4oQVp49t7QFfd1gp2Ah0ARlR zKPo8IeVReGV9qv5q8AtL/13TZN1ijit5DYb5MaLIkKY61YtRNp05sy0n84HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA2S4YxhGzVTVI9fv/dXpmndEYtIwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1v3SaolmDJracpWwCRB1vvqKH+eWJoKPSV ZSav4ujWQd1T1yeELDEjU38AR1KCD51fGU9AY/fb2+ET4OWsKldiPlywvjKpmN5i aBEM7SykgrYs2doBFyGHWsbEnRHL6VRS93yXpdIX5FeABRJEJs2nLNA1FqUIxXBq FVnHZjYRGOpT+apurElMGqk6D+jDaXmll3u2dWYb2xnXpFXT//UWKUHYW89yjjuB 9fk/AQspoOK/1d3sWFcOfUQMaT6m4h5KBaB3dSUwdCwHYuWPbH2YZHijfFIwHWYO Sj4cNnFmyzRQQPmY2MrNwfSZH5QZz//mTJoI25Z3waNMS8/AgEs= -----END CERTIFICATE-----Generated at Sun Apr 27 22:57:04 2025 by rpki-client