$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: xj1j9la/rj9OiX8hSUR91KSTtJaPwN8qr3yzIdE4wB8= Subject key identifier: DC:51:A4:2B:35:4F:D4:58:90:45:6E:19:7A:AF:D3:65:40:3F:8B:02 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 10321974C93FF128E7D3A8F5C379C3934AF29EAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: BC Signing time: Wed 06 Aug 2025 02:32:11 +0000 Manifest this update: Wed 06 Aug 2025 02:27:11 +0000 Manifest next update: Sat 09 Aug 2025 13:11:11 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: r7s05xSNHThDqzX/DrLLys7VmB3uXhKgLiW/Vm2DV4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:32:19:74:c9:3f:f1:28:e7:d3:a8:f5:c3:79:c3:93:4a:f2:9e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Aug 6 02:27:11 2025 GMT Not After : Aug 9 13:11:11 2025 GMT Subject: CN=DC51A42B354FD45890456E197AAFD365403F8B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:ff:7b:2e:48:4f:be:e4:f4:e2:97:02:48: 6d:92:00:9c:60:22:63:fd:2c:21:b7:a5:1f:70:f6: 00:f7:f9:76:eb:e9:75:01:35:ee:ad:33:0a:a9:c8: d0:b0:22:13:0f:8e:f3:56:3e:aa:eb:77:af:4a:6e: b6:42:0d:24:75:e8:1d:f7:e8:63:b6:26:8e:9f:45: 7a:27:52:f2:72:fa:da:55:9b:d9:a8:e3:20:c5:aa: ad:bc:11:66:33:73:72:e6:4a:09:6e:9e:f9:df:5a: 33:05:28:0e:95:79:45:18:a6:77:65:86:45:96:f2: 2c:a7:9b:bd:04:28:25:25:d2:7b:8d:67:92:b2:0d: cf:c1:14:20:8b:58:80:e6:2d:2e:40:a6:c8:9a:07: 91:7b:77:28:be:4c:5d:da:1e:c8:78:7d:3d:87:90: 5e:8f:cc:c0:f2:2b:5a:a6:4d:eb:aa:a3:11:a7:38: 3d:59:69:cf:41:57:d5:db:95:ae:ab:2a:e0:48:b0: db:62:3a:d4:c4:1a:e0:e0:af:69:fd:3e:63:17:13: 17:2d:51:32:41:f4:de:7c:2c:b9:60:b1:64:48:ae: 0d:77:d5:16:7b:1a:5f:8c:2c:8a:16:19:d8:69:9a: 5b:db:36:1e:c1:15:84:24:a3:d8:67:84:d2:48:2e: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:A4:2B:35:4F:D4:58:90:45:6E:19:7A:AF:D3:65:40:3F:8B:02 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a0:ed:8f:5f:18:8c:5c:ee:e7:c2:07:87:6b:92:b9:b5:17: 50:75:3a:34:f0:c4:0e:12:dc:8d:58:b4:95:4e:bf:dc:20:2c: a4:65:55:cf:4c:c4:83:f1:27:a9:f5:ff:12:f5:8f:18:9d:ca: d9:a4:2e:71:fc:3a:d5:24:ca:ae:d1:50:e8:a0:ce:41:e7:aa: 1f:5a:0c:df:28:5a:68:75:8d:38:94:da:d1:1b:8c:eb:bc:5b: a2:97:60:b5:f7:08:71:9e:3b:be:f9:e4:ef:54:57:12:2d:b6: f2:22:15:a2:de:8c:6a:f0:7d:22:8f:94:e6:a1:43:91:c6:9c: e2:c1:84:53:75:03:a8:17:6e:22:1f:d2:33:47:48:f5:c2:fd: 49:e2:73:a6:d1:df:b6:90:3f:77:d8:83:34:7a:b4:65:eb:ec: 45:bb:95:5f:dd:9e:fd:4a:e3:53:9a:98:a9:6c:b7:62:47:0a: 09:d1:d9:cb:45:ce:20:58:3a:95:5a:64:a1:51:db:30:e8:34: f9:4a:db:41:88:34:59:5e:2a:4d:98:e8:ec:35:13:3f:c4:ee: 9f:6f:64:1d:2f:e5:91:35:41:9f:e4:39:c8:d4:92:07:13:61: c9:95:d0:eb:a4:04:8a:30:00:2a:31:24:52:17:46:71:da:74: d9:45:7f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDIZdMk/8Sjn06j1w3nDk0rynq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA4MDYwMjI3MTFaFw0yNTA4MDkxMzExMTFaMDMxMTAvBgNV BAMTKERDNTFBNDJCMzU0RkQ0NTg5MDQ1NkUxOTdBQUZEMzY1NDAzRjhCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLP97LkhPvuT04pcCSG2SAJxg ImP9LCG3pR9w9gD3+Xbr6XUBNe6tMwqpyNCwIhMPjvNWPqrrd69KbrZCDSR16B33 6GO2Jo6fRXonUvJy+tpVm9mo4yDFqq28EWYzc3LmSglunvnfWjMFKA6VeUUYpndl hkWW8iynm70EKCUl0nuNZ5KyDc/BFCCLWIDmLS5ApsiaB5F7dyi+TF3aHsh4fT2H kF6PzMDyK1qmTeuqoxGnOD1Zac9BV9Xbla6rKuBIsNtiOtTEGuDgr2n9PmMXExct UTJB9N58LLlgsWRIrg131RZ7Gl+MLIoWGdhpmlvbNh7BFYQko9hnhNJILu2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FGkKzVP1FiQRW4Zeq/TZUA/iwIwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyg7Y9fGIxc7ufCB4drkrm1F1B1OjTwxA4S 3I1YtJVOv9wgLKRlVc9MxIPxJ6n1/xL1jxidytmkLnH8OtUkyq7RUOigzkHnqh9a DN8oWmh1jTiU2tEbjOu8W6KXYLX3CHGeO7755O9UVxIttvIiFaLejGrwfSKPlOah Q5HGnOLBhFN1A6gXbiIf0jNHSPXC/Unic6bR37aQP3fYgzR6tGXr7EW7lV/dnv1K 41OamKlst2JHCgnR2ctFziBYOpVaZKFR2zDoNPlK20GINFleKk2Y6Ow1Ez/E7p9v ZB0v5ZE1QZ/kOcjUkgcTYcmV0OukBIowACoxJFIXRnHadNlFf7k= -----END CERTIFICATE-----Generated at Thu Aug 7 00:35:46 2025 by rpki-client