$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: vXcxmG2+WSiaJnCf7SOLTjVUVDl7S/usxepRpKIiles= Subject key identifier: 08:BB:2F:DF:0E:FC:02:4F:3C:61:6C:EE:A9:64:8D:2D:1F:9E:FF:0B Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 493254368746C0C063593C5BC71452F1E3EEBF60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: A5 Signing time: Sun 15 Jun 2025 16:02:05 +0000 Manifest this update: Sun 15 Jun 2025 15:57:05 +0000 Manifest next update: Wed 18 Jun 2025 21:16:05 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: B4GtqU+T4mXyxoOy7n2MP8wy0iQxIhst3BeDyva7h+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:32:54:36:87:46:c0:c0:63:59:3c:5b:c7:14:52:f1:e3:ee:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Jun 15 15:57:05 2025 GMT Not After : Jun 18 21:16:05 2025 GMT Subject: CN=08BB2FDF0EFC024F3C616CEEA9648D2D1F9EFF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:c2:3d:91:48:e9:c3:3c:b2:b9:68:a3:6a: 61:a5:a2:11:bc:fb:12:1d:8e:ac:ea:67:fe:da:b7: 9c:4a:03:42:9b:4e:68:c7:c2:0a:1a:0f:1e:c6:b3: b6:83:67:c5:71:e9:44:cd:dc:49:01:6f:b9:58:6a: f0:c6:01:56:42:11:c0:15:1c:65:cc:ac:e0:c3:da: ba:bf:03:05:10:74:45:e3:de:d3:10:14:56:e7:c1: ff:df:9a:96:e9:01:a3:33:f8:3f:17:a6:46:48:dd: 03:b9:14:79:9d:c3:a1:fb:46:44:30:3b:d3:3f:4b: c4:05:fb:fe:a1:b9:03:75:35:04:c3:d4:2a:85:7f: 45:db:62:80:7e:9f:fd:5f:7c:16:8f:bf:01:e0:81: a9:e3:8e:e9:70:df:02:b8:55:20:9a:03:48:f3:25: f7:37:21:18:92:24:cd:a4:35:4f:88:27:48:e3:4b: 9a:a5:26:bc:6a:af:2d:dd:d4:af:b0:33:24:0c:d8: a9:d3:ae:57:5b:97:5a:ff:49:47:4a:22:f3:06:94: 7c:2e:cf:f0:de:e2:b9:c4:6b:5f:5b:6a:1a:8d:dc: f3:80:23:e3:05:71:6c:01:70:7c:a2:98:06:6d:17: ad:d1:7a:80:e1:f2:26:15:21:3b:b9:3d:30:64:95: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BB:2F:DF:0E:FC:02:4F:3C:61:6C:EE:A9:64:8D:2D:1F:9E:FF:0B X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:eb:fb:d2:3d:72:a9:f8:2a:70:d7:b5:77:8b:ab:bf:eb:d6: d3:c8:2f:7f:50:3c:2f:ab:33:f5:d4:85:d6:e4:1d:90:c8:df: 55:9d:1f:51:f3:4e:88:8c:e3:c3:67:80:48:99:03:b3:03:6e: 54:49:e2:73:c5:a8:01:ca:82:c8:a0:20:5e:77:69:4e:5c:00: 3d:ce:1c:11:15:fd:a9:49:91:e3:56:89:3c:cf:56:a6:0e:54: 2f:df:35:96:ea:ab:d8:4a:72:f8:50:fd:90:09:75:52:40:33: d7:bb:b3:32:10:19:81:5f:c3:0d:a9:93:c6:53:5e:41:2f:7c: db:f5:bb:9d:fd:77:52:5d:10:f4:44:c9:8b:82:e2:79:56:25: 0a:47:63:ac:34:81:fa:ad:68:5d:15:ce:eb:7e:9e:ec:9b:68: 5c:36:db:6c:b5:e1:03:a7:57:51:d9:bc:84:dd:38:23:44:19: d7:e1:fb:07:ed:48:2f:0e:31:27:70:52:56:92:03:04:7f:b4: 0f:d7:a9:2e:5b:0e:aa:4b:4d:45:46:1c:38:1a:8f:ec:1f:cd: a3:b9:00:eb:9e:57:ab:06:4c:76:b2:68:5d:45:f3:95:d0:40: 9a:81:20:bf:50:05:a4:c0:ec:92:b0:03:24:33:5b:d5:e0:83: 19:2e:9d:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTJUNodGwMBjWTxbxxRS8ePuv2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA2MTUxNTU3MDVaFw0yNTA2MTgyMTE2MDVaMDMxMTAvBgNV BAMTKDA4QkIyRkRGMEVGQzAyNEYzQzYxNkNFRUE5NjQ4RDJEMUY5RUZGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRMI9kUjpwzyyuWijamGlohG8 +xIdjqzqZ/7at5xKA0KbTmjHwgoaDx7Gs7aDZ8Vx6UTN3EkBb7lYavDGAVZCEcAV HGXMrODD2rq/AwUQdEXj3tMQFFbnwf/fmpbpAaMz+D8XpkZI3QO5FHmdw6H7RkQw O9M/S8QF+/6huQN1NQTD1CqFf0XbYoB+n/1ffBaPvwHgganjjulw3wK4VSCaA0jz Jfc3IRiSJM2kNU+IJ0jjS5qlJrxqry3d1K+wMyQM2KnTrldbl1r/SUdKIvMGlHwu z/De4rnEa19bahqN3POAI+MFcWwBcHyimAZtF63ReoDh8iYVITu5PTBklRpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCLsv3w78Ak88YWzuqWSNLR+e/wswHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzr+9I9cqn4KnDXtXeLq7/r1tPIL39QPC+r M/XUhdbkHZDI31WdH1HzToiM48NngEiZA7MDblRJ4nPFqAHKgsigIF53aU5cAD3O HBEV/alJkeNWiTzPVqYOVC/fNZbqq9hKcvhQ/ZAJdVJAM9e7szIQGYFfww2pk8ZT XkEvfNv1u539d1JdEPREyYuC4nlWJQpHY6w0gfqtaF0Vzut+nuybaFw222y14QOn V1HZvITdOCNEGdfh+wftSC8OMSdwUlaSAwR/tA/XqS5bDqpLTUVGHDgaj+wfzaO5 AOueV6sGTHayaF1F85XQQJqBIL9QBaTA7JKwAyQzW9XggxkunZE= -----END CERTIFICATE-----Generated at Mon Jun 16 11:51:16 2025 by rpki-client