$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: H2/LDokfB0HhGgLNkoIzze8ewVGBNcU1SEj7yO3PVNU= Subject key identifier: 3A:53:5D:D2:FD:79:B0:78:F3:3B:25:F8:3D:6B:CC:68:AC:0F:E3:B3 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 0A059F44DFAD5C3E10426B0C689CC96BF663A606 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: E3 Signing time: Mon 03 Nov 2025 02:52:11 +0000 Manifest this update: Mon 03 Nov 2025 02:47:10 +0000 Manifest next update: Thu 06 Nov 2025 09:42:10 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: NLfRruMlYy/CwB+tMoYQ9p3/5JYYobBCRjuf8tPa/uE=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:05:9f:44:df:ad:5c:3e:10:42:6b:0c:68:9c:c9:6b:f6:63:a6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Nov 3 02:47:10 2025 GMT Not After : Nov 6 09:42:10 2025 GMT Subject: CN=3A535DD2FD79B078F33B25F83D6BCC68AC0FE3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:0b:be:a5:d8:ab:68:21:1c:eb:63:f3:96: 5e:5c:2e:89:88:2f:95:fd:76:c7:8f:f0:7e:6d:41: 3b:3f:b3:86:b1:2c:bf:a8:4e:2c:da:4c:be:fa:4b: 01:63:cf:30:d9:62:dc:f6:6f:6f:48:ff:8e:78:be: f8:8c:a8:d0:9c:7d:c9:54:9a:cb:73:1e:3f:c9:b5: 7d:34:f9:2f:08:81:92:ff:ce:81:82:e9:96:33:d4: 86:ba:0c:ca:b5:ec:9f:0e:d2:68:4a:4c:60:60:a0: a5:ec:b6:09:51:33:9f:ea:b8:f0:7e:b7:b4:7f:1b: c9:15:c6:0a:b3:7b:a2:e9:0b:ae:fb:98:2d:19:1c: 16:83:9c:84:0f:57:38:1f:00:69:eb:73:7a:fc:2a: ff:52:a1:71:b4:d8:dc:50:a5:c8:4f:be:b1:22:97: 7f:45:85:ce:4f:27:db:f3:ca:2e:81:a3:88:a3:5d: f8:b1:b1:55:14:82:31:80:d1:e9:cd:4c:ab:90:d5: 16:86:24:ac:40:ea:e9:90:48:11:a7:5a:a0:a8:31: 83:8f:af:17:96:58:73:77:15:5a:96:76:71:f2:47: 95:e5:ac:66:c0:49:8b:39:88:9d:78:91:6f:d1:51: 7e:1e:06:0a:f2:4e:e5:e4:dd:56:33:8a:54:ed:0f: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:5D:D2:FD:79:B0:78:F3:3B:25:F8:3D:6B:CC:68:AC:0F:E3:B3 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e7:9c:54:f0:0e:a3:c1:82:97:8f:69:c2:13:8b:bc:da:5c: 21:71:90:2d:64:e2:07:8c:b8:0e:65:b5:b2:38:9b:4a:8a:20: a1:6f:f5:8e:82:64:61:bb:1b:40:38:b8:2b:ec:94:bd:e0:89: 23:fb:6d:03:72:f2:7d:35:91:11:49:28:d5:37:1a:a3:28:81: fd:b2:ee:6a:92:f1:27:9c:13:77:c8:dc:89:57:02:66:b2:94: 1a:48:6e:cb:e1:c9:d3:75:e0:54:3d:ff:60:ab:b3:ae:41:15: 12:23:de:64:5a:65:42:2e:4a:13:da:9e:69:01:f8:96:7b:28: 64:97:28:a4:7f:d7:59:5d:e6:f0:d9:75:d2:ef:9a:05:64:5e: e9:89:02:19:d0:c9:e5:b1:9b:eb:8e:bc:94:ea:2c:53:3a:03: 5b:d0:a8:6f:78:ca:48:09:57:c3:9a:44:9c:53:7a:1d:c4:6b: 06:3c:3e:e0:8c:59:0c:9a:65:37:8b:d4:8b:6d:a1:d5:4f:31: 32:6b:3d:a9:e3:5a:9e:90:6a:27:e6:0f:be:a3:cc:3b:4b:20: 9e:e6:4b:9a:61:c6:e7:c9:2f:2d:45:32:a4:82:1d:27:8f:8b: 5e:74:60:22:c6:ca:c1:ed:19:98:36:ea:76:e0:92:c5:13:95: ac:93:38:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgWfRN+tXD4QQmsMaJzJa/ZjpgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTExMDMwMjQ3MTBaFw0yNTExMDYwOTQyMTBaMDMxMTAvBgNV BAMTKDNBNTM1REQyRkQ3OUIwNzhGMzNCMjVGODNENkJDQzY4QUMwRkUzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmQu+pdiraCEc62Pzll5cLomI L5X9dseP8H5tQTs/s4axLL+oTizaTL76SwFjzzDZYtz2b29I/454vviMqNCcfclU mstzHj/JtX00+S8IgZL/zoGC6ZYz1Ia6DMq17J8O0mhKTGBgoKXstglRM5/quPB+ t7R/G8kVxgqze6LpC677mC0ZHBaDnIQPVzgfAGnrc3r8Kv9SoXG02NxQpchPvrEi l39Fhc5PJ9vzyi6Bo4ijXfixsVUUgjGA0enNTKuQ1RaGJKxA6umQSBGnWqCoMYOP rxeWWHN3FVqWdnHyR5XlrGbASYs5iJ14kW/RUX4eBgryTuXk3VYzilTtD+nlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlNd0v15sHjzOyX4PWvMaKwP47MwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnnnFTwDqPBgpePacITi7zaXCFxkC1k4geM uA5ltbI4m0qKIKFv9Y6CZGG7G0A4uCvslL3giSP7bQNy8n01kRFJKNU3GqMogf2y 7mqS8SecE3fI3IlXAmaylBpIbsvhydN14FQ9/2Crs65BFRIj3mRaZUIuShPanmkB +JZ7KGSXKKR/11ld5vDZddLvmgVkXumJAhnQyeWxm+uOvJTqLFM6A1vQqG94ykgJ V8OaRJxTeh3EawY8PuCMWQyaZTeL1IttodVPMTJrPanjWp6QaifmD76jzDtLIJ7m S5phxufJLy1FMqSCHSePi150YCLGysHtGZg26nbgksUTlayTODE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:14:44 2025 by rpki-client