$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: plEyIc2xqPx+M/NfszWB+MjgbIyiLWvvc6Zn0teLUcI= Subject key identifier: 44:A3:1D:80:B6:03:BE:37:C8:53:03:1E:E7:79:23:E7:F9:4B:21:14 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 1C105903AC93AB155948C03A6D51E6618C3135BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: F6 Signing time: Sun 15 Jun 2025 09:31:33 +0000 Manifest this update: Sun 15 Jun 2025 09:26:33 +0000 Manifest next update: Wed 18 Jun 2025 21:17:33 +0000 Files and hashes: 1: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: /exKp5LGPZNDS8AQuShHpO12siZZrl8+2+mqneN5kzs=) 2: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: Y23uNzVl1el7iBWf5vpvozngx2OvIctjxpp0+0DIq2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:10:59:03:ac:93:ab:15:59:48:c0:3a:6d:51:e6:61:8c:31:35:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Jun 15 09:26:33 2025 GMT Not After : Jun 18 21:17:33 2025 GMT Subject: CN=44A31D80B603BE37C853031EE77923E7F94B2114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:2c:b8:8b:61:0b:87:5e:be:1c:49:c0:9c: c1:1b:cc:f7:9c:db:50:71:d4:51:cc:66:03:3f:38: 84:7a:96:07:06:48:11:58:ec:cc:c1:95:6e:90:33: 90:1d:71:d2:0a:6c:7b:0d:31:78:4d:24:f3:db:21: df:f7:b9:3f:34:e2:01:88:05:99:d5:80:1a:dc:c8: ef:4e:47:17:4e:de:78:67:97:93:8a:b6:f6:0c:fb: a2:aa:da:7c:75:7d:24:fa:4c:d5:14:bd:ea:ff:ba: db:bf:9d:89:e3:f7:cf:ae:87:d3:c6:07:cc:14:23: 21:0b:90:bf:6d:a6:0c:c5:b3:5b:9e:b5:e5:c0:60: b7:80:58:85:41:47:bd:d7:da:5f:05:29:71:0e:0a: 1d:3f:62:d8:18:62:42:7e:79:40:7d:26:5a:ba:bf: e0:8a:39:71:7b:80:36:5b:9b:b5:49:c4:83:79:38: 1d:41:a2:71:ea:4f:8a:fd:ae:89:68:93:6d:b3:5f: ad:86:94:7e:f1:31:93:9b:47:36:f5:24:8d:b2:36: f1:73:d5:ff:6b:c9:18:2f:a8:38:b3:a2:f4:0d:fc: 98:b6:3d:9d:fc:7e:b4:fc:fc:46:be:02:fa:f7:ad: 56:69:18:99:df:ce:c7:a4:f8:cf:15:c7:40:14:38: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A3:1D:80:B6:03:BE:37:C8:53:03:1E:E7:79:23:E7:F9:4B:21:14 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:24:11:4d:e6:c6:f9:07:2f:dd:4e:8d:98:12:67:b4:ef:77: fa:57:b3:84:d6:6c:0d:33:e0:43:85:af:45:d8:16:97:d3:23: 24:4c:11:0e:ff:2b:dd:62:05:78:63:32:35:46:88:4a:bf:b8: f5:80:58:1b:a5:21:cd:4b:9e:cd:54:dd:51:df:59:85:aa:cf: fe:02:47:60:24:51:23:56:48:05:eb:98:0a:84:56:d5:01:81: db:c3:7d:cb:f8:09:09:ed:5b:6b:de:56:89:76:f9:67:c8:66: 6e:08:7a:e6:7f:cb:94:c7:63:96:38:78:c4:6a:a6:e5:ff:47: 22:51:9c:4a:4e:ff:fb:4b:3d:6e:00:bf:cd:e8:3a:b5:7a:25: 68:dd:41:7f:5f:6d:eb:34:43:d0:2c:b6:c9:10:44:52:87:0a: 4f:50:c5:df:82:b8:20:d8:5a:e3:80:78:6d:4e:28:26:82:56: d1:e6:00:05:9a:50:37:20:ae:20:06:88:f9:bd:45:5d:61:9f: d9:f4:9a:87:c1:f6:94:86:41:51:4f:91:ac:6a:f5:74:cc:5f: 23:9b:2b:03:07:d6:34:47:b5:5e:9a:25:48:36:ea:e8:29:96: 28:bb:9d:92:b9:05:dc:39:c3:17:2e:0d:c9:c9:26:05:7b:d9: c8:cf:1d:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBBZA6yTqxVZSMA6bVHmYYwxNb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTA2MTUwOTI2MzNaFw0yNTA2MTgyMTE3MzNaMDMxMTAvBgNV BAMTKDQ0QTMxRDgwQjYwM0JFMzdDODUzMDMxRUU3NzkyM0U3Rjk0QjIxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOCy4i2ELh16+HEnAnMEbzPec 21Bx1FHMZgM/OIR6lgcGSBFY7MzBlW6QM5AdcdIKbHsNMXhNJPPbId/3uT804gGI BZnVgBrcyO9ORxdO3nhnl5OKtvYM+6Kq2nx1fST6TNUUver/utu/nYnj98+uh9PG B8wUIyELkL9tpgzFs1ueteXAYLeAWIVBR73X2l8FKXEOCh0/YtgYYkJ+eUB9Jlq6 v+CKOXF7gDZbm7VJxIN5OB1BonHqT4r9rolok22zX62GlH7xMZObRzb1JI2yNvFz 1f9ryRgvqDizovQN/Ji2PZ38frT8/Ea+Avr3rVZpGJnfzsek+M8Vx0AUOD+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKMdgLYDvjfIUwMe53kj5/lLIRQwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHckEU3mxvkHL91OjZgSZ7Tvd/pXs4TWbA0z 4EOFr0XYFpfTIyRMEQ7/K91iBXhjMjVGiEq/uPWAWBulIc1Lns1U3VHfWYWqz/4C R2AkUSNWSAXrmAqEVtUBgdvDfcv4CQntW2veVol2+WfIZm4IeuZ/y5THY5Y4eMRq puX/RyJRnEpO//tLPW4Av83oOrV6JWjdQX9fbes0Q9AstskQRFKHCk9Qxd+CuCDY WuOAeG1OKCaCVtHmAAWaUDcgriAGiPm9RV1hn9n0mofB9pSGQVFPkaxq9XTMXyOb KwMH1jRHtV6aJUg26ugplii7nZK5Bdw5wxcuDcnJJgV72cjPHSE= -----END CERTIFICATE-----Generated at Tue Jun 17 00:06:44 2025 by rpki-client