$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: Y6HLmpEi6ymAHRWc5DP07wn1WKRgrD9AZQ24yytiKdg= Subject key identifier: 10:97:94:90:FC:62:E6:E5:E9:88:BD:A4:AC:C0:F5:E1:16:6D:73:64 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 45C163E6D791B39D7B33C0871ACAE5D5FEDA88EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 0136 Signing time: Mon 03 Nov 2025 06:31:35 +0000 Manifest this update: Mon 03 Nov 2025 06:26:35 +0000 Manifest next update: Thu 06 Nov 2025 09:14:35 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: ux4o4SLloJxKdYt9YCjKDky+bex2mhf9IL6gQ22QEOs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c1:63:e6:d7:91:b3:9d:7b:33:c0:87:1a:ca:e5:d5:fe:da:88:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Nov 3 06:26:35 2025 GMT Not After : Nov 6 09:14:35 2025 GMT Subject: CN=10979490FC62E6E5E988BDA4ACC0F5E1166D7364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:95:74:e9:e0:a7:1b:0c:92:1e:eb:8c:53:ee: 53:85:fc:7a:e8:3b:9b:f8:5e:b0:01:15:d0:06:e1: e6:18:f5:47:e0:62:fc:d0:d3:9c:32:7d:4f:d2:b7: 34:08:6f:9d:f4:c8:5a:db:84:40:fe:3b:17:80:07: bc:a2:f7:37:8f:9e:11:0b:72:c5:fb:e4:c0:4d:c0: 46:02:dc:85:94:b1:08:ec:61:ad:f2:7e:c9:90:c1: cc:9b:3c:4a:02:70:ee:92:2e:c9:84:6f:f8:60:45: fe:5f:55:1e:ff:7f:08:70:2f:17:0a:be:e5:72:c2: fb:c7:b6:80:e4:62:d7:65:27:b6:7a:ef:29:ca:13: a6:59:19:2b:5b:25:36:17:8f:b4:3d:47:89:ba:08: c2:85:9b:9f:df:0f:64:22:27:62:02:68:de:09:fb: df:f6:1b:75:00:70:81:13:c4:8f:f4:65:46:da:ba: 24:82:5c:b6:72:59:0c:a4:15:d6:c3:9e:37:f3:c7: 0b:5f:c5:f9:bf:c7:5e:f0:12:5e:c0:8a:74:2d:65: b7:a0:a3:0d:e9:e7:89:f2:0b:19:e7:94:9a:57:47: 3f:1c:4e:1e:2a:14:6e:36:61:81:df:cd:5d:76:4f: cb:dc:39:58:fc:6f:3c:85:b3:21:9c:85:10:d8:35: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:97:94:90:FC:62:E6:E5:E9:88:BD:A4:AC:C0:F5:E1:16:6D:73:64 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f6:ac:45:8c:9a:10:bd:0e:1e:04:69:98:dc:98:dd:a4:c6: c2:a5:1a:4c:84:d3:b9:6d:45:94:f9:3e:c3:b2:44:78:8d:10: 3d:47:4c:0f:64:36:60:74:a0:89:ee:fe:23:30:35:3d:6f:36: cc:94:b8:27:08:3b:0e:80:b4:af:6b:b8:1f:41:da:d2:bf:ca: a7:8d:c7:09:63:bf:55:91:61:f8:14:2c:6e:a5:83:d7:db:42: d7:3c:26:97:7c:3c:1e:6e:02:94:e6:f3:3b:5b:84:5c:4b:52: 40:c1:bb:69:42:8a:84:49:48:e6:5e:12:1a:b2:dd:f2:a3:c2: 91:5b:96:b9:3b:1c:26:db:2f:22:7d:5f:4b:da:9d:9a:21:4f: 51:3c:14:a6:2e:4a:b1:f5:a3:8a:90:48:17:bd:28:a1:64:5e: 8e:ba:77:c7:fe:ae:8c:7c:a6:d6:25:a2:a8:b7:d9:51:5d:14: 70:37:69:94:c3:07:28:26:e6:19:74:a6:f2:9f:93:a0:b3:31: 54:4c:09:52:7a:ff:b4:47:58:af:a3:fe:57:72:08:9b:a0:b9: ea:e3:b4:9f:aa:10:fe:c4:ca:c9:41:e5:1c:92:cd:be:da:be: 58:bc:5a:a7:c9:9a:b4:de:c1:de:fc:98:86:84:78:a2:b8:ae: 9c:47:2f:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURcFj5teRs517M8CHGsrl1f7aiOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTExMDMwNjI2MzVaFw0yNTExMDYwOTE0MzVaMDMxMTAvBgNV BAMTKDEwOTc5NDkwRkM2MkU2RTVFOTg4QkRBNEFDQzBGNUUxMTY2RDczNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmlXTp4KcbDJIe64xT7lOF/Hro O5v4XrABFdAG4eYY9UfgYvzQ05wyfU/StzQIb530yFrbhED+OxeAB7yi9zePnhEL csX75MBNwEYC3IWUsQjsYa3yfsmQwcybPEoCcO6SLsmEb/hgRf5fVR7/fwhwLxcK vuVywvvHtoDkYtdlJ7Z67ynKE6ZZGStbJTYXj7Q9R4m6CMKFm5/fD2QiJ2ICaN4J +9/2G3UAcIETxI/0ZUbauiSCXLZyWQykFdbDnjfzxwtfxfm/x17wEl7AinQtZbeg ow3p54nyCxnnlJpXRz8cTh4qFG42YYHfzV12T8vcOVj8bzyFsyGchRDYNWeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEJeUkPxi5uXpiL2krMD14RZtc2QwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI72rEWMmhC9Dh4EaZjcmN2kxsKlGkyE07lt RZT5PsOyRHiNED1HTA9kNmB0oInu/iMwNT1vNsyUuCcIOw6AtK9ruB9B2tK/yqeN xwljv1WRYfgULG6lg9fbQtc8Jpd8PB5uApTm8ztbhFxLUkDBu2lCioRJSOZeEhqy 3fKjwpFblrk7HCbbLyJ9X0vanZohT1E8FKYuSrH1o4qQSBe9KKFkXo66d8f+rox8 ptYloqi32VFdFHA3aZTDBygm5hl0pvKfk6CzMVRMCVJ6/7RHWK+j/ldyCJuguerj tJ+qEP7EyslB5RySzb7avli8WqfJmrTewd78mIaEeKK4rpxHL1U= -----END CERTIFICATE-----Generated at Wed Nov 5 04:29:43 2025 by rpki-client