$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: DB/G7JEs9+M9nPw0WAbaSukL1IgwDyd3NFZx1poGxm8= Subject key identifier: 1F:F4:3E:ED:BA:97:B4:74:B0:9D:F8:73:2B:6E:D0:8D:B0:2C:2E:35 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 7474A3B9C80DD351965253F10D5A7EEA80C81139 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 010D Signing time: Tue 05 Aug 2025 05:31:37 +0000 Manifest this update: Tue 05 Aug 2025 05:26:37 +0000 Manifest next update: Fri 08 Aug 2025 08:40:37 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: Y23uNzVl1el7iBWf5vpvozngx2OvIctjxpp0+0DIq2E=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: XEOa7n+FJkaM7WJ4Of0o8AFUaaCWnvZc1GG2FDw9g+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 08:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:74:a3:b9:c8:0d:d3:51:96:52:53:f1:0d:5a:7e:ea:80:c8:11:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Aug 5 05:26:37 2025 GMT Not After : Aug 8 08:40:37 2025 GMT Subject: CN=1FF43EEDBA97B474B09DF8732B6ED08DB02C2E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:99:ed:3a:9e:4e:f6:45:6a:d2:e6:fa:67: e9:fc:16:60:c3:6d:9f:0b:0b:f4:79:69:60:d6:5e: 14:0a:7e:fc:b7:12:90:4f:97:11:ec:04:2b:0c:97: 8c:9f:2e:b4:3f:06:90:d5:0d:c9:64:df:15:53:73: 27:d2:a6:a8:53:b0:6c:ea:5a:15:b9:4d:d3:5f:a7: c7:53:7f:83:32:3f:40:2b:23:6a:24:af:e8:43:80: 20:e6:53:16:cb:59:4e:2b:e2:a2:72:49:93:b2:4b: 99:93:c8:ef:78:e8:3e:83:b8:8f:db:f0:f1:d3:8b: 3b:64:92:9c:23:fb:55:da:ff:79:36:58:54:8c:0b: 29:c6:50:8d:f6:07:a7:14:c4:ab:7b:be:55:82:a4: 0d:b1:f4:25:59:00:4c:68:cc:30:7a:d8:ce:59:a6: 9a:07:c3:08:8a:cb:6e:16:81:eb:3b:0a:43:f5:50: a5:d6:b4:14:e8:f4:ee:d9:fb:c9:3c:d0:af:13:57: 23:2f:b1:23:ff:84:19:70:0a:da:56:fb:ca:26:4e: ef:b7:e5:53:bf:db:68:93:1c:12:9e:92:20:9f:bc: 52:bf:2c:2b:16:90:32:91:3f:17:4a:a0:9c:4c:50: ef:1b:b7:f6:f9:03:90:95:b2:89:84:23:e7:de:1e: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:3E:ED:BA:97:B4:74:B0:9D:F8:73:2B:6E:D0:8D:B0:2C:2E:35 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fb:0f:e8:59:d7:fe:18:19:3d:82:03:df:99:f0:0b:3e:c4: 04:81:4c:d8:de:ee:4b:78:7d:57:cf:d2:38:a5:68:ab:d3:71: 89:df:47:2e:a3:4a:67:54:05:ba:45:97:59:f5:e0:79:01:a4: bc:8f:5d:7d:58:51:81:90:c4:4a:e4:71:9f:f3:ba:94:48:37: 14:c7:85:e1:65:46:94:49:f5:9c:52:cd:5d:e3:20:95:e7:26: 24:53:33:8e:cf:bf:62:d2:2e:59:2a:20:25:df:83:92:05:56: 17:4c:0c:62:18:5d:e1:2b:54:47:3a:58:9c:09:63:f0:4f:9f: a2:8b:6a:52:68:1b:9e:57:19:0f:c0:b9:01:36:c3:aa:cb:71: 6d:99:c7:16:0c:f7:3f:60:d5:f2:f6:0d:6b:3f:c3:f4:fa:3c: fd:5c:bc:d7:c5:62:e0:54:8b:d7:d8:55:86:52:6e:2c:38:05: aa:65:1b:84:61:a2:9d:71:48:a7:49:bb:0a:ed:ec:1e:ea:ab: 56:3d:9e:f9:43:e4:60:b6:f7:2f:1c:d6:80:fc:ff:ce:34:68: 44:63:0a:65:cd:26:5e:b7:db:0a:dc:19:27:0c:a4:68:c2:c5: 36:49:26:46:f9:8b:5f:a4:16:eb:9e:0c:da:e0:0a:c1:31:d3: 7b:bc:ff:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHSjucgN01GWUlPxDVp+6oDIETkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTA4MDUwNTI2MzdaFw0yNTA4MDgwODQwMzdaMDMxMTAvBgNV BAMTKDFGRjQzRUVEQkE5N0I0NzRCMDlERjg3MzJCNkVEMDhEQjAyQzJFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC155ntOp5O9kVq0ub6Z+n8FmDD bZ8LC/R5aWDWXhQKfvy3EpBPlxHsBCsMl4yfLrQ/BpDVDclk3xVTcyfSpqhTsGzq WhW5TdNfp8dTf4MyP0ArI2okr+hDgCDmUxbLWU4r4qJySZOyS5mTyO946D6DuI/b 8PHTiztkkpwj+1Xa/3k2WFSMCynGUI32B6cUxKt7vlWCpA2x9CVZAExozDB62M5Z ppoHwwiKy24Wges7CkP1UKXWtBTo9O7Z+8k80K8TVyMvsSP/hBlwCtpW+8omTu+3 5VO/22iTHBKekiCfvFK/LCsWkDKRPxdKoJxMUO8bt/b5A5CVsomEI+feHoeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/Q+7bqXtHSwnfhzK27QjbAsLjUwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/7D+hZ1/4YGT2CA9+Z8As+xASBTNje7kt4 fVfP0jilaKvTcYnfRy6jSmdUBbpFl1n14HkBpLyPXX1YUYGQxErkcZ/zupRINxTH heFlRpRJ9ZxSzV3jIJXnJiRTM47Pv2LSLlkqICXfg5IFVhdMDGIYXeErVEc6WJwJ Y/BPn6KLalJoG55XGQ/AuQE2w6rLcW2ZxxYM9z9g1fL2DWs/w/T6PP1cvNfFYuBU i9fYVYZSbiw4BaplG4Rhop1xSKdJuwrt7B7qq1Y9nvlD5GC29y8c1oD8/840aERj CmXNJl632wrcGScMpGjCxTZJJkb5i1+kFuueDNrgCsEx03u8/9M= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:51 2025 by rpki-client