$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: xFkkt8OXzCfzAOrulJs9KCbDOTZ8MGUSILxwBTpIGpc= Subject key identifier: F1:66:AC:E4:EC:A4:CA:C8:20:D2:AF:E2:40:27:F5:32:E8:C6:3F:2E Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 0B276B4957100C5A03486FABB2FB12386C85030A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 03C7 Signing time: Mon 21 Jul 2025 02:52:00 +0000 Manifest this update: Mon 21 Jul 2025 02:47:00 +0000 Manifest next update: Thu 24 Jul 2025 10:54:00 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: YXWiu35S7x2xxEdkoOqayVX7+1Ua8yJtoqKYUYtQsPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:27:6b:49:57:10:0c:5a:03:48:6f:ab:b2:fb:12:38:6c:85:03:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Jul 21 02:47:00 2025 GMT Not After : Jul 24 10:54:00 2025 GMT Subject: CN=F166ACE4ECA4CAC820D2AFE24027F532E8C63F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c7:59:b2:fe:e3:16:80:aa:59:75:a9:43:57: 42:47:29:be:be:e7:f2:82:6a:a8:55:86:96:9b:4a: 4f:ce:61:39:fb:60:00:8b:28:fa:19:07:ec:78:4f: be:37:c4:b0:49:d6:7c:25:3b:9a:f6:f9:55:a4:69: 7f:1c:85:63:7f:0f:21:1d:a3:ac:89:50:16:b8:eb: 11:d0:c6:dd:c2:bc:5f:3a:b5:a9:92:86:56:61:e0: 49:8e:d8:29:24:e6:61:ff:af:a0:28:d4:ea:9b:d1: 84:bb:b8:88:df:99:73:fd:0b:13:3f:c3:ab:25:7d: 1a:7d:1c:9d:cc:f7:2f:c7:93:26:ef:6e:60:78:80: e5:2a:70:d9:d4:18:52:d6:a0:52:6f:f0:6c:8a:e6: a5:7e:92:a7:4c:89:d0:07:73:05:b4:a3:1d:61:c3: 3f:a3:66:e7:3c:ba:13:2c:c7:7f:e0:32:06:f9:24: 5f:a2:2e:fc:c0:53:34:16:4d:67:6f:1e:95:96:a7: 4b:d1:2b:ee:7b:8c:97:96:bb:22:b1:65:61:c0:df: 6c:b3:c4:3a:dd:64:8f:54:55:c3:d3:d5:40:c3:79: 7b:3d:44:31:14:c2:42:0d:4b:0c:8d:3d:67:b4:da: 99:2b:e2:55:f8:88:df:07:7d:33:bf:ea:22:b4:6f: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:66:AC:E4:EC:A4:CA:C8:20:D2:AF:E2:40:27:F5:32:E8:C6:3F:2E X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:31:bc:3a:cb:99:c9:0d:bb:8a:ac:ab:78:ab:46:fa:67:a5: 78:47:8c:2d:27:44:1e:f4:59:16:1d:d3:f0:5b:52:dd:8a:72: 42:53:a4:8b:28:76:7a:a5:29:48:08:dd:f7:6c:c7:eb:26:ce: 2b:2d:ab:21:af:13:d0:86:33:0e:f4:9e:4a:32:77:f0:3b:b5: 10:56:a2:94:94:90:af:53:d8:36:2c:a6:2d:62:dc:fe:b8:a3: 0c:3c:6a:0e:ce:fc:73:c3:b4:c4:45:f6:0d:05:57:15:bd:f7: 8e:49:71:bb:a5:a4:9e:28:4f:7a:3b:4e:c6:36:5d:c9:17:34: e8:80:ec:51:74:a6:08:63:4a:6c:0c:96:94:5f:7f:5e:af:8c: 2e:b2:5c:f7:6a:7b:db:6c:14:82:92:cb:b1:21:42:76:08:b5: 45:e0:b7:01:47:8c:20:0b:0f:77:31:ac:85:7a:22:f2:1f:f2: f4:6a:1c:35:d2:bd:98:72:1d:ad:94:d8:e4:23:f2:cd:40:93: 6b:68:bf:42:88:17:91:34:09:74:fa:43:20:72:7c:9d:de:a1: 24:5e:15:a0:6a:a5:56:89:71:c8:d5:c8:69:5d:e0:01:d9:59: 2c:e0:d7:f2:f0:93:09:03:70:64:1e:be:b3:4c:22:47:44:a9: f3:f4:1c:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCydrSVcQDFoDSG+rsvsSOGyFAwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTA3MjEwMjQ3MDBaFw0yNTA3MjQxMDU0MDBaMDMxMTAvBgNV BAMTKEYxNjZBQ0U0RUNBNENBQzgyMEQyQUZFMjQwMjdGNTMyRThDNjNGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyx1my/uMWgKpZdalDV0JHKb6+ 5/KCaqhVhpabSk/OYTn7YACLKPoZB+x4T743xLBJ1nwlO5r2+VWkaX8chWN/DyEd o6yJUBa46xHQxt3CvF86tamShlZh4EmO2Ckk5mH/r6Ao1Oqb0YS7uIjfmXP9CxM/ w6slfRp9HJ3M9y/HkybvbmB4gOUqcNnUGFLWoFJv8GyK5qV+kqdMidAHcwW0ox1h wz+jZuc8uhMsx3/gMgb5JF+iLvzAUzQWTWdvHpWWp0vRK+57jJeWuyKxZWHA32yz xDrdZI9UVcPT1UDDeXs9RDEUwkINSwyNPWe02pkr4lX4iN8HfTO/6iK0b4mzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Was5Oykysgg0q/iQCf1MujGPy4wHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwxvDrLmckNu4qsq3irRvpnpXhHjC0nRB70 WRYd0/BbUt2KckJTpIsodnqlKUgI3fdsx+smzistqyGvE9CGMw70nkoyd/A7tRBW opSUkK9T2DYspi1i3P64oww8ag7O/HPDtMRF9g0FVxW9945JcbulpJ4oT3o7TsY2 XckXNOiA7FF0pghjSmwMlpRff16vjC6yXPdqe9tsFIKSy7EhQnYItUXgtwFHjCAL D3cxrIV6IvIf8vRqHDXSvZhyHa2U2OQj8s1Ak2tov0KIF5E0CXT6QyByfJ3eoSRe FaBqpVaJccjVyGld4AHZWSzg1/LwkwkDcGQevrNMIkdEqfP0HNQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:00 2025 by rpki-client