$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: foawMjFZVRJ2fBswj6/66xOxJKGRJ9qqtFhANj0PLyc= Subject key identifier: DC:AC:DD:C8:7F:23:D8:84:B0:07:4E:3F:77:92:C2:40:50:D5:B6:E4 Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 5ACCBE35139646FDF2F7945E6DD84A3C3EF6020C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 010F Signing time: Wed 23 Jul 2025 03:20:44 +0000 Manifest this update: Wed 23 Jul 2025 03:15:44 +0000 Manifest next update: Sat 26 Jul 2025 13:28:44 +0000 Files and hashes: 1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=) 2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: Yw/IT56BVsy+s1wXohASL0NqF1/JkHNa8g553hIHV0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cc:be:35:13:96:46:fd:f2:f7:94:5e:6d:d8:4a:3c:3e:f6:02:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Jul 23 03:15:44 2025 GMT Not After : Jul 26 13:28:44 2025 GMT Subject: CN=DCACDDC87F23D884B0074E3F7792C24050D5B6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2d:e6:26:8d:80:2c:d7:1c:8e:26:28:08:0d: 3c:99:54:75:07:31:85:2a:34:58:14:c2:5d:92:ed: fc:16:66:85:57:22:07:7c:44:37:38:0c:6c:46:ef: 1d:34:62:b2:cd:95:b2:25:93:b1:5c:75:7c:df:00: ba:ca:8a:00:94:38:18:78:07:92:ce:e0:c0:ca:9b: e4:64:c9:c5:af:c0:da:86:9d:7a:f9:bb:de:c5:49: 35:a7:0f:bb:6f:ba:1b:b3:0f:48:e5:de:e6:62:d3: 3d:2d:c4:33:f8:ae:66:a2:57:d5:eb:26:46:8e:5b: ce:88:57:09:4f:af:4b:aa:50:8b:5d:9e:7d:df:16: 99:f1:7f:4f:ce:d1:fa:1c:d3:60:7c:58:e0:41:dc: 30:4c:fc:1f:1a:93:ea:a5:22:7e:1e:93:35:6c:21: 5d:36:a5:71:d6:0f:3b:d0:2c:72:40:5f:79:59:85: 55:09:6a:9f:e2:ea:a0:30:2e:7f:ac:bf:eb:90:b4: 1b:29:b2:27:03:0c:18:4a:f5:20:26:c1:6f:3b:11: df:6d:c6:42:53:20:4a:98:61:28:50:b6:8d:df:d2: ce:f1:a9:06:e5:62:30:07:41:7a:a0:b0:56:c8:bd: 26:dd:dd:c7:76:60:1a:03:3e:8b:f3:be:e6:5f:11: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AC:DD:C8:7F:23:D8:84:B0:07:4E:3F:77:92:C2:40:50:D5:B6:E4 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:94:54:d2:65:59:0b:d4:4c:19:83:eb:e8:7c:0a:e1:c5:76: 42:c2:fa:6b:b5:86:42:5e:80:73:14:e9:c8:fb:88:89:7b:b0: e5:9e:cc:a2:48:81:1e:78:4c:a8:ab:d9:80:db:ad:f5:29:bb: 33:99:18:d4:df:9b:cb:bd:5a:8e:03:98:d6:e7:e5:d7:64:23: 7b:e5:92:29:f9:68:a3:47:21:09:41:df:cf:9f:73:98:08:a9: eb:ce:eb:f8:af:5d:33:77:ce:58:80:23:ad:fe:c3:d3:57:8b: b3:65:2a:b9:c5:0a:88:4d:5f:9b:9f:18:f7:6e:10:5e:78:25: 8c:e4:73:26:c7:81:36:e5:7e:72:74:14:cd:a6:bd:f9:8e:64: 22:1d:ea:d4:6f:98:53:3e:e1:2d:f2:e2:5d:d2:85:35:79:5e: aa:75:ce:75:b6:97:ae:7f:ce:ac:09:6a:04:24:1d:6c:85:c8: 42:5a:4b:e3:e6:06:fd:b2:b9:1a:8c:29:dc:1b:54:cd:60:c2: ad:65:7a:03:5e:6f:43:eb:b2:4f:e5:9d:63:52:dc:ee:32:c8: 27:3d:f5:e8:c1:70:f3:9a:ee:e3:16:86:41:74:e6:00:be:4c: ea:79:4d:c7:e5:f9:be:ac:ff:47:63:15:b8:8a:13:2a:8f:7a: 16:c1:ee:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsy+NROWRv3y95RebdhKPD72AgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNTA3MjMwMzE1NDRaFw0yNTA3MjYxMzI4NDRaMDMxMTAvBgNV BAMTKERDQUNEREM4N0YyM0Q4ODRCMDA3NEUzRjc3OTJDMjQwNTBENUI2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLeYmjYAs1xyOJigIDTyZVHUH MYUqNFgUwl2S7fwWZoVXIgd8RDc4DGxG7x00YrLNlbIlk7FcdXzfALrKigCUOBh4 B5LO4MDKm+RkycWvwNqGnXr5u97FSTWnD7tvuhuzD0jl3uZi0z0txDP4rmaiV9Xr JkaOW86IVwlPr0uqUItdnn3fFpnxf0/O0foc02B8WOBB3DBM/B8ak+qlIn4ekzVs IV02pXHWDzvQLHJAX3lZhVUJap/i6qAwLn+sv+uQtBspsicDDBhK9SAmwW87Ed9t xkJTIEqYYShQto3f0s7xqQblYjAHQXqgsFbIvSbd3cd2YBoDPovzvuZfEeFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3KzdyH8j2ISwB04/d5LCQFDVtuQwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqUVNJlWQvUTBmD6+h8CuHFdkLC+mu1hkJe gHMU6cj7iIl7sOWezKJIgR54TKir2YDbrfUpuzOZGNTfm8u9Wo4DmNbn5ddkI3vl kin5aKNHIQlB38+fc5gIqevO6/ivXTN3zliAI63+w9NXi7NlKrnFCohNX5ufGPdu EF54JYzkcybHgTblfnJ0FM2mvfmOZCId6tRvmFM+4S3y4l3ShTV5Xqp1znW2l65/ zqwJagQkHWyFyEJaS+PmBv2yuRqMKdwbVM1gwq1legNeb0Prsk/lnWNS3O4yyCc9 9ejBcPOa7uMWhkF05gC+TOp5Tcfl+b6s/0djFbiKEyqPehbB7k8= -----END CERTIFICATE-----Generated at Wed Jul 23 12:59:39 2025 by rpki-client