$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: Juyhf27GlJoyXNDSizVSZSYSpuMLGf/3fVfwq3M+Cr0= Subject key identifier: 5F:28:03:1F:39:ED:20:42:FD:67:79:5F:ED:7C:59:D3:C6:3D:02:E9 Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 391E43706DBAE7D2A6539FE8A4A43C0163DA48B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 43 Signing time: Sat 19 Jul 2025 08:31:13 +0000 Manifest this update: Sat 19 Jul 2025 08:26:13 +0000 Manifest next update: Tue 22 Jul 2025 18:16:13 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: GITGeg9YcaB19bJUuaGVy+oZphwTXCPTU+SKPLD9kWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1e:43:70:6d:ba:e7:d2:a6:53:9f:e8:a4:a4:3c:01:63:da:48:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Jul 19 08:26:13 2025 GMT Not After : Jul 22 18:16:13 2025 GMT Subject: CN=5F28031F39ED2042FD67795FED7C59D3C63D02E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:65:02:ca:51:9b:70:89:aa:41:ba:e0:eb:43: 10:61:b6:05:6e:b1:43:5a:d0:44:aa:c3:41:02:a6: 3f:d9:2a:7d:8f:46:ef:70:f7:b7:70:cd:8f:6c:aa: 72:aa:92:6b:42:3b:24:fd:79:07:38:9f:f0:b2:6f: 9d:a4:48:71:cc:89:e5:f9:ef:33:cf:72:07:1e:ce: a2:6c:d6:8d:24:8a:2a:4e:29:a9:f1:60:e9:4d:d6: f3:e4:4d:47:9c:d9:09:33:4c:81:8e:67:0f:a0:98: ee:73:e4:43:c2:12:04:d6:67:31:16:52:8b:49:ad: 66:f3:c0:46:61:1a:89:58:04:29:67:72:bb:fe:b0: 2e:e1:1b:31:be:88:31:78:21:20:df:e4:b0:5b:eb: 93:af:63:1d:fc:5e:ee:0a:db:79:fe:68:e4:cd:8d: da:59:76:99:73:44:66:97:c7:f9:d1:4a:fe:2c:62: dd:8e:0c:70:b1:69:be:83:6d:4e:c1:39:2a:ae:56: 99:57:82:f1:38:5f:be:d8:43:1e:eb:a6:48:ed:90: 90:7d:11:95:c2:63:37:ae:5e:cf:7e:30:44:f8:c7: 61:d5:9e:bc:25:90:c2:fe:1c:e5:bf:e4:66:c6:f0: 64:da:f0:be:c3:55:aa:8e:5e:e7:8a:ff:35:b7:62: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:03:1F:39:ED:20:42:FD:67:79:5F:ED:7C:59:D3:C6:3D:02:E9 X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:51:fa:f3:af:2d:5a:78:3d:92:40:b3:c3:8a:b8:57:30:b1: f0:14:bd:6d:41:99:c2:92:8e:c1:dc:a0:40:39:ce:ee:9d:0f: 18:b9:5b:8a:fe:4d:08:44:90:c9:1f:96:42:98:48:65:e7:34: 32:02:f8:42:18:5c:50:a9:8d:a3:fb:ab:d7:48:8e:59:b9:e0: 84:25:0c:c4:53:d0:bb:b4:77:09:3d:a2:37:5b:50:ae:13:b9: 2c:df:33:8d:39:1c:57:f3:dc:08:b4:c2:a9:d9:27:54:f5:ff: bf:a9:c8:71:19:f5:8c:75:e8:3c:ed:d6:24:cb:a5:d9:6e:e0: d0:67:7a:f2:75:39:2a:ce:91:94:2e:4d:c9:23:3a:9e:1b:00: ca:fc:9c:df:2a:fb:4d:d0:44:84:9f:b0:9f:64:aa:bf:55:48: a8:a8:df:df:c5:e4:bd:9b:08:6b:d7:78:e3:82:08:24:9d:79: 7d:cf:37:ea:3e:d8:b2:3e:b5:46:7f:3a:5c:e3:ca:04:49:8c: 95:03:6d:b5:5b:37:c0:e7:85:f6:e2:66:85:bf:db:08:c8:c6: 80:0e:3f:fa:fc:87:0e:fe:6e:a6:56:a0:08:e5:b0:6d:70:1f: 8c:b2:ed:a6:b9:0a:b2:98:11:74:f6:0d:d6:bb:b1:ee:23:a0: d9:bc:dd:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOR5DcG2659KmU5/opKQ8AWPaSLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTA3MTkwODI2MTNaFw0yNTA3MjIxODE2MTNaMDMxMTAvBgNV BAMTKDVGMjgwMzFGMzlFRDIwNDJGRDY3Nzk1RkVEN0M1OUQzQzYzRDAyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZQLKUZtwiapBuuDrQxBhtgVu sUNa0ESqw0ECpj/ZKn2PRu9w97dwzY9sqnKqkmtCOyT9eQc4n/Cyb52kSHHMieX5 7zPPcgcezqJs1o0kiipOKanxYOlN1vPkTUec2QkzTIGOZw+gmO5z5EPCEgTWZzEW UotJrWbzwEZhGolYBClncrv+sC7hGzG+iDF4ISDf5LBb65OvYx38Xu4K23n+aOTN jdpZdplzRGaXx/nRSv4sYt2ODHCxab6DbU7BOSquVplXgvE4X77YQx7rpkjtkJB9 EZXCYzeuXs9+MET4x2HVnrwlkML+HOW/5GbG8GTa8L7DVaqOXueK/zW3YmbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXygDHzntIEL9Z3lf7XxZ08Y9AukwHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFR+vOvLVp4PZJAs8OKuFcwsfAUvW1BmcKS jsHcoEA5zu6dDxi5W4r+TQhEkMkflkKYSGXnNDIC+EIYXFCpjaP7q9dIjlm54IQl DMRT0Lu0dwk9ojdbUK4TuSzfM405HFfz3Ai0wqnZJ1T1/7+pyHEZ9Yx16Dzt1iTL pdlu4NBnevJ1OSrOkZQuTckjOp4bAMr8nN8q+03QRISfsJ9kqr9VSKio39/F5L2b CGvXeOOCCCSdeX3PN+o+2LI+tUZ/OlzjygRJjJUDbbVbN8DnhfbiZoW/2wjIxoAO P/r8hw7+bqZWoAjlsG1wH4yy7aa5CrKYEXT2Dda7se4joNm83T4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:02 2025 by rpki-client