$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: r5D/7Hq4kPRI0yz0hR5h0up/8VzBQDtmKTxID3Uvsow= Subject key identifier: 7D:26:CA:02:6B:D3:16:DF:01:49:BA:72:6D:D7:BB:6A:B9:69:9A:DA Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 0F0EAF0A9117FAFC6891C02F362EBC4E46704D02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 0206 Signing time: Sun 20 Jul 2025 17:10:49 +0000 Manifest this update: Sun 20 Jul 2025 17:05:49 +0000 Manifest next update: Wed 23 Jul 2025 18:39:49 +0000 Files and hashes: 1: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: UhZmsK1JV2dvdlJPQwAkZ3FUoREjtD3PWxnZnEWW6L0=) 2: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: FjRIjmI17/y9ZqS5Uf7ofmSlfp6Eyj4hfgH8Boq/0mk=) 3: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: yRanOZGnih6RR4ZAoNL3Hr2Kj0Og2jieWRKzIVb/EXs=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0e:af:0a:91:17:fa:fc:68:91:c0:2f:36:2e:bc:4e:46:70:4d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Jul 20 17:05:49 2025 GMT Not After : Jul 23 18:39:49 2025 GMT Subject: CN=7D26CA026BD316DF0149BA726DD7BB6AB9699ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:11:b9:f5:93:b5:65:be:33:16:62:b4:19: 56:bb:d4:b3:30:f7:51:36:ae:7d:ff:89:14:54:ff: 76:a6:b9:f0:aa:6c:27:81:04:8c:01:63:bd:39:ab: 7a:8b:b9:3f:a4:95:38:c4:97:62:8f:fe:77:9f:6f: 95:3d:78:c9:e9:e9:86:0c:38:0e:50:07:db:1d:70: 08:d0:d7:50:b7:7b:9e:81:7f:e2:88:53:e0:77:b0: 70:3d:d1:80:bd:42:88:94:63:78:1d:a6:0a:8e:40: 21:e2:64:f5:ab:94:72:95:9d:cd:5e:1a:3a:d3:21: d0:f0:a5:ba:b4:20:93:1f:97:e0:c5:fe:00:60:c8: 5b:ec:78:53:d7:1f:dc:73:d2:c4:43:49:3f:17:42: b7:c9:3e:64:0a:1f:5d:1a:b3:28:b8:7d:da:1a:32: 6b:38:da:51:90:c8:e2:3c:18:31:5f:d7:51:96:3e: cb:d1:ff:80:8a:44:26:fa:d5:8b:0f:5e:62:ec:2e: d0:10:de:cb:d8:61:c8:31:b0:5c:25:f3:0d:69:5b: ce:74:41:05:19:57:23:90:2a:1e:92:92:a0:91:9d: c2:b8:83:d4:ff:8e:c7:9d:75:db:78:a3:e7:3f:20: ea:1e:49:28:2a:95:0d:70:18:b8:b1:f7:07:5e:85: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:CA:02:6B:D3:16:DF:01:49:BA:72:6D:D7:BB:6A:B9:69:9A:DA X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:03:1f:5a:5d:91:c7:79:c4:ec:a3:73:8c:26:74:38:9d:89: c8:f0:0e:e2:db:27:d5:c4:6e:e8:e8:3c:f7:63:31:f7:35:ae: e7:90:d4:2c:9d:80:5f:4d:11:6b:9c:cb:20:93:fb:1e:a6:99: 40:91:33:30:06:49:9f:37:0b:b7:2e:18:80:21:e2:66:98:62: b2:68:18:4a:3f:6d:68:ac:ba:b4:89:95:40:d3:5a:c1:c7:08: 46:87:1c:8c:dd:29:f4:a6:45:e9:25:e5:95:88:2e:5c:b8:8b: 9b:21:52:5d:35:aa:83:39:e7:85:a0:83:e2:7f:e5:81:5e:67: 96:53:fe:13:be:95:47:33:e1:4f:44:c3:4e:35:8a:95:5f:bf: 5d:17:47:5b:ef:36:99:8e:b3:93:f3:1b:9c:64:97:01:6c:81: 45:04:ad:5c:fb:4c:a9:f7:75:93:94:40:8f:fe:93:51:fc:89: 0e:64:f2:db:ed:1b:98:44:ae:29:d5:a5:58:03:29:3c:62:a9: de:34:9e:d1:7e:65:18:82:02:61:cc:1c:35:0f:77:aa:96:9f: c2:c1:0a:21:27:6b:7d:e2:87:7f:09:73:0a:92:09:6c:57:0b: b1:1c:95:88:2d:fb:07:70:78:6a:cd:2e:91:6f:20:c5:fe:2d: 99:94:6e:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDw6vCpEX+vxokcAvNi68TkZwTQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTA3MjAxNzA1NDlaFw0yNTA3MjMxODM5NDlaMDMxMTAvBgNV BAMTKDdEMjZDQTAyNkJEMzE2REYwMTQ5QkE3MjZERDdCQjZBQjk2OTlBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARRG59ZO1Zb4zFmK0GVa71LMw 91E2rn3/iRRU/3amufCqbCeBBIwBY705q3qLuT+klTjEl2KP/nefb5U9eMnp6YYM OA5QB9sdcAjQ11C3e56Bf+KIU+B3sHA90YC9QoiUY3gdpgqOQCHiZPWrlHKVnc1e GjrTIdDwpbq0IJMfl+DF/gBgyFvseFPXH9xz0sRDST8XQrfJPmQKH10asyi4fdoa Mms42lGQyOI8GDFf11GWPsvR/4CKRCb61YsPXmLsLtAQ3svYYcgxsFwl8w1pW850 QQUZVyOQKh6SkqCRncK4g9T/jsedddt4o+c/IOoeSSgqlQ1wGLix9wdehQ4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfSbKAmvTFt8BSbpybde7arlpmtowHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0DH1pdkcd5xOyjc4wmdDidicjwDuLbJ9XE bujoPPdjMfc1rueQ1CydgF9NEWucyyCT+x6mmUCRMzAGSZ83C7cuGIAh4maYYrJo GEo/bWisurSJlUDTWsHHCEaHHIzdKfSmRekl5ZWILly4i5shUl01qoM554Wgg+J/ 5YFeZ5ZT/hO+lUcz4U9Ew041ipVfv10XR1vvNpmOs5PzG5xklwFsgUUErVz7TKn3 dZOUQI/+k1H8iQ5k8tvtG5hErinVpVgDKTxiqd40ntF+ZRiCAmHMHDUPd6qWn8LB CiEna33ih38JcwqSCWxXC7EclYgt+wdweGrNLpFvIMX+LZmUbpw= -----END CERTIFICATE-----Generated at Sun Jul 20 21:27:25 2025 by rpki-client