$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: Lqq0pCDQ3NzY1cCmCSiPyk5Evbp4/NiuN1cikEP+kIg= Subject key identifier: 3D:EE:FE:AD:76:BA:DD:3D:C4:EC:16:ED:CA:94:74:77:8B:0E:15:4A Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 0ACE47EDB5FCA8A9DE47789BE87BF56E6D08BC27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 03B2 Signing time: Tue 03 Jun 2025 11:04:13 +0000 Manifest this update: Tue 03 Jun 2025 10:59:13 +0000 Manifest next update: Fri 06 Jun 2025 13:23:13 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: OMb1su/xWLQ4Ayck0vwd9x8Jw1joenOJMuCyi2jeD1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 13:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ce:47:ed:b5:fc:a8:a9:de:47:78:9b:e8:7b:f5:6e:6d:08:bc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Jun 3 10:59:13 2025 GMT Not After : Jun 6 13:23:13 2025 GMT Subject: CN=3DEEFEAD76BADD3DC4EC16EDCA9474778B0E154A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:a2:6c:80:ff:f8:65:79:ff:a5:d5:89:0d: 36:6d:81:8c:56:ac:45:ff:d9:82:63:9e:a3:b2:7b: 8f:86:ed:6a:e6:f9:13:24:0f:8f:dc:b4:a8:1b:43: 31:15:21:95:77:c5:7c:15:f9:21:67:3b:2d:10:35: 4b:8b:9e:44:41:c4:ce:b7:7a:75:ae:b0:d2:b3:54: 5a:4e:7e:68:32:1d:d8:e4:5a:0e:3d:3a:b3:7c:17: eb:10:7f:b4:e5:f0:05:9c:a2:3d:f8:8f:e4:ec:8e: f8:e2:19:fd:de:a8:fd:be:9b:28:1f:e8:2c:bd:27: 00:f3:6f:16:ea:30:20:8b:5a:b5:fb:2d:b1:f0:ff: 41:95:b3:21:31:f3:ea:5d:b6:78:1a:9d:97:ce:73: 88:88:f8:d8:35:7d:21:2c:2f:b1:21:34:fd:54:59: 91:3c:88:69:4e:3c:a4:a6:fa:45:07:41:3e:5d:95: 6a:6d:39:1b:a0:52:dd:fc:bb:7b:e9:36:6c:2a:04: 03:70:78:b9:ef:6d:9e:18:67:c7:de:df:5b:0f:21: 05:2a:d9:f7:2e:16:e0:f4:e5:01:52:59:78:e1:71: ac:27:91:ef:2f:60:30:1d:0e:f4:49:5b:e4:c9:99: dc:a3:84:f6:9a:6a:1e:5c:f8:73:c7:58:ca:eb:ce: ac:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EE:FE:AD:76:BA:DD:3D:C4:EC:16:ED:CA:94:74:77:8B:0E:15:4A X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:35:0f:36:3d:59:a6:cf:7a:57:40:85:9f:9e:7e:2f:e5:c2: 7f:00:e4:1b:d2:c4:98:9f:2c:bd:79:68:64:6a:db:60:a6:4b: 61:98:7c:3e:09:54:c6:79:2c:f7:de:df:de:d5:ec:4d:68:8b: 40:81:68:94:f0:f7:d6:61:af:da:1a:a6:87:ec:0b:f3:19:9a: 31:38:e6:16:d0:d3:a9:22:64:5f:53:0c:79:ac:51:a7:82:13: ac:ec:57:83:84:30:6e:de:88:4f:b1:f2:f7:a8:b2:44:39:5c: 7c:00:6f:82:2d:fc:5a:19:e0:42:1a:1a:02:33:c0:c0:a2:82: 81:36:f2:62:18:83:e7:55:f9:56:f2:16:17:dd:3b:11:bb:27: 7e:ba:a9:6e:ba:c6:1d:20:2c:74:96:14:7d:8d:91:fc:8d:a1: 2c:50:6b:9b:ca:32:6e:91:fc:82:6e:70:e8:99:b5:cc:97:e7: af:a9:0f:84:b8:e6:58:66:86:28:b9:fe:c7:45:60:02:1a:db: b9:cc:dd:b9:5c:26:42:61:93:40:41:8b:e7:6c:d2:67:3f:8b: 88:d9:09:99:2c:34:d0:ec:ea:e1:c6:5e:40:42:26:d8:5e:28: 8c:04:16:e2:03:4a:1f:bf:9b:75:12:de:e1:9e:8a:19:28:9a: 0b:96:8c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCs5H7bX8qKneR3ib6Hv1bm0IvCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTA2MDMxMDU5MTNaFw0yNTA2MDYxMzIzMTNaMDMxMTAvBgNV BAMTKDNERUVGRUFENzZCQUREM0RDNEVDMTZFRENBOTQ3NDc3OEIwRTE1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRKJsgP/4ZXn/pdWJDTZtgYxW rEX/2YJjnqOye4+G7Wrm+RMkD4/ctKgbQzEVIZV3xXwV+SFnOy0QNUuLnkRBxM63 enWusNKzVFpOfmgyHdjkWg49OrN8F+sQf7Tl8AWcoj34j+TsjvjiGf3eqP2+mygf 6Cy9JwDzbxbqMCCLWrX7LbHw/0GVsyEx8+pdtnganZfOc4iI+Ng1fSEsL7EhNP1U WZE8iGlOPKSm+kUHQT5dlWptORugUt38u3vpNmwqBANweLnvbZ4YZ8fe31sPIQUq 2fcuFuD05QFSWXjhcawnke8vYDAdDvRJW+TJmdyjhPaaah5c+HPHWMrrzqxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPe7+rXa63T3E7BbtypR0d4sOFUowHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg1DzY9WabPeldAhZ+efi/lwn8A5BvSxJif LL15aGRq22CmS2GYfD4JVMZ5LPfe397V7E1oi0CBaJTw99Zhr9oapofsC/MZmjE4 5hbQ06kiZF9TDHmsUaeCE6zsV4OEMG7eiE+x8veoskQ5XHwAb4It/FoZ4EIaGgIz wMCigoE28mIYg+dV+VbyFhfdOxG7J366qW66xh0gLHSWFH2NkfyNoSxQa5vKMm6R /IJucOiZtcyX56+pD4S45lhmhii5/sdFYAIa27nM3blcJkJhk0BBi+ds0mc/i4jZ CZksNNDs6uHGXkBCJtheKIwEFuIDSh+/m3US3uGeihkomguWjDY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:34 2025 by rpki-client