$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: POQrvOeiExXgrMsj3SvWGrhwblRZrnHq8ZSivBL6mAo= Subject key identifier: C6:A6:04:30:B6:B8:67:DD:3B:89:40:0C:8E:C2:F8:EA:FE:C5:72:D9 Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 4ABDEBDC9AAF3384C315EB8D1F5701CCBF395BD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 03DC Signing time: Fri 05 Sep 2025 06:02:02 +0000 Manifest this update: Fri 05 Sep 2025 05:57:02 +0000 Manifest next update: Mon 08 Sep 2025 14:21:02 +0000 Files and hashes: 1: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: QwuDkP241RHPy1y/p8QijiesiLJ+t/dL+pSVv0r3QK0=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bd:eb:dc:9a:af:33:84:c3:15:eb:8d:1f:57:01:cc:bf:39:5b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Sep 5 05:57:02 2025 GMT Not After : Sep 8 14:21:02 2025 GMT Subject: CN=C6A60430B6B867DD3B89400C8EC2F8EAFEC572D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:43:2c:8d:b5:04:cf:4a:f6:42:ee:65:04: be:cb:a6:5c:a4:91:eb:6b:16:e1:f7:bb:f7:33:25: 1c:4b:b1:1e:60:f4:ac:2a:8f:7e:ae:9b:1d:41:f5: 9f:a5:fc:1c:60:c6:f0:52:33:ca:cb:4e:fa:4b:51: 03:c5:45:a9:cb:40:13:07:df:18:21:7f:f6:2e:8b: d3:ca:45:30:89:d7:d7:b5:8e:f6:89:30:1b:3d:b0: 3f:1c:c9:bc:2e:c1:93:ec:76:82:b0:e7:7a:17:5d: 1b:6c:9d:27:93:b3:fa:6f:40:26:ca:a6:b5:07:11: 2b:a8:2a:84:17:3e:31:bc:8f:00:76:98:78:fc:db: f0:5a:5a:bc:04:a2:ea:fb:0d:d5:f3:8c:9c:aa:02: a5:2b:37:48:aa:bd:be:7f:e0:ce:53:43:e0:29:cb: 5b:c7:55:58:17:c5:bd:b1:bf:c5:c9:18:76:ff:9c: 38:9d:39:4d:44:4f:b3:fc:44:77:f3:cb:7c:b5:64: 6f:0c:56:18:ff:9a:bc:a9:fe:5d:0d:d1:96:18:ce: ac:54:7f:00:a6:c3:cf:8c:b4:c7:45:a9:d2:0e:9a: 17:95:3d:07:e5:7c:2b:94:4a:8b:16:76:39:4b:8a: aa:49:30:51:63:2b:c3:c9:b3:71:68:6e:ef:9b:0f: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A6:04:30:B6:B8:67:DD:3B:89:40:0C:8E:C2:F8:EA:FE:C5:72:D9 X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:87:ca:b4:84:c8:ea:dc:df:c3:f6:b0:ce:9b:92:c5:04:e8: 7b:3c:a2:87:16:04:5e:70:d0:7d:a0:b2:6d:83:53:1e:61:c6: 3b:cc:f7:cd:11:28:85:5f:b9:f2:97:81:f3:c3:d1:9a:86:f6: 4f:47:00:92:cc:44:b3:2f:b0:e9:6b:01:0c:2a:6e:af:e8:44: 87:42:ec:c8:a3:64:f5:40:10:08:6b:64:df:47:c0:f8:f4:27: 47:91:e5:00:22:01:dd:c7:ce:b5:38:f6:92:ae:0f:de:9f:07: 85:01:c3:40:33:cf:ac:d9:c2:a4:2b:18:df:f7:eb:dd:74:14: 93:c3:dc:25:a8:39:8b:f8:b3:88:d4:e5:e7:ae:da:a3:db:68: 8a:b7:74:08:11:29:43:8e:a8:2c:31:cb:85:9e:60:3c:f4:90: 3c:31:64:03:87:a2:38:61:03:d2:c9:27:1b:8d:d5:ef:60:d9: 01:8b:54:69:c0:79:7c:4a:0a:0e:b1:7c:cf:7a:55:4f:90:04: d0:0c:97:a0:2f:1e:a9:5a:2c:bf:97:6d:7e:83:0a:f2:0c:77: d5:fd:58:85:25:5d:74:6c:59:78:8b:d4:b2:35:e6:3d:00:db: 12:72:44:78:e4:8f:89:85:cd:e6:70:43:52:9f:a0:0c:86:8a: 88:86:66:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSr3r3JqvM4TDFeuNH1cBzL85W9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTA5MDUwNTU3MDJaFw0yNTA5MDgxNDIxMDJaMDMxMTAvBgNV BAMTKEM2QTYwNDMwQjZCODY3REQzQjg5NDAwQzhFQzJGOEVBRkVDNTcyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEEMsjbUEz0r2Qu5lBL7Lplyk ketrFuH3u/czJRxLsR5g9Kwqj36umx1B9Z+l/BxgxvBSM8rLTvpLUQPFRanLQBMH 3xghf/Yui9PKRTCJ19e1jvaJMBs9sD8cybwuwZPsdoKw53oXXRtsnSeTs/pvQCbK prUHESuoKoQXPjG8jwB2mHj82/BaWrwEour7DdXzjJyqAqUrN0iqvb5/4M5TQ+Ap y1vHVVgXxb2xv8XJGHb/nDidOU1ET7P8RHfzy3y1ZG8MVhj/mryp/l0N0ZYYzqxU fwCmw8+MtMdFqdIOmheVPQflfCuUSosWdjlLiqpJMFFjK8PJs3Fobu+bDwPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxqYEMLa4Z907iUAMjsL46v7FctkwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyHyrSEyOrc38P2sM6bksUE6Hs8oocWBF5w 0H2gsm2DUx5hxjvM980RKIVfufKXgfPD0ZqG9k9HAJLMRLMvsOlrAQwqbq/oRIdC 7MijZPVAEAhrZN9HwPj0J0eR5QAiAd3HzrU49pKuD96fB4UBw0Azz6zZwqQrGN/3 6910FJPD3CWoOYv4s4jU5eeu2qPbaIq3dAgRKUOOqCwxy4WeYDz0kDwxZAOHojhh A9LJJxuN1e9g2QGLVGnAeXxKCg6xfM96VU+QBNAMl6AvHqlaLL+XbX6DCvIMd9X9 WIUlXXRsWXiL1LI15j0A2xJyRHjkj4mFzeZwQ1KfoAyGioiGZlc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:37 2025 by rpki-client