$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: Wm6VvL0GEiShbhFT4hRmNOm/VZpiq0X1j+hdszV0XGU= Subject key identifier: 79:81:56:B5:3E:0E:59:68:06:48:6B:2E:ED:16:BC:40:5E:EE:33:A9 Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 562AAB006C690ECE388411040ECC180B86E2908B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 0397 Signing time: Fri 04 Apr 2025 03:01:58 +0000 Manifest this update: Fri 04 Apr 2025 02:56:58 +0000 Manifest next update: Mon 07 Apr 2025 03:49:58 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: 5UuC17gaguPp8aTrPTavE3qVRlHBoeTVgHIhJVfleIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 03:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2a:ab:00:6c:69:0e:ce:38:84:11:04:0e:cc:18:0b:86:e2:90:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Apr 4 02:56:58 2025 GMT Not After : Apr 7 03:49:58 2025 GMT Subject: CN=798156B53E0E596806486B2EED16BC405EEE33A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:1a:15:85:37:61:1f:72:6a:0d:79:3f:d0: 09:eb:4f:8f:8c:7d:4f:33:53:7d:d3:51:1f:33:9b: 28:1d:a3:1d:2e:4d:37:41:80:b7:1b:b0:fe:ce:aa: fc:de:1d:48:a7:3d:88:d8:34:47:20:41:92:af:6f: 27:05:7f:d7:2b:13:26:d4:99:fc:4c:21:92:c7:42: 42:be:1f:e6:27:6b:93:7e:85:90:3f:22:bc:45:e7: ed:0f:7c:15:ef:27:55:c5:15:42:fb:d6:6f:63:f3: 26:05:f3:1b:ec:db:d8:33:3c:6e:22:0a:f2:80:a6: 83:f9:4f:8b:5b:e2:e1:ca:37:bd:37:79:0e:34:45: 50:f9:27:49:8c:dd:a8:a1:a8:bb:d7:2d:28:17:d5: 46:ad:12:08:cb:5d:d2:10:9e:22:bc:ee:92:ad:56: 51:f5:ae:c4:16:55:95:37:87:f2:33:11:b6:b8:58: 74:d5:79:e5:47:72:ca:1a:4c:a0:01:6b:e4:f4:24: 5b:60:eb:09:22:8c:0e:cf:4b:18:20:4f:80:3e:dc: 0a:18:1e:2f:85:07:da:61:d9:59:27:7a:1d:5e:8f: 8b:18:e0:3d:6b:2e:42:5d:f7:c9:57:5c:07:93:d9: 96:7a:66:23:b1:f3:40:91:4f:62:45:e4:19:1c:25: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:81:56:B5:3E:0E:59:68:06:48:6B:2E:ED:16:BC:40:5E:EE:33:A9 X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:08:48:8e:09:e1:df:85:a5:e2:9b:e0:f4:6b:1b:90:57:18: bc:90:78:21:b1:be:fe:30:cb:ae:b1:70:82:eb:c1:51:88:20: 6b:11:ec:ca:1b:9b:98:f7:3e:43:5e:91:49:44:9c:67:57:ab: 4e:14:6f:8c:c0:74:30:fc:2c:06:5b:d0:df:e9:52:1d:62:c4: fa:89:91:b6:0b:c3:bd:a4:ee:1b:29:d9:a5:f0:5c:bd:e1:29: 4b:13:0a:0c:23:4a:36:20:d8:a4:df:28:48:02:33:0a:41:54: 82:c9:87:ca:90:e6:22:27:c1:c1:72:7f:7f:49:3f:db:c7:da: 75:68:8d:f8:33:7c:92:54:50:35:b4:57:b3:16:16:63:f1:0e: 02:75:6c:29:01:d4:83:37:36:8a:64:c8:ef:2f:d3:81:6c:e8: 0c:0c:a6:45:3d:ec:6c:af:99:c7:2e:fc:f1:40:b0:c5:dd:e9: 86:4e:d9:2d:9b:01:e3:c8:a2:d9:74:0a:d1:74:ff:bc:66:b9: 4d:72:13:8e:67:55:62:fb:b4:ec:0f:f7:3c:42:a2:0d:c4:14: 22:e1:08:9c:0b:0d:e6:d7:5d:d8:f7:51:f5:dc:98:9e:81:68: 72:b6:f4:c7:74:91:e4:98:a5:29:b3:c4:25:e5:46:84:2d:31: 4c:8e:77:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViqrAGxpDs44hBEEDswYC4bikIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTA0MDQwMjU2NThaFw0yNTA0MDcwMzQ5NThaMDMxMTAvBgNV BAMTKDc5ODE1NkI1M0UwRTU5NjgwNjQ4NkIyRUVEMTZCQzQwNUVFRTMzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACBoVhTdhH3JqDXk/0AnrT4+M fU8zU33TUR8zmygdox0uTTdBgLcbsP7OqvzeHUinPYjYNEcgQZKvbycFf9crEybU mfxMIZLHQkK+H+Yna5N+hZA/IrxF5+0PfBXvJ1XFFUL71m9j8yYF8xvs29gzPG4i CvKApoP5T4tb4uHKN703eQ40RVD5J0mM3aihqLvXLSgX1UatEgjLXdIQniK87pKt VlH1rsQWVZU3h/IzEba4WHTVeeVHcsoaTKABa+T0JFtg6wkijA7PSxggT4A+3AoY Hi+FB9ph2Vkneh1ej4sY4D1rLkJd98lXXAeT2ZZ6ZiOx80CRT2JF5BkcJaGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeYFWtT4OWWgGSGsu7Ra8QF7uM6kwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwISI4J4d+FpeKb4PRrG5BXGLyQeCGxvv4w y66xcILrwVGIIGsR7Mobm5j3PkNekUlEnGdXq04Ub4zAdDD8LAZb0N/pUh1ixPqJ kbYLw72k7hsp2aXwXL3hKUsTCgwjSjYg2KTfKEgCMwpBVILJh8qQ5iInwcFyf39J P9vH2nVojfgzfJJUUDW0V7MWFmPxDgJ1bCkB1IM3NopkyO8v04Fs6AwMpkU97Gyv mccu/PFAsMXd6YZO2S2bAePIotl0CtF0/7xmuU1yE45nVWL7tOwP9zxCog3EFCLh CJwLDebXXdj3UfXcmJ6BaHK29Md0keSYpSmzxCXlRoQtMUyOd7Q= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:21 2025 by rpki-client