$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: WoybbnhOddtz8c4qR471MeQny3+OsqfXEf8Vt608hWI= Subject key identifier: 4A:3A:09:F5:30:17:50:36:F9:29:4A:0B:BA:0E:95:11:7F:CA:A2:09 Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 561303607688DCA4AD55E20DDB0993327B8C857B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 01E1 Signing time: Sun 31 Aug 2025 01:51:43 +0000 Manifest this update: Sun 31 Aug 2025 01:46:43 +0000 Manifest next update: Wed 03 Sep 2025 12:00:43 +0000 Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: yO03nhoUHvW5BIetmPE8rP7A+Uj5E9g2gdL2gd1Z2wI=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Sep 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:13:03:60:76:88:dc:a4:ad:55:e2:0d:db:09:93:32:7b:8c:85:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Aug 31 01:46:43 2025 GMT Not After : Sep 3 12:00:43 2025 GMT Subject: CN=4A3A09F530175036F9294A0BBA0E95117FCAA209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:32:d8:49:28:0d:a4:f2:eb:2f:47:3a:80: 02:29:e7:3a:44:82:e9:bb:69:21:b5:04:b2:fb:9c: 4e:3f:23:90:c2:c7:19:b2:9e:16:0b:72:92:bd:99: 8f:7c:4e:4c:91:a4:48:2c:43:3f:f6:ed:e8:74:ac: 29:07:c1:c2:67:ad:e4:5a:e1:94:d1:93:7f:f8:8d: 91:7f:97:6c:73:25:cd:e5:fc:bf:ac:1b:fd:af:e3: 99:97:fe:ba:09:ed:0d:b2:02:d5:4e:03:dd:6b:9f: 7e:5a:0b:2c:29:25:9e:c6:5f:fc:8c:d3:68:43:14: bf:c2:16:4d:e3:2d:56:2c:f7:1c:78:2f:01:78:1c: dc:53:b5:60:f4:3f:0e:5b:55:6a:e4:e7:ab:24:c1: f0:87:b6:a1:92:4b:56:4d:f7:bf:b3:88:b7:d0:6b: 82:46:4a:7d:21:b6:28:1e:a5:52:56:ed:3e:8a:ae: ab:00:18:07:05:f1:02:07:4c:13:00:9c:31:1e:e1: 43:17:af:1a:a2:62:92:74:52:cf:b6:62:f1:c3:ba: d1:bb:5f:f1:91:6e:d7:9f:17:f1:7b:0c:53:68:cf: db:23:a6:5c:a3:50:80:9e:bd:b7:37:a4:6c:49:0d: c2:1f:83:a6:a0:e2:8c:4e:93:c5:79:37:f0:12:79: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3A:09:F5:30:17:50:36:F9:29:4A:0B:BA:0E:95:11:7F:CA:A2:09 X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:97:0c:89:a0:7d:3e:1a:72:01:8e:8b:77:dd:c3:87:68:12: 61:24:02:ae:37:90:c6:4c:42:f3:fe:42:8c:2f:6b:bc:51:8f: 2d:b7:cf:59:f4:b4:db:5f:13:1d:f1:cd:90:24:04:72:5f:a7: 8c:cf:2f:53:50:07:b5:8d:33:29:e3:8c:20:0c:b9:29:6b:41: 22:69:b7:e0:82:7a:3c:cc:c0:52:bf:29:d0:fe:12:25:3a:f1: ad:78:1d:e6:b9:59:2e:30:c3:da:47:be:67:b0:cd:a4:71:f8: 72:f8:18:d9:d7:1f:3b:f9:b1:d6:f3:20:49:a8:2b:ed:56:5c: e8:93:b4:08:5d:99:3f:a5:59:96:4a:c3:21:64:71:31:65:86: e3:98:9b:47:85:ed:04:2d:49:c5:5b:ce:e6:07:07:ea:8f:ef: 85:5f:2a:45:3a:6c:31:79:54:9f:3b:44:35:d8:e9:10:0e:a3: 1c:9e:e1:b4:85:7f:2b:bd:9a:a1:2c:69:f8:a4:4f:52:27:5f: 4d:86:f6:cb:0e:a8:2b:38:67:30:eb:4f:92:40:10:cb:e1:f1: 61:a4:7e:f3:59:48:d4:f2:71:b5:bc:d9:9c:ba:58:4e:71:74: 71:0c:4e:2a:a0:e8:0e:82:c7:32:f6:18:17:65:21:2a:ef:2e: 6c:a9:c5:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhMDYHaI3KStVeIN2wmTMnuMhXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNTA4MzEwMTQ2NDNaFw0yNTA5MDMxMjAwNDNaMDMxMTAvBgNV BAMTKDRBM0EwOUY1MzAxNzUwMzZGOTI5NEEwQkJBMEU5NTExN0ZDQUEyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwjLYSSgNpPLrL0c6gAIp5zpE gum7aSG1BLL7nE4/I5DCxxmynhYLcpK9mY98TkyRpEgsQz/27eh0rCkHwcJnreRa 4ZTRk3/4jZF/l2xzJc3l/L+sG/2v45mX/roJ7Q2yAtVOA91rn35aCywpJZ7GX/yM 02hDFL/CFk3jLVYs9xx4LwF4HNxTtWD0Pw5bVWrk56skwfCHtqGSS1ZN97+ziLfQ a4JGSn0htigepVJW7T6KrqsAGAcF8QIHTBMAnDEe4UMXrxqiYpJ0Us+2YvHDutG7 X/GRbtefF/F7DFNoz9sjplyjUICevbc3pGxJDcIfg6ag4oxOk8V5N/ASeY07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSjoJ9TAXUDb5KUoLug6VEX/KogkwHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeXDImgfT4acgGOi3fdw4doEmEkAq43kMZM QvP+Qowva7xRjy23z1n0tNtfEx3xzZAkBHJfp4zPL1NQB7WNMynjjCAMuSlrQSJp t+CCejzMwFK/KdD+EiU68a14Hea5WS4ww9pHvmewzaRx+HL4GNnXHzv5sdbzIEmo K+1WXOiTtAhdmT+lWZZKwyFkcTFlhuOYm0eF7QQtScVbzuYHB+qP74VfKkU6bDF5 VJ87RDXY6RAOoxye4bSFfyu9mqEsafikT1InX02G9ssOqCs4ZzDrT5JAEMvh8WGk fvNZSNTycbW82Zy6WE5xdHEMTiqg6A6CxzL2GBdlISrvLmypxT8= -----END CERTIFICATE-----Generated at Sun Aug 31 21:43:33 2025 by rpki-client