$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: RQPhS7heFERR9VqO/srvnughwHSq+J2G+X0jUwBoyH8= Subject key identifier: AA:62:1D:7D:AA:EA:13:81:3D:E3:BF:DF:C1:25:B5:62:0A:AC:2E:E2 Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 3BA84D1A29E0F941E2EA84A783BD2FE0E5B8C8BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: FA Signing time: Wed 04 Jun 2025 17:20:44 +0000 Manifest this update: Wed 04 Jun 2025 17:15:44 +0000 Manifest next update: Sat 07 Jun 2025 20:09:44 +0000 Files and hashes: 1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=) 2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: 89OWQPxTteEwLNkchrtfEB+05GlqvP1acHkaZ999dGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a8:4d:1a:29:e0:f9:41:e2:ea:84:a7:83:bd:2f:e0:e5:b8:c8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Jun 4 17:15:44 2025 GMT Not After : Jun 7 20:09:44 2025 GMT Subject: CN=AA621D7DAAEA13813DE3BFDFC125B5620AAC2EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:2a:a7:93:af:df:0d:f8:c1:06:3d:f3:f8: 53:ec:26:9b:f2:82:41:1c:82:e5:ca:fa:0d:26:cf: 55:74:2a:75:ea:2e:c3:d9:8c:ac:a8:f0:37:87:e9: 13:0f:57:66:a0:8f:cf:94:ea:63:23:83:9f:ba:7f: b7:ac:dc:46:90:15:b4:c0:71:10:e2:e8:81:90:e6: 34:28:7e:7d:e1:b5:1d:93:ac:f3:b0:d1:d9:54:36: 74:0a:9b:b7:7f:72:4b:41:80:fb:75:ec:a5:48:1f: 49:7e:38:dd:33:b2:54:3f:28:69:c8:6d:f8:6f:e2: 48:40:ba:79:69:6c:ac:e5:52:18:76:ab:9c:52:55: b3:05:45:7d:ce:0c:da:8b:09:42:c2:a2:25:83:be: e0:65:2a:83:51:f0:27:14:c5:29:7c:c1:e5:95:0a: 1d:49:45:a0:22:60:0f:b8:ce:a8:d3:78:ce:4c:7f: 04:a0:fa:23:07:e7:63:96:9b:2f:a8:99:6c:5f:5a: 9e:ee:49:ff:06:68:5b:b9:b8:f7:3b:d8:78:7f:87: c9:73:9b:72:29:9e:56:3f:ea:21:2e:98:4f:a8:b1: eb:f5:35:b3:b5:42:b8:a1:88:c0:5c:b2:66:c8:88: 38:cb:e1:4b:2a:c7:0c:28:dc:09:22:7f:01:94:ae: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:62:1D:7D:AA:EA:13:81:3D:E3:BF:DF:C1:25:B5:62:0A:AC:2E:E2 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:28:02:d2:49:63:e0:c6:e4:13:cd:1e:42:ff:dd:81:48:b7: 15:93:c0:a2:8d:5a:5b:d5:03:ca:52:23:e8:1b:8b:9e:8c:bd: 3e:61:db:c3:00:8d:bd:69:77:62:34:27:50:ce:80:b4:d4:41: 87:95:44:fe:df:34:70:3e:15:6d:7c:69:a7:1e:1a:9e:64:1b: 61:53:3e:eb:75:7a:69:04:71:8a:f5:f1:14:b8:25:ec:46:ef: 19:9f:ba:97:22:12:54:77:68:d5:1c:24:e9:0f:b3:63:d4:d3: 8f:c8:a4:49:8b:34:21:d7:cf:16:b8:55:e6:28:e9:02:a1:0b: 11:30:4e:ab:35:20:2f:c3:2c:54:df:2d:60:2e:4e:7e:bd:ad: bd:cc:45:23:84:10:30:22:e3:83:40:b6:a0:46:14:9d:cd:cf: ea:c8:73:78:53:6b:c7:c6:54:c6:53:a0:bd:1c:dd:4b:49:bd: e5:a5:19:8d:99:b4:9e:ad:21:d1:50:63:44:c6:ab:4d:90:13: 3a:3c:07:32:1a:9d:06:9d:20:fe:8a:b5:d3:10:90:02:40:89: a7:44:03:8f:cf:f7:d5:49:34:14:38:46:5d:48:11:d5:30:f7: fd:7a:48:ff:13:6d:51:d2:a4:97:9d:4e:dc:16:61:87:da:f8: f3:9c:3d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6hNGing+UHi6oSng70v4OW4yL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNTA2MDQxNzE1NDRaFw0yNTA2MDcyMDA5NDRaMDMxMTAvBgNV BAMTKEFBNjIxRDdEQUFFQTEzODEzREUzQkZERkMxMjVCNTYyMEFBQzJFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHiqnk6/fDfjBBj3z+FPsJpvy gkEcguXK+g0mz1V0KnXqLsPZjKyo8DeH6RMPV2agj8+U6mMjg5+6f7es3EaQFbTA cRDi6IGQ5jQofn3htR2TrPOw0dlUNnQKm7d/cktBgPt17KVIH0l+ON0zslQ/KGnI bfhv4khAunlpbKzlUhh2q5xSVbMFRX3ODNqLCULCoiWDvuBlKoNR8CcUxSl8weWV Ch1JRaAiYA+4zqjTeM5MfwSg+iMH52OWmy+omWxfWp7uSf8GaFu5uPc72Hh/h8lz m3IpnlY/6iEumE+osev1NbO1QrihiMBcsmbIiDjL4Usqxwwo3AkifwGUrsNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqmIdfarqE4E947/fwSW1YgqsLuIwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8oAtJJY+DG5BPNHkL/3YFItxWTwKKNWlvV A8pSI+gbi56MvT5h28MAjb1pd2I0J1DOgLTUQYeVRP7fNHA+FW18aaceGp5kG2FT Put1emkEcYr18RS4JexG7xmfupciElR3aNUcJOkPs2PU04/IpEmLNCHXzxa4VeYo 6QKhCxEwTqs1IC/DLFTfLWAuTn69rb3MRSOEEDAi44NAtqBGFJ3Nz+rIc3hTa8fG VMZToL0c3UtJveWlGY2ZtJ6tIdFQY0TGq02QEzo8BzIanQadIP6KtdMQkAJAiadE A4/P99VJNBQ4Rl1IEdUw9/16SP8TbVHSpJedTtwWYYfa+POcPVs= -----END CERTIFICATE-----Generated at Thu Jun 5 19:46:22 2025 by rpki-client