$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: 7XPO6zh4V2HzsEGkARaZatDVgA8an4upLvMDwk+Xyzw= Subject key identifier: 26:C6:BA:C8:45:B6:7E:6A:3F:61:07:FE:95:F2:5D:D6:08:25:03:20 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 12FD10DCD794513E2A9E4BC14E0C1952D95BA62B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: B4 Signing time: Sat 19 Jul 2025 13:52:06 +0000 Manifest this update: Sat 19 Jul 2025 13:47:06 +0000 Manifest next update: Tue 22 Jul 2025 22:45:06 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: 9NYfrtAJKfjuZuXRU+0T+0pm6XgnDY5um5XA/6RBliQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fd:10:dc:d7:94:51:3e:2a:9e:4b:c1:4e:0c:19:52:d9:5b:a6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Jul 19 13:47:06 2025 GMT Not After : Jul 22 22:45:06 2025 GMT Subject: CN=26C6BAC845B67E6A3F6107FE95F25DD608250320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:c9:90:4b:f9:0d:3f:08:69:16:2d:8d:99: 73:e6:2a:34:9d:b1:2b:4c:8e:1a:18:f7:ce:5f:13: ea:60:44:11:de:28:d4:11:cb:3b:81:ad:d1:b5:6c: 5e:13:c6:b5:6a:fc:de:85:d4:0b:55:86:0d:53:30: 7a:8a:c2:b9:6c:87:75:af:34:eb:cc:fd:ab:41:90: 64:eb:5a:6d:e9:ac:aa:1b:8a:f5:cb:da:ff:ff:19: d3:5d:1f:f1:87:22:db:fe:83:b2:fe:46:f5:3a:f8: c1:0d:9c:ef:d1:f6:53:66:e5:f5:0b:ee:48:7c:17: bf:d3:ea:8f:20:54:f5:bf:ce:ef:16:a7:a6:63:83: 2f:61:48:d5:c2:e3:3e:f3:fd:b9:ab:ba:51:5f:e7: 4d:00:9a:ec:a7:26:9f:ad:f0:5a:36:b2:ea:33:dd: c3:5f:e1:dd:05:a3:74:64:64:23:27:26:2c:d6:e1: 86:2b:91:7c:9d:9b:4c:ac:34:b6:33:84:23:1b:83: 0f:32:99:8e:a2:16:54:5b:bf:cc:19:3d:38:41:56: 5e:b3:92:fe:26:3f:8e:81:24:43:93:3e:e1:8e:cf: 05:c2:f3:b7:9d:89:cf:18:0c:88:49:92:2d:11:7a: 55:a1:66:9c:bb:76:b3:e9:97:95:94:63:20:fa:5d: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C6:BA:C8:45:B6:7E:6A:3F:61:07:FE:95:F2:5D:D6:08:25:03:20 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e2:7d:b9:fb:53:d1:52:21:4e:bb:46:36:10:35:c9:38:ab: b1:5a:6a:12:01:56:01:4f:20:05:16:46:66:cc:38:04:26:dc: b6:a6:1e:5f:53:74:4b:f5:10:66:14:5b:62:83:18:27:92:0c: 35:29:cb:96:80:64:c3:17:62:5d:81:1b:a4:90:60:bc:c4:ba: 88:78:4a:77:ed:9e:c1:e2:5f:eb:24:73:76:55:14:1d:43:09: 25:cd:ab:2d:df:41:fb:ea:b3:15:16:f6:fa:69:95:3b:db:0a: b9:8b:3a:4d:88:50:92:af:24:12:d0:c3:e6:a5:23:3b:0f:8a: 43:66:f8:ef:b3:ca:2f:e5:c7:31:a0:12:c2:d3:1b:c5:eb:45: 5a:e4:c2:2d:2c:4b:52:c0:0f:b5:bf:79:32:e0:60:d5:47:d5: b9:ed:e8:41:f9:d9:16:36:84:a2:6a:c9:07:3b:b6:68:13:e7: 7f:de:1f:4e:61:dc:62:31:e1:c5:6d:b9:04:9c:3b:8d:63:36: 70:4c:d9:52:5a:53:03:70:21:b2:2a:9c:ca:1a:8a:65:b0:c8: 03:41:d0:7b:31:67:45:e5:43:d0:0c:d7:88:42:23:0e:f4:09: 57:0f:b2:fb:86:64:62:ff:2b:6c:a6:dd:29:80:5e:63:14:7e: e6:0f:0e:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEv0Q3NeUUT4qnkvBTgwZUtlbpiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA3MTkxMzQ3MDZaFw0yNTA3MjIyMjQ1MDZaMDMxMTAvBgNV BAMTKDI2QzZCQUM4NDVCNjdFNkEzRjYxMDdGRTk1RjI1REQ2MDgyNTAzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcz8mQS/kNPwhpFi2NmXPmKjSd sStMjhoY985fE+pgRBHeKNQRyzuBrdG1bF4TxrVq/N6F1AtVhg1TMHqKwrlsh3Wv NOvM/atBkGTrWm3prKobivXL2v//GdNdH/GHItv+g7L+RvU6+MENnO/R9lNm5fUL 7kh8F7/T6o8gVPW/zu8Wp6Zjgy9hSNXC4z7z/bmrulFf500AmuynJp+t8Fo2suoz 3cNf4d0Fo3RkZCMnJizW4YYrkXydm0ysNLYzhCMbgw8ymY6iFlRbv8wZPThBVl6z kv4mP46BJEOTPuGOzwXC87edic8YDIhJki0RelWhZpy7drPpl5WUYyD6XdvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJsa6yEW2fmo/YQf+lfJd1gglAyAwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrifbn7U9FSIU67RjYQNck4q7FaahIBVgFP IAUWRmbMOAQm3LamHl9TdEv1EGYUW2KDGCeSDDUpy5aAZMMXYl2BG6SQYLzEuoh4 SnftnsHiX+skc3ZVFB1DCSXNqy3fQfvqsxUW9vpplTvbCrmLOk2IUJKvJBLQw+al IzsPikNm+O+zyi/lxzGgEsLTG8XrRVrkwi0sS1LAD7W/eTLgYNVH1bnt6EH52RY2 hKJqyQc7tmgT53/eH05h3GIx4cVtuQScO41jNnBM2VJaUwNwIbIqnMoaimWwyANB 0HsxZ0XlQ9AM14hCIw70CVcPsvuGZGL/K2ym3SmAXmMUfuYPDh8= -----END CERTIFICATE-----Generated at Mon Jul 21 10:35:34 2025 by rpki-client