$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: S4KFuVvfWuvSdsNm6KSeoOEePxUO5ff3Q49/CsTi+jA= Subject key identifier: 97:D1:7B:D1:C3:BB:A2:25:94:33:98:82:6B:EE:31:63:18:46:DD:6F Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 13CB9D379601CA9547D57BC6CB4A3E045E1A5F8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: A0 Signing time: Wed 04 Jun 2025 23:32:12 +0000 Manifest this update: Wed 04 Jun 2025 23:27:12 +0000 Manifest next update: Sun 08 Jun 2025 04:20:12 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: KWnDn3jliFmqf+0zKPc19C9TmiaFiuVi4xy0Hq4Zxeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cb:9d:37:96:01:ca:95:47:d5:7b:c6:cb:4a:3e:04:5e:1a:5f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Jun 4 23:27:12 2025 GMT Not After : Jun 8 04:20:12 2025 GMT Subject: CN=97D17BD1C3BBA225943398826BEE31631846DD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:0d:2b:fb:09:fa:27:f1:ff:26:f0:36:87: b1:65:72:7b:6d:a9:79:e4:74:f7:21:65:ef:34:6f: 0f:92:79:06:51:a7:de:9e:69:e3:aa:d1:2d:00:79: ca:45:68:13:96:81:5f:63:a3:d3:22:9b:75:74:4e: e5:e6:0d:dc:16:ee:a2:6d:c5:77:17:41:a7:74:66: 7c:ee:a4:8b:3f:6f:97:80:35:ea:1b:b0:02:f3:0a: 12:de:3e:32:53:aa:c3:8d:e2:39:0d:00:97:dd:64: 36:87:58:f5:bb:89:0c:18:bf:be:8e:f6:a0:ab:0c: 80:08:b8:3d:ef:8e:0f:ca:59:fe:26:c5:41:51:2e: 4d:53:c9:05:e8:4b:75:2b:91:85:84:4a:b3:72:71: bc:da:6b:a7:b2:97:9f:c3:61:ba:99:42:a6:bf:51: ae:23:2f:1e:9e:68:8a:da:5a:59:7d:12:be:d9:23: c3:6e:e2:4a:a2:fc:bf:61:38:5b:d0:0f:4e:b4:e0: da:69:13:cf:83:de:14:20:23:05:13:2c:e5:ca:c5: f6:2c:1f:17:61:14:fc:2c:f8:e1:d7:a9:c5:d6:12: 20:75:52:c8:bf:81:9b:5d:d5:67:44:12:6d:3e:c5: c0:32:10:cc:b9:88:63:9d:40:70:25:e6:dc:85:df: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D1:7B:D1:C3:BB:A2:25:94:33:98:82:6B:EE:31:63:18:46:DD:6F X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:aa:8a:8a:cd:f6:06:d7:ce:19:7c:11:3a:a6:2d:72:b7:71: b8:16:69:34:18:a7:f2:c9:8f:74:71:44:dc:b3:57:81:d3:91: a1:da:b0:3b:2d:15:b2:89:77:2f:5d:2c:b9:b6:ba:c8:85:4f: 12:a1:b7:8f:66:24:1c:65:9b:3f:b1:3d:6b:a6:6f:f0:4c:10: fb:72:da:14:eb:6e:6a:38:b7:5b:0e:50:1d:03:36:c9:50:33: b8:72:e7:11:d1:b6:db:36:e1:1e:8a:13:e0:61:bd:92:96:a0: 9b:be:fe:fc:49:3c:ec:cb:b7:e5:e6:a4:6e:f2:a1:c6:e2:6b: 58:44:2b:36:69:fb:1e:7b:00:1c:85:18:8c:02:5c:17:56:44: b0:9e:f8:15:2e:9c:49:c7:9f:2c:12:4c:89:88:50:3a:ac:50: 31:a7:d9:9f:2d:53:5e:12:f0:1a:36:6f:be:15:0d:b8:28:1d: 3d:cf:01:fc:84:c4:3a:43:66:3c:76:bd:7b:51:b9:8a:60:ad: f5:bd:a2:9d:2e:ff:4b:0e:5c:de:df:37:13:b7:af:49:50:8d: fb:86:4a:57:04:ce:4b:cd:6a:7e:cc:0a:c6:de:06:fe:69:5a: f8:fe:66:4a:55:3d:25:44:4d:25:e8:d7:a9:84:96:0d:33:64: 7c:55:10:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8udN5YBypVH1XvGy0o+BF4aX4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA2MDQyMzI3MTJaFw0yNTA2MDgwNDIwMTJaMDMxMTAvBgNV BAMTKDk3RDE3QkQxQzNCQkEyMjU5NDMzOTg4MjZCRUUzMTYzMTg0NkRENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+w0r+wn6J/H/JvA2h7Flcntt qXnkdPchZe80bw+SeQZRp96eaeOq0S0AecpFaBOWgV9jo9Mim3V0TuXmDdwW7qJt xXcXQad0ZnzupIs/b5eANeobsALzChLePjJTqsON4jkNAJfdZDaHWPW7iQwYv76O 9qCrDIAIuD3vjg/KWf4mxUFRLk1TyQXoS3UrkYWESrNycbzaa6eyl5/DYbqZQqa/ Ua4jLx6eaIraWll9Er7ZI8Nu4kqi/L9hOFvQD0604NppE8+D3hQgIwUTLOXKxfYs HxdhFPws+OHXqcXWEiB1Usi/gZtd1WdEEm0+xcAyEMy5iGOdQHAl5tyF30jJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl9F70cO7oiWUM5iCa+4xYxhG3W8wHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWqiorN9gbXzhl8ETqmLXK3cbgWaTQYp/LJ j3RxRNyzV4HTkaHasDstFbKJdy9dLLm2usiFTxKht49mJBxlmz+xPWumb/BMEPty 2hTrbmo4t1sOUB0DNslQM7hy5xHRtts24R6KE+BhvZKWoJu+/vxJPOzLt+XmpG7y ocbia1hEKzZp+x57AByFGIwCXBdWRLCe+BUunEnHnywSTImIUDqsUDGn2Z8tU14S 8Bo2b74VDbgoHT3PAfyExDpDZjx2vXtRuYpgrfW9op0u/0sOXN7fNxO3r0lQjfuG SlcEzkvNan7MCsbeBv5pWvj+ZkpVPSVETSXo16mElg0zZHxVEKI= -----END CERTIFICATE-----Generated at Fri Jun 6 06:25:25 2025 by rpki-client