$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: B3yGKcSft+DK9w0QOGMaJRkCeu3i0fa1kRtPUVhLja4= Subject key identifier: C3:1E:E6:AB:42:E5:18:56:9B:51:AF:28:0B:10:A1:BB:6C:5D:12:E1 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 2B34311FF7E44952A81DBE805777955310A4CB37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: CA Signing time: Sat 06 Sep 2025 08:12:09 +0000 Manifest this update: Sat 06 Sep 2025 08:07:09 +0000 Manifest next update: Tue 09 Sep 2025 11:48:09 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: nAYKXBG9RppgmqrnDj30MeyxMWi5s7kbH0uyo2gOLzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:34:31:1f:f7:e4:49:52:a8:1d:be:80:57:77:95:53:10:a4:cb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Sep 6 08:07:09 2025 GMT Not After : Sep 9 11:48:09 2025 GMT Subject: CN=C31EE6AB42E518569B51AF280B10A1BB6C5D12E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:8d:1e:9b:57:64:d1:0e:38:56:98:c7:d6: 5f:cf:46:27:a8:c0:86:36:c5:ac:5c:c3:83:c2:ca: 67:c5:f0:ab:45:2f:94:39:32:39:dd:4b:15:2b:4b: c1:6c:a0:ff:fe:77:1b:c4:88:e8:38:4d:5b:28:52: c7:aa:33:fc:3d:77:3f:5a:6a:06:01:34:1a:5f:c4: 8e:66:58:60:5b:e7:bf:36:f5:ff:b0:17:06:27:13: 3f:13:bd:ec:01:8d:7a:2a:70:42:d3:15:bd:45:25: de:87:a7:dc:70:18:ed:36:67:d1:95:ea:20:f9:7d: 7b:b0:88:f4:a5:4c:2b:4b:f8:78:63:46:26:cd:7e: 22:30:ef:36:f2:90:52:f1:72:20:0e:73:9f:d2:9d: 06:0f:e9:18:56:7a:d4:dc:02:1c:cb:c3:07:cb:a0: b0:1b:8b:45:b3:d5:a5:2d:c7:14:5a:d0:e3:fc:7e: fd:9e:13:b8:05:a3:33:f5:01:5e:35:79:9c:bd:bc: d4:8f:af:ff:c0:13:ea:7f:91:0c:12:45:6d:8d:ed: a2:6e:4c:2d:3e:e8:ec:f1:e7:f1:c9:7f:bf:e9:47: 87:13:11:c9:bd:21:df:24:14:83:4a:fb:d3:a9:51: 8a:a0:e8:ef:f1:9c:09:cd:2c:53:1f:67:38:f8:79: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1E:E6:AB:42:E5:18:56:9B:51:AF:28:0B:10:A1:BB:6C:5D:12:E1 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:35:89:12:63:e4:69:2f:90:b6:51:db:18:be:fb:cd:c6:e8: ff:30:fd:f6:81:b3:04:54:9a:67:ea:ba:99:2f:41:16:ea:9e: f6:0b:3f:bd:7b:e6:ea:44:48:b4:a5:00:92:30:e9:09:bf:b6: cc:34:1d:c7:4c:b9:99:a4:f7:80:13:93:8f:17:32:a1:65:b0: fd:b2:c5:15:e9:bc:fb:d4:c3:e6:46:e4:e1:83:49:f2:2b:4d: 59:0d:dc:46:72:d2:18:28:2a:fc:e6:35:87:90:d7:73:7a:1e: dc:d9:07:9d:30:33:28:9f:df:8a:bc:74:ff:fe:09:55:91:eb: b8:b8:ea:e7:b6:39:5a:ac:28:79:83:24:f9:32:96:df:ba:46: 40:2c:0d:9d:af:79:99:c2:d1:23:90:24:6d:85:a5:c1:f9:b1: a1:57:fe:d4:db:d6:98:9b:7c:46:5a:83:18:0a:0f:49:7e:38: ef:e7:b1:4c:8f:bb:6f:6e:6e:03:7d:9b:62:0f:73:4d:eb:95: f8:5a:81:6d:e9:32:da:81:9d:40:16:2c:92:48:cd:68:ba:f9: 4d:50:9f:fb:d2:01:54:69:4f:be:4c:9d:19:0b:8e:ec:78:ab: 6a:2f:50:fd:b9:11:47:c1:37:d8:3b:86:c4:55:6d:8a:e4:78: e9:0f:74:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzQxH/fkSVKoHb6AV3eVUxCkyzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA5MDYwODA3MDlaFw0yNTA5MDkxMTQ4MDlaMDMxMTAvBgNV BAMTKEMzMUVFNkFCNDJFNTE4NTY5QjUxQUYyODBCMTBBMUJCNkM1RDEyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSa40em1dk0Q44VpjH1l/PRieo wIY2xaxcw4PCymfF8KtFL5Q5MjndSxUrS8FsoP/+dxvEiOg4TVsoUseqM/w9dz9a agYBNBpfxI5mWGBb57829f+wFwYnEz8TvewBjXoqcELTFb1FJd6Hp9xwGO02Z9GV 6iD5fXuwiPSlTCtL+HhjRibNfiIw7zbykFLxciAOc5/SnQYP6RhWetTcAhzLwwfL oLAbi0Wz1aUtxxRa0OP8fv2eE7gFozP1AV41eZy9vNSPr//AE+p/kQwSRW2N7aJu TC0+6Ozx5/HJf7/pR4cTEcm9Id8kFINK+9OpUYqg6O/xnAnNLFMfZzj4ebHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwx7mq0LlGFabUa8oCxChu2xdEuEwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAE1iRJj5GkvkLZR2xi++83G6P8w/faBswRU mmfqupkvQRbqnvYLP7175upESLSlAJIw6Qm/tsw0HcdMuZmk94ATk48XMqFlsP2y xRXpvPvUw+ZG5OGDSfIrTVkN3EZy0hgoKvzmNYeQ13N6HtzZB50wMyif34q8dP/+ CVWR67i46ue2OVqsKHmDJPkylt+6RkAsDZ2veZnC0SOQJG2FpcH5saFX/tTb1pib fEZagxgKD0l+OO/nsUyPu29ubgN9m2IPc03rlfhagW3pMtqBnUAWLJJIzWi6+U1Q n/vSAVRpT75MnRkLjux4q2ovUP25EUfBN9g7hsRVbYrkeOkPdLw= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:04 2025 by rpki-client