$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: AnwxjsfFMfSnEwRAzFARBtyynrWLAmSQUn5JYpdDOBo= Subject key identifier: 5E:52:D8:0D:C4:57:F4:4F:6C:7C:96:32:AC:2C:05:B1:20:12:99:32 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 4728BE53C3307FBC2B6301FA0229B6B9F80211E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: F2 Signing time: Thu 05 Jun 2025 12:41:33 +0000 Manifest this update: Thu 05 Jun 2025 12:36:33 +0000 Manifest next update: Sun 08 Jun 2025 23:31:33 +0000 Files and hashes: 1: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: +qKj3ZOOHdfkEkqxWy4scc04XQ3MbFVZ/D67E0GL9J8=) 2: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: Y23uNzVl1el7iBWf5vpvozngx2OvIctjxpp0+0DIq2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 23:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:28:be:53:c3:30:7f:bc:2b:63:01:fa:02:29:b6:b9:f8:02:11:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Jun 5 12:36:33 2025 GMT Not After : Jun 8 23:31:33 2025 GMT Subject: CN=5E52D80DC457F44F6C7C9632AC2C05B120129932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:b8:7e:88:2c:65:4a:a2:bc:5c:0e:54:5d: 33:be:27:44:f5:1f:7c:83:a8:80:4e:80:27:11:0f: 4e:a8:b6:8b:2e:4c:d3:ac:19:f5:5b:5d:b3:b9:65: 86:06:72:2a:e5:bf:2f:31:f9:59:e2:b1:02:e6:a8: 22:49:a9:62:97:f2:a2:8b:ae:27:61:56:18:93:73: 0b:0c:65:32:e8:eb:72:25:00:d5:a2:f7:ea:96:dc: d4:49:bd:50:ac:37:21:77:ae:a5:c4:05:e7:cb:50: c1:72:2d:dd:77:58:f5:92:33:a5:58:89:25:e4:b7: 83:fb:3e:48:5a:4b:8a:19:42:06:b8:1e:1c:d7:f3: 5c:38:ea:d2:4a:ed:b6:79:65:72:d3:11:ac:31:2c: 10:6a:ee:ce:69:29:02:8c:a1:d5:a1:e7:37:51:9c: 50:e3:a7:64:eb:bd:d0:75:a4:44:3a:cf:ea:2b:fa: bf:b6:ed:4d:d0:84:a2:56:3f:c8:93:4d:77:17:e3: 16:01:dc:99:94:97:7c:c9:db:6a:31:05:c0:5d:b7: 74:ea:b9:d2:3d:40:e4:3a:a5:26:ad:69:25:2f:16: 47:c6:86:f7:0d:43:17:d5:1d:e6:92:c2:00:04:3e: 7f:b2:df:0b:bc:cf:98:12:f9:09:b0:95:03:bb:63: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:D8:0D:C4:57:F4:4F:6C:7C:96:32:AC:2C:05:B1:20:12:99:32 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:01:cf:af:a5:1f:87:de:78:3c:b2:d2:c1:dc:ad:1c:25:3e: a4:f6:05:e6:c9:12:53:06:7f:8d:a5:50:93:b2:3e:9e:04:d9: fa:8e:19:c4:b7:50:c0:17:f9:27:6f:97:51:e8:40:d7:65:09: e1:be:ba:f8:91:c5:e5:75:d5:04:19:cd:98:29:b5:e8:30:89: 7e:5a:f4:b1:47:db:1f:75:1c:33:da:23:be:cf:74:6a:0e:04: 96:f3:d0:6a:66:21:d5:29:29:3a:81:45:92:a9:27:64:a9:26: 84:5d:6f:fe:60:ef:b1:34:bf:74:04:de:53:79:34:d3:33:0e: 1d:4e:e2:ff:bc:29:8b:f7:c9:b2:92:25:ab:44:e9:f2:f5:45: b1:80:94:69:1b:27:98:b9:b2:7f:6b:ac:f3:fe:b5:6e:95:71: 77:a5:11:4b:59:ad:49:c1:ac:14:37:ae:f1:61:d2:c2:60:2c: c9:dd:c7:dd:43:03:00:69:e2:2f:98:75:76:e5:34:33:77:52: 1d:ec:64:ef:81:c5:44:f8:df:e4:98:1f:71:3a:0d:70:89:be: 78:3e:ab:78:ee:df:41:5f:36:ee:3a:44:61:da:99:13:eb:52: 0e:d5:4c:7d:7a:bf:fd:59:32:0d:e7:47:e8:79:5b:14:59:d6: 1d:bc:67:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyi+U8Mwf7wrYwH6Aim2ufgCEeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTA2MDUxMjM2MzNaFw0yNTA2MDgyMzMxMzNaMDMxMTAvBgNV BAMTKDVFNTJEODBEQzQ1N0Y0NEY2QzdDOTYzMkFDMkMwNUIxMjAxMjk5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Wbh+iCxlSqK8XA5UXTO+J0T1 H3yDqIBOgCcRD06otosuTNOsGfVbXbO5ZYYGcirlvy8x+VnisQLmqCJJqWKX8qKL ridhVhiTcwsMZTLo63IlANWi9+qW3NRJvVCsNyF3rqXEBefLUMFyLd13WPWSM6VY iSXkt4P7PkhaS4oZQga4HhzX81w46tJK7bZ5ZXLTEawxLBBq7s5pKQKModWh5zdR nFDjp2TrvdB1pEQ6z+or+r+27U3QhKJWP8iTTXcX4xYB3JmUl3zJ22oxBcBdt3Tq udI9QOQ6pSataSUvFkfGhvcNQxfVHeaSwgAEPn+y3wu8z5gS+QmwlQO7Y8brAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlLYDcRX9E9sfJYyrCwFsSASmTIwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgBz6+lH4feeDyy0sHcrRwlPqT2BebJElMG f42lUJOyPp4E2fqOGcS3UMAX+Sdvl1HoQNdlCeG+uviRxeV11QQZzZgptegwiX5a 9LFH2x91HDPaI77PdGoOBJbz0GpmIdUpKTqBRZKpJ2SpJoRdb/5g77E0v3QE3lN5 NNMzDh1O4v+8KYv3ybKSJatE6fL1RbGAlGkbJ5i5sn9rrPP+tW6VcXelEUtZrUnB rBQ3rvFh0sJgLMndx91DAwBp4i+YdXblNDN3Uh3sZO+BxUT43+SYH3E6DXCJvng+ q3ju30FfNu46RGHamRPrUg7VTH16v/1ZMg3nR+h5WxRZ1h28Z54= -----END CERTIFICATE-----Generated at Sat Jun 7 22:05:57 2025 by rpki-client