$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: T+4YX3P5mVNrzdB2RUzoG9AG2m+CXdX4wnHtPJBT5hc= Subject key identifier: 01:DC:A1:40:31:36:FC:38:0F:22:8A:67:94:CB:B7:5A:DF:2B:76:15 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 73A2D39701420B1B98616EF9797733271F1800C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 011B Signing time: Fri 05 Sep 2025 14:01:33 +0000 Manifest this update: Fri 05 Sep 2025 13:56:33 +0000 Manifest next update: Tue 09 Sep 2025 00:51:33 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: Y23uNzVl1el7iBWf5vpvozngx2OvIctjxpp0+0DIq2E=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: RuYqsgZi8De2CjZTXQUPEtku9TDXD5CxuRsZZx5RXJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a2:d3:97:01:42:0b:1b:98:61:6e:f9:79:77:33:27:1f:18:00:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Sep 5 13:56:33 2025 GMT Not After : Sep 9 00:51:33 2025 GMT Subject: CN=01DCA1403136FC380F228A6794CBB75ADF2B7615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:bf:86:0f:26:af:35:d5:96:de:3e:b4:82: c8:7c:5a:ed:14:95:c7:18:eb:0a:de:da:72:42:d2: 8a:1b:a6:7d:8b:68:47:f6:7d:e5:9e:67:a8:ac:1a: 59:68:02:ad:f0:4f:5f:a2:3f:2a:80:c7:e4:16:0a: 03:97:b0:1a:22:88:51:98:0e:d3:a6:ba:28:bd:ca: e5:12:c2:ce:8d:fa:f8:6f:06:fe:6b:c5:cd:18:90: ba:6d:c3:ac:05:8f:df:fe:3f:c5:f9:f3:33:d2:68: 28:bc:ae:3d:31:a6:f8:1e:7e:2e:39:9e:67:56:f4: c9:85:91:2b:91:06:48:93:aa:ed:61:f3:6a:f8:dd: aa:cc:cd:82:a3:ac:8a:ed:47:10:d7:42:42:56:75: 88:25:8a:6d:29:76:07:d6:34:f9:5d:17:9d:df:68: b4:d9:4e:b9:05:4c:c8:56:18:e0:f7:a3:1c:dc:58: a5:cd:48:b9:24:11:ca:ce:cf:9e:a2:d6:e5:35:43: 41:7a:fb:f9:c5:43:bb:6c:b2:9c:d0:8a:8e:40:fe: 10:d9:3a:10:67:9c:9a:83:eb:f2:46:cc:42:89:4e: 88:08:d0:a6:e6:89:4c:c3:9d:1d:e2:1a:37:ca:a5: 22:75:64:cf:5d:cd:01:20:d3:81:e2:c2:b2:db:5c: 87:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DC:A1:40:31:36:FC:38:0F:22:8A:67:94:CB:B7:5A:DF:2B:76:15 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4e:a3:74:77:9d:4b:24:af:0c:9b:03:72:f5:22:8c:b3:d2: 00:be:65:4e:95:be:17:67:17:15:b3:08:18:d6:c3:cb:4f:5d: 9d:27:08:9a:e5:8e:24:7a:5b:c9:54:f0:cc:54:2d:dc:7a:0a: e6:f5:cc:53:8b:05:52:bb:dd:13:67:ab:d0:02:56:2d:5f:30: 0e:8e:d9:2e:96:f2:dc:0d:d3:e2:d0:a8:4c:af:b0:43:93:3b: a0:48:5a:6a:b2:d9:03:73:b9:29:50:95:21:f9:81:91:e1:ba: 8f:f3:d4:d7:f8:00:1f:3b:3e:0b:0d:32:fd:b6:64:39:e5:06: cc:b3:16:51:c0:fa:89:6b:07:c0:75:ca:fb:22:9a:47:87:7a: 47:b8:bf:d1:59:22:9c:48:9e:e3:d9:cf:a0:47:b9:4e:1a:ec: a5:50:c7:cc:99:31:74:c2:0f:3f:31:6c:e6:c1:d6:87:e2:67: 8e:5e:79:a0:be:4c:2a:50:eb:c7:31:89:a1:e6:ef:d1:77:e6: 3b:1a:54:b1:eb:e4:40:30:55:62:df:79:6e:3f:b0:58:b1:80: 96:0e:82:43:dd:85:5e:c6:5e:7d:1b:41:bc:07:55:98:7c:d3: 98:8a:31:b6:39:9c:70:ca:08:f3:c6:48:b6:e4:4f:61:af:bc: 3b:9d:26:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6LTlwFCCxuYYW75eXczJx8YAMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTA5MDUxMzU2MzNaFw0yNTA5MDkwMDUxMzNaMDMxMTAvBgNV BAMTKDAxRENBMTQwMzEzNkZDMzgwRjIyOEE2Nzk0Q0JCNzVBREYyQjc2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJh7+GDyavNdWW3j60gsh8Wu0U lccY6wre2nJC0oobpn2LaEf2feWeZ6isGlloAq3wT1+iPyqAx+QWCgOXsBoiiFGY DtOmuii9yuUSws6N+vhvBv5rxc0YkLptw6wFj9/+P8X58zPSaCi8rj0xpvgefi45 nmdW9MmFkSuRBkiTqu1h82r43arMzYKjrIrtRxDXQkJWdYglim0pdgfWNPldF53f aLTZTrkFTMhWGOD3oxzcWKXNSLkkEcrOz56i1uU1Q0F6+/nFQ7tsspzQio5A/hDZ OhBnnJqD6/JGzEKJTogI0KbmiUzDnR3iGjfKpSJ1ZM9dzQEg04HiwrLbXIfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAdyhQDE2/DgPIopnlMu3Wt8rdhUwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1Oo3R3nUskrwybA3L1Ioyz0gC+ZU6Vvhdn FxWzCBjWw8tPXZ0nCJrljiR6W8lU8MxULdx6Cub1zFOLBVK73RNnq9ACVi1fMA6O 2S6W8twN0+LQqEyvsEOTO6BIWmqy2QNzuSlQlSH5gZHhuo/z1Nf4AB87PgsNMv22 ZDnlBsyzFlHA+olrB8B1yvsimkeHeke4v9FZIpxInuPZz6BHuU4a7KVQx8yZMXTC Dz8xbObB1ofiZ45eeaC+TCpQ68cxiaHm79F35jsaVLHr5EAwVWLfeW4/sFixgJYO gkPdhV7GXn0bQbwHVZh805iKMbY5nHDKCPPGSLbkT2GvvDudJkM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:22 2025 by rpki-client