$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: zf+w2FvM8YNJWDz/T0u8XO3fW9P1V8X/m0RvdZu45Js= Subject key identifier: 01:69:29:B2:98:FE:AE:4B:7A:D7:56:8E:0A:9D:E5:F4:F4:12:D0:9A Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 41B1453F3A79D698DBE536D17BACC72B4D1F5CBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 01F1 Signing time: Tue 03 Jun 2025 10:11:09 +0000 Manifest this update: Tue 03 Jun 2025 10:06:09 +0000 Manifest next update: Fri 06 Jun 2025 15:34:09 +0000 Files and hashes: 1: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: yRanOZGnih6RR4ZAoNL3Hr2Kj0Og2jieWRKzIVb/EXs=) 2: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: UhZmsK1JV2dvdlJPQwAkZ3FUoREjtD3PWxnZnEWW6L0=) 3: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: lo6tREBWN7bI+sHId1isS6WZbcNcr1eWU6sJ0IWJ73o=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b1:45:3f:3a:79:d6:98:db:e5:36:d1:7b:ac:c7:2b:4d:1f:5c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Jun 3 10:06:09 2025 GMT Not After : Jun 6 15:34:09 2025 GMT Subject: CN=016929B298FEAE4B7AD7568E0A9DE5F4F412D09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:24:95:b0:6f:e0:03:17:6f:4a:5d:16:4c: 57:73:a8:b0:fb:58:b4:56:8c:9b:58:32:00:9a:82: 6d:e5:d4:70:73:ed:59:cb:ed:d6:bd:33:87:67:02: 3a:a6:bd:4d:84:2f:4f:41:34:63:68:86:b9:5f:53: dc:a7:3a:12:2d:0a:1d:a8:1f:5d:bd:db:52:25:90: ab:d6:b8:ea:7f:e3:86:c4:05:2a:fc:53:18:f0:21: 13:45:30:c7:67:ee:05:fb:fd:1f:5b:32:81:b2:fb: a5:f1:a5:99:e2:42:51:c4:73:dd:24:51:dc:bb:e6: af:03:79:98:84:db:ae:7b:95:47:9a:4a:30:d8:35: 7a:18:be:de:1b:a0:7a:34:da:72:68:87:84:d8:6f: 36:99:fc:d4:21:1c:59:76:58:65:81:dc:fe:44:3d: fc:15:8f:75:24:4a:69:7c:cb:e7:dd:40:01:d4:70: 6c:9f:d7:2c:3d:50:3a:84:24:1d:ee:3c:5b:52:29: 51:5f:0e:44:1a:ce:a4:ce:16:75:8d:74:67:8f:42: fc:d3:ed:4c:d4:9a:d0:2e:05:23:39:29:d8:d3:3a: d4:bd:d7:15:02:be:51:a6:1d:d7:b9:d7:10:0c:26: c1:71:82:d0:8a:75:47:a8:ee:49:d4:86:2d:93:e3: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:69:29:B2:98:FE:AE:4B:7A:D7:56:8E:0A:9D:E5:F4:F4:12:D0:9A X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:48:74:9b:71:44:d9:a1:f9:be:f0:85:9d:61:99:fb:63:73: 53:bb:fe:85:77:06:6d:fb:68:01:de:80:28:bf:fd:bb:49:d6: 25:0d:4c:b9:03:0a:5d:df:f5:67:69:f5:03:a9:06:c5:f0:bb: 72:cc:83:57:4d:a5:0d:56:39:5e:4c:b8:be:ca:4b:ba:a0:2d: d2:73:44:b2:a0:b9:ca:00:61:32:85:ca:d3:3d:ec:56:91:ae: f5:60:ca:de:bd:b3:43:9f:ad:85:fe:0a:ec:6c:a7:f1:96:a7: 38:a4:7a:6c:2d:3f:bb:15:1e:26:9d:20:b8:74:74:4f:43:46: be:59:46:64:39:b3:c1:d1:bb:e4:4b:4e:56:4c:23:29:6e:46: d7:6c:1c:fe:3c:90:39:56:c6:04:13:4a:03:e2:20:9b:97:f8: 99:e8:f7:dc:d9:98:43:12:03:bd:31:35:4a:5f:ac:db:37:0d: d6:f8:2c:6d:cb:98:c5:18:3d:51:a5:c3:cf:6d:cc:1a:29:60: 2e:3c:89:16:86:9e:16:47:34:6d:16:39:32:43:be:a1:f0:d7: 18:58:d9:8b:8d:1d:8b:28:58:5a:f0:91:3b:df:62:7f:22:8b: ce:b4:b9:06:1c:e5:83:e9:94:4a:d5:82:3d:9e:3f:8b:12:cc: 19:07:1c:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbFFPzp51pjb5TbRe6zHK00fXL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTA2MDMxMDA2MDlaFw0yNTA2MDYxNTM0MDlaMDMxMTAvBgNV BAMTKDAxNjkyOUIyOThGRUFFNEI3QUQ3NTY4RTBBOURFNUY0RjQxMkQwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0SSVsG/gAxdvSl0WTFdzqLD7 WLRWjJtYMgCagm3l1HBz7VnL7da9M4dnAjqmvU2EL09BNGNohrlfU9ynOhItCh2o H12921IlkKvWuOp/44bEBSr8UxjwIRNFMMdn7gX7/R9bMoGy+6XxpZniQlHEc90k Udy75q8DeZiE2657lUeaSjDYNXoYvt4boHo02nJoh4TYbzaZ/NQhHFl2WGWB3P5E PfwVj3UkSml8y+fdQAHUcGyf1yw9UDqEJB3uPFtSKVFfDkQazqTOFnWNdGePQvzT 7UzUmtAuBSM5KdjTOtS91xUCvlGmHde51xAMJsFxgtCKdUeo7knUhi2T4+7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAWkpspj+rkt611aOCp3l9PQS0JowHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFIdJtxRNmh+b7whZ1hmftjc1O7/oV3Bm37 aAHegCi//btJ1iUNTLkDCl3f9Wdp9QOpBsXwu3LMg1dNpQ1WOV5MuL7KS7qgLdJz RLKgucoAYTKFytM97FaRrvVgyt69s0OfrYX+Cuxsp/GWpzikemwtP7sVHiadILh0 dE9DRr5ZRmQ5s8HRu+RLTlZMIyluRtdsHP48kDlWxgQTSgPiIJuX+Jno99zZmEMS A70xNUpfrNs3Ddb4LG3LmMUYPVGlw89tzBopYC48iRaGnhZHNG0WOTJDvqHw1xhY 2YuNHYsoWFrwkTvfYn8ii860uQYc5YPplErVgj2eP4sSzBkHHKE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:31 2025 by rpki-client