$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: dAmN35oeqZ0FZCgIvTjPZlfcS1Svt/kczTXoi2tqxVU= Subject key identifier: BF:72:FB:6F:F6:78:F5:D2:5E:6A:9C:8B:1B:81:14:35:41:67:09:5F Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 1615C4FBFF103C0F3A191DA65C6CA79FC7CDBF0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 021C Signing time: Sat 06 Sep 2025 14:40:51 +0000 Manifest this update: Sat 06 Sep 2025 14:35:51 +0000 Manifest next update: Tue 09 Sep 2025 15:27:51 +0000 Files and hashes: 1: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: UhZmsK1JV2dvdlJPQwAkZ3FUoREjtD3PWxnZnEWW6L0=) 2: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) 3: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) 4: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: zuMgo9HaqiPJaPIrj8mrqHP8NkFu/hsQVQte3xWnzHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:15:c4:fb:ff:10:3c:0f:3a:19:1d:a6:5c:6c:a7:9f:c7:cd:bf:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Sep 6 14:35:51 2025 GMT Not After : Sep 9 15:27:51 2025 GMT Subject: CN=BF72FB6FF678F5D25E6A9C8B1B8114354167095F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:1e:29:8e:48:cb:de:33:31:0e:c4:ad:d4: 78:c5:44:d3:69:60:51:89:37:04:19:03:a4:e6:09: 72:98:c5:79:dd:86:7e:63:9c:5c:03:1d:19:39:f6: c4:a5:ff:ed:d3:e9:c9:d5:e9:20:5a:e7:23:9c:06: 1a:fc:3c:3c:fb:0e:59:d8:ce:14:00:22:8a:71:dc: ba:87:b5:94:28:b5:6f:db:93:5b:51:a7:2d:36:0e: d9:a2:11:dc:f7:ed:4a:db:f4:77:92:b3:09:bb:18: 8d:9c:99:35:b3:7a:8a:6f:ae:04:d0:78:9d:64:61: 20:a6:2c:c5:21:c5:3c:c5:f8:ed:d7:cc:c2:9b:6b: bc:3c:44:bf:7e:36:cc:d5:46:b7:a5:b9:08:4c:75: 78:4c:31:c8:ce:6c:b5:08:c0:3e:05:81:bf:bd:98: 42:20:78:dc:9b:df:69:09:9d:0f:6a:e2:95:2c:7b: f5:e1:29:57:49:25:f4:de:14:fb:89:69:44:1c:d2: d5:56:8a:e8:d7:90:4b:9a:24:5e:e5:c1:a8:c5:3d: 8c:1c:9c:12:e7:48:34:91:10:b6:52:a7:38:1d:20: c3:69:3c:1c:9a:fe:e2:0e:d6:51:fa:84:b8:ed:7d: 4a:fe:fa:8c:4e:c1:03:74:5f:5f:39:40:df:af:1e: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:FB:6F:F6:78:F5:D2:5E:6A:9C:8B:1B:81:14:35:41:67:09:5F X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e9:c3:b8:7f:24:aa:68:10:ed:b1:d5:80:cd:d5:ea:94:55: 17:14:7d:1e:54:d0:f0:b0:a3:b6:20:fa:0e:49:d1:9f:bc:cf: 08:0e:7d:4e:de:39:1c:8c:9f:53:57:c6:b7:6e:c6:db:bc:63: 24:e0:38:b4:7a:63:12:98:47:43:cf:12:27:eb:e6:87:ce:97: 8e:c7:92:61:57:c0:bc:04:71:ce:b1:44:18:04:4c:df:c2:f7: 7c:2d:41:73:e9:6a:d9:32:43:df:e3:e3:2d:08:12:bf:06:f2: 45:34:ad:da:e4:81:d0:e4:55:e5:2e:72:50:5e:48:fe:f1:84: ab:89:f2:8b:6c:46:99:e8:18:75:a1:7c:f3:2d:a9:00:65:59: fb:3b:62:0e:0a:60:d9:cf:f0:76:e7:a3:79:ed:9d:f2:7d:c9: 89:10:12:12:41:39:e5:83:05:5d:c8:de:bd:11:96:4f:5d:f4: 3f:96:86:9c:e8:2d:ee:b3:c9:02:f5:8f:16:11:66:65:39:f5: 62:32:49:5c:2c:63:71:1f:a7:4c:8f:50:a2:f3:44:15:22:70: af:34:ca:64:f2:28:4a:38:ec:b0:90:0e:9a:27:7d:f0:5e:0a: e2:92:fc:e5:83:94:92:85:e4:91:eb:5c:67:29:cd:93:2e:6d: 46:11:95:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhXE+/8QPA86GR2mXGynn8fNvw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTA5MDYxNDM1NTFaFw0yNTA5MDkxNTI3NTFaMDMxMTAvBgNV BAMTKEJGNzJGQjZGRjY3OEY1RDI1RTZBOUM4QjFCODExNDM1NDE2NzA5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAh4pjkjL3jMxDsSt1HjFRNNp YFGJNwQZA6TmCXKYxXndhn5jnFwDHRk59sSl/+3T6cnV6SBa5yOcBhr8PDz7DlnY zhQAIopx3LqHtZQotW/bk1tRpy02DtmiEdz37Urb9HeSswm7GI2cmTWzeopvrgTQ eJ1kYSCmLMUhxTzF+O3XzMKba7w8RL9+NszVRreluQhMdXhMMcjObLUIwD4Fgb+9 mEIgeNyb32kJnQ9q4pUse/XhKVdJJfTeFPuJaUQc0tVWiujXkEuaJF7lwajFPYwc nBLnSDSRELZSpzgdIMNpPBya/uIO1lH6hLjtfUr++oxOwQN0X185QN+vHgrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3L7b/Z49dJeapyLG4EUNUFnCV8wHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfpw7h/JKpoEO2x1YDN1eqUVRcUfR5U0PCw o7Yg+g5J0Z+8zwgOfU7eORyMn1NXxrduxtu8YyTgOLR6YxKYR0PPEifr5ofOl47H kmFXwLwEcc6xRBgETN/C93wtQXPpatkyQ9/j4y0IEr8G8kU0rdrkgdDkVeUuclBe SP7xhKuJ8otsRpnoGHWhfPMtqQBlWfs7Yg4KYNnP8Hbno3ntnfJ9yYkQEhJBOeWD BV3I3r0Rlk9d9D+WhpzoLe6zyQL1jxYRZmU59WIySVwsY3Efp0yPUKLzRBUicK80 ymTyKEo47LCQDponffBeCuKS/OWDlJKF5JHrXGcpzZMubUYRlbI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:37 2025 by rpki-client