$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: X0imseseYkE9X+XPdEZq47Le07r8C0jLhR9+eYOk/48= Subject key identifier: A8:A3:BC:F5:BF:D5:9A:84:18:FD:BF:0D:B6:49:66:2B:7F:E5:9C:C6 Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 74958E31F6B11AC2EF3E9D093E42C1C04D3E7FD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 0137 Signing time: Sun 19 Oct 2025 11:10:43 +0000 Manifest this update: Sun 19 Oct 2025 11:05:43 +0000 Manifest next update: Wed 22 Oct 2025 13:11:43 +0000 Files and hashes: 1: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: o9aIY4OFY8be45OWcosx65vByPt7hxSa+/t5ThvpOFg=) 2: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: qxQ+6T9yrSIPoh+WZqiNWh2YyFV04+QAx96S0X8/TDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:95:8e:31:f6:b1:1a:c2:ef:3e:9d:09:3e:42:c1:c0:4d:3e:7f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Oct 19 11:05:43 2025 GMT Not After : Oct 22 13:11:43 2025 GMT Subject: CN=A8A3BCF5BFD59A8418FDBF0DB649662B7FE59CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:6b:6f:9a:f0:b7:63:3d:e6:aa:fc:65:99: 23:a8:2e:3e:0d:2d:cb:ce:81:58:fc:6c:04:70:76: 9c:ad:e0:0f:77:52:ee:b2:08:65:5d:c3:a4:d5:51: 99:91:e5:c9:1b:e2:1f:cf:fe:3a:12:49:f9:29:b1: 5c:e2:eb:70:47:18:bc:d1:2b:1b:0b:21:91:70:76: 11:12:9d:6f:ba:71:67:c7:87:50:c2:c0:67:59:8c: fa:60:d0:98:e4:e0:56:8b:e2:c7:d4:36:97:75:87: 9b:28:36:92:b5:37:ca:59:ad:69:6e:ec:8b:a8:ce: 99:0e:6a:40:8d:29:6c:61:01:e5:d2:82:41:27:e6: 21:c4:6a:88:63:c8:58:33:54:b4:09:bd:cc:13:97: b3:4d:66:9c:f4:31:b8:65:59:c6:d6:c3:14:a4:ca: 3f:73:eb:07:dc:7a:eb:b3:73:ff:80:76:a7:8e:6f: db:0d:3f:11:2d:ea:b8:6f:ca:c0:a5:5f:76:69:25: 68:1a:c9:b7:c9:03:bb:dc:5a:a4:86:67:03:03:1b: a8:82:8c:9d:d6:19:db:89:b5:2e:6d:ae:dc:74:d5: cc:8b:b7:3a:3e:f6:54:55:d8:d5:2f:07:31:2e:03: 08:ed:59:c5:fa:50:41:68:bb:85:64:71:00:74:0a: 26:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A3:BC:F5:BF:D5:9A:84:18:FD:BF:0D:B6:49:66:2B:7F:E5:9C:C6 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:7d:1c:c7:79:d8:b7:34:9d:56:06:8c:8d:92:7c:25:f9:15: 24:20:a5:3c:3c:0c:95:c9:7a:fc:a8:68:bd:a5:48:9f:37:4b: f0:7b:87:ac:f6:71:ac:5a:63:e1:37:58:79:57:f7:c4:c1:11: 2a:49:e0:2c:e0:c9:fb:36:35:3a:9a:e0:a4:78:c0:17:c7:09: d5:a7:43:bf:09:1b:61:7a:5b:21:55:b0:b1:a7:3c:21:88:68: 57:64:d0:42:73:a8:2b:78:a6:90:69:b1:95:93:af:68:97:5f: d2:41:06:68:22:73:0b:1b:18:0a:70:0f:26:06:b2:97:22:bc: a0:d0:ca:51:ff:0c:b6:15:a9:50:ec:ee:e4:75:7f:12:be:a3: 32:83:c7:43:39:aa:4e:d9:22:d8:3c:9c:c5:1c:ac:5a:77:66: be:27:0d:72:88:c8:46:c9:24:b0:d5:04:73:96:95:5b:bc:7d: eb:21:59:a4:88:da:6d:1f:d6:02:e2:54:47:3c:b1:76:e3:76: ae:20:fb:b8:b1:7b:3e:bd:26:64:ea:f3:04:dc:82:cb:a3:20: 5c:c4:29:a7:c7:b4:e5:23:b8:69:e9:8a:f6:75:4d:70:64:31: 98:49:72:9e:66:08:fb:51:de:56:aa:b0:46:07:27:dd:6b:b4: 63:d8:df:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJWOMfaxGsLvPp0JPkLBwE0+f9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNTEwMTkxMTA1NDNaFw0yNTEwMjIxMzExNDNaMDMxMTAvBgNV BAMTKEE4QTNCQ0Y1QkZENTlBODQxOEZEQkYwREI2NDk2NjJCN0ZFNTlDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhWtvmvC3Yz3mqvxlmSOoLj4N LcvOgVj8bARwdpyt4A93Uu6yCGVdw6TVUZmR5ckb4h/P/joSSfkpsVzi63BHGLzR KxsLIZFwdhESnW+6cWfHh1DCwGdZjPpg0Jjk4FaL4sfUNpd1h5soNpK1N8pZrWlu 7IuozpkOakCNKWxhAeXSgkEn5iHEaohjyFgzVLQJvcwTl7NNZpz0MbhlWcbWwxSk yj9z6wfceuuzc/+AdqeOb9sNPxEt6rhvysClX3ZpJWgaybfJA7vcWqSGZwMDG6iC jJ3WGduJtS5trtx01cyLtzo+9lRV2NUvBzEuAwjtWcX6UEFou4VkcQB0CiaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKO89b/VmoQY/b8NtklmK3/lnMYwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALx9HMd52Lc0nVYGjI2SfCX5FSQgpTw8DJXJ evyoaL2lSJ83S/B7h6z2caxaY+E3WHlX98TBESpJ4Czgyfs2NTqa4KR4wBfHCdWn Q78JG2F6WyFVsLGnPCGIaFdk0EJzqCt4ppBpsZWTr2iXX9JBBmgicwsbGApwDyYG spcivKDQylH/DLYVqVDs7uR1fxK+ozKDx0M5qk7ZItg8nMUcrFp3Zr4nDXKIyEbJ JLDVBHOWlVu8feshWaSI2m0f1gLiVEc8sXbjdq4g+7ixez69JmTq8wTcgsujIFzE KafHtOUjuGnpivZ1TXBkMZhJcp5mCPtR3laqsEYHJ91rtGPY39s= -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:07 2025 by rpki-client