$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: xcIYgHMIPjTgT7YYvVPMdNgSqnf2miswjtHpldrij+4= Subject key identifier: 4F:93:30:31:57:73:74:45:B5:B4:8E:D4:0F:A4:04:E1:E8:36:1C:8D Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 39B09814E8454E95C01613E005F621C31BA35EB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: AB Signing time: Sat 28 Jun 2025 20:12:16 +0000 Manifest this update: Sat 28 Jun 2025 20:07:16 +0000 Manifest next update: Wed 02 Jul 2025 03:46:16 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: 3ZPsnzojbs5mKkAfk51NoUqNEx1/ptSZf4yKsQgzEjE=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b0:98:14:e8:45:4e:95:c0:16:13:e0:05:f6:21:c3:1b:a3:5e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Jun 28 20:07:16 2025 GMT Not After : Jul 2 03:46:16 2025 GMT Subject: CN=4F93303157737445B5B48ED40FA404E1E8361C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:3a:d1:7d:60:8d:83:1e:70:11:44:55:67: aa:ea:1e:ea:67:58:d1:16:36:8c:c4:4e:48:3e:4e: d5:c0:66:13:c2:e7:22:76:ea:79:25:1d:db:4e:95: 13:fa:c7:ca:cc:64:4b:0b:30:2f:52:7d:e1:47:ee: 39:07:2a:01:4d:74:ad:6a:12:a0:2d:d6:cb:e3:e1: d7:f9:4f:48:55:26:8a:e7:27:25:a6:15:88:d7:3c: 45:2d:47:dd:fa:8b:6b:f7:a9:41:5e:15:f6:c7:60: ad:2d:65:36:84:52:07:50:b1:fb:15:2c:14:df:55: 29:be:e8:19:ab:09:c1:df:b4:76:6d:aa:bb:9f:6a: 18:57:0d:b2:b4:3d:e2:84:80:a1:b5:9d:48:a1:24: 75:31:46:09:35:ad:2b:82:b7:43:bd:59:36:64:38: 98:41:88:56:a5:be:eb:6c:39:40:b0:95:5f:81:1d: 10:c4:a8:48:d4:e0:59:1f:7a:96:c0:8c:84:d1:3d: ee:22:8e:d5:54:cc:17:9b:22:87:49:07:e7:45:8c: 75:13:cb:dc:e9:37:47:c4:0a:9d:92:c3:2c:3a:23: 03:a1:c9:c5:56:fd:58:1e:57:c4:d4:53:7f:30:e0: b0:1d:64:a5:fb:17:7e:e5:d2:52:27:b7:5f:d4:ec: 5e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:93:30:31:57:73:74:45:B5:B4:8E:D4:0F:A4:04:E1:E8:36:1C:8D X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:02:6c:17:30:ff:a3:bc:51:8a:87:8d:45:87:f3:46:91:4d: e5:7c:3f:8c:3a:2d:b0:62:b6:b1:86:5c:e2:89:17:5d:44:bc: cd:76:35:8f:c9:68:31:31:30:81:c1:5d:5a:a6:c9:27:01:ff: 3b:62:d1:6e:f0:47:e3:61:30:d4:d3:be:06:bb:ff:71:82:3f: 72:01:d1:51:34:da:47:47:f3:6e:98:94:77:a2:ba:c1:eb:6c: 0f:9a:71:d7:41:a6:ea:c9:51:8c:58:6a:fc:31:35:3b:65:61: e8:4e:2b:b2:d2:a8:bd:21:67:f9:8c:68:ad:57:83:7c:8a:4e: bf:f4:2c:7a:fd:89:fb:4f:4e:30:b2:14:2d:a0:82:4c:6d:94: 29:c5:ac:8b:78:98:d3:4e:91:e1:f9:82:aa:88:ca:e1:aa:24: 6c:d9:fa:b4:d9:2b:15:c4:16:e3:80:2f:00:f8:96:c3:1e:09: 42:64:f4:2c:ba:52:16:8d:97:79:6e:f2:c2:20:99:76:6f:c8: 33:ca:36:67:b9:65:6d:f7:1b:0b:44:2d:a3:f3:ec:ff:44:b3: 9e:99:d8:d9:9f:96:c2:f5:ad:c7:78:83:79:6e:1c:90:c5:28: 79:14:03:25:5a:d1:c2:d3:63:cf:4d:4f:97:0a:cb:8f:66:3b: 33:17:ac:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObCYFOhFTpXAFhPgBfYhwxujXrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA2MjgyMDA3MTZaFw0yNTA3MDIwMzQ2MTZaMDMxMTAvBgNV BAMTKDRGOTMzMDMxNTc3Mzc0NDVCNUI0OEVENDBGQTQwNEUxRTgzNjFDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1DrRfWCNgx5wEURVZ6rqHupn WNEWNozETkg+TtXAZhPC5yJ26nklHdtOlRP6x8rMZEsLMC9SfeFH7jkHKgFNdK1q EqAt1svj4df5T0hVJornJyWmFYjXPEUtR936i2v3qUFeFfbHYK0tZTaEUgdQsfsV LBTfVSm+6BmrCcHftHZtqrufahhXDbK0PeKEgKG1nUihJHUxRgk1rSuCt0O9WTZk OJhBiFalvutsOUCwlV+BHRDEqEjU4FkfepbAjITRPe4ijtVUzBebIodJB+dFjHUT y9zpN0fECp2Swyw6IwOhycVW/VgeV8TUU38w4LAdZKX7F37l0lInt1/U7F4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT5MwMVdzdEW1tI7UD6QE4eg2HI0wHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcCbBcw/6O8UYqHjUWH80aRTeV8P4w6LbBi trGGXOKJF11EvM12NY/JaDExMIHBXVqmyScB/zti0W7wR+NhMNTTvga7/3GCP3IB 0VE02kdH826YlHeiusHrbA+acddBpurJUYxYavwxNTtlYehOK7LSqL0hZ/mMaK1X g3yKTr/0LHr9iftPTjCyFC2ggkxtlCnFrIt4mNNOkeH5gqqIyuGqJGzZ+rTZKxXE FuOALwD4lsMeCUJk9Cy6UhaNl3lu8sIgmXZvyDPKNme5ZW33GwtELaPz7P9Es56Z 2NmflsL1rcd4g3luHJDFKHkUAyVa0cLTY89NT5cKy49mOzMXrKA= -----END CERTIFICATE-----Generated at Mon Jun 30 08:43:10 2025 by rpki-client