$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: UKkCAGdr0/5P11nfatfNdq0EFO/J8veN9WrARc7OjQU= Subject key identifier: D0:17:6B:B8:7C:23:1D:A9:58:23:DC:2A:83:3A:AA:19:08:A1:AE:D1 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 6735B39577D4EFC05D68546C966BA7201125A9EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 95 Signing time: Tue 13 May 2025 06:22:07 +0000 Manifest this update: Tue 13 May 2025 06:17:07 +0000 Manifest next update: Fri 16 May 2025 08:17:07 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: 2v1BWxp2Y3N026aBkehK21uLEWL0IYCnUTXo3UJpxJw=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: GmOFMzAjvKi/R6Ihcjui8Ly/R+qTvmjieLr7Vq9tAb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 08:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:35:b3:95:77:d4:ef:c0:5d:68:54:6c:96:6b:a7:20:11:25:a9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: May 13 06:17:07 2025 GMT Not After : May 16 08:17:07 2025 GMT Subject: CN=D0176BB87C231DA95823DC2A833AAA1908A1AED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b4:39:d1:71:ae:45:7f:be:86:7e:b7:41:b8: e1:a0:b2:03:a7:97:49:81:7b:95:a9:fd:c8:1c:9e: d7:0b:74:b2:2c:38:b7:a0:c5:41:91:72:38:d2:ac: f7:4a:ea:05:2a:71:e6:3c:e1:fa:3d:93:39:5b:94: 49:b3:71:f2:94:cc:25:4b:ac:8e:70:ce:0f:46:ce: 76:ba:d3:b0:81:c1:08:dc:65:f6:5e:84:b2:c2:38: 39:0f:f7:aa:f0:37:52:bf:14:4c:b0:5a:1a:d5:05: 46:99:96:1c:87:24:b2:9a:43:1b:cd:76:f2:29:47: 3b:0c:3d:0e:15:3b:54:29:2f:f0:9f:8a:4b:f7:cb: ba:ce:5c:f7:26:a0:3f:32:b3:f2:b0:6a:3e:b3:8c: 34:fc:a0:38:2d:4b:2e:01:96:cd:ff:94:51:38:c2: df:27:12:f8:52:7e:c0:b6:4a:f2:3c:f2:e3:89:02: 11:c1:ff:47:1e:8a:e3:3b:73:d7:65:a9:8a:cb:ac: fc:f8:b2:c2:8c:2d:7a:c9:dd:8d:9f:f7:57:d8:f0: 34:57:48:84:d6:8d:21:ab:78:57:38:2c:3a:e8:3e: 07:2c:e0:fd:db:e8:0d:83:3e:22:a8:fe:86:a9:99: bf:90:fc:64:69:c7:50:0d:30:06:30:a0:2c:e9:3a: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:17:6B:B8:7C:23:1D:A9:58:23:DC:2A:83:3A:AA:19:08:A1:AE:D1 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:22:54:a3:93:06:98:31:f5:dd:73:24:84:74:63:ca:02:f2: 94:90:a1:1f:0a:91:b7:e1:2e:bd:4f:36:36:bf:90:55:f9:9e: 6e:f3:7b:96:df:f7:73:4f:43:ce:e2:eb:8c:8b:a6:c1:16:7f: 74:d2:16:77:e9:20:98:a7:cf:c7:74:55:ff:9a:e1:25:a3:2e: 7b:0b:84:20:86:51:72:ea:ea:05:9f:18:99:dc:3f:01:da:1d: 09:ba:cd:b3:df:1b:ed:23:00:b8:23:79:d9:ab:46:81:e3:15: 29:24:1b:7a:e1:3c:b6:6d:4a:00:3d:ae:08:d0:97:0d:2f:5b: 04:99:7b:92:09:d5:6d:f2:69:de:de:7d:37:da:2b:3a:22:eb: 37:f9:49:93:0a:7e:7b:ad:76:ca:03:1e:fd:13:11:1d:1d:2c: a2:ee:9d:5b:6c:65:3c:11:d6:50:90:12:c4:1c:19:43:87:ca: 20:71:e1:7e:4e:f1:b6:52:80:a2:81:ea:d3:6b:cf:24:d3:38: db:6f:37:05:c3:a0:b4:b8:0a:ff:ae:48:3c:0b:15:30:4d:83: b7:fd:ac:c1:fc:6e:ac:1d:5a:cf:58:50:8d:e6:16:20:01:97: d4:a2:4a:cf:d8:79:be:8a:1b:af:f4:72:1e:0b:c7:ec:3c:d0: da:f8:e8:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzWzlXfU78BdaFRslmunIBElqewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA1MTMwNjE3MDdaFw0yNTA1MTYwODE3MDdaMDMxMTAvBgNV BAMTKEQwMTc2QkI4N0MyMzFEQTk1ODIzREMyQTgzM0FBQTE5MDhBMUFFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0tDnRca5Ff76GfrdBuOGgsgOn l0mBe5Wp/cgcntcLdLIsOLegxUGRcjjSrPdK6gUqceY84fo9kzlblEmzcfKUzCVL rI5wzg9Gzna607CBwQjcZfZehLLCODkP96rwN1K/FEywWhrVBUaZlhyHJLKaQxvN dvIpRzsMPQ4VO1QpL/Cfikv3y7rOXPcmoD8ys/Kwaj6zjDT8oDgtSy4Bls3/lFE4 wt8nEvhSfsC2SvI88uOJAhHB/0ceiuM7c9dlqYrLrPz4ssKMLXrJ3Y2f91fY8DRX SITWjSGreFc4LDroPgcs4P3b6A2DPiKo/oapmb+Q/GRpx1ANMAYwoCzpOrsfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BdruHwjHalYI9wqgzqqGQihrtEwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwiVKOTBpgx9d1zJIR0Y8oC8pSQoR8Kkbfh Lr1PNja/kFX5nm7ze5bf93NPQ87i64yLpsEWf3TSFnfpIJinz8d0Vf+a4SWjLnsL hCCGUXLq6gWfGJncPwHaHQm6zbPfG+0jALgjedmrRoHjFSkkG3rhPLZtSgA9rgjQ lw0vWwSZe5IJ1W3yad7efTfaKzoi6zf5SZMKfnutdsoDHv0TER0dLKLunVtsZTwR 1lCQEsQcGUOHyiBx4X5O8bZSgKKB6tNrzyTTONtvNwXDoLS4Cv+uSDwLFTBNg7f9 rMH8bqwdWs9YUI3mFiABl9SiSs/Yeb6KG6/0ch4Lx+w80Nr46Oc= -----END CERTIFICATE-----Generated at Wed May 14 12:16:22 2025 by rpki-client