$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: Y1QLKDG2P+npIG4j8qwy3nixwj/k7RzWnYyqp9VUXeQ= Subject key identifier: 6D:56:02:12:66:BD:09:DA:46:05:5C:EF:B7:4F:4A:01:1D:AE:EF:DF Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 67FA4BD17469F63F5F797A4693940FA8A335B49B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: C3 Signing time: Thu 21 Aug 2025 19:42:20 +0000 Manifest this update: Thu 21 Aug 2025 19:37:20 +0000 Manifest next update: Mon 25 Aug 2025 00:05:20 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: BVVrn47eJIaep1ptPYCqkvO6sKONlisKbiIpQGPJm8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:4b:d1:74:69:f6:3f:5f:79:7a:46:93:94:0f:a8:a3:35:b4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Aug 21 19:37:20 2025 GMT Not After : Aug 25 00:05:20 2025 GMT Subject: CN=6D56021266BD09DA46055CEFB74F4A011DAEEFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:83:05:85:49:1c:e9:e2:22:5d:df:f4:3a: e3:4e:d9:89:3b:a8:cd:f5:11:23:1f:fd:ff:0f:df: 37:74:00:2f:44:57:78:b4:92:5c:c3:d2:3c:fc:b6: bb:79:69:d7:8e:99:bf:1c:a6:87:50:23:53:4a:30: 6a:6a:06:17:09:80:11:bb:a0:e7:3b:ac:9a:d3:63: e7:a8:63:9a:1f:1f:04:c5:9a:55:eb:39:f2:c3:28: 8e:f4:1f:ed:7c:28:13:56:76:e6:b9:24:51:0a:a5: b0:17:4d:fb:63:6d:60:14:4a:6b:10:6d:03:4c:29: 16:bf:03:49:93:d0:ec:b5:0b:8d:db:4e:c5:70:c3: b6:4f:49:29:64:64:ec:af:dc:0a:39:df:3c:ae:7f: 86:87:05:54:0e:9b:44:94:36:f4:e5:c3:ee:38:8a: 06:6c:74:12:10:e0:49:c0:b2:f8:ba:aa:58:d8:d9: da:f5:3e:77:3a:f7:63:5f:3c:29:6f:d2:91:31:d7: 3c:5d:75:2b:c4:c0:27:a7:67:1f:51:a2:7e:46:fc: c3:05:69:8e:6d:c5:8a:3f:d9:6f:07:18:95:67:dd: e1:ac:69:5e:db:2c:bd:9d:c9:cd:68:0b:ca:b4:dc: bd:58:8b:f9:90:7c:01:ac:51:f7:87:28:40:2a:da: 30:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:56:02:12:66:BD:09:DA:46:05:5C:EF:B7:4F:4A:01:1D:AE:EF:DF X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:12:84:fe:96:70:e9:44:7b:13:c8:96:f1:a1:3c:8c:7f:74: e4:5a:d8:3f:8f:ef:23:da:fe:bb:9f:87:ba:0d:88:aa:0b:a3: e2:10:ae:11:fa:4f:cd:68:b0:e4:a8:58:6b:bd:9c:58:d1:a4: 08:b4:28:04:3b:cc:d8:9a:f0:43:a3:a6:f0:fc:aa:f2:f9:af: fa:54:f0:0d:95:19:63:bb:f0:4f:76:6e:1c:0e:a5:54:18:e5: c2:90:94:0a:08:84:78:62:32:79:90:92:2b:11:cc:55:d1:51: 25:1f:b4:ca:61:7a:d4:39:a5:ec:52:c6:8a:60:c5:8d:6c:49: 41:0e:ce:e1:51:a3:16:4d:3c:51:d3:3a:f2:d3:b8:22:60:97: fc:7c:e7:30:33:b0:5b:84:32:ff:b9:6c:5a:8b:9b:e9:f1:ee: 82:51:82:77:29:13:60:2e:af:70:bc:f5:bb:1d:a2:dc:a4:41: 04:8a:71:1c:56:da:e7:64:5d:1b:4f:f0:51:5d:68:a5:f4:6c: ff:d4:d1:52:9d:60:92:ea:fe:fe:65:3c:03:ac:6c:e6:ae:d6: e3:75:b1:9f:81:5a:a7:5b:31:43:29:10:b4:0e:18:7c:d2:e5: 54:bb:9c:f2:23:68:d2:08:32:03:40:9b:ec:3d:26:f1:69:f1: ae:5b:8f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/pL0XRp9j9feXpGk5QPqKM1tJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA4MjExOTM3MjBaFw0yNTA4MjUwMDA1MjBaMDMxMTAvBgNV BAMTKDZENTYwMjEyNjZCRDA5REE0NjA1NUNFRkI3NEY0QTAxMURBRUVGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwoMFhUkc6eIiXd/0OuNO2Yk7 qM31ESMf/f8P3zd0AC9EV3i0klzD0jz8trt5adeOmb8cpodQI1NKMGpqBhcJgBG7 oOc7rJrTY+eoY5ofHwTFmlXrOfLDKI70H+18KBNWdua5JFEKpbAXTftjbWAUSmsQ bQNMKRa/A0mT0Oy1C43bTsVww7ZPSSlkZOyv3Ao53zyuf4aHBVQOm0SUNvTlw+44 igZsdBIQ4EnAsvi6qljY2dr1Pnc692NfPClv0pEx1zxddSvEwCenZx9Ron5G/MMF aY5txYo/2W8HGJVn3eGsaV7bLL2dyc1oC8q03L1Yi/mQfAGsUfeHKEAq2jD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbVYCEma9CdpGBVzvt09KAR2u798wHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8ShP6WcOlEexPIlvGhPIx/dORa2D+P7yPa /rufh7oNiKoLo+IQrhH6T81osOSoWGu9nFjRpAi0KAQ7zNia8EOjpvD8qvL5r/pU 8A2VGWO78E92bhwOpVQY5cKQlAoIhHhiMnmQkisRzFXRUSUftMphetQ5pexSxopg xY1sSUEOzuFRoxZNPFHTOvLTuCJgl/x85zAzsFuEMv+5bFqLm+nx7oJRgncpE2Au r3C89bsdotykQQSKcRxW2udkXRtP8FFdaKX0bP/U0VKdYJLq/v5lPAOsbOau1uN1 sZ+BWqdbMUMpELQOGHzS5VS7nPIjaNIIMgNAm+w9JvFp8a5bj4E= -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:39 2025 by rpki-client