$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: IHT/Svqm7TzDUv09d+VEAa4y3PcGPQKAH7hrwcAkHcc= Subject key identifier: 2F:0A:9B:CE:A1:08:3E:D2:12:2A:FF:74:B5:AA:5F:69:64:B3:C5:B6 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 59E015CF853F9F2ADFEED3839A77D7E084EF7191 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: FC Signing time: Sat 28 Jun 2025 17:21:32 +0000 Manifest this update: Sat 28 Jun 2025 17:16:32 +0000 Manifest next update: Wed 02 Jul 2025 02:20:32 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: Y23uNzVl1el7iBWf5vpvozngx2OvIctjxpp0+0DIq2E=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: G4zWTpmlT7gw+L1bMD/VBA5HquTBrGp3vkkZSSHSoVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e0:15:cf:85:3f:9f:2a:df:ee:d3:83:9a:77:d7:e0:84:ef:71:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Jun 28 17:16:32 2025 GMT Not After : Jul 2 02:20:32 2025 GMT Subject: CN=2F0A9BCEA1083ED2122AFF74B5AA5F6964B3C5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:e4:26:b3:c2:fb:39:e8:6d:b4:6e:60:3a: 59:03:5c:81:90:ee:95:d8:37:9b:02:f4:95:31:81: 46:53:37:42:7f:59:2d:4c:3c:bc:cb:5e:6b:cb:89: ba:02:3e:48:63:87:e0:6b:b4:95:72:ff:43:0d:8e: 93:5f:0d:ea:fb:15:48:4b:4c:17:b5:50:ae:20:e8: 54:bb:ba:35:9f:7d:a5:f6:d5:19:fd:2c:4c:20:40: 20:ad:7f:a0:06:f1:9b:52:28:3c:9b:6f:89:f9:44: e8:33:aa:be:8f:e2:5c:cc:b1:59:33:2b:60:a0:22: be:e1:d4:4b:80:81:5f:79:d5:05:71:ec:6c:56:1f: 8f:d9:af:34:7a:07:0b:27:eb:3f:2f:e2:28:80:f1: 19:42:f2:9e:54:9b:17:a9:48:cf:e0:57:dd:5a:0e: ac:cb:e5:70:38:c1:cf:c3:bf:a1:a1:ed:33:6a:8b: 02:56:c6:75:08:f7:e0:33:98:1f:c0:18:dd:df:31: 5f:61:a0:bf:b9:12:14:4a:d6:02:3c:9a:e0:fa:e4: a5:c2:b2:7d:17:6a:81:04:0d:d9:37:f7:8c:bf:f8: 62:ab:4d:14:af:aa:0b:1d:9d:1d:01:39:33:5f:fe: 63:e7:45:99:2a:66:22:56:12:7c:7a:77:48:dc:0f: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0A:9B:CE:A1:08:3E:D2:12:2A:FF:74:B5:AA:5F:69:64:B3:C5:B6 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:77:54:65:b4:ca:b2:a9:37:70:6e:88:a7:ac:09:18:06:ec: ba:38:24:8f:b5:cc:0f:2d:2e:6e:05:ac:c2:2e:36:eb:0e:6c: 66:4f:db:0e:33:ed:c2:76:77:86:11:98:48:ff:0b:28:04:88: 4c:c8:1e:b7:09:d8:7e:3f:9f:0f:47:ea:fa:f5:3d:aa:54:6c: ca:05:1a:69:e3:99:f6:18:28:e8:80:74:0c:74:44:2b:39:a2: 47:f1:49:bd:dc:94:fe:ca:d1:aa:c3:4f:67:20:ca:19:c4:32: b1:8d:b4:99:55:06:19:bf:c1:f9:13:69:88:ac:21:1a:e9:a6: 77:81:df:53:55:4c:87:b8:aa:4a:f4:2a:cc:e7:d2:8f:03:44: 0d:6b:c8:15:6d:df:d4:ff:8e:e8:6e:9e:31:d8:97:d7:72:18: ed:bf:13:9f:a6:e5:6e:b4:1b:e6:d9:50:32:71:3e:81:14:3e: 95:40:67:5c:05:5a:3c:cf:ea:83:64:15:06:75:11:d0:1f:8e: f3:59:f0:2f:5d:02:54:36:22:c3:fa:1d:e2:e8:46:26:d2:6a: 1c:78:5a:15:04:7b:c1:c0:48:4f:98:59:8b:03:38:b0:4d:fc: f3:e4:81:79:89:80:a6:5e:3a:f4:cd:4f:26:9d:33:75:33:b3: b4:3e:cf:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeAVz4U/nyrf7tODmnfX4ITvcZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTA2MjgxNzE2MzJaFw0yNTA3MDIwMjIwMzJaMDMxMTAvBgNV BAMTKDJGMEE5QkNFQTEwODNFRDIxMjJBRkY3NEI1QUE1RjY5NjRCM0M1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPa+Qms8L7OehttG5gOlkDXIGQ 7pXYN5sC9JUxgUZTN0J/WS1MPLzLXmvLiboCPkhjh+BrtJVy/0MNjpNfDer7FUhL TBe1UK4g6FS7ujWffaX21Rn9LEwgQCCtf6AG8ZtSKDybb4n5ROgzqr6P4lzMsVkz K2CgIr7h1EuAgV951QVx7GxWH4/ZrzR6Bwsn6z8v4iiA8RlC8p5UmxepSM/gV91a DqzL5XA4wc/Dv6Gh7TNqiwJWxnUI9+AzmB/AGN3fMV9hoL+5EhRK1gI8muD65KXC sn0XaoEEDdk394y/+GKrTRSvqgsdnR0BOTNf/mPnRZkqZiJWEnx6d0jcD4tJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwqbzqEIPtISKv90tapfaWSzxbYwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJ3VGW0yrKpN3BuiKesCRgG7Lo4JI+1zA8t Lm4FrMIuNusObGZP2w4z7cJ2d4YRmEj/CygEiEzIHrcJ2H4/nw9H6vr1PapUbMoF GmnjmfYYKOiAdAx0RCs5okfxSb3clP7K0arDT2cgyhnEMrGNtJlVBhm/wfkTaYis IRrppneB31NVTIe4qkr0Kszn0o8DRA1ryBVt39T/juhunjHYl9dyGO2/E5+m5W60 G+bZUDJxPoEUPpVAZ1wFWjzP6oNkFQZ1EdAfjvNZ8C9dAlQ2IsP6HeLoRibSahx4 WhUEe8HASE+YWYsDOLBN/PPkgXmJgKZeOvTNTyadM3Uzs7Q+z1s= -----END CERTIFICATE-----Generated at Mon Jun 30 00:36:05 2025 by rpki-client