$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: idovLheLIzUj8VIw8U9xVeNc0eV7DEaWblVxeYh6U8Q= Subject key identifier: F2:9A:12:E6:FA:9A:DE:76:E7:8C:D4:DB:EF:D7:AA:7C:48:35:60:64 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 3C2AE617813FEE8652DABC90C1F1086ABF24094D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: E5 Signing time: Tue 06 May 2025 18:01:32 +0000 Manifest this update: Tue 06 May 2025 17:56:32 +0000 Manifest next update: Fri 09 May 2025 22:18:32 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: Y23uNzVl1el7iBWf5vpvozngx2OvIctjxpp0+0DIq2E=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: GTsSEs8C4P+SgOISxUgZ/cjiQVNunv2lEVW7r5vG5xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2a:e6:17:81:3f:ee:86:52:da:bc:90:c1:f1:08:6a:bf:24:09:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: May 6 17:56:32 2025 GMT Not After : May 9 22:18:32 2025 GMT Subject: CN=F29A12E6FA9ADE76E78CD4DBEFD7AA7C48356064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:28:d7:50:d2:e6:6a:39:b3:e3:c8:c7:6b: d3:a2:4c:04:a0:91:f6:be:db:be:8a:89:79:8d:4d: a4:9a:e9:45:8b:10:ef:7c:b0:cc:1a:ee:0f:5b:ab: 97:d8:87:eb:77:bf:44:a0:15:8a:bf:cf:5a:a9:a1: 8a:ae:53:06:ee:f7:65:3a:39:c9:17:47:55:00:83: 89:de:aa:1b:be:99:9b:1b:12:7f:54:78:80:bc:c6: 50:e6:b4:ef:8d:7a:3f:fa:f0:16:80:f4:5d:f8:3a: 04:2f:49:8a:24:1b:b3:db:2f:19:45:77:75:c3:b5: 94:f4:79:64:3a:ff:fa:dc:33:3b:cd:54:23:78:87: 06:cf:a4:ff:ef:00:69:3e:dc:d4:5a:2e:9e:7f:21: 70:e5:ff:b1:49:a4:ea:f6:d8:3b:d4:51:48:32:28: 8b:f0:a5:07:2e:98:4b:3a:4c:91:20:0f:43:0e:cb: d0:bc:d5:69:d2:20:1d:2f:eb:60:f5:e6:0f:96:6d: db:de:c2:05:e7:13:c9:01:32:e8:93:49:89:37:ad: cd:e1:5e:bb:02:21:54:d8:65:73:cb:d4:38:c2:8f: 9d:11:6c:69:31:5e:2b:8b:a8:e7:f6:0d:07:1d:2f: ed:b6:9a:61:ef:11:b5:c5:5e:f5:91:8a:de:84:9b: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:12:E6:FA:9A:DE:76:E7:8C:D4:DB:EF:D7:AA:7C:48:35:60:64 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:71:b2:8d:e6:f7:f3:00:01:da:d9:9d:54:c6:bd:e1:4f: 3d:58:f3:0b:f9:68:5a:88:37:15:19:78:27:4c:0a:78:78:45: be:f7:1c:34:3e:7f:a9:d6:d1:fa:1e:19:61:be:fc:3b:66:9a: d5:10:79:c5:3c:e2:57:96:8f:0e:56:b6:1e:b7:4d:d5:30:b0: dd:55:cd:93:36:47:53:cb:91:b5:da:90:7d:43:f1:83:40:ca: 09:83:2e:52:11:92:57:8a:5b:73:99:d3:89:3e:c9:06:da:d8: 1f:dc:aa:2a:4f:1e:8a:e5:47:86:37:a5:9c:3b:08:6d:49:43: 62:13:c9:ab:f0:ac:9f:a8:77:31:d9:60:be:bb:7a:7f:91:f4: 57:25:e8:5b:d6:78:ab:65:98:4e:db:12:87:41:f9:44:eb:b5: 5c:c5:58:cf:b8:17:fb:86:10:d0:92:32:27:6c:0d:91:4a:76: 00:77:58:18:50:56:05:c6:b3:06:dd:3c:e4:64:db:c5:28:6b: d2:a8:e9:ce:1e:37:82:03:67:8d:00:83:b2:2f:40:98:df:82: 06:cf:a2:c0:f6:e6:18:4f:0c:f6:77:bb:ca:41:e6:89:a7:da: 4c:c1:f8:10:04:bc:b8:68:ab:87:56:f2:30:b7:27:d2:d0:f3: f0:70:8b:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCrmF4E/7oZS2ryQwfEIar8kCU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTA1MDYxNzU2MzJaFw0yNTA1MDkyMjE4MzJaMDMxMTAvBgNV BAMTKEYyOUExMkU2RkE5QURFNzZFNzhDRDREQkVGRDdBQTdDNDgzNTYwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDspSjXUNLmajmz48jHa9OiTASg kfa+276KiXmNTaSa6UWLEO98sMwa7g9bq5fYh+t3v0SgFYq/z1qpoYquUwbu92U6 OckXR1UAg4neqhu+mZsbEn9UeIC8xlDmtO+Nej/68BaA9F34OgQvSYokG7PbLxlF d3XDtZT0eWQ6//rcMzvNVCN4hwbPpP/vAGk+3NRaLp5/IXDl/7FJpOr22DvUUUgy KIvwpQcumEs6TJEgD0MOy9C81WnSIB0v62D15g+WbdvewgXnE8kBMuiTSYk3rc3h XrsCIVTYZXPL1DjCj50RbGkxXiuLqOf2DQcdL+22mmHvEbXFXvWRit6Em7zVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8poS5vqa3nbnjNTb79eqfEg1YGQwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLqcbKN5vfzAAHa2Z1Uxr3hTz1Y8wv5aFqI NxUZeCdMCnh4Rb73HDQ+f6nW0foeGWG+/DtmmtUQecU84leWjw5Wth63TdUwsN1V zZM2R1PLkbXakH1D8YNAygmDLlIRkleKW3OZ04k+yQba2B/cqipPHorlR4Y3pZw7 CG1JQ2ITyavwrJ+odzHZYL67en+R9Fcl6FvWeKtlmE7bEodB+UTrtVzFWM+4F/uG ENCSMidsDZFKdgB3WBhQVgXGswbdPORk28Uoa9Ko6c4eN4IDZ40Ag7IvQJjfggbP osD25hhPDPZ3u8pB5omn2kzB+BAEvLhoq4dW8jC3J9LQ8/BwixY= -----END CERTIFICATE-----Generated at Thu May 8 12:57:20 2025 by rpki-client