$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: R1jug+TGeyhuLsdJyNA694yZd6wIotMIOHU9EVdwkgU= Subject key identifier: 9C:94:ED:69:98:57:3A:1B:8B:61:E4:2D:05:AE:8D:8D:8A:D8:50:18 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 270870E84E066107E3A23360643F7C24B503D53F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 0115 Signing time: Fri 22 Aug 2025 20:51:35 +0000 Manifest this update: Fri 22 Aug 2025 20:46:35 +0000 Manifest next update: Tue 26 Aug 2025 00:03:35 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: Y23uNzVl1el7iBWf5vpvozngx2OvIctjxpp0+0DIq2E=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: t+tDpXU77LQBTRsxaGv7tqEJwY/S5wB/n2JcegkdDXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:08:70:e8:4e:06:61:07:e3:a2:33:60:64:3f:7c:24:b5:03:d5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Aug 22 20:46:35 2025 GMT Not After : Aug 26 00:03:35 2025 GMT Subject: CN=9C94ED6998573A1B8B61E42D05AE8D8D8AD85018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:ba:10:be:c4:b6:4d:b3:cc:51:79:43:90: a0:32:b4:04:ee:de:1b:06:50:67:6b:68:a0:0a:f4: ec:3b:c3:be:56:74:34:42:ff:3e:55:c1:f9:77:c1: 73:cd:7c:d5:40:81:84:2f:a6:5a:27:e1:f0:75:27: 1b:cb:5b:a1:4c:d2:a5:aa:02:8e:a2:93:ff:bd:0b: 76:72:23:f1:a8:42:eb:e5:bb:a6:1d:23:18:0b:53: e7:c5:29:18:5c:48:53:55:06:f2:d3:96:98:e1:a5: e0:b2:ae:ab:cc:22:fc:86:4e:6f:eb:2b:41:e5:ab: da:90:42:44:33:49:67:bd:a4:88:39:3d:8b:82:1d: a6:cb:3d:b5:a5:fb:b0:ad:0b:70:f1:8a:8b:21:48: 8c:34:16:db:2f:9e:0c:88:e9:e4:4d:6f:0d:f0:57: 6c:dd:48:a3:83:d0:f3:b0:3e:d5:d9:2c:c9:dd:86: df:ed:c2:ea:d3:22:01:11:27:b9:67:69:33:bd:68: 16:03:3a:ea:ea:3a:87:ed:9a:47:f9:e9:3c:18:46: 1f:e3:53:cc:aa:6c:21:6a:bf:5b:8a:f1:96:3a:df: 96:6f:67:ba:a1:34:ec:9f:72:7e:7e:2a:53:b7:8b: 7b:0c:de:83:2b:a9:32:1e:78:ef:e3:81:f6:a7:89: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:94:ED:69:98:57:3A:1B:8B:61:E4:2D:05:AE:8D:8D:8A:D8:50:18 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e4:fc:a6:ba:34:b1:07:63:d6:18:27:97:c9:11:f6:c6:88: 91:87:12:00:9a:2e:4e:e3:bb:9e:65:38:b9:ae:1d:45:b9:a4: 5f:c9:e6:13:9e:ea:44:46:dd:92:9f:79:01:39:36:1d:fc:67: 5e:f7:1a:8c:99:66:8e:64:18:af:d1:2e:dc:1f:9e:35:d6:4d: 00:62:8d:fd:3c:f1:3b:bf:e0:48:34:38:db:1b:62:25:0a:8b: 02:29:1b:ff:3f:ca:77:9a:61:54:01:ab:39:7d:89:d8:7f:81: fb:d0:0e:bf:bd:5b:c4:e6:ca:ff:3a:cb:14:de:62:68:f8:3c: 0e:41:bd:73:f7:ae:c8:59:69:f0:96:4e:09:db:dd:87:19:0d: db:db:5a:61:a0:4d:bc:74:4a:55:2f:82:10:68:e2:0a:fe:13: 1e:36:a4:0b:74:47:f3:67:95:e8:b4:09:be:57:eb:7b:fe:60: 67:13:fa:d6:37:b6:a8:2f:89:3f:fb:20:de:18:4b:ff:90:e0: 6f:38:5f:ea:31:49:1e:b6:7f:83:5c:ca:86:9f:68:40:e4:60: a0:5a:d2:dc:48:ad:cc:c7:6a:db:fa:27:6b:aa:d0:0e:60:77: 14:bf:c6:ea:f8:a5:cc:8a:42:6c:11:44:ca:ea:19:e9:8d:c2: 9f:29:5f:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwhw6E4GYQfjojNgZD98JLUD1T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTA4MjIyMDQ2MzVaFw0yNTA4MjYwMDAzMzVaMDMxMTAvBgNV BAMTKDlDOTRFRDY5OTg1NzNBMUI4QjYxRTQyRDA1QUU4RDhEOEFEODUwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGd7oQvsS2TbPMUXlDkKAytATu 3hsGUGdraKAK9Ow7w75WdDRC/z5Vwfl3wXPNfNVAgYQvplon4fB1JxvLW6FM0qWq Ao6ik/+9C3ZyI/GoQuvlu6YdIxgLU+fFKRhcSFNVBvLTlpjhpeCyrqvMIvyGTm/r K0Hlq9qQQkQzSWe9pIg5PYuCHabLPbWl+7CtC3DxioshSIw0FtsvngyI6eRNbw3w V2zdSKOD0POwPtXZLMndht/twurTIgERJ7lnaTO9aBYDOurqOoftmkf56TwYRh/j U8yqbCFqv1uK8ZY635ZvZ7qhNOyfcn5+KlO3i3sM3oMrqTIeeO/jgfaniXMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnJTtaZhXOhuLYeQtBa6NjYrYUBgwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLk/Ka6NLEHY9YYJ5fJEfbGiJGHEgCaLk7j u55lOLmuHUW5pF/J5hOe6kRG3ZKfeQE5Nh38Z173GoyZZo5kGK/RLtwfnjXWTQBi jf088Tu/4Eg0ONsbYiUKiwIpG/8/yneaYVQBqzl9idh/gfvQDr+9W8Tmyv86yxTe Ymj4PA5BvXP3rshZafCWTgnb3YcZDdvbWmGgTbx0SlUvghBo4gr+Ex42pAt0R/Nn lei0Cb5X63v+YGcT+tY3tqgviT/7IN4YS/+Q4G84X+oxSR62f4NcyoafaEDkYKBa 0txIrczHatv6J2uq0A5gdxS/xur4pcyKQmwRRMrqGemNwp8pX4Q= -----END CERTIFICATE-----Generated at Sat Aug 23 12:00:46 2025 by rpki-client