$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: WlOIB1Y0+sDWS0lJZOL3bXpHnVecjT4kSMwrMPU5XzE= Subject key identifier: 67:0B:95:7C:0B:39:B5:05:12:E6:41:14:11:43:8C:E3:E4:57:68:AE Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 7325EE80276B062CB8292921638E9F51050BA1E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 012F Signing time: Sun 19 Oct 2025 00:01:35 +0000 Manifest this update: Sat 18 Oct 2025 23:56:35 +0000 Manifest next update: Wed 22 Oct 2025 08:38:35 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: eKlpAMaerIj4ztfnPXyqh7QFFTLNHjFi35suT4UM+pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:25:ee:80:27:6b:06:2c:b8:29:29:21:63:8e:9f:51:05:0b:a1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Oct 18 23:56:35 2025 GMT Not After : Oct 22 08:38:35 2025 GMT Subject: CN=670B957C0B39B50512E6411411438CE3E45768AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ee:e6:69:ee:fd:ef:f9:1b:cb:d7:f3:b7:ad: 6e:21:6a:23:e9:39:b9:e5:1b:59:f7:4a:19:dc:8a: 0f:9d:09:73:03:6c:45:5e:da:78:6a:4e:4b:53:d6: 26:6c:72:81:99:e0:22:2b:a2:0c:e5:04:23:62:4b: 2c:82:24:b7:36:f2:2e:0e:a2:eb:c0:24:ea:36:96: a2:ed:03:40:ba:42:77:d5:40:47:41:09:7c:87:6b: 2f:a6:04:6d:92:5b:2a:4f:19:6f:9e:f7:b9:63:75: c8:07:49:97:fb:44:03:f9:4c:4d:4f:3a:1f:27:a7: 85:da:81:74:af:4e:57:5c:d6:6b:8c:d4:aa:49:3b: 3c:05:bc:50:a7:a7:b9:5a:02:49:7f:e3:30:44:6a: 45:5b:ac:d3:14:ed:77:62:33:32:05:5f:19:1b:dd: 36:22:9f:09:29:01:26:e8:19:0f:45:3d:bd:57:56: 89:35:80:d8:67:c4:82:e0:a7:ca:bd:60:01:22:ba: 2c:cd:9d:35:93:96:61:76:5d:2a:32:08:3c:27:0d: 51:7a:ba:41:e4:a2:3d:5d:9b:00:2b:56:2e:4b:32: d7:60:0c:3d:54:34:9e:84:c7:dd:4d:34:8f:51:e7: db:84:44:9e:65:3b:02:46:3f:52:20:53:bc:d4:0e: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0B:95:7C:0B:39:B5:05:12:E6:41:14:11:43:8C:E3:E4:57:68:AE X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:05:8b:c0:a0:7c:07:fa:20:2c:b8:10:2b:84:5c:9e:e7:0d: d4:71:94:f0:44:bb:48:f6:e1:63:7e:73:61:11:03:af:47:80: 37:97:6d:9c:f3:60:25:38:e8:ec:b6:33:5c:c1:48:89:a2:06: 98:ac:cf:d2:50:a1:48:11:0d:31:f7:d1:69:18:ef:c2:59:9c: d0:6a:86:78:eb:b9:7e:03:95:cc:b4:50:5b:37:9c:d6:39:6c: fa:d1:cf:be:db:16:e6:e4:1e:23:38:35:3b:e5:4f:00:cb:d4: ad:e1:e5:d9:f1:c5:6a:8d:23:cb:9b:9b:08:ae:2d:d3:b4:cd: fa:d5:24:c0:98:83:19:a5:69:04:e5:24:05:eb:25:3b:17:04: bf:79:4b:bc:8a:f4:20:b8:d5:13:16:ad:a3:75:7e:7c:02:47: 1f:ca:99:3d:5a:d1:02:f7:e2:ff:fe:f2:cc:7b:35:77:d0:4b: 11:85:bd:bb:43:7b:a9:20:78:df:f5:52:07:d2:fa:2f:60:ad: 02:1d:b5:7f:32:dd:b1:b6:24:1c:31:eb:8c:8a:41:d1:49:87: 36:76:d2:dc:66:02:b4:d0:14:b5:2f:e0:11:b8:a6:e6:61:19: ec:b1:e5:86:be:cb:90:6f:97:e4:a3:02:50:19:93:73:36:e4: c8:0b:53:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyXugCdrBiy4KSkhY46fUQULoekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTEwMTgyMzU2MzVaFw0yNTEwMjIwODM4MzVaMDMxMTAvBgNV BAMTKDY3MEI5NTdDMEIzOUI1MDUxMkU2NDExNDExNDM4Q0UzRTQ1NzY4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm7uZp7v3v+RvL1/O3rW4haiPp ObnlG1n3Shncig+dCXMDbEVe2nhqTktT1iZscoGZ4CIrogzlBCNiSyyCJLc28i4O ouvAJOo2lqLtA0C6QnfVQEdBCXyHay+mBG2SWypPGW+e97ljdcgHSZf7RAP5TE1P Oh8np4XagXSvTldc1muM1KpJOzwFvFCnp7laAkl/4zBEakVbrNMU7XdiMzIFXxkb 3TYinwkpASboGQ9FPb1XVok1gNhnxILgp8q9YAEiuizNnTWTlmF2XSoyCDwnDVF6 ukHkoj1dmwArVi5LMtdgDD1UNJ6Ex91NNI9R59uERJ5lOwJGP1IgU7zUDjrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZwuVfAs5tQUS5kEUEUOM4+RXaK4wHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkFi8CgfAf6ICy4ECuEXJ7nDdRxlPBEu0j2 4WN+c2ERA69HgDeXbZzzYCU46Oy2M1zBSImiBpisz9JQoUgRDTH30WkY78JZnNBq hnjruX4Dlcy0UFs3nNY5bPrRz77bFubkHiM4NTvlTwDL1K3h5dnxxWqNI8ubmwiu LdO0zfrVJMCYgxmlaQTlJAXrJTsXBL95S7yK9CC41RMWraN1fnwCRx/KmT1a0QL3 4v/+8sx7NXfQSxGFvbtDe6kgeN/1UgfS+i9grQIdtX8y3bG2JBwx64yKQdFJhzZ2 0txmArTQFLUv4BG4puZhGeyx5Ya+y5Bvl+SjAlAZk3M25MgLU8I= -----END CERTIFICATE-----Generated at Tue Oct 21 04:22:44 2025 by rpki-client