$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: oyFjWMNs/5rpn6PIkqH2cRyxUjROoeQ/9/rUYHe1K7I= Subject key identifier: 2C:A3:22:4D:2C:F9:4B:4E:B5:3E:89:A4:C5:DD:16:C2:BA:13:A8:F3 Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 3D9B78FAA16226F7C4805275442304DC521F9F72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 0215 Signing time: Thu 21 Aug 2025 20:02:36 +0000 Manifest this update: Thu 21 Aug 2025 19:57:36 +0000 Manifest next update: Sun 24 Aug 2025 22:34:36 +0000 Files and hashes: 1: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: M4B162hLDBv55itd5L8yCdaOw6szR8gABx0dWVHx7cA=) 2: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: UhZmsK1JV2dvdlJPQwAkZ3FUoREjtD3PWxnZnEWW6L0=) 3: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9b:78:fa:a1:62:26:f7:c4:80:52:75:44:23:04:dc:52:1f:9f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Aug 21 19:57:36 2025 GMT Not After : Aug 24 22:34:36 2025 GMT Subject: CN=2CA3224D2CF94B4EB53E89A4C5DD16C2BA13A8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:73:a8:ec:f5:18:f8:50:c4:b8:49:3e:d4: 14:b1:3a:d6:51:3a:ac:ff:47:5f:e9:24:ef:1a:f6: 27:82:17:06:af:d3:7f:13:9b:f7:05:e6:a7:28:db: bc:d9:eb:16:9a:45:46:5b:1d:18:ed:6e:ec:bf:ae: 3e:12:cc:86:a3:b1:37:08:ef:c7:85:8b:51:9b:ea: 0c:f4:07:92:2f:53:82:78:6a:50:0a:fd:e7:64:26: d4:61:0b:ea:e2:f5:f6:1d:38:f5:37:9c:83:fd:3a: 02:7d:ce:c4:d2:28:4f:83:d1:ed:ed:55:fd:dc:64: 77:c9:04:0f:15:b8:72:c1:f3:88:ef:88:db:3c:d7: a0:53:3b:92:a8:20:60:eb:21:a4:44:4f:0f:90:e6: e1:37:be:3c:d9:df:1b:4b:96:6c:d9:51:8b:16:ad: ee:2d:64:17:6d:a9:5b:36:ad:73:64:6e:8b:2f:c4: 46:f8:d0:1b:55:4a:c9:0b:9f:78:06:5b:10:77:64: 67:d1:36:58:c3:ad:fe:c4:a7:a7:62:d9:0d:db:e0: b5:93:a9:ab:65:bc:64:c7:c6:d1:99:80:5b:8b:3a: 5a:54:8e:5d:97:79:7d:c3:bd:29:ba:02:a5:0f:60: 5d:9c:82:d8:a6:27:29:33:f8:a9:53:db:e2:39:c5: 3e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A3:22:4D:2C:F9:4B:4E:B5:3E:89:A4:C5:DD:16:C2:BA:13:A8:F3 X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:7d:95:40:18:56:f3:29:09:61:e8:32:c4:02:09:ba:b5:15: 93:67:ac:89:95:cb:87:8b:c7:7f:b5:91:65:d3:d6:da:7d:74: 1b:90:d7:c8:88:80:3b:c0:5b:95:04:1a:11:ce:a9:02:4e:6a: 43:68:a5:b5:aa:89:d4:8a:ee:0d:e2:06:49:15:4c:42:0d:8c: f2:1d:98:bf:61:eb:a3:3c:73:15:28:a1:31:b0:62:be:c7:07: b1:4b:2b:1c:19:d3:83:71:49:30:29:0d:5a:f7:72:58:76:12: 76:f5:ef:ec:e4:bf:52:df:6c:74:35:7f:1c:c1:57:6b:18:91: 19:07:54:b5:08:9d:69:d2:b8:f0:6c:f6:f1:2b:97:d4:73:25: 73:ed:e7:e1:ec:b5:97:e5:60:45:86:06:15:0e:e6:f5:03:9b: 1b:6f:ad:40:74:a8:c8:11:f5:fa:d7:40:2e:43:9c:51:60:b0: a5:b7:d6:1d:61:ad:fd:a5:4a:b1:1a:30:70:3e:43:da:a6:76: 5b:3c:bf:d6:87:9c:df:9b:ac:2a:b7:ff:e7:22:bf:9d:78:3d: e0:68:7f:ec:24:cb:12:07:68:93:63:3b:e2:0f:a4:3f:e1:10: f0:da:96:c0:ba:2d:32:f6:bd:ed:13:4e:87:ed:92:19:f5:f0: 4c:cd:16:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZt4+qFiJvfEgFJ1RCME3FIfn3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTA4MjExOTU3MzZaFw0yNTA4MjQyMjM0MzZaMDMxMTAvBgNV BAMTKDJDQTMyMjREMkNGOTRCNEVCNTNFODlBNEM1REQxNkMyQkExM0E4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJH3Oo7PUY+FDEuEk+1BSxOtZR Oqz/R1/pJO8a9ieCFwav038Tm/cF5qco27zZ6xaaRUZbHRjtbuy/rj4SzIajsTcI 78eFi1Gb6gz0B5IvU4J4alAK/edkJtRhC+ri9fYdOPU3nIP9OgJ9zsTSKE+D0e3t Vf3cZHfJBA8VuHLB84jviNs816BTO5KoIGDrIaRETw+Q5uE3vjzZ3xtLlmzZUYsW re4tZBdtqVs2rXNkbosvxEb40BtVSskLn3gGWxB3ZGfRNljDrf7Ep6di2Q3b4LWT qatlvGTHxtGZgFuLOlpUjl2XeX3DvSm6AqUPYF2cgtimJykz+KlT2+I5xT7JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULKMiTSz5S061Pomkxd0WwroTqPMwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAER9lUAYVvMpCWHoMsQCCbq1FZNnrImVy4eL x3+1kWXT1tp9dBuQ18iIgDvAW5UEGhHOqQJOakNopbWqidSK7g3iBkkVTEINjPId mL9h66M8cxUooTGwYr7HB7FLKxwZ04NxSTApDVr3clh2Enb17+zkv1LfbHQ1fxzB V2sYkRkHVLUInWnSuPBs9vErl9RzJXPt5+HstZflYEWGBhUO5vUDmxtvrUB0qMgR 9frXQC5DnFFgsKW31h1hrf2lSrEaMHA+Q9qmdls8v9aHnN+brCq3/+civ514PeBo f+wkyxIHaJNjO+IPpD/hEPDalsC6LTL2ve0TToftkhn18EzNFnE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:56 2025 by rpki-client