$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: +VRoUX2Gli5HrKgzqVnom75uAKrKhsz2/+t2GRlwH38= Subject key identifier: 46:86:E0:89:8C:17:D3:7B:09:C1:38:FA:59:AE:60:89:D3:96:AF:F2 Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 0E354DBFBF75F7DACA63E7D2193A3BACCD2C4FD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 0498 Signing time: Sun 27 Apr 2025 23:31:49 +0000 Manifest this update: Sun 27 Apr 2025 23:26:49 +0000 Manifest next update: Thu 01 May 2025 05:26:49 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: FDx4v1Ppcrdi/+0JB07eyY0vWimV4319ZKIkXg0ccso=) 2: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=) 3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 05:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:35:4d:bf:bf:75:f7:da:ca:63:e7:d2:19:3a:3b:ac:cd:2c:4f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Apr 27 23:26:49 2025 GMT Not After : May 1 05:26:49 2025 GMT Subject: CN=4686E0898C17D37B09C138FA59AE6089D396AFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d2:15:b6:f6:78:59:31:69:46:57:5b:c6:7a: b9:48:85:4e:5a:1c:0f:71:68:6a:65:a9:03:af:20: 8c:84:52:f1:fa:5b:ed:db:7a:f9:5c:69:6f:a3:84: d7:9a:f0:2a:a5:24:e8:63:c0:12:13:be:83:f9:61: 28:bf:b4:27:4b:b4:f6:12:65:12:26:ed:7e:a7:97: 1e:53:11:87:56:7e:90:db:fd:17:87:a2:2f:5d:84: 46:58:84:00:f8:f8:8b:7d:38:81:7c:84:49:48:97: 9e:65:5d:3b:45:2c:6b:da:7d:ea:86:8b:79:d8:03: 95:0f:4f:e9:2a:3b:d8:a6:1e:c6:84:c7:43:ce:b6: f4:2f:6a:cb:ec:56:3b:34:0f:c9:d8:57:fc:6e:ad: cc:1c:47:f1:96:7f:58:a6:de:76:fc:76:1b:01:20: de:96:36:63:f1:fd:d7:c5:c5:40:19:85:5e:4c:42: b0:9c:99:ff:49:77:1d:0e:28:9e:59:b0:43:16:00: e8:37:1b:92:a3:1b:fb:7a:88:cb:57:83:9f:9f:db: 0f:24:69:05:ec:1b:dc:29:44:03:2a:96:25:64:4c: 86:44:27:43:e4:fe:58:c7:12:52:59:b7:ed:a0:e0: ec:76:ac:aa:c1:ab:8d:68:78:21:d5:51:45:35:30: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:86:E0:89:8C:17:D3:7B:09:C1:38:FA:59:AE:60:89:D3:96:AF:F2 X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:42:a5:22:1d:33:7e:30:40:68:f0:64:98:d5:44:df:69:55: 5f:f1:65:30:8e:1f:30:5d:ea:bd:6f:14:07:27:69:c0:b1:3c: 60:ab:ed:12:fb:58:9b:f7:fd:c4:72:d5:2f:bb:14:5e:53:29: ff:65:e9:fe:15:fb:c9:24:8b:21:ea:7d:2e:ec:b8:eb:f6:a9: 90:61:ae:72:dc:b6:ee:95:32:d8:bb:af:84:33:24:08:1d:c8: bb:f7:f2:1f:ce:93:ba:a3:44:53:08:b6:37:1e:e1:a2:a6:fd: e4:14:9d:73:e3:4b:20:d7:49:91:ba:91:a0:33:06:5f:47:54: f1:4b:90:a0:3f:d9:4d:a8:fa:e2:01:1f:80:bf:74:c4:ca:7f: b5:f0:c2:41:79:0a:4c:86:33:80:f5:45:b2:c9:5f:e9:00:c3: ea:43:00:48:f2:7a:f8:50:f5:4e:1e:36:86:d5:c0:43:7a:ec: 03:c4:fb:83:49:7c:2a:28:74:56:bd:95:f4:aa:e1:1b:aa:bd: 63:2b:a3:e4:c4:ad:94:a8:06:26:2e:33:1b:7d:ee:ce:c0:b3: 00:79:90:03:77:17:75:21:62:fa:80:4b:fd:80:bd:23:f7:9b: 69:63:a4:e3:f5:58:2b:26:33:71:f6:f3:3b:b5:7b:54:24:08: c4:ad:d0:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjVNv79199rKY+fSGTo7rM0sT9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA0MjcyMzI2NDlaFw0yNTA1MDEwNTI2NDlaMDMxMTAvBgNV BAMTKDQ2ODZFMDg5OEMxN0QzN0IwOUMxMzhGQTU5QUU2MDg5RDM5NkFGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh0hW29nhZMWlGV1vGerlIhU5a HA9xaGplqQOvIIyEUvH6W+3bevlcaW+jhNea8CqlJOhjwBITvoP5YSi/tCdLtPYS ZRIm7X6nlx5TEYdWfpDb/ReHoi9dhEZYhAD4+It9OIF8hElIl55lXTtFLGvafeqG i3nYA5UPT+kqO9imHsaEx0POtvQvasvsVjs0D8nYV/xurcwcR/GWf1im3nb8dhsB IN6WNmPx/dfFxUAZhV5MQrCcmf9Jdx0OKJ5ZsEMWAOg3G5KjG/t6iMtXg5+f2w8k aQXsG9wpRAMqliVkTIZEJ0Pk/ljHElJZt+2g4Ox2rKrBq41oeCHVUUU1MBDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURobgiYwX03sJwTj6Wa5gidOWr/IwHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFCpSIdM34wQGjwZJjVRN9pVV/xZTCOHzBd 6r1vFAcnacCxPGCr7RL7WJv3/cRy1S+7FF5TKf9l6f4V+8kkiyHqfS7suOv2qZBh rnLctu6VMti7r4QzJAgdyLv38h/Ok7qjRFMItjce4aKm/eQUnXPjSyDXSZG6kaAz Bl9HVPFLkKA/2U2o+uIBH4C/dMTKf7XwwkF5CkyGM4D1RbLJX+kAw+pDAEjyevhQ 9U4eNobVwEN67APE+4NJfCoodFa9lfSq4RuqvWMro+TErZSoBiYuMxt97s7AswB5 kAN3F3UhYvqAS/2AvSP3m2ljpOP1WCsmM3H28zu1e1QkCMSt0Pg= -----END CERTIFICATE-----Generated at Wed Apr 30 05:52:59 2025 by rpki-client