$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: QLmmIIeB1jk5JzUSQ5ExTiSC5gQZHNUsUQnz/9BufkY= Subject key identifier: 15:7B:BB:0C:A1:47:52:7D:29:1A:70:3F:82:AF:D6:50:E3:3F:35:44 Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 1E50CE36EF4E97767795B429F04F0985D773A17A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 04C5 Signing time: Wed 06 Aug 2025 09:11:55 +0000 Manifest this update: Wed 06 Aug 2025 09:06:55 +0000 Manifest next update: Sat 09 Aug 2025 19:14:55 +0000 Files and hashes: 1: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=) 2: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: zByQGQHEvB6uqKxKU9OGIwVTkwP8yqc6MhAGMrx3qoQ=) 3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:50:ce:36:ef:4e:97:76:77:95:b4:29:f0:4f:09:85:d7:73:a1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Aug 6 09:06:55 2025 GMT Not After : Aug 9 19:14:55 2025 GMT Subject: CN=157BBB0CA147527D291A703F82AFD650E33F3544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:ab:10:ac:a7:5e:67:ae:c1:9a:ec:00:9e: 94:cb:de:52:42:b8:b6:a0:d4:2c:f0:e9:e0:06:ec: c5:63:ff:67:b2:b5:2c:3a:71:18:fe:d5:c9:96:eb: d9:e5:9d:95:cb:16:6c:84:6e:22:46:7e:e9:35:f5: 4b:73:f4:83:0b:d2:ab:84:83:13:60:29:52:43:8a: 81:de:5d:17:ea:28:93:b3:38:5f:fc:d6:b2:85:dc: ed:e5:08:5b:b4:55:aa:ff:11:f3:77:0d:11:82:63: 33:f9:f6:c3:99:71:96:f8:62:78:af:46:cb:b4:60: fb:8c:63:42:9f:fc:cf:39:bf:a0:3f:52:88:37:90: 4c:d0:c9:14:f1:58:62:6f:48:77:c6:b3:de:75:52: cf:da:96:9a:c3:e3:3f:9b:60:70:b3:47:55:66:68: 5f:a6:de:fe:5e:a2:32:d2:98:bb:1e:36:37:55:6c: 5f:01:f3:ca:3f:82:c3:3a:9e:5b:2c:af:fe:e5:e0: a5:f0:e6:43:41:05:8e:ae:68:ce:fa:a2:e2:89:5e: eb:af:66:c1:79:21:47:23:e5:9b:5a:8c:d0:93:5c: 10:b2:bc:2e:70:26:62:3a:af:56:17:b1:b3:6f:1d: af:4c:9f:42:cc:23:7b:92:b1:41:14:86:47:b0:7c: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7B:BB:0C:A1:47:52:7D:29:1A:70:3F:82:AF:D6:50:E3:3F:35:44 X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b0:6f:6c:99:9c:e2:b2:00:f4:34:4e:e9:b9:6c:01:1f:12: c2:5d:48:be:d4:4e:35:03:8f:ad:0a:c8:d4:71:2d:e8:90:8f: 13:6c:b6:f6:28:8e:49:a8:47:85:19:3c:a7:88:f1:58:6c:f4: 00:0c:22:3a:a8:aa:4f:58:3e:b2:8a:0e:0f:93:21:9a:55:a0: 1f:66:1a:0a:33:45:78:bb:d3:ef:af:7a:63:f2:60:1c:1f:de: 31:33:1c:f8:50:4f:75:0e:1e:45:f9:0f:8b:26:15:61:52:b1: d9:55:ef:d1:1e:3e:78:33:02:dd:06:ff:4c:d2:ea:f1:07:29: 1d:48:63:9a:4c:e8:8e:38:f4:94:5e:ac:f0:58:05:61:79:72: 14:a4:f5:d6:90:a4:16:ec:c4:f0:a0:ef:cb:49:08:d0:4c:2c: 2e:46:ee:4a:4e:9a:d7:e6:8b:92:31:f1:9a:3b:ca:df:c5:a7: 4d:74:6e:e0:85:04:9c:24:18:d3:cd:fe:33:d1:68:72:63:80: 38:ac:43:9b:43:ee:f9:1b:72:44:9b:da:07:de:5a:81:0c:ae: 5d:14:d6:e8:80:42:fe:90:4c:57:05:2f:bd:92:e0:cf:c6:b9: 9a:95:cb:5b:4b:94:e3:18:75:38:c0:20:ae:62:97:92:f1:59: 32:77:b0:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlDONu9Ol3Z3lbQp8E8JhddzoXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA4MDYwOTA2NTVaFw0yNTA4MDkxOTE0NTVaMDMxMTAvBgNV BAMTKDE1N0JCQjBDQTE0NzUyN0QyOTFBNzAzRjgyQUZENjUwRTMzRjM1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOAqsQrKdeZ67BmuwAnpTL3lJC uLag1Czw6eAG7MVj/2eytSw6cRj+1cmW69nlnZXLFmyEbiJGfuk19Utz9IML0quE gxNgKVJDioHeXRfqKJOzOF/81rKF3O3lCFu0Var/EfN3DRGCYzP59sOZcZb4Yniv Rsu0YPuMY0Kf/M85v6A/Uog3kEzQyRTxWGJvSHfGs951Us/alprD4z+bYHCzR1Vm aF+m3v5eojLSmLseNjdVbF8B88o/gsM6nlssr/7l4KXw5kNBBY6uaM76ouKJXuuv ZsF5IUcj5ZtajNCTXBCyvC5wJmI6r1YXsbNvHa9Mn0LMI3uSsUEUhkewfEYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFXu7DKFHUn0pGnA/gq/WUOM/NUQwHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmwb2yZnOKyAPQ0Tum5bAEfEsJdSL7UTjUD j60KyNRxLeiQjxNstvYojkmoR4UZPKeI8Vhs9AAMIjqoqk9YPrKKDg+TIZpVoB9m GgozRXi70++vemPyYBwf3jEzHPhQT3UOHkX5D4smFWFSsdlV79EePngzAt0G/0zS 6vEHKR1IY5pM6I449JRerPBYBWF5chSk9daQpBbsxPCg78tJCNBMLC5G7kpOmtfm i5Ix8Zo7yt/Fp010buCFBJwkGNPN/jPRaHJjgDisQ5tD7vkbckSb2gfeWoEMrl0U 1uiAQv6QTFcFL72S4M/GuZqVy1tLlOMYdTjAIK5il5LxWTJ3sKA= -----END CERTIFICATE-----Generated at Fri Aug 8 00:00:32 2025 by rpki-client