$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: E0FwECmKdBGnIryYWCZlnxgC3fHF7x5UVNG9dI0sHr8= Subject key identifier: 77:D1:F2:96:D2:ED:B2:5A:63:42:DF:5C:7C:20:F0:88:65:06:6A:4B Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 570A85486ADD49E0E15325F4381DB114D27B2272 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 04AE Signing time: Sun 15 Jun 2025 14:01:50 +0000 Manifest this update: Sun 15 Jun 2025 13:56:50 +0000 Manifest next update: Thu 19 Jun 2025 00:56:50 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: SD7dJDd1LN8rZSr2LuG0j4VnmijIHSCxomWecz9OSRM=) 2: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=) 3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0a:85:48:6a:dd:49:e0:e1:53:25:f4:38:1d:b1:14:d2:7b:22:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Jun 15 13:56:50 2025 GMT Not After : Jun 19 00:56:50 2025 GMT Subject: CN=77D1F296D2EDB25A6342DF5C7C20F08865066A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:9e:2d:7c:ec:5a:6c:82:00:0b:ab:0c:4b: a7:df:60:1e:d8:8b:41:4e:ba:b4:be:d4:da:12:10: 03:53:69:75:d0:ee:d9:18:1a:2d:1e:f6:cc:5a:e7: d8:9b:78:d5:96:e2:ca:f6:4f:be:b4:44:c5:06:48: 55:44:85:35:6d:d5:34:cd:71:d6:d7:2c:8d:66:30: 86:24:80:b3:85:0f:b8:95:63:55:23:f4:c1:52:ed: e3:1c:d4:89:5c:d6:9b:8d:67:5e:ee:17:4e:4a:76: e8:3d:16:fa:80:d1:3b:f3:14:c6:e8:64:6f:97:ff: 8e:ed:6d:50:21:34:4f:c9:2c:02:9f:df:c3:ee:38: fb:31:8a:a4:5b:8a:16:5e:bf:4a:82:e2:c4:6d:b7: 77:63:0e:ba:57:5d:a0:12:ff:eb:47:e4:2d:38:58: 30:87:37:50:99:f7:ce:a9:0d:9f:aa:01:80:f4:c7: f2:5d:70:3d:b1:59:39:98:37:94:17:74:c1:54:60: 96:94:17:a4:97:75:93:fb:34:ed:02:2d:40:53:1c: 57:6b:da:e2:5c:fe:98:fa:2c:c9:65:c2:55:01:0f: 5c:15:7b:5d:f1:1d:db:41:9d:d5:03:e7:1b:7a:20: 49:d5:1e:bb:6f:f0:ce:4f:ed:9c:5b:0b:8f:69:86: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:F2:96:D2:ED:B2:5A:63:42:DF:5C:7C:20:F0:88:65:06:6A:4B X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:22:d5:e7:19:6c:42:4c:39:7e:d8:31:cf:bb:96:b3:88:75: 9b:3b:47:af:f1:5e:36:26:a4:d9:74:4c:a2:ec:e1:94:f9:be: f4:99:7c:94:d3:95:58:40:40:13:a3:68:38:ea:39:8a:6f:98: d5:12:d4:63:36:10:6a:d9:b4:99:68:f0:a7:47:57:02:43:6a: d9:c0:d7:05:c3:97:7b:fc:1f:59:d3:5d:64:55:bb:bc:98:3e: 9d:16:42:97:3c:b8:31:32:c2:31:ce:89:d0:ce:89:c8:4c:aa: 56:cd:0a:ef:03:f2:03:7d:e4:fc:07:f7:d4:86:80:ef:26:55: ba:c8:a5:ba:30:ec:01:72:83:36:78:d8:5a:6a:35:30:1c:38: 08:66:2d:1f:7d:02:31:27:22:f6:54:d8:4a:7b:25:5c:37:33: 39:c7:95:66:ac:0c:38:74:be:6d:2d:d0:73:bb:5d:68:08:1e: ca:c1:61:c4:b8:f8:a1:7f:54:fe:e9:d4:6d:6b:f1:cf:de:23: cb:22:2a:5e:c1:ce:a2:57:d8:cd:c0:5d:6c:a7:d4:2b:e5:b2: 27:bc:d3:b6:9f:ce:b1:af:32:5a:89:c9:97:d5:d1:7e:7d:a6: 87:de:55:c2:d6:db:7d:67:73:00:4d:8c:48:9b:1d:d4:cd:26: b9:29:ca:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwqFSGrdSeDhUyX0OB2xFNJ7InIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA2MTUxMzU2NTBaFw0yNTA2MTkwMDU2NTBaMDMxMTAvBgNV BAMTKDc3RDFGMjk2RDJFREIyNUE2MzQyREY1QzdDMjBGMDg4NjUwNjZBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJG54tfOxabIIAC6sMS6ffYB7Y i0FOurS+1NoSEANTaXXQ7tkYGi0e9sxa59ibeNWW4sr2T760RMUGSFVEhTVt1TTN cdbXLI1mMIYkgLOFD7iVY1Uj9MFS7eMc1Ilc1puNZ17uF05Kdug9FvqA0TvzFMbo ZG+X/47tbVAhNE/JLAKf38PuOPsxiqRbihZev0qC4sRtt3djDrpXXaAS/+tH5C04 WDCHN1CZ986pDZ+qAYD0x/JdcD2xWTmYN5QXdMFUYJaUF6SXdZP7NO0CLUBTHFdr 2uJc/pj6LMllwlUBD1wVe13xHdtBndUD5xt6IEnVHrtv8M5P7ZxbC49phjA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd9HyltLtslpjQt9cfCDwiGUGakswHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwi1ecZbEJMOX7YMc+7lrOIdZs7R6/xXjYm pNl0TKLs4ZT5vvSZfJTTlVhAQBOjaDjqOYpvmNUS1GM2EGrZtJlo8KdHVwJDatnA 1wXDl3v8H1nTXWRVu7yYPp0WQpc8uDEywjHOidDOichMqlbNCu8D8gN95PwH99SG gO8mVbrIpbow7AFygzZ42FpqNTAcOAhmLR99AjEnIvZU2Ep7JVw3MznHlWasDDh0 vm0t0HO7XWgIHsrBYcS4+KF/VP7p1G1r8c/eI8siKl7BzqJX2M3AXWyn1Cvlsie8 07afzrGvMlqJyZfV0X59pofeVcLW231ncwBNjEibHdTNJrkpyh8= -----END CERTIFICATE-----Generated at Sun Jun 15 23:45:40 2025 by rpki-client