$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft File: 42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json) Hash identifier: DDWKMjkAbSeZCMvgz2AKTN9n2SZu/IBTnzGvb1XBvg4= Subject key identifier: 1F:0C:A5:F4:AF:55:1D:49:0A:C9:2A:E7:4A:45:CD:F4:10:4C:65:A4 Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 1D69D7E39DF46CDF751E29E13A8393B6047A1173 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft Manifest number: 0342 Signing time: Tue 04 Nov 2025 11:00:44 +0000 Manifest this update: Tue 04 Nov 2025 10:55:44 +0000 Manifest next update: Fri 07 Nov 2025 18:09:44 +0000 Files and hashes: 1: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=) 2: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=) 3: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=) 4: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=) 5: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=) 6: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=) 7: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=) 8: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=) 9: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: mWtVVdG09EXDOryZ5K/3d2Nn/k8xrUTQsWrYJDPIjtk=) 10: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=) 11: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=) 12: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=) 13: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=) 14: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=) 15: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=) 16: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=) 17: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=) 18: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:69:d7:e3:9d:f4:6c:df:75:1e:29:e1:3a:83:93:b6:04:7a:11:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Nov 4 10:55:44 2025 GMT Not After : Nov 7 18:09:44 2025 GMT Subject: CN=1F0CA5F4AF551D490AC92AE74A45CDF4104C65A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:6f:a5:95:cf:56:61:33:b9:e2:20:96:13: d1:af:d3:76:b5:f3:66:78:84:e3:9f:c7:c6:68:cd: 7f:3e:87:48:79:ec:f3:3a:b6:ea:1e:c9:59:91:b7: 18:49:fa:ce:23:39:fb:d0:09:55:5d:c2:41:c9:48: aa:e5:16:4c:56:ac:28:84:27:af:01:95:be:87:c9: dc:a2:47:da:63:fe:b1:df:02:91:0e:1b:b1:8b:92: 60:ab:d3:08:dd:e0:43:5a:d2:73:53:9a:e5:ed:87: 1d:da:71:62:34:16:76:2c:f1:de:7c:3b:68:61:c5: 5b:07:de:7c:c4:61:a8:58:5d:4c:91:d3:28:f2:5d: ab:ab:0b:fa:d0:83:b6:22:c9:ac:65:ef:78:0e:6f: ec:77:c9:9c:4f:cd:9d:d6:dc:aa:6c:39:7d:96:0d: 4f:60:15:06:15:58:29:82:27:5e:89:20:92:15:2a: 45:71:9e:b9:9f:7e:91:4f:ae:cb:b1:54:eb:e2:c8: b4:db:66:2d:86:f4:a7:c5:a6:3f:ea:53:29:56:ab: 77:1c:7d:4e:e5:5c:f9:43:8c:29:fd:9a:33:d1:61: 02:5a:99:8b:98:d3:82:9c:ba:d8:1f:35:b4:7a:5f: ad:40:33:ed:ac:bd:f2:ff:fa:82:95:d0:70:36:b1: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0C:A5:F4:AF:55:1D:49:0A:C9:2A:E7:4A:45:CD:F4:10:4C:65:A4 X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:38:b0:9c:10:a7:d2:7e:51:83:fa:91:1a:34:1c:78:d0:7a: 3d:a7:76:1f:c4:38:64:a2:d6:27:65:38:42:a1:f0:07:33:3c: e5:47:6e:8c:53:3f:0f:d0:8f:0b:de:52:36:9f:79:c6:a7:cd: c4:f7:a7:e5:bc:39:32:72:1c:7b:a8:57:0f:63:85:5a:18:a1: 14:aa:4f:4d:27:c8:37:fa:06:ff:cb:8b:e3:c7:40:21:35:a9: 15:5c:00:16:51:c6:0c:cd:f6:5a:55:27:24:4a:27:db:8e:a7: d6:37:a7:21:c5:bc:97:55:cb:27:0f:a0:67:b5:2b:ea:b6:5d: 60:51:de:a8:7a:b9:94:17:ff:af:84:01:fa:70:e3:46:11:31: 7e:45:67:d1:fa:d6:1d:f2:83:73:35:c3:1e:17:f4:06:aa:86: 08:c5:3e:10:15:66:40:f1:f3:fb:a0:77:11:4f:5e:43:9b:76: 5b:fb:d2:83:a0:1a:ca:71:46:4b:1b:0e:4a:66:a4:63:ac:e4: ed:fe:a1:7a:b6:54:0d:e8:19:db:9d:3d:43:d1:8c:f4:24:2f: e4:78:4a:32:fa:bd:07:8a:7f:a2:2a:91:31:24:50:24:3d:a7: c6:49:45:d0:b4:41:27:10:be:7f:ad:1a:1d:39:d4:13:4f:01: 64:73:90:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWnX4530bN91HinhOoOTtgR6EXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNTExMDQxMDU1NDRaFw0yNTExMDcxODA5NDRaMDMxMTAvBgNV BAMTKDFGMENBNUY0QUY1NTFENDkwQUM5MkFFNzRBNDVDREY0MTA0QzY1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Gm+llc9WYTO54iCWE9Gv03a1 82Z4hOOfx8ZozX8+h0h57PM6tuoeyVmRtxhJ+s4jOfvQCVVdwkHJSKrlFkxWrCiE J68Blb6HydyiR9pj/rHfApEOG7GLkmCr0wjd4ENa0nNTmuXthx3acWI0FnYs8d58 O2hhxVsH3nzEYahYXUyR0yjyXaurC/rQg7Yiyaxl73gOb+x3yZxPzZ3W3KpsOX2W DU9gFQYVWCmCJ16JIJIVKkVxnrmffpFPrsuxVOviyLTbZi2G9KfFpj/qUylWq3cc fU7lXPlDjCn9mjPRYQJamYuY04KcutgfNbR6X61AM+2svfL/+oKV0HA2sccvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwyl9K9VHUkKySrnSkXN9BBMZaQwHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyZjIyOGMtZGYyMC00NzI4LTlm OTYtOGZhYTEzNDAwMTdhLzAvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0RE ODFFQzdDQTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ4sJwQp9J+UYP6kRo0HHjQej2ndh/EOGSi 1idlOEKh8AczPOVHboxTPw/QjwveUjafecanzcT3p+W8OTJyHHuoVw9jhVoYoRSq T00nyDf6Bv/Li+PHQCE1qRVcABZRxgzN9lpVJyRKJ9uOp9Y3pyHFvJdVyycPoGe1 K+q2XWBR3qh6uZQX/6+EAfpw40YRMX5FZ9H61h3yg3M1wx4X9AaqhgjFPhAVZkDx 8/ugdxFPXkObdlv70oOgGspxRksbDkpmpGOs5O3+oXq2VA3oGdudPUPRjPQkL+R4 SjL6vQeKf6IqkTEkUCQ9p8ZJRdC0QScQvn+tGh051BNPAWRzkHs= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:25 2025 by rpki-client