$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: eUyEHx9/m2V0ArML9SlPh4uxpluzfRy/Slhs59jRkJw= Subject key identifier: FE:D3:F9:1E:20:CF:7B:9E:EB:63:18:C1:2D:D6:B9:70:C6:E7:5E:52 Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 05BE6FC8BEC443B4F7BE9A89B1900F31AEBEDE83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0153 Signing time: Sun 02 Nov 2025 20:41:43 +0000 Manifest this update: Sun 02 Nov 2025 20:36:43 +0000 Manifest next update: Wed 05 Nov 2025 23:33:43 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) 2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) 3: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: 0x4ebWroEIqcixDHHKjfXIDR+vTIvvf6Mqi8zRowvgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:be:6f:c8:be:c4:43:b4:f7:be:9a:89:b1:90:0f:31:ae:be:de:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Nov 2 20:36:43 2025 GMT Not After : Nov 5 23:33:43 2025 GMT Subject: CN=FED3F91E20CF7B9EEB6318C12DD6B970C6E75E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:2d:b3:80:a7:fc:18:f5:b0:80:40:05:21: fe:aa:8e:23:c9:37:85:61:dc:61:1a:5f:3f:07:5e: 4a:b5:0f:08:6c:61:8f:dc:d6:47:35:f5:88:a9:79: f7:65:9b:3b:ac:a0:ed:64:a5:fa:12:40:a7:cc:61: 45:c8:23:31:8f:8b:88:9f:fb:b9:61:70:e4:44:80: 75:6c:08:3b:25:fb:9e:30:41:c6:2e:1f:a3:df:37: 00:52:a6:60:56:93:21:9d:81:12:bb:c3:4a:f3:c1: 09:8d:a5:f2:0e:8c:55:ed:eb:a5:f8:f6:95:d1:13: 5b:e8:5d:85:e7:e5:3e:51:48:62:c4:a8:56:a7:65: ba:50:82:57:9c:9b:46:d5:86:e2:74:bc:3d:03:6d: c0:8a:72:7a:3e:66:0e:19:2b:9d:5e:59:ec:9a:0f: 98:45:6d:45:90:34:7b:44:88:42:42:34:9a:56:0a: bf:1b:97:d6:0a:95:82:7c:f1:92:ac:a8:52:c2:69: 50:71:14:f9:97:50:dd:b5:31:04:f1:94:be:24:74: 8f:4b:4b:6c:d7:17:0c:70:95:46:e9:f8:40:7b:01: 4f:ae:a5:dc:fe:90:e7:61:6c:ca:95:37:e3:a3:b0: 22:24:09:e6:a5:3a:3d:58:63:5b:7f:35:55:c4:ee: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D3:F9:1E:20:CF:7B:9E:EB:63:18:C1:2D:D6:B9:70:C6:E7:5E:52 X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:68:67:c4:76:63:2a:a2:10:76:0b:e9:2d:39:36:a0:41:4c: 39:35:23:bd:82:4d:37:e3:94:ff:ea:d8:bd:4e:4e:b9:62:84: 39:15:43:2f:97:cd:8b:73:d1:f6:8f:3a:b6:43:be:62:79:c3: e3:3c:b4:35:b2:d4:37:88:11:93:24:eb:bb:5c:26:a2:ef:af: 5f:8f:3d:53:7e:cd:d5:f3:c1:f7:d3:1b:1c:a6:d4:64:e8:0e: ef:15:5e:80:93:80:36:29:69:b6:13:6e:f4:b1:10:98:1e:de: 06:c6:96:11:c0:cf:0c:a0:e6:6f:ca:f0:03:6f:1d:e6:4f:14: 0f:7e:5c:9e:cf:60:e5:22:6f:88:39:7a:48:aa:f6:5f:41:73: e0:d3:54:b2:5f:0d:bb:22:f6:82:72:1b:01:05:33:28:98:fc: ed:72:35:5e:b0:70:e1:8c:de:13:cf:18:c6:72:a6:f1:88:ee: 1a:32:7c:88:ea:20:7f:bd:69:97:03:c3:e0:02:63:97:ae:e9: e5:0c:8f:a6:e4:9c:71:33:ad:0a:ed:7b:94:5e:61:db:16:e2: 9a:dd:5b:40:6a:0d:c8:7e:19:23:c1:27:35:0e:47:5c:ed:0e: 81:7b:15:43:26:18:95:26:67:84:3f:88:7d:ad:de:d2:eb:92: f2:e3:86:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBb5vyL7EQ7T3vpqJsZAPMa6+3oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTExMDIyMDM2NDNaFw0yNTExMDUyMzMzNDNaMDMxMTAvBgNV BAMTKEZFRDNGOTFFMjBDRjdCOUVFQjYzMThDMTJERDZCOTcwQzZFNzVFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GC2zgKf8GPWwgEAFIf6qjiPJ N4Vh3GEaXz8HXkq1DwhsYY/c1kc19YipefdlmzusoO1kpfoSQKfMYUXIIzGPi4if +7lhcOREgHVsCDsl+54wQcYuH6PfNwBSpmBWkyGdgRK7w0rzwQmNpfIOjFXt66X4 9pXRE1voXYXn5T5RSGLEqFanZbpQglecm0bVhuJ0vD0DbcCKcno+Zg4ZK51eWeya D5hFbUWQNHtEiEJCNJpWCr8bl9YKlYJ88ZKsqFLCaVBxFPmXUN21MQTxlL4kdI9L S2zXFwxwlUbp+EB7AU+updz+kOdhbMqVN+OjsCIkCealOj1YY1t/NVXE7un9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/tP5HiDPe57rYxjBLda5cMbnXlIwHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVoZ8R2YyqiEHYL6S05NqBBTDk1I72CTTfj lP/q2L1OTrlihDkVQy+XzYtz0faPOrZDvmJ5w+M8tDWy1DeIEZMk67tcJqLvr1+P PVN+zdXzwffTGxym1GToDu8VXoCTgDYpabYTbvSxEJge3gbGlhHAzwyg5m/K8ANv HeZPFA9+XJ7PYOUib4g5ekiq9l9Bc+DTVLJfDbsi9oJyGwEFMyiY/O1yNV6wcOGM 3hPPGMZypvGI7hoyfIjqIH+9aZcDw+ACY5eu6eUMj6bknHEzrQrte5ReYdsW4prd W0BqDch+GSPBJzUOR1ztDoF7FUMmGJUmZ4Q/iH2t3tLrkvLjhmA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:46:34 2025 by rpki-client