$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: ja/eKUCf5iTC9ZEsF6RFy1Ftd2A4/1923HqEI0n2KTg= Subject key identifier: 67:70:19:98:80:2A:38:2A:30:66:A0:78:FE:31:3C:ED:47:68:9A:1E Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 1308E9008766FE6235CE3A740A00DF7B400734D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 01AC Signing time: Mon 03 Nov 2025 08:01:40 +0000 Manifest this update: Mon 03 Nov 2025 07:56:40 +0000 Manifest next update: Thu 06 Nov 2025 13:48:40 +0000 Files and hashes: 1: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: Sd36YzudNMcTRHVoUDlNVss3MrTgmcLsuIUAG58JUlQ=) 2: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) 3: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 5: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:08:e9:00:87:66:fe:62:35:ce:3a:74:0a:00:df:7b:40:07:34:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Nov 3 07:56:40 2025 GMT Not After : Nov 6 13:48:40 2025 GMT Subject: CN=67701998802A382A3066A078FE313CED47689A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:7e:b2:28:6e:29:2a:1f:e2:0c:01:d1:ab: 6b:0f:66:e6:45:c2:70:bb:b8:ee:81:96:63:98:6e: 72:ef:39:78:9e:08:77:d8:d4:b4:95:46:88:5f:39: f3:20:4f:6e:11:e6:38:b6:42:74:6b:16:9d:2e:10: d3:2c:ea:ec:2c:7d:d1:2e:bb:68:87:35:07:b3:77: a8:7e:08:82:37:f2:1b:01:eb:14:76:bb:c9:6d:44: 43:cd:93:cf:8c:79:bf:cf:ae:6f:0d:b2:7e:95:88: e7:0d:60:84:ce:fe:fb:22:34:01:6c:25:d4:8e:15: 7d:d8:ca:11:9a:e6:52:09:24:84:27:63:a9:f9:14: 5e:56:1e:97:7f:51:e7:60:5f:81:4b:3e:6a:2d:1a: 1c:b6:33:9d:b5:2a:09:e5:17:cc:1c:4c:59:66:00: 12:f1:bf:ae:c2:8d:0d:d8:bb:92:7c:37:61:fc:43: a6:dc:54:3c:94:ee:2d:97:70:28:c2:de:fb:1a:75: bf:64:ed:65:56:cb:54:72:05:41:da:36:1a:b8:34: 5f:0d:ae:10:af:4c:6d:c9:08:7b:86:80:a9:d9:bc: e1:47:08:69:a4:a1:54:e1:15:d7:e8:7f:41:2f:b9: 7f:55:72:dc:22:c4:b9:cb:81:f8:6a:1e:06:96:53: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:70:19:98:80:2A:38:2A:30:66:A0:78:FE:31:3C:ED:47:68:9A:1E X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c7:4e:e5:c8:50:6d:ea:a9:08:51:f6:1c:10:d0:44:54:2b: 99:6c:46:4c:cf:7e:d8:b0:45:09:69:04:e3:83:4b:4a:5f:22: 4a:22:33:e3:bb:55:a0:67:cc:f7:9d:56:ff:52:b1:5b:79:a9: 7e:a8:d1:b7:35:8d:3a:a3:67:8f:8c:0b:06:55:d0:ba:ef:91: 19:dd:43:60:8e:26:e9:c0:d7:cb:67:28:7a:7f:70:e3:94:df: 06:76:3f:b2:50:eb:fa:3a:98:43:18:3a:41:3e:a7:4e:65:b8: 94:e2:f7:aa:71:97:2f:88:19:27:fc:fa:45:8a:d3:3c:c9:dd: 2b:76:68:36:a4:c8:52:34:18:fd:4c:f7:c4:06:51:ea:76:68: e0:43:2e:38:80:c0:f2:5f:04:ae:5a:02:eb:70:2a:c6:b2:c8: 83:50:4e:30:45:ea:e5:af:c3:a6:7a:92:35:a5:fb:a4:f5:0f: b2:00:6f:c3:81:a7:49:47:07:7c:f5:3f:86:b5:7c:40:a5:cc: 41:cf:46:4b:3e:22:9b:ec:e0:8c:c8:42:ac:1d:69:14:4e:97: 9c:33:f7:a8:b1:a2:8d:d1:dc:fd:1a:75:98:80:b2:e3:70:07: 1d:7f:71:90:b9:85:77:61:5e:4d:87:bb:39:3d:bb:1a:53:e8: 8f:7b:e6:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwjpAIdm/mI1zjp0CgDfe0AHNNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTExMDMwNzU2NDBaFw0yNTExMDYxMzQ4NDBaMDMxMTAvBgNV BAMTKDY3NzAxOTk4ODAyQTM4MkEzMDY2QTA3OEZFMzEzQ0VENDc2ODlBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61H6yKG4pKh/iDAHRq2sPZuZF wnC7uO6BlmOYbnLvOXieCHfY1LSVRohfOfMgT24R5ji2QnRrFp0uENMs6uwsfdEu u2iHNQezd6h+CII38hsB6xR2u8ltREPNk8+Meb/Prm8Nsn6ViOcNYITO/vsiNAFs JdSOFX3YyhGa5lIJJIQnY6n5FF5WHpd/UedgX4FLPmotGhy2M521KgnlF8wcTFlm ABLxv67CjQ3Yu5J8N2H8Q6bcVDyU7i2XcCjC3vsadb9k7WVWy1RyBUHaNhq4NF8N rhCvTG3JCHuGgKnZvOFHCGmkoVThFdfof0EvuX9VctwixLnLgfhqHgaWU1CZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ3AZmIAqOCowZqB4/jE87Udomh4wHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPHTuXIUG3qqQhR9hwQ0ERUK5lsRkzPftiw RQlpBOODS0pfIkoiM+O7VaBnzPedVv9SsVt5qX6o0bc1jTqjZ4+MCwZV0LrvkRnd Q2COJunA18tnKHp/cOOU3wZ2P7JQ6/o6mEMYOkE+p05luJTi96pxly+IGSf8+kWK 0zzJ3St2aDakyFI0GP1M98QGUep2aOBDLjiAwPJfBK5aAutwKsayyINQTjBF6uWv w6Z6kjWl+6T1D7IAb8OBp0lHB3z1P4a1fEClzEHPRks+Ipvs4IzIQqwdaRROl5wz 96ixoo3R3P0adZiAsuNwBx1/cZC5hXdhXk2Huzk9uxpT6I975l8= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:17 2025 by rpki-client