$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: DuTfvnMAgH+QA7pWFrVUoPEmMv5U8+RheDP92ObN8iw= Subject key identifier: 63:58:E1:05:93:A2:1C:B0:86:84:F9:D3:5F:C1:A5:0F:AE:45:95:93 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 4AE9D186A3251D0A5391A60612DB3B08D4CF0980 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 016D Signing time: Sat 14 Jun 2025 22:41:37 +0000 Manifest this update: Sat 14 Jun 2025 22:36:37 +0000 Manifest next update: Wed 18 Jun 2025 06:11:37 +0000 Files and hashes: 1: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: lN2XQ4mh7/mlyFdI56jlrhcrF2k+6Gjv7LY3bC2KrCI=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) 3: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 4: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) 5: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e9:d1:86:a3:25:1d:0a:53:91:a6:06:12:db:3b:08:d4:cf:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Jun 14 22:36:37 2025 GMT Not After : Jun 18 06:11:37 2025 GMT Subject: CN=6358E10593A21CB08684F9D35FC1A50FAE459593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:f0:98:d8:09:c6:db:e2:92:2a:45:b1:c3: aa:7d:45:96:b1:d8:49:05:fd:8e:e8:54:bf:be:dd: d8:7c:77:69:43:0a:74:8a:b8:15:9b:32:b5:4e:28: 5a:3a:88:e5:46:bd:c3:e0:d4:4b:c4:3c:72:f7:ab: bc:be:ae:b0:12:2a:ee:9e:25:2f:56:7c:11:f1:1c: 1c:da:a6:53:9f:f7:80:d4:bd:d0:65:16:af:cf:05: 30:94:44:1c:61:62:a9:76:d3:e5:90:bb:de:3c:3c: 15:a7:9c:c1:32:e4:85:c8:20:4c:d6:ee:d3:e3:22: 78:ec:be:68:3b:46:d5:e0:f7:4d:3c:86:f0:0b:62: 09:b7:77:5b:87:54:e2:34:54:04:5f:89:4e:8d:79: 79:c0:cb:b0:72:a4:a7:49:c7:ae:11:13:b5:32:2d: a1:29:f6:91:4e:37:23:f7:3a:21:88:5c:d9:12:8b: 30:26:35:01:43:74:00:83:40:f7:b0:c6:0d:18:e4: 19:65:61:18:7f:d1:cf:33:8d:66:f8:61:5c:65:05: 91:b2:c7:d8:13:4a:55:50:21:3c:76:88:eb:dc:aa: d0:7d:c7:d6:80:f5:8d:08:8b:5b:46:3b:90:ba:ce: cc:1e:f6:40:0f:27:e0:10:55:73:56:1a:82:6e:52: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:58:E1:05:93:A2:1C:B0:86:84:F9:D3:5F:C1:A5:0F:AE:45:95:93 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:17:d1:ba:68:14:67:41:52:04:e8:c1:cc:8a:2d:72:e4:35: 9d:97:f1:64:c0:a1:12:64:a9:f3:4e:85:c8:3a:3a:01:bd:12: e9:c9:04:87:0a:d1:9b:87:ed:67:12:d2:d3:32:44:bb:15:d6: 1b:c0:2f:10:0b:46:3f:96:0f:c7:10:66:74:ee:09:27:71:74: ed:4e:0e:c6:a2:0b:9c:43:67:07:68:5c:e5:64:3a:36:a8:a6: 87:b0:9f:48:3a:28:cd:dd:b6:88:d6:3a:c2:1a:c4:fc:7c:ea: ca:4d:d0:dd:39:a1:72:33:31:c8:3c:8d:51:00:6c:b4:48:21: 49:3a:a7:ba:c8:a8:44:78:7c:f0:8f:5d:04:9d:c0:61:58:64: 33:8e:73:fb:ca:fd:50:a0:c5:42:1c:95:0b:78:10:ed:7f:02: 61:51:80:8c:84:2b:75:8c:f1:03:f3:88:68:bf:59:d4:75:57: c1:04:59:fd:b1:10:fc:bc:00:39:30:45:52:ae:c7:e3:8f:f6: 3b:95:bf:af:db:45:9b:eb:b5:e3:a6:a7:16:6c:17:11:4c:eb: 3a:7d:b7:5f:61:c4:54:31:a3:9c:ac:e4:83:9e:3c:2f:7f:f4: 37:92:84:71:47:96:3b:a2:d1:0a:66:e8:dc:c1:f1:48:65:6a: 42:ec:58:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSunRhqMlHQpTkaYGEts7CNTPCYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTA2MTQyMjM2MzdaFw0yNTA2MTgwNjExMzdaMDMxMTAvBgNV BAMTKDYzNThFMTA1OTNBMjFDQjA4Njg0RjlEMzVGQzFBNTBGQUU0NTk1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gPCY2AnG2+KSKkWxw6p9RZax 2EkF/Y7oVL++3dh8d2lDCnSKuBWbMrVOKFo6iOVGvcPg1EvEPHL3q7y+rrASKu6e JS9WfBHxHBzaplOf94DUvdBlFq/PBTCURBxhYql20+WQu948PBWnnMEy5IXIIEzW 7tPjInjsvmg7RtXg9008hvALYgm3d1uHVOI0VARfiU6NeXnAy7BypKdJx64RE7Uy LaEp9pFONyP3OiGIXNkSizAmNQFDdACDQPewxg0Y5BllYRh/0c8zjWb4YVxlBZGy x9gTSlVQITx2iOvcqtB9x9aA9Y0Ii1tGO5C6zswe9kAPJ+AQVXNWGoJuUvkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY1jhBZOiHLCGhPnTX8GlD65FlZMwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEX0bpoFGdBUgTowcyKLXLkNZ2X8WTAoRJk qfNOhcg6OgG9EunJBIcK0ZuH7WcS0tMyRLsV1hvALxALRj+WD8cQZnTuCSdxdO1O DsaiC5xDZwdoXOVkOjaopoewn0g6KM3dtojWOsIaxPx86spN0N05oXIzMcg8jVEA bLRIIUk6p7rIqER4fPCPXQSdwGFYZDOOc/vK/VCgxUIclQt4EO1/AmFRgIyEK3WM 8QPziGi/WdR1V8EEWf2xEPy8ADkwRVKux+OP9juVv6/bRZvrteOmpxZsFxFM6zp9 t19hxFQxo5ys5IOePC9/9DeShHFHljui0Qpm6NzB8UhlakLsWI4= -----END CERTIFICATE-----Generated at Mon Jun 16 20:51:33 2025 by rpki-client