$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: /KMuoDgNinl4XcX1fYE2SPY3TFhPZg5vK+Sf7VQuZwA= Subject key identifier: 63:31:FE:42:DB:D7:C8:D7:F6:61:D4:E7:14:1D:0C:6B:23:C0:3F:B2 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 1889B867E5271FC077AB125EC909D180F1FB55D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 0184 Signing time: Wed 06 Aug 2025 00:31:38 +0000 Manifest this update: Wed 06 Aug 2025 00:26:38 +0000 Manifest next update: Sat 09 Aug 2025 11:38:38 +0000 Files and hashes: 1: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 2: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) 3: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: eBE4Cmj0NqsSEJrIfDbYjbCrWVtjjh8u/7WXMxPopyg=) 4: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) 5: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:89:b8:67:e5:27:1f:c0:77:ab:12:5e:c9:09:d1:80:f1:fb:55:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Aug 6 00:26:38 2025 GMT Not After : Aug 9 11:38:38 2025 GMT Subject: CN=6331FE42DBD7C8D7F661D4E7141D0C6B23C03FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:9f:62:09:74:cd:ec:7a:e5:0c:60:11:6d: 3c:3d:5a:0d:9c:1f:4c:ad:8c:56:00:fd:71:15:3c: 8c:83:27:02:76:1a:cd:0e:9d:8e:1b:a8:7a:6d:ba: 5d:27:90:22:61:cb:54:c3:75:c1:15:32:2c:61:4a: e4:fb:c1:72:90:07:b8:da:7d:ef:cf:01:6e:1d:0c: 8e:3d:fe:2a:01:1f:2d:e3:70:74:37:1c:17:b9:eb: e2:8f:9d:80:d5:5a:3b:2a:be:b3:a0:d6:4f:02:c2: 18:26:58:78:e7:b0:3b:ce:4e:a5:90:76:6f:07:d8: 3b:ac:95:89:bb:7b:19:95:df:08:fa:e5:e7:45:fe: 93:e3:75:8e:19:87:a1:13:e8:9d:52:c0:69:2a:8c: 53:b8:dc:59:1f:b4:b3:96:c2:19:4f:93:e7:ad:80: 40:7c:68:0b:50:86:ab:7a:fc:db:8b:fd:b2:2f:e3: 05:58:77:4d:3c:df:16:51:26:6f:28:35:23:06:c2: ad:b3:bd:f5:50:f7:ae:fb:9a:11:d3:8e:f6:e0:33: eb:89:c2:9e:96:4f:07:55:ed:1c:54:f8:2d:25:b8: 3c:40:a8:ff:d0:fb:40:fe:fc:fc:5b:a8:87:15:d8: 97:1e:a5:2a:19:3a:f4:63:32:c2:3e:1a:66:41:b5: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:FE:42:DB:D7:C8:D7:F6:61:D4:E7:14:1D:0C:6B:23:C0:3F:B2 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cf:e0:5d:66:fd:28:8d:32:07:84:dc:36:35:37:22:7e:b6: b4:a5:ea:25:a2:c9:68:69:7f:c9:e5:65:63:9a:d6:28:3e:10: fe:35:1a:56:eb:77:f7:ac:28:7d:cc:e6:b7:0d:91:15:47:f7: 88:b2:fd:d7:f3:23:06:7c:ba:62:43:65:68:6c:3f:ba:d9:39: f6:17:4a:3e:92:9e:95:ce:e6:99:1e:95:f7:73:24:e4:34:5d: f7:08:17:66:d9:0a:f5:8a:6e:9b:bf:37:78:62:87:f9:5a:45: 78:79:c8:23:4d:29:5c:f7:0e:32:ee:54:4b:4c:e5:5b:27:c1: de:63:a6:ed:55:e9:de:90:75:87:92:f4:91:4d:85:a6:ae:f5: c8:85:de:5f:26:cf:fc:93:35:28:53:bd:01:05:0c:32:1a:33: 63:71:5a:94:aa:92:71:2d:0b:dc:2f:31:f0:c2:cd:a3:12:b6: 5f:5d:62:f3:64:36:86:04:a2:ce:3a:56:65:28:fa:4d:41:d8: 5a:19:46:81:66:18:62:6f:69:6d:44:8a:62:a0:bd:45:fe:95: c9:8f:f7:cd:dc:2c:6f:a5:fd:00:20:1b:49:0f:97:e2:2f:34: 06:f6:8d:2a:fe:05:ff:96:ab:27:24:8a:01:b1:f9:19:fa:ff: bf:39:d2:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIm4Z+UnH8B3qxJeyQnRgPH7VdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTA4MDYwMDI2MzhaFw0yNTA4MDkxMTM4MzhaMDMxMTAvBgNV BAMTKDYzMzFGRTQyREJEN0M4RDdGNjYxRDRFNzE0MUQwQzZCMjNDMDNGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT259iCXTN7HrlDGARbTw9Wg2c H0ytjFYA/XEVPIyDJwJ2Gs0OnY4bqHptul0nkCJhy1TDdcEVMixhSuT7wXKQB7ja fe/PAW4dDI49/ioBHy3jcHQ3HBe56+KPnYDVWjsqvrOg1k8CwhgmWHjnsDvOTqWQ dm8H2DuslYm7exmV3wj65edF/pPjdY4Zh6ET6J1SwGkqjFO43FkftLOWwhlPk+et gEB8aAtQhqt6/NuL/bIv4wVYd0083xZRJm8oNSMGwq2zvfVQ9677mhHTjvbgM+uJ wp6WTwdV7RxU+C0luDxAqP/Q+0D+/PxbqIcV2JcepSoZOvRjMsI+GmZBtRIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzH+QtvXyNf2YdTnFB0MayPAP7IwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzP4F1m/SiNMgeE3DY1NyJ+trSl6iWiyWhp f8nlZWOa1ig+EP41Glbrd/esKH3M5rcNkRVH94iy/dfzIwZ8umJDZWhsP7rZOfYX Sj6SnpXO5pkelfdzJOQ0XfcIF2bZCvWKbpu/N3hih/laRXh5yCNNKVz3DjLuVEtM 5Vsnwd5jpu1V6d6QdYeS9JFNhaau9ciF3l8mz/yTNShTvQEFDDIaM2NxWpSqknEt C9wvMfDCzaMStl9dYvNkNoYEos46VmUo+k1B2FoZRoFmGGJvaW1EimKgvUX+lcmP 983cLG+l/QAgG0kPl+IvNAb2jSr+Bf+WqyckigGx+Rn6/7850gc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:26 2025 by rpki-client