$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: ZdnjGEjULhg3zfd7ov4NwWAUfQAnsnhwP+s5skQMRGA= Subject key identifier: 53:49:B4:BD:0D:B5:08:BD:AA:0C:CE:03:8A:B2:3A:6B:CD:00:DB:84 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 090E202BAED22FAA07170595A2A2A2602BB76FB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: 0102 Signing time: Tue 17 Jun 2025 04:21:04 +0000 Manifest this update: Tue 17 Jun 2025 04:16:04 +0000 Manifest next update: Fri 20 Jun 2025 07:14:04 +0000 Files and hashes: 1: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: yu8z55+Tr/+kJKakk3Vmp/sSKFGPsRRjeFUSIw8Az4o=) 2: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: T3gQkdSjAobMtj9JWpF1hUDuT3boFDX6NRuImJzR8Jo=) 3: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: BgUfjlBOik3lVreb6x1VhcmAzB8os2FuzbKBtvTz7gM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0e:20:2b:ae:d2:2f:aa:07:17:05:95:a2:a2:a2:60:2b:b7:6f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Jun 17 04:16:04 2025 GMT Not After : Jun 20 07:14:04 2025 GMT Subject: CN=5349B4BD0DB508BDAA0CCE038AB23A6BCD00DB84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:18:a3:aa:4f:8d:d4:d7:22:9e:84:89:0f:a2: 79:95:d6:77:a8:ff:c1:40:e4:56:71:6f:a3:d0:a3: a3:a6:e5:73:f6:64:b7:8b:7d:35:ef:11:4c:85:43: e2:aa:ad:72:79:d9:80:a3:e6:a3:a8:80:44:89:6c: 32:c3:0a:a2:e8:25:c2:b6:03:03:d2:41:c1:6d:97: 09:6f:a4:71:74:25:ed:9b:24:ce:7a:d7:39:80:c4: 11:9e:26:10:4b:77:d3:53:d6:04:c9:39:95:07:64: 78:1c:70:37:e4:75:a9:5e:dd:05:c0:6e:d6:24:68: 30:78:34:1c:f0:74:ce:94:60:9d:e9:30:a7:e5:87: 16:95:78:4e:1d:f6:83:5b:9a:ae:ca:bc:e0:f0:3e: b7:3e:e8:67:75:a5:4f:60:8c:12:94:d6:a2:c0:94: c2:e1:59:97:20:95:a0:c0:27:7e:83:c1:8d:6a:eb: a3:e7:91:ad:f5:26:1c:37:22:6a:28:4d:7e:ba:5b: f6:b6:40:aa:8d:32:af:6b:62:53:c2:f5:96:53:5a: 51:ef:ee:59:d3:da:31:98:03:18:e2:32:7d:f0:39: 13:ae:4e:3f:04:a0:4a:c4:d6:ab:43:fa:3c:98:be: c5:3c:19:31:b3:dd:e4:bb:63:62:8c:55:af:db:5e: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:49:B4:BD:0D:B5:08:BD:AA:0C:CE:03:8A:B2:3A:6B:CD:00:DB:84 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a2:7b:e4:3b:9c:b8:da:ad:97:b3:b9:ff:ef:5e:fb:13:fd: 6d:df:19:7e:21:b8:88:0c:c4:93:ee:25:16:c4:fe:3a:b1:bb: 53:c0:29:b2:bd:2d:ff:2b:ec:43:72:8c:b0:4d:8a:59:f9:f5: 77:18:22:ad:9d:1f:40:3d:fe:9e:e3:5b:87:a5:bb:ab:92:02: e0:26:55:b8:f9:88:10:47:d8:b3:0b:2e:65:d9:e9:e0:3f:7d: af:27:1f:44:aa:84:b2:86:3b:3b:e3:f8:e3:c4:b0:c0:e1:05: 38:c6:f7:6d:32:36:ed:25:bb:56:b2:82:b6:b7:42:f5:2f:e7: b6:e1:1b:7f:d6:0d:06:35:0e:d9:c7:15:90:bf:da:44:73:3e: 2b:84:a2:82:91:ba:9f:15:3c:03:5e:0d:be:80:99:bd:fa:81: ef:78:f9:62:b5:15:a9:2e:1e:48:cb:9e:26:06:0d:82:7e:a9: fd:9c:f3:17:f8:5f:a0:2d:1e:8f:78:77:c7:49:0c:20:b2:0e: 1d:c5:c2:a0:de:75:25:bb:4d:0e:56:eb:eb:4a:80:8d:da:61: 94:ae:72:bb:19:c6:99:6c:2f:35:33:6e:43:59:f6:1f:ec:58: 1f:64:07:42:6e:1c:35:13:c4:53:52:02:17:65:b6:98:21:80: 87:0e:90:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQ4gK67SL6oHFwWVoqKiYCu3b7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNTA2MTcwNDE2MDRaFw0yNTA2MjAwNzE0MDRaMDMxMTAvBgNV BAMTKDUzNDlCNEJEMERCNTA4QkRBQTBDQ0UwMzhBQjIzQTZCQ0QwMERCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqGKOqT43U1yKehIkPonmV1neo /8FA5FZxb6PQo6Om5XP2ZLeLfTXvEUyFQ+KqrXJ52YCj5qOogESJbDLDCqLoJcK2 AwPSQcFtlwlvpHF0Je2bJM561zmAxBGeJhBLd9NT1gTJOZUHZHgccDfkdale3QXA btYkaDB4NBzwdM6UYJ3pMKflhxaVeE4d9oNbmq7KvODwPrc+6Gd1pU9gjBKU1qLA lMLhWZcglaDAJ36DwY1q66Pnka31Jhw3ImooTX66W/a2QKqNMq9rYlPC9ZZTWlHv 7lnT2jGYAxjiMn3wOROuTj8EoErE1qtD+jyYvsU8GTGz3eS7Y2KMVa/bXvW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU0m0vQ21CL2qDM4DirI6a80A24QwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqie+Q7nLjarZezuf/vXvsT/W3fGX4huIgM xJPuJRbE/jqxu1PAKbK9Lf8r7ENyjLBNiln59XcYIq2dH0A9/p7jW4elu6uSAuAm Vbj5iBBH2LMLLmXZ6eA/fa8nH0SqhLKGOzvj+OPEsMDhBTjG920yNu0lu1aygra3 QvUv57bhG3/WDQY1DtnHFZC/2kRzPiuEooKRup8VPANeDb6Amb36ge94+WK1Faku HkjLniYGDYJ+qf2c8xf4X6AtHo94d8dJDCCyDh3FwqDedSW7TQ5W6+tKgI3aYZSu crsZxplsLzUzbkNZ9h/sWB9kB0JuHDUTxFNSAhdltpghgIcOkNk= -----END CERTIFICATE-----Generated at Tue Jun 17 12:39:55 2025 by rpki-client