$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: td4fFCJtX/L8lIrJzgl0H0ibWkEukGUHdIh7WIxq2HE= Subject key identifier: 66:68:9F:50:48:13:4B:E0:1D:6E:72:4F:FA:CB:ED:56:A3:C9:8C:67 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 37D1D39DD572CAD347312BDEA498A02007CA16EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 018A Signing time: Tue 05 Aug 2025 22:01:13 +0000 Manifest this update: Tue 05 Aug 2025 21:56:13 +0000 Manifest next update: Sat 09 Aug 2025 08:11:13 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: HU+/b1+hxhudvqFqFsQtBtJA9oW18xpXIXrSZCeCAfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d1:d3:9d:d5:72:ca:d3:47:31:2b:de:a4:98:a0:20:07:ca:16:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Aug 5 21:56:13 2025 GMT Not After : Aug 9 08:11:13 2025 GMT Subject: CN=66689F5048134BE01D6E724FFACBED56A3C98C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:2c:d5:3a:9a:fa:56:4f:00:ab:63:5e:53: 9d:7e:fc:d8:01:7a:21:24:17:82:25:29:6e:80:bb: 2d:26:2d:02:0e:da:32:a8:6a:42:f0:76:73:78:21: 7f:6a:cb:15:ae:e7:36:46:a8:ad:8a:b2:8e:16:70: ff:1c:38:93:82:45:07:63:c9:4d:41:ea:3a:5e:39: bf:72:81:99:a9:f3:24:07:76:24:9c:ae:99:92:21: d1:a3:d0:4e:35:bf:0c:48:12:17:7c:77:d1:ec:dd: 15:59:83:af:ae:c7:3f:63:6c:a5:f5:a6:b9:58:fb: d7:62:f5:8e:72:4f:8f:56:96:33:08:c6:76:24:23: 51:96:96:d4:12:1e:95:d7:ba:05:f4:78:bd:5d:04: aa:eb:e8:dd:a6:32:9f:63:a0:87:fa:07:c1:8e:c1: fc:90:5a:8f:f8:51:93:26:ae:90:65:6e:51:de:c9: e1:6d:87:86:7a:62:da:a4:6b:fb:42:8b:ec:a8:86: 04:38:5c:ee:7a:20:33:1d:f0:73:b8:2f:2c:2f:dc: af:72:ea:42:c5:30:a1:71:79:9f:99:8a:69:ad:71: e5:77:a2:bc:86:36:3a:b0:62:74:32:3e:97:ff:d8: c0:19:11:1f:ae:2a:59:0e:00:d3:dc:12:53:33:e5: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:68:9F:50:48:13:4B:E0:1D:6E:72:4F:FA:CB:ED:56:A3:C9:8C:67 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:33:f1:8f:35:07:67:91:a3:87:0d:29:13:12:bd:41:60:20: 08:43:2a:49:58:77:be:62:fb:b4:67:84:1c:c3:66:0e:5f:98: ce:9f:de:7b:0c:c0:42:b1:5e:5a:82:2c:38:08:d1:81:27:e6: cc:c1:e7:db:8f:5a:da:f0:3c:fb:eb:9c:ed:c9:36:43:67:3e: 70:fb:98:56:a4:a2:8c:2d:d7:55:33:65:e3:12:eb:4d:8a:95: f7:08:24:63:69:c7:69:c4:f8:8e:3a:ff:01:2b:52:b1:c7:84: b6:d9:5f:c2:d1:03:5a:9f:e3:b1:87:ac:f2:a5:a1:7f:71:ba: 5c:84:bb:01:dc:67:ac:f0:71:73:70:6c:7b:07:db:d9:78:e9: c2:10:61:ed:c7:5e:12:38:43:4a:dd:11:82:3a:3b:1b:2a:f6: 74:24:65:eb:48:b8:b4:07:cd:c3:9a:fe:c2:c5:af:ee:bb:fd: 97:3e:46:33:12:64:c2:ac:ee:a1:42:19:98:d8:72:4e:af:b7: 03:94:1b:6b:45:83:df:d2:20:9a:09:fe:c3:46:89:59:77:a3: 2d:e1:16:64:d7:0b:93:2c:ee:f4:44:bd:46:3d:16:8e:cd:70: 28:5b:e0:63:b3:9c:fd:00:c7:17:16:3a:d4:0b:95:46:0e:84: 41:70:e8:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9HTndVyytNHMSvepJigIAfKFuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNTA4MDUyMTU2MTNaFw0yNTA4MDkwODExMTNaMDMxMTAvBgNV BAMTKDY2Njg5RjUwNDgxMzRCRTAxRDZFNzI0RkZBQ0JFRDU2QTNDOThDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/SzVOpr6Vk8Aq2NeU51+/NgB eiEkF4IlKW6Auy0mLQIO2jKoakLwdnN4IX9qyxWu5zZGqK2Kso4WcP8cOJOCRQdj yU1B6jpeOb9ygZmp8yQHdiScrpmSIdGj0E41vwxIEhd8d9Hs3RVZg6+uxz9jbKX1 prlY+9di9Y5yT49WljMIxnYkI1GWltQSHpXXugX0eL1dBKrr6N2mMp9joIf6B8GO wfyQWo/4UZMmrpBlblHeyeFth4Z6Ytqka/tCi+yohgQ4XO56IDMd8HO4Lywv3K9y 6kLFMKFxeZ+ZimmtceV3oryGNjqwYnQyPpf/2MAZER+uKlkOANPcElMz5WF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmifUEgTS+AdbnJP+svtVqPJjGcwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUz8Y81B2eRo4cNKRMSvUFgIAhDKklYd75i +7RnhBzDZg5fmM6f3nsMwEKxXlqCLDgI0YEn5szB59uPWtrwPPvrnO3JNkNnPnD7 mFakoowt11UzZeMS602KlfcIJGNpx2nE+I46/wErUrHHhLbZX8LRA1qf47GHrPKl oX9xulyEuwHcZ6zwcXNwbHsH29l46cIQYe3HXhI4Q0rdEYI6Oxsq9nQkZetIuLQH zcOa/sLFr+67/Zc+RjMSZMKs7qFCGZjYck6vtwOUG2tFg9/SIJoJ/sNGiVl3oy3h FmTXC5Ms7vREvUY9Fo7NcChb4GOznP0AxxcWOtQLlUYOhEFw6Dc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:36 2025 by rpki-client