$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: JwbywhFdovhle/IqMqYf6ExdmAXK6U4ux2TH+iRbWfY= Subject key identifier: 27:F9:1B:E8:81:66:86:A8:1E:20:6B:4E:D9:B2:2D:1E:D0:1F:C1:D6 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 4F886EB8D34617997D517F0964E813446AC2C97A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 0397 Signing time: Tue 04 Nov 2025 01:51:12 +0000 Manifest this update: Tue 04 Nov 2025 01:46:12 +0000 Manifest next update: Fri 07 Nov 2025 11:04:12 +0000 Files and hashes: 1: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: LrXyKAqwVM8v6cV51YsnCjaNeivWA14/YjzuZLp2YdE=) 2: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) 3: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) 4: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:88:6e:b8:d3:46:17:99:7d:51:7f:09:64:e8:13:44:6a:c2:c9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Nov 4 01:46:12 2025 GMT Not After : Nov 7 11:04:12 2025 GMT Subject: CN=27F91BE8816686A81E206B4ED9B22D1ED01FC1D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:9a:61:cd:7d:dd:37:f4:0a:2e:70:9f:35: b9:69:48:bf:8c:ac:87:35:3a:35:0d:e0:ec:7b:f2: 4f:56:96:e2:f3:12:ef:88:ea:07:05:97:7d:a6:04: 10:e5:16:73:88:57:f2:fe:cc:89:5e:9c:a1:30:1a: 70:26:46:f0:7c:1b:2a:2a:aa:c5:7b:b6:63:81:74: 81:d9:6b:e7:ac:ee:83:f1:66:08:1d:01:be:06:f9: ef:53:f2:fd:66:d7:02:94:90:df:09:0f:a9:7d:94: 1b:2a:33:9b:cd:9b:88:14:66:3f:fc:7f:29:0e:9b: 73:08:db:df:b6:ea:51:dd:17:bf:88:d8:04:50:fb: f1:0b:dd:7f:84:46:cf:7a:ff:91:f9:f1:c3:a7:39: b5:b5:0a:b6:07:a0:3a:73:c3:f7:1e:25:c1:6f:e0: a2:ab:a6:9a:d9:4d:e3:be:97:2b:c0:06:eb:cb:76: 58:de:1d:e6:e3:2b:89:02:40:e6:1d:e3:68:6e:db: 82:44:63:48:a4:0c:78:41:d5:28:89:b0:9d:ea:71: 53:ff:f9:4d:d8:47:fa:ec:83:b6:6c:7c:fa:13:df: 22:d8:ed:dc:ca:d7:25:83:45:e0:c7:aa:b2:7b:18: a3:f9:9c:06:3a:c3:b6:9a:91:64:59:7c:6f:e5:b1: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F9:1B:E8:81:66:86:A8:1E:20:6B:4E:D9:B2:2D:1E:D0:1F:C1:D6 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:6e:0d:9b:a8:de:eb:e9:55:54:be:60:86:e3:b6:0f:5d:34: 8c:95:fc:b1:b4:18:77:c1:11:63:cb:94:33:f0:c7:5d:9a:78: d3:29:b1:9e:f7:66:10:87:e4:b6:8e:87:84:4b:17:5d:05:46: 18:82:20:1d:ea:d7:1a:76:a7:33:39:12:2c:29:57:54:04:3f: a8:bb:b8:27:a4:1a:77:81:c7:79:d1:c7:5d:cd:88:cd:bb:14: 12:2a:a0:44:a0:df:f7:94:90:56:ca:60:fa:d5:71:d4:68:a1: 9f:e8:b9:bf:19:1a:87:4f:d6:24:19:7c:76:af:dc:d1:0e:03: f2:8b:fa:fd:7a:42:d3:cb:fe:58:1a:f7:77:bb:de:02:3b:41: 33:7b:22:fd:69:8f:1f:0c:18:e9:e0:27:7d:1d:18:a5:29:d5: 44:77:58:f9:e8:eb:ec:40:57:93:eb:40:6e:fb:da:86:21:f5: dc:07:72:6f:cc:78:e4:71:5d:b0:00:8c:27:4c:36:99:b9:be: 1e:85:43:9f:34:9c:ac:8e:68:dc:48:2c:26:1d:97:35:15:0a: 1f:a3:9e:07:dc:f8:79:55:8f:23:3b:6c:93:57:1b:05:02:34: b3:a8:9b:fb:35:22:9b:87:d2:b7:bc:7c:ba:a2:e4:41:41:d8: 7f:94:19:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4huuNNGF5l9UX8JZOgTRGrCyXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTExMDQwMTQ2MTJaFw0yNTExMDcxMTA0MTJaMDMxMTAvBgNV BAMTKDI3RjkxQkU4ODE2Njg2QTgxRTIwNkI0RUQ5QjIyRDFFRDAxRkMxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+ZphzX3dN/QKLnCfNblpSL+M rIc1OjUN4Ox78k9WluLzEu+I6gcFl32mBBDlFnOIV/L+zIlenKEwGnAmRvB8Gyoq qsV7tmOBdIHZa+es7oPxZggdAb4G+e9T8v1m1wKUkN8JD6l9lBsqM5vNm4gUZj/8 fykOm3MI29+26lHdF7+I2ARQ+/EL3X+ERs96/5H58cOnObW1CrYHoDpzw/ceJcFv 4KKrpprZTeO+lyvABuvLdljeHebjK4kCQOYd42hu24JEY0ikDHhB1SiJsJ3qcVP/ +U3YR/rsg7ZsfPoT3yLY7dzK1yWDReDHqrJ7GKP5nAY6w7aakWRZfG/lsTLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ/kb6IFmhqgeIGtO2bItHtAfwdYwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZuDZuo3uvpVVS+YIbjtg9dNIyV/LG0GHfB EWPLlDPwx12aeNMpsZ73ZhCH5LaOh4RLF10FRhiCIB3q1xp2pzM5EiwpV1QEP6i7 uCekGneBx3nRx13NiM27FBIqoESg3/eUkFbKYPrVcdRooZ/oub8ZGodP1iQZfHav 3NEOA/KL+v16QtPL/lga93e73gI7QTN7Iv1pjx8MGOngJ30dGKUp1UR3WPno6+xA V5PrQG772oYh9dwHcm/MeORxXbAAjCdMNpm5vh6FQ580nKyOaNxILCYdlzUVCh+j ngfc+HlVjyM7bJNXGwUCNLOom/s1IpuH0re8fLqi5EFB2H+UGWU= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:38 2025 by rpki-client