$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: Wmx0JFaBn63iQ6rtnNZRhHMBQMr9t1hW0jEExbgRu94= Subject key identifier: 07:20:77:7E:BC:F9:D4:68:F0:3A:3D:35:C0:50:1F:D7:68:BE:86:71 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 2E704AB13AE341DF6A10167329FDCD007D18066D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 0370 Signing time: Fri 08 Aug 2025 05:31:10 +0000 Manifest this update: Fri 08 Aug 2025 05:26:10 +0000 Manifest next update: Mon 11 Aug 2025 12:02:10 +0000 Files and hashes: 1: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) 2: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) 3: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) 4: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: DswrGTwzbFS31zSGZ1XJwfPPh8vDgiStILUSKHD6kzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 12:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:70:4a:b1:3a:e3:41:df:6a:10:16:73:29:fd:cd:00:7d:18:06:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Aug 8 05:26:10 2025 GMT Not After : Aug 11 12:02:10 2025 GMT Subject: CN=0720777EBCF9D468F03A3D35C0501FD768BE8671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cb:55:b8:15:68:2e:49:e6:b6:59:0b:60:fb: c0:a4:a8:30:69:f8:e3:2b:55:ba:6a:03:c3:09:49: 2f:eb:a2:17:e8:cb:33:50:d3:b3:73:ca:66:c6:62: 01:57:9e:70:43:ef:d8:4f:98:48:e1:90:5f:26:e9: f4:7e:a5:4b:a4:4d:b1:63:a1:3c:fa:20:d0:00:df: 60:c2:8e:b9:ea:a2:ce:c6:7e:01:03:27:7d:9a:4a: af:36:5b:11:9b:20:a2:10:16:08:7a:3b:0a:ed:c1: aa:1d:a7:ce:e8:85:4a:40:2e:24:71:99:1a:f2:94: a7:56:cf:2d:4c:be:d1:ab:2b:c3:e0:b6:ff:8a:4b: 83:92:02:5c:98:ad:41:4f:35:85:a0:59:1d:8b:9d: b1:62:28:e2:de:d6:8b:31:5e:b4:28:75:0f:a4:ac: ad:74:eb:52:9a:c5:80:c5:97:20:22:0e:b7:f9:22: a6:27:2e:9c:2a:92:d8:a6:2c:bd:ec:e7:9a:fe:a3: fd:7f:bc:ef:dc:72:eb:aa:ba:ff:76:f3:6b:cd:4b: e2:39:67:fb:f2:37:39:f1:3b:e1:d3:4f:1d:21:36: 90:43:c8:c1:3c:cb:17:a1:a8:6a:e9:15:a0:69:ea: 26:fe:76:0e:9c:13:ce:41:ec:81:8e:7d:5e:b9:0b: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:20:77:7E:BC:F9:D4:68:F0:3A:3D:35:C0:50:1F:D7:68:BE:86:71 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b4:1f:5f:3d:28:c4:77:a9:9a:0e:98:1f:b0:4c:e6:bb:42: 01:9b:f7:63:48:7d:9f:92:d9:37:5d:5a:14:38:f8:3a:2f:24: f4:66:e7:4f:3f:c5:9d:a3:4a:f5:55:72:84:57:5b:7a:be:58: 5b:23:eb:e0:77:59:92:c8:bd:f9:ff:c0:23:85:85:9c:4c:f2: a9:3b:6f:12:85:66:a6:2d:c8:89:76:5b:2a:53:ba:81:58:af: 68:60:fb:dd:65:aa:cc:be:b0:c3:38:21:4c:7d:75:d6:4f:82: 1c:14:bb:67:c8:2b:08:6c:98:c6:5a:3c:68:93:65:59:37:58: 52:03:ca:49:59:77:13:14:96:af:d7:64:b7:40:90:69:87:57: 1a:03:74:62:6f:27:a4:f3:67:cf:ff:81:bd:82:06:73:a7:d8: 53:a5:5c:1c:0d:c7:c8:59:51:a2:bd:22:58:1c:1d:16:a9:f9: 87:0c:49:2f:79:b8:c1:39:3c:8b:cb:f3:4e:d8:91:84:dd:f6: 72:a8:03:a6:8f:2b:55:31:04:07:c9:b4:71:ab:02:89:e5:d2: 81:59:ac:e4:a6:0f:a9:ae:b2:35:19:e2:8a:5d:62:f1:7c:a4: ac:4e:16:20:b1:64:e2:3c:a1:3b:db:8b:fe:13:25:f7:e6:7d: 89:4f:c9:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnBKsTrjQd9qEBZzKf3NAH0YBm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTA4MDgwNTI2MTBaFw0yNTA4MTExMjAyMTBaMDMxMTAvBgNV BAMTKDA3MjA3NzdFQkNGOUQ0NjhGMDNBM0QzNUMwNTAxRkQ3NjhCRTg2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDny1W4FWguSea2WQtg+8CkqDBp +OMrVbpqA8MJSS/rohfoyzNQ07NzymbGYgFXnnBD79hPmEjhkF8m6fR+pUukTbFj oTz6INAA32DCjrnqos7GfgEDJ32aSq82WxGbIKIQFgh6Owrtwaodp87ohUpALiRx mRrylKdWzy1MvtGrK8Pgtv+KS4OSAlyYrUFPNYWgWR2LnbFiKOLe1osxXrQodQ+k rK1061KaxYDFlyAiDrf5IqYnLpwqktimLL3s55r+o/1/vO/ccuuquv9282vNS+I5 Z/vyNznxO+HTTx0hNpBDyME8yxehqGrpFaBp6ib+dg6cE85B7IGOfV65CxlJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUByB3frz51GjwOj01wFAf12i+hnEwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGa0H189KMR3qZoOmB+wTOa7QgGb92NIfZ+S 2TddWhQ4+DovJPRm508/xZ2jSvVVcoRXW3q+WFsj6+B3WZLIvfn/wCOFhZxM8qk7 bxKFZqYtyIl2WypTuoFYr2hg+91lqsy+sMM4IUx9ddZPghwUu2fIKwhsmMZaPGiT ZVk3WFIDyklZdxMUlq/XZLdAkGmHVxoDdGJvJ6TzZ8//gb2CBnOn2FOlXBwNx8hZ UaK9IlgcHRap+YcMSS95uME5PIvL807YkYTd9nKoA6aPK1UxBAfJtHGrAonl0oFZ rOSmD6musjUZ4opdYvF8pKxOFiCxZOI8oTvbi/4TJffmfYlPyQc= -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:32 2025 by rpki-client