$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: P6O8BoNvREv5T05mzW1nKg26V297RZ9sP/jV/zqpZRE= Subject key identifier: 7B:3F:1A:10:B6:25:EC:59:AB:79:AF:BC:2A:77:D5:03:76:E1:CB:AF Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 0D66C9D92DCCAEB456BDB583EDEA116DBAC69AEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 049D Signing time: Thu 08 May 2025 19:31:50 +0000 Manifest this update: Thu 08 May 2025 19:26:50 +0000 Manifest next update: Sun 11 May 2025 19:52:50 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: cOFOsJdLcfo38btAKL6WMN04/+ITx9hoBBSqno7kn8I=) 2: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=) 3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:66:c9:d9:2d:cc:ae:b4:56:bd:b5:83:ed:ea:11:6d:ba:c6:9a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: May 8 19:26:50 2025 GMT Not After : May 11 19:52:50 2025 GMT Subject: CN=7B3F1A10B625EC59AB79AFBC2A77D50376E1CBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:55:d3:44:32:ba:0e:01:e6:26:1f:52:4b: ae:a3:4e:ce:7d:5d:ff:67:78:4d:65:9f:b7:51:03: 28:42:d5:12:eb:7f:c3:ee:f1:9b:30:2f:a9:b9:54: d3:34:e4:34:d7:ca:ea:f6:ac:ca:7d:57:6f:09:bd: 34:9a:ed:d1:e9:34:c3:39:d0:7b:f1:51:2a:3e:3d: d2:e1:0b:3c:10:7b:29:1c:8d:83:4c:fa:5f:23:07: 0e:27:69:05:bd:64:75:f1:07:68:1a:0b:02:aa:32: e9:c7:e3:5a:86:64:81:7e:f2:97:e3:bf:24:c6:9a: f2:ed:09:08:62:eb:b6:3b:4d:7e:90:b8:2b:e4:57: 22:32:c4:7a:64:2c:21:87:e1:70:38:d2:04:81:a6: 73:a9:91:c3:60:86:62:dc:c5:da:30:8a:53:53:b0: 07:db:ac:f6:f7:df:c4:7f:ad:ff:d1:43:25:1d:63: 50:d0:3f:6f:57:0f:32:be:39:3b:87:be:d2:81:d8: 6d:f3:8b:f1:df:82:a9:c6:4a:e1:62:ff:84:65:60: 52:bb:4f:cc:8c:25:90:43:5f:be:2d:17:3e:ef:23: c3:c3:81:9b:93:67:32:43:2c:14:e8:e4:63:2a:72: 2d:a3:e4:1a:67:8a:1c:87:13:14:c0:1e:95:ca:69: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3F:1A:10:B6:25:EC:59:AB:79:AF:BC:2A:77:D5:03:76:E1:CB:AF X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f4:29:51:d4:b9:af:67:df:94:53:d3:d3:57:a1:9a:3f:fb: 89:6b:a8:60:3b:6e:c4:aa:ff:6d:1b:34:65:64:74:d6:70:5c: 76:83:4b:56:13:21:e9:8a:4f:74:fe:78:88:8b:b9:cb:bb:ca: 64:a2:04:1d:6d:e0:7e:dc:b6:04:10:75:95:c3:b6:b4:fc:c5: 98:25:6d:70:86:3f:d2:3a:9a:68:60:9a:16:27:f6:9c:bf:33: 46:35:0a:46:e9:13:b4:cb:03:01:99:ee:9f:31:cb:ac:60:47: be:49:63:ba:31:a8:ff:a9:19:a1:a7:7e:04:ec:65:04:5e:78: fc:79:f9:7f:2c:dc:23:ab:79:4c:be:0d:b1:8a:43:f9:14:a4: a5:2d:d8:08:5e:f2:8d:db:ae:67:2d:0c:50:84:51:2a:aa:58: 0c:d2:17:09:16:da:c1:fd:9f:9e:bf:7a:c5:a7:ae:e9:cb:42: 33:18:ff:76:40:4f:eb:c5:12:b1:d2:b8:a6:72:7b:a0:97:a8: 1c:31:fe:e1:73:11:04:70:5f:db:4a:35:0d:91:85:3c:6e:0c: 86:a3:ed:00:c1:0d:99:31:36:c6:b0:61:8f:64:be:9c:44:7c: 2f:01:f7:27:6c:fe:4b:2b:f6:24:78:cb:4b:c5:03:cd:fa:ff: 44:f7:a8:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWbJ2S3MrrRWvbWD7eoRbbrGmu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA1MDgxOTI2NTBaFw0yNTA1MTExOTUyNTBaMDMxMTAvBgNV BAMTKDdCM0YxQTEwQjYyNUVDNTlBQjc5QUZCQzJBNzdENTAzNzZFMUNCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6FXTRDK6DgHmJh9SS66jTs59 Xf9neE1ln7dRAyhC1RLrf8Pu8ZswL6m5VNM05DTXyur2rMp9V28JvTSa7dHpNMM5 0HvxUSo+PdLhCzwQeykcjYNM+l8jBw4naQW9ZHXxB2gaCwKqMunH41qGZIF+8pfj vyTGmvLtCQhi67Y7TX6QuCvkVyIyxHpkLCGH4XA40gSBpnOpkcNghmLcxdowilNT sAfbrPb338R/rf/RQyUdY1DQP29XDzK+OTuHvtKB2G3zi/HfgqnGSuFi/4RlYFK7 T8yMJZBDX74tFz7vI8PDgZuTZzJDLBTo5GMqci2j5BpnihyHExTAHpXKaaopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUez8aELYl7Fmrea+8KnfVA3bhy68wHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFP0KVHUua9n35RT09NXoZo/+4lrqGA7bsSq /20bNGVkdNZwXHaDS1YTIemKT3T+eIiLucu7ymSiBB1t4H7ctgQQdZXDtrT8xZgl bXCGP9I6mmhgmhYn9py/M0Y1CkbpE7TLAwGZ7p8xy6xgR75JY7oxqP+pGaGnfgTs ZQReePx5+X8s3COreUy+DbGKQ/kUpKUt2Ahe8o3brmctDFCEUSqqWAzSFwkW2sH9 n56/esWnrunLQjMY/3ZAT+vFErHSuKZye6CXqBwx/uFzEQRwX9tKNQ2RhTxuDIaj 7QDBDZkxNsawYY9kvpxEfC8B9yds/ksr9iR4y0vFA836/0T3qEM= -----END CERTIFICATE-----Generated at Sat May 10 05:14:00 2025 by rpki-client