$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: d+R6esnlduuO/jtvcsMEcdPdgVddPJgEPDaN7y//DCU= Subject key identifier: C4:29:48:17:99:4B:01:C3:D8:4C:22:A8:4F:01:66:59:43:B6:35:77 Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 1810065FCAB0C4F2022BF7AB800275CA9827E1F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 04B4 Signing time: Sun 29 Jun 2025 10:21:50 +0000 Manifest this update: Sun 29 Jun 2025 10:16:50 +0000 Manifest next update: Wed 02 Jul 2025 22:11:50 +0000 Files and hashes: 1: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=) 2: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: 4f6zZRSzgYGFUrwrsXytGgIRsx/pgBhZ8zF0mICBpyU=) 3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 22:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:10:06:5f:ca:b0:c4:f2:02:2b:f7:ab:80:02:75:ca:98:27:e1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Jun 29 10:16:50 2025 GMT Not After : Jul 2 22:11:50 2025 GMT Subject: CN=C4294817994B01C3D84C22A84F01665943B63577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:83:71:15:82:c3:0a:3f:6a:2c:45:1a:f0: 4f:35:d0:98:c8:67:9b:91:e5:22:82:52:9b:48:4e: 71:13:c8:38:31:79:47:8b:cb:a4:f4:08:b4:e2:b1: 88:82:27:60:7f:6f:f8:85:3c:05:fe:d5:b3:f6:68: 45:df:06:4e:c4:22:41:25:1f:45:d9:e6:9b:9c:23: ad:2b:23:4e:28:ac:df:57:1d:9d:1c:f5:9b:e2:70: 42:d4:3f:52:4c:27:f0:eb:6e:ad:1d:02:2c:5f:9d: e3:4c:73:88:ea:a3:05:fa:ba:e3:9d:7b:43:6b:24: 8e:9f:f1:40:e4:76:3e:be:8f:bd:31:05:a7:5d:36: da:19:b5:e2:b4:a7:d9:d2:eb:8c:1e:6c:a8:cd:23: 82:76:b5:fa:7a:53:06:7a:2f:81:f4:bf:a7:f6:8f: 58:1b:6c:fb:6d:fa:47:7f:d3:61:16:4d:f7:cf:d7: 76:a3:e1:36:5e:4f:2c:99:1c:5c:a2:b2:9e:61:bc: 3f:66:51:44:d4:38:90:38:4f:04:b5:f0:d7:4b:6b: 10:ed:8a:59:3d:06:61:e1:36:f5:b0:3c:bd:a1:9f: 51:5b:b8:c9:d2:0d:aa:99:01:c8:dd:89:6e:41:80: f8:6c:39:87:ab:63:77:e0:df:3b:93:f2:47:81:0b: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:29:48:17:99:4B:01:C3:D8:4C:22:A8:4F:01:66:59:43:B6:35:77 X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c0:4f:9f:39:b7:d9:96:cc:a8:60:4b:fa:90:80:b4:ea:3d: 31:89:39:a6:22:38:82:4d:59:35:62:4d:7d:04:35:53:76:5e: 49:c4:cc:57:d9:cb:45:16:5e:58:09:c2:94:7f:09:ad:d9:0f: 34:48:64:86:62:fc:bb:34:2c:f8:3f:4f:9a:e3:f2:22:28:86: c3:ac:36:5b:f5:6d:9f:d1:84:51:9e:fd:5a:9c:42:ab:16:80: 8a:d4:b9:33:e1:88:74:e8:fa:28:39:de:d7:cd:e4:f0:2d:44: 7e:9d:b2:c9:dd:ec:a1:04:29:6d:44:6b:3e:d7:20:32:61:9f: de:93:b0:40:73:28:23:3e:8e:ee:9d:d4:53:7d:f2:c7:91:8c: c8:d7:2c:e5:e5:2f:8f:eb:38:dd:e9:5b:32:2b:db:e1:32:00: 66:de:db:9b:6a:7e:c8:16:49:cf:4d:54:f3:a4:df:1c:1a:de: ed:14:a1:09:27:98:32:41:9e:29:cb:0a:30:a9:8c:9f:8c:ab: 4d:8f:21:08:33:25:20:ae:ba:15:09:c4:96:2c:25:91:f7:91: 5d:b7:2b:f1:d2:2c:ed:13:a4:60:ca:5c:95:ad:dd:01:06:4d: 8c:b6:0a:0c:9a:0c:35:e8:46:3d:6e:12:01:c5:11:84:6c:13: dd:82:a3:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBAGX8qwxPICK/ergAJ1ypgn4fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA2MjkxMDE2NTBaFw0yNTA3MDIyMjExNTBaMDMxMTAvBgNV BAMTKEM0Mjk0ODE3OTk0QjAxQzNEODRDMjJBODRGMDE2NjU5NDNCNjM1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFoNxFYLDCj9qLEUa8E810JjI Z5uR5SKCUptITnETyDgxeUeLy6T0CLTisYiCJ2B/b/iFPAX+1bP2aEXfBk7EIkEl H0XZ5pucI60rI04orN9XHZ0c9ZvicELUP1JMJ/Drbq0dAixfneNMc4jqowX6uuOd e0NrJI6f8UDkdj6+j70xBaddNtoZteK0p9nS64webKjNI4J2tfp6UwZ6L4H0v6f2 j1gbbPtt+kd/02EWTffP13aj4TZeTyyZHFyisp5hvD9mUUTUOJA4TwS18NdLaxDt ilk9BmHhNvWwPL2hn1FbuMnSDaqZAcjdiW5BgPhsOYerY3fg3zuT8keBC0L/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxClIF5lLAcPYTCKoTwFmWUO2NXcwHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbAT585t9mWzKhgS/qQgLTqPTGJOaYiOIJN WTViTX0ENVN2XknEzFfZy0UWXlgJwpR/Ca3ZDzRIZIZi/Ls0LPg/T5rj8iIohsOs Nlv1bZ/RhFGe/VqcQqsWgIrUuTPhiHTo+ig53tfN5PAtRH6dssnd7KEEKW1Eaz7X IDJhn96TsEBzKCM+ju6d1FN98seRjMjXLOXlL4/rON3pWzIr2+EyAGbe25tqfsgW Sc9NVPOk3xwa3u0UoQknmDJBninLCjCpjJ+Mq02PIQgzJSCuuhUJxJYsJZH3kV23 K/HSLO0TpGDKXJWt3QEGTYy2CgyaDDXoRj1uEgHFEYRsE92Co44= -----END CERTIFICATE-----Generated at Mon Jun 30 17:27:21 2025 by rpki-client