$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: bhApOd+46AOD3bG0sWLhljN4b35/NawPn2UosAFnQc0= Subject key identifier: 0A:80:EB:0A:1F:85:92:B7:F3:9D:A7:6B:FD:B5:55:75:DE:28:CD:D4 Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 69304459DBE6E7AF5E49B9B893F098B87729F9CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 04CC Signing time: Fri 22 Aug 2025 14:01:54 +0000 Manifest this update: Fri 22 Aug 2025 13:56:54 +0000 Manifest next update: Mon 25 Aug 2025 20:28:54 +0000 Files and hashes: 1: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=) 2: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=) 3: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: /GDw67svkdP4BlMDQ3lJEH2AbOeFnuUXZp/Bkd0kUBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:30:44:59:db:e6:e7:af:5e:49:b9:b8:93:f0:98:b8:77:29:f9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Aug 22 13:56:54 2025 GMT Not After : Aug 25 20:28:54 2025 GMT Subject: CN=0A80EB0A1F8592B7F39DA76BFDB55575DE28CDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0a:31:e0:7c:d8:db:c7:07:79:2e:ac:71:6c: 44:49:47:f3:95:55:ae:3a:79:8b:59:26:f6:ad:3f: 6d:fd:d9:5b:fa:6b:de:c8:6a:c5:cd:e2:7e:14:c5: bf:4c:33:5a:83:9a:f3:34:f8:62:c7:69:43:d2:c5: 9f:6a:0f:52:e9:03:55:f3:08:4b:d8:4a:70:20:bb: dc:8f:62:6d:26:91:3e:c0:ee:a2:c2:81:92:b7:f5: 6e:0b:11:6c:1d:ad:62:e5:7e:f6:9b:a9:b6:54:a0: 28:b6:c9:69:90:99:74:a6:e4:8a:43:f6:c0:18:8d: 5f:6e:7e:3d:fe:e6:a1:d1:8c:8c:99:08:fd:46:1d: c9:6c:00:a6:0f:41:16:8b:62:37:40:52:07:15:48: f8:2b:03:0d:19:d5:65:9e:6e:ff:c2:9f:9e:c4:57: db:fc:04:f6:0a:55:2b:d3:98:32:5d:af:44:84:1b: cd:7a:26:58:b6:b4:12:d9:d4:25:26:c0:6c:50:7e: ee:ce:a3:9f:4e:85:fc:f6:ed:99:5a:34:24:c8:e2: a8:08:f4:23:bb:4e:2c:41:ca:3b:ad:58:6a:de:99: 97:36:28:35:24:8b:7e:8e:73:4d:1c:db:ae:50:2c: bc:ff:6b:e1:da:2b:4b:6f:f8:8c:1a:07:ec:0a:73: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:80:EB:0A:1F:85:92:B7:F3:9D:A7:6B:FD:B5:55:75:DE:28:CD:D4 X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4f:2c:e3:7b:f0:be:fc:f8:52:00:69:03:dc:97:9b:a0:ce: 19:8f:cf:52:2d:ce:7d:ec:3c:dd:7c:97:a1:98:d9:13:99:b1: 79:45:a0:1a:2c:e1:a0:62:45:08:0a:d4:c6:bf:97:75:0b:68: 32:ec:00:a6:06:d8:93:d6:f0:d5:42:dd:45:04:4a:c6:20:2d: e6:6d:8c:9b:bf:9f:47:6f:f4:3e:88:58:ff:26:44:8b:1d:6e: 81:b7:fe:01:e0:d5:5c:69:9d:0a:9d:30:28:c5:83:2c:a8:66: f6:bf:32:28:84:8f:af:f8:38:ee:1a:8c:01:48:06:5a:c4:ff: d1:f4:4b:44:f3:27:f6:90:16:a7:8b:3e:6d:b9:a0:50:61:de: ea:d6:36:94:6c:ce:b9:60:ac:c5:91:6e:40:6d:7a:90:81:f5: 78:d2:b0:32:14:94:1e:94:24:7c:1b:1d:d2:58:16:d9:9e:18: 18:b0:34:a7:33:a0:8d:b4:69:c1:b2:78:db:e9:48:42:2d:18: f3:43:fc:a8:bb:6a:a2:8c:bd:45:42:e6:6e:14:6b:c3:31:fb: 4a:ff:41:bc:fe:10:6b:83:f1:6e:f9:6f:9a:cc:e3:98:49:ff: 26:62:40:c1:ac:b9:0c:c2:21:4f:f0:ce:95:0d:1e:a1:3b:7e: 7f:5f:74:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTBEWdvm569eSbm4k/CYuHcp+c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA4MjIxMzU2NTRaFw0yNTA4MjUyMDI4NTRaMDMxMTAvBgNV BAMTKDBBODBFQjBBMUY4NTkyQjdGMzlEQTc2QkZEQjU1NTc1REUyOENERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpCjHgfNjbxwd5LqxxbERJR/OV Va46eYtZJvatP2392Vv6a97IasXN4n4Uxb9MM1qDmvM0+GLHaUPSxZ9qD1LpA1Xz CEvYSnAgu9yPYm0mkT7A7qLCgZK39W4LEWwdrWLlfvabqbZUoCi2yWmQmXSm5IpD 9sAYjV9ufj3+5qHRjIyZCP1GHclsAKYPQRaLYjdAUgcVSPgrAw0Z1WWebv/Cn57E V9v8BPYKVSvTmDJdr0SEG816Jli2tBLZ1CUmwGxQfu7Oo59Ohfz27ZlaNCTI4qgI 9CO7TixByjutWGremZc2KDUki36Oc00c265QLLz/a+HaK0tv+IwaB+wKc9CjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCoDrCh+Fkrfznadr/bVVdd4ozdQwHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZPLON78L78+FIAaQPcl5ugzhmPz1Itzn3s PN18l6GY2ROZsXlFoBos4aBiRQgK1Ma/l3ULaDLsAKYG2JPW8NVC3UUESsYgLeZt jJu/n0dv9D6IWP8mRIsdboG3/gHg1VxpnQqdMCjFgyyoZva/MiiEj6/4OO4ajAFI BlrE/9H0S0TzJ/aQFqeLPm25oFBh3urWNpRszrlgrMWRbkBtepCB9XjSsDIUlB6U JHwbHdJYFtmeGBiwNKczoI20acGyeNvpSEItGPND/Ki7aqKMvUVC5m4Ua8Mx+0r/ Qbz+EGuD8W75b5rM45hJ/yZiQMGsuQzCIU/wzpUNHqE7fn9fdBg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:57 2025 by rpki-client