$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: PSFPkCA+OUAEQ+GKBQIms92MP6wJ0RTo3loQWG8+dkU= Subject key identifier: 0A:C4:B9:B3:F8:A3:E3:88:E6:1C:97:20:C2:B4:FE:D9:36:83:6B:7A Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 1CBD762525D8BC558BB5A2E0F6AA62D3204182EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 04E6 Signing time: Mon 20 Oct 2025 03:51:54 +0000 Manifest this update: Mon 20 Oct 2025 03:46:54 +0000 Manifest next update: Thu 23 Oct 2025 13:27:54 +0000 Files and hashes: 1: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=) 2: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=) 3: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: HHUBt3xjCm/Vl47d9xlsPB09y7Rvh2QusN7FqjKT/e0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 13:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bd:76:25:25:d8:bc:55:8b:b5:a2:e0:f6:aa:62:d3:20:41:82:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Oct 20 03:46:54 2025 GMT Not After : Oct 23 13:27:54 2025 GMT Subject: CN=0AC4B9B3F8A3E388E61C9720C2B4FED936836B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:40:0c:f0:dc:c5:37:4f:e5:6c:3a:84:2a: 8d:51:63:db:2c:41:43:50:5a:35:81:54:bb:28:55: 49:eb:b2:de:53:d6:ac:ef:bc:a9:ec:2a:db:c2:28: 93:09:49:17:f1:dc:6d:9a:1c:a3:01:33:79:73:2e: e3:6f:67:86:d0:b4:dd:d5:cb:ce:86:8c:0e:0f:50: a1:7e:2a:8c:e7:7f:39:58:8a:8a:f8:5a:4b:31:e3: 39:ca:f4:80:d0:36:7a:7c:90:1f:66:1d:b1:80:ea: 04:32:79:15:b7:ef:cd:f6:f7:9e:5f:35:82:5d:7a: c3:8d:7a:fa:4e:ad:5f:cc:57:a8:e1:81:26:ea:f7: db:7e:47:1a:7a:1d:65:e5:88:82:8c:d5:12:bd:bb: 7d:b0:ca:32:d8:73:f4:fe:44:01:fb:76:28:16:e1: 25:f4:1b:5c:5a:a0:bf:49:7d:a7:12:1c:eb:bc:fb: cf:64:d5:05:09:98:5d:4e:f2:ac:ed:0c:cd:ef:3e: 09:4f:5c:3d:90:47:60:6b:cb:5c:aa:51:13:c4:00: 2f:95:38:60:82:c8:15:c2:f8:44:5f:c7:1b:61:9b: 86:ad:43:4e:1a:60:47:4c:44:7a:3b:69:d4:a1:f6: 3f:29:98:1a:d6:f0:d4:8b:3c:34:01:08:ae:1a:aa: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C4:B9:B3:F8:A3:E3:88:E6:1C:97:20:C2:B4:FE:D9:36:83:6B:7A X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:5c:0d:3f:5b:95:57:60:a6:72:bc:83:0e:13:dc:c9:b0:fb: 97:70:33:32:98:bd:7a:42:d8:0a:92:7b:7d:7b:7a:1d:9d:72: 38:0f:56:92:d3:a3:dd:ad:6a:b3:47:3c:10:72:92:d3:fb:fc: 69:61:75:5a:33:fc:cd:3f:6f:c4:68:5b:e3:80:e0:21:dd:e2: b5:e6:43:0b:e0:85:10:6b:d4:39:2f:b2:69:23:c3:47:b9:90: 07:be:35:30:6a:68:2c:77:19:ea:7e:95:28:1f:99:ce:ad:2b: d6:21:ce:bf:53:d3:1a:1c:df:95:c4:4e:aa:a7:fd:1c:33:a2: d1:3c:38:39:1a:5c:0e:67:8c:41:6a:fd:ba:b0:cc:f5:c4:d5: e3:69:f7:42:cd:35:cd:42:09:bd:5a:2d:de:fc:1c:2a:8d:18: 6a:54:7f:04:22:a4:b3:29:78:37:cc:b0:48:9b:bb:58:7f:a6: 74:2d:a4:e0:21:51:2e:9c:ae:f7:b4:3e:46:61:3f:5f:2f:6c: be:e5:06:2f:ee:c7:da:d1:8a:b6:a3:f1:e5:a4:0b:04:dd:ee: 56:3c:76:24:fc:31:a5:f0:96:88:58:c6:ec:af:c0:5e:4f:bc: 77:fb:22:ec:71:b7:53:25:3e:19:f7:ea:49:8c:66:db:05:9f: d5:49:3d:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHL12JSXYvFWLtaLg9qpi0yBBguswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTEwMjAwMzQ2NTRaFw0yNTEwMjMxMzI3NTRaMDMxMTAvBgNV BAMTKDBBQzRCOUIzRjhBM0UzODhFNjFDOTcyMEMyQjRGRUQ5MzY4MzZCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/f0AM8NzFN0/lbDqEKo1RY9ss QUNQWjWBVLsoVUnrst5T1qzvvKnsKtvCKJMJSRfx3G2aHKMBM3lzLuNvZ4bQtN3V y86GjA4PUKF+KoznfzlYior4Wksx4znK9IDQNnp8kB9mHbGA6gQyeRW37832955f NYJdesONevpOrV/MV6jhgSbq99t+Rxp6HWXliIKM1RK9u32wyjLYc/T+RAH7digW 4SX0G1xaoL9JfacSHOu8+89k1QUJmF1O8qztDM3vPglPXD2QR2Bry1yqURPEAC+V OGCCyBXC+ERfxxthm4atQ04aYEdMRHo7adSh9j8pmBrW8NSLPDQBCK4aqoW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsS5s/ij44jmHJcgwrT+2TaDa3owHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZcDT9blVdgpnK8gw4T3Mmw+5dwMzKYvXpC 2AqSe317eh2dcjgPVpLTo92tarNHPBByktP7/GlhdVoz/M0/b8RoW+OA4CHd4rXm QwvghRBr1Dkvsmkjw0e5kAe+NTBqaCx3Gep+lSgfmc6tK9Yhzr9T0xoc35XETqqn /RwzotE8ODkaXA5njEFq/bqwzPXE1eNp90LNNc1CCb1aLd78HCqNGGpUfwQipLMp eDfMsEibu1h/pnQtpOAhUS6crve0PkZhP18vbL7lBi/ux9rRiraj8eWkCwTd7lY8 diT8MaXwlohYxuyvwF5PvHf7Iuxxt1MlPhn36kmMZtsFn9VJPZ4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:55 2025 by rpki-client