$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft File: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json) Hash identifier: xykjNUjLVR7ytCsCZ49FyFB3Xd3Cu/Zdv9OvyY1ogmo= Subject key identifier: 86:52:21:AD:CE:B4:70:DB:06:6D:BA:D3:EF:20:C9:13:DD:80:A8:E7 Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Certificate serial: 145A03DAA5E4EC9C2B1450743A9559D0C1E8F9FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft Manifest number: 9A Signing time: Thu 03 Jul 2025 10:20:35 +0000 Manifest this update: Thu 03 Jul 2025 10:15:35 +0000 Manifest next update: Sun 06 Jul 2025 20:41:35 +0000 Files and hashes: 1: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: Ags6qEj8G1tNVxqoTo734mNPZsVwGq25ouTkNgTgiXA=) 2: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: oS8oOl8/y7V2LUZeVHGxtpObp4Uyqx3+ls8mkJLwY0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 20:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5a:03:da:a5:e4:ec:9c:2b:14:50:74:3a:95:59:d0:c1:e8:f9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Validity Not Before: Jul 3 10:15:35 2025 GMT Not After : Jul 6 20:41:35 2025 GMT Subject: CN=865221ADCEB470DB066DBAD3EF20C913DD80A8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:64:b7:bf:4a:f1:9b:9f:2f:33:d7:34:45: c5:26:67:18:15:08:22:bd:53:8f:e4:12:a9:4f:c1: 05:c0:ef:98:5d:d1:bc:a5:c3:7e:fb:ed:06:4d:e3: 9a:20:94:09:18:28:77:b5:63:b4:55:94:6c:7a:ef: 0a:37:ae:15:4b:38:46:a0:59:aa:a6:91:68:55:18: af:62:4f:3a:91:62:af:b4:ff:66:c6:dd:0a:8f:a6: 14:8e:21:eb:c3:a3:06:d8:98:e8:81:4b:16:c2:5c: 3f:25:9e:63:85:61:83:4b:1d:41:bd:a4:44:7b:4b: c3:f7:41:de:16:fa:66:0b:95:b4:6e:f3:bb:db:49: 69:ff:ab:42:84:cc:5f:ba:46:5a:51:62:e5:6e:44: 7f:e4:77:06:3b:15:73:77:05:f3:51:72:3b:48:d9: 41:44:a9:16:66:18:94:b6:41:81:95:81:df:62:1a: b1:73:88:7b:87:14:f5:29:f2:e8:3e:df:29:52:2f: c9:21:ab:cb:48:44:58:8f:b3:f5:43:55:82:8f:05: c7:d6:52:f4:24:49:a5:d8:96:f8:ca:d1:7b:d0:60: 19:5c:ec:74:99:d6:0a:5b:a4:d7:5e:37:6d:71:9b: 0f:6e:e0:b4:50:f8:88:9a:54:e3:50:8a:52:19:f0: 2c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:52:21:AD:CE:B4:70:DB:06:6D:BA:D3:EF:20:C9:13:DD:80:A8:E7 X509v3 Authority Key Identifier: keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:ec:c2:b6:40:4f:2e:30:6e:a6:2b:3b:60:0c:7b:9a:a1: c3:09:df:43:35:2c:dc:81:73:24:75:cb:7f:36:28:fe:94:53: fb:16:d4:af:f3:8e:b1:3e:64:bf:87:52:75:9a:83:9b:17:da: 04:f4:b7:60:07:32:a0:1e:65:4a:f8:99:ca:7d:6c:fe:c7:d3: e9:32:7b:ad:a5:7e:ba:60:72:d3:b8:92:47:90:89:20:95:0c: c0:03:ce:7a:b4:01:47:5d:d8:c1:96:a7:88:6a:e3:ff:db:c9: 90:f6:e0:d6:bc:cb:d3:10:9c:36:c7:22:9e:43:09:17:37:cd: 47:40:4f:97:09:86:e8:a1:76:09:06:0d:da:3c:04:dc:ac:94: 33:0c:03:10:78:73:22:e3:63:da:d6:f5:5f:fe:9f:6f:dd:97: 09:1b:52:b4:f6:0b:54:89:a3:97:6c:d6:fd:28:44:5b:99:22: f3:2d:73:d3:48:83:b6:b5:73:66:e6:ad:7d:5a:37:e7:33:85: c8:42:e0:0a:49:41:88:31:ae:c8:f1:74:d0:5c:70:85:3b:f0: 2a:5f:9b:78:a1:1a:c7:05:6c:a9:6c:71:42:00:c9:f6:72:84: 52:e3:20:d2:e9:6c:1d:de:8c:8c:b0:24:5f:7f:a9:91:42:e9: ba:e8:68:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFoD2qXk7JwrFFB0OpVZ0MHo+f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0 RjYzQkJENzAeFw0yNTA3MDMxMDE1MzVaFw0yNTA3MDYyMDQxMzVaMDMxMTAvBgNV BAMTKDg2NTIyMUFEQ0VCNDcwREIwNjZEQkFEM0VGMjBDOTEzREQ4MEE4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY6mS3v0rxm58vM9c0RcUmZxgV CCK9U4/kEqlPwQXA75hd0bylw3777QZN45oglAkYKHe1Y7RVlGx67wo3rhVLOEag WaqmkWhVGK9iTzqRYq+0/2bG3QqPphSOIevDowbYmOiBSxbCXD8lnmOFYYNLHUG9 pER7S8P3Qd4W+mYLlbRu87vbSWn/q0KEzF+6RlpRYuVuRH/kdwY7FXN3BfNRcjtI 2UFEqRZmGJS2QYGVgd9iGrFziHuHFPUp8ug+3ylSL8khq8tIRFiPs/VDVYKPBcfW UvQkSaXYlvjK0XvQYBlc7HSZ1gpbpNdeN21xmw9u4LRQ+IiaVONQilIZ8CyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlIhrc60cNsGbbrT7yDJE92AqOcwHwYDVR0j BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz QkJENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZE RjQ0RjYzQkJENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxw7MK2QE8uMG6mKztgDHuaocMJ30M1LNyB cyR1y382KP6UU/sW1K/zjrE+ZL+HUnWag5sX2gT0t2AHMqAeZUr4mcp9bP7H0+ky e62lfrpgctO4kkeQiSCVDMADznq0AUdd2MGWp4hq4//byZD24Na8y9MQnDbHIp5D CRc3zUdAT5cJhuihdgkGDdo8BNyslDMMAxB4cyLjY9rW9V/+n2/dlwkbUrT2C1SJ o5ds1v0oRFuZIvMtc9NIg7a1c2bmrX1aN+czhchC4ApJQYgxrsjxdNBccIU78Cpf m3ihGscFbKlscUIAyfZyhFLjINLpbB3ejIywJF9/qZFC6broaPA= -----END CERTIFICATE-----Generated at Sat Jul 5 14:19:12 2025 by rpki-client