$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: +B9uUz9hVOFOAzxULIRjA9QzkLJ6PHc6hWVz+GqEd9M= Subject key identifier: D1:2A:84:E0:DD:46:F6:71:FA:B5:78:37:C1:8F:37:12:72:26:10:9B Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 1EC98E578FA821A580B54C06E22AD56F0ACD8D05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0133 Signing time: Fri 22 Aug 2025 02:02:23 +0000 Manifest this update: Fri 22 Aug 2025 01:57:23 +0000 Manifest next update: Mon 25 Aug 2025 05:14:23 +0000 Files and hashes: 1: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: t6/SalihR7vpJdwFMrlTyL2HYisLcpMcKH3sJU0E9GY=) 2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) 3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c9:8e:57:8f:a8:21:a5:80:b5:4c:06:e2:2a:d5:6f:0a:cd:8d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Aug 22 01:57:23 2025 GMT Not After : Aug 25 05:14:23 2025 GMT Subject: CN=D12A84E0DD46F671FAB57837C18F37127226109B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:fa:8d:5a:65:4e:f0:36:69:3c:89:0c:b1: 0b:75:07:ee:b0:a3:d9:5a:c0:4d:95:6a:b5:1b:44: 64:3f:b3:35:52:e0:85:e5:72:c3:57:e4:98:a5:cb: 15:7b:34:3f:26:c5:7b:d7:40:7a:67:67:14:1e:9b: 6a:2f:56:26:db:1e:f5:50:6f:9d:56:ee:6c:60:cd: a0:80:57:59:7a:e9:c1:3f:6b:26:24:ed:d6:db:73: c4:72:02:a5:7f:71:2e:4e:c1:f7:e2:61:45:16:92: ca:45:6e:94:ad:e0:13:02:d7:9b:7e:de:12:1a:1e: a7:c8:05:ff:43:ef:6b:ad:92:a1:5f:d9:8c:93:1f: a2:a1:fe:43:c3:5a:a5:dc:50:c6:7a:65:ad:3c:63: c6:3c:e7:6e:ea:6d:8d:b9:57:63:19:19:7f:6a:df: f1:3a:8f:6c:5c:6d:d3:58:73:16:fd:ed:9e:a0:17: 6a:3d:af:15:71:4c:08:96:73:2d:01:69:5d:67:3e: f9:2d:27:6f:b4:47:26:1b:35:fc:00:08:7c:84:ac: 7b:7d:41:ea:6b:f4:12:32:46:9f:d4:2e:af:60:a6: 41:7d:7c:17:16:bd:01:96:9a:4d:88:35:f6:37:8e: fc:fb:2f:2a:92:58:9b:9f:8b:da:de:52:29:ca:ee: f6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2A:84:E0:DD:46:F6:71:FA:B5:78:37:C1:8F:37:12:72:26:10:9B X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:eb:db:d2:ad:d9:5b:b7:76:80:ec:5b:07:cc:cd:d3:0b:6d: ac:2a:0d:e2:39:cf:24:18:5c:7a:8b:51:07:b4:af:7b:1c:38: be:1d:9a:76:56:18:2b:72:32:09:34:02:1c:f1:8a:72:35:1f: 41:92:18:25:ca:81:4b:9b:ca:cf:ea:ef:25:50:b7:2c:67:65: 02:05:86:a5:3f:8f:21:38:45:84:d2:b4:43:c6:71:e9:59:0a: 17:50:3a:f3:28:d6:98:d8:8f:5b:b1:f9:22:1c:6d:2b:c0:54: 5b:e0:0d:cb:b7:b6:e2:76:23:82:91:f6:8a:d0:07:d8:3e:17: 49:45:c2:e8:b6:47:52:72:fd:82:e2:09:63:ac:32:af:2b:ef: dc:63:59:af:27:0c:bf:26:54:05:43:08:bc:de:cb:6e:a3:c2: 17:36:2b:e7:2b:3d:c2:ef:2e:85:18:53:3d:2a:59:e4:bf:40: fd:bd:cc:5a:1b:87:c8:20:7b:53:07:67:ea:ca:cd:9a:e3:bc: 0e:de:a3:df:bd:08:21:f1:00:df:98:d0:65:a8:68:8d:12:b0: c7:eb:cc:e4:b5:b9:5f:e5:7b:4f:4c:6e:c7:fd:a1:86:f9:48: ff:64:a4:b7:66:40:cf:9b:81:3c:a3:1d:22:b8:a8:ad:d5:2a: 0a:2a:bf:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsmOV4+oIaWAtUwG4irVbwrNjQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTA4MjIwMTU3MjNaFw0yNTA4MjUwNTE0MjNaMDMxMTAvBgNV BAMTKEQxMkE4NEUwREQ0NkY2NzFGQUI1NzgzN0MxOEYzNzEyNzIyNjEwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTsPqNWmVO8DZpPIkMsQt1B+6w o9lawE2VarUbRGQ/szVS4IXlcsNX5JilyxV7ND8mxXvXQHpnZxQem2ovVibbHvVQ b51W7mxgzaCAV1l66cE/ayYk7dbbc8RyAqV/cS5OwffiYUUWkspFbpSt4BMC15t+ 3hIaHqfIBf9D72utkqFf2YyTH6Kh/kPDWqXcUMZ6Za08Y8Y8527qbY25V2MZGX9q 3/E6j2xcbdNYcxb97Z6gF2o9rxVxTAiWcy0BaV1nPvktJ2+0RyYbNfwACHyErHt9 Qepr9BIyRp/ULq9gpkF9fBcWvQGWmk2INfY3jvz7LyqSWJufi9reUinK7vbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SqE4N1G9nH6tXg3wY83EnImEJswHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnr29Kt2Vu3doDsWwfMzdMLbawqDeI5zyQY XHqLUQe0r3scOL4dmnZWGCtyMgk0AhzxinI1H0GSGCXKgUubys/q7yVQtyxnZQIF hqU/jyE4RYTStEPGcelZChdQOvMo1pjYj1ux+SIcbSvAVFvgDcu3tuJ2I4KR9orQ B9g+F0lFwui2R1Jy/YLiCWOsMq8r79xjWa8nDL8mVAVDCLzey26jwhc2K+crPcLv LoUYUz0qWeS/QP29zFobh8gge1MHZ+rKzZrjvA7eo9+9CCHxAN+Y0GWoaI0SsMfr zOS1uV/le09Mbsf9oYb5SP9kpLdmQM+bgTyjHSK4qK3VKgoqv+A= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:35 2025 by rpki-client