$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: usxC7Qm2Tfwe8VjmqYv0DOfFBtes7tdwkcnOGBfB3Dw= Subject key identifier: 13:DC:0C:08:99:24:5E:53:F5:3F:98:B6:E9:FA:C0:9E:33:E3:37:EC Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 4E83EE9D2CC5974BAF22CF9C2629E7C2BBA993C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0105 Signing time: Sun 11 May 2025 16:21:41 +0000 Manifest this update: Sun 11 May 2025 16:16:41 +0000 Manifest next update: Wed 14 May 2025 17:09:41 +0000 Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: UhTnOZ0eR4pV0pc2TNTMXOcqZMm3I9KiGgwKvyJXQRE=) 2: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: vYmDCyY4B/IYqwbBj8nn2kMMNPPaCerYoVnNxcj9NNY=) 3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: YVXU9bZeYflVSgxxKGLIQ5msIEKdutfulcIw6pY80+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 17:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:83:ee:9d:2c:c5:97:4b:af:22:cf:9c:26:29:e7:c2:bb:a9:93:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: May 11 16:16:41 2025 GMT Not After : May 14 17:09:41 2025 GMT Subject: CN=13DC0C0899245E53F53F98B6E9FAC09E33E337EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:0d:17:b6:08:bd:f7:ca:e9:c8:08:b3:37: 60:1d:dd:08:b1:86:52:92:7c:89:3b:af:07:52:98: a4:b1:69:c3:4e:ff:6f:66:0c:75:05:d5:e8:32:8a: 31:95:5a:a0:39:6e:d2:f0:27:31:c9:27:c6:39:34: 1f:93:77:52:d9:81:fe:cf:c0:34:c6:ce:72:f9:82: 92:c0:b9:78:6e:7a:f2:ef:94:a5:17:a2:9c:01:fc: 75:4c:c6:58:44:45:04:82:71:ed:b2:5f:0a:ea:d5: a2:0a:08:f9:0a:9e:4c:c2:f9:71:40:8b:c3:fa:60: 7e:b5:6d:9f:80:d6:4c:1f:ae:b3:43:96:78:ab:aa: b7:aa:17:28:ab:31:f0:fc:f6:75:2c:fc:3c:79:db: 7a:bd:25:0c:bb:ba:47:a0:69:6f:7e:18:cc:89:f6: d7:a8:aa:92:44:8d:3b:eb:86:55:16:f5:d4:fe:51: f1:bf:07:08:2d:f0:eb:03:c1:4e:8a:4a:78:a5:55: 3f:d6:cb:d9:ff:d1:38:06:c8:bd:e4:96:30:cb:b8: 1f:80:db:63:df:2e:d9:e6:ca:33:31:d6:7c:b7:2d: e5:78:39:b7:7b:d3:17:26:4c:6b:6a:46:9b:05:5a: 27:7b:a0:02:88:7c:f8:c9:54:1b:76:15:13:9e:2f: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DC:0C:08:99:24:5E:53:F5:3F:98:B6:E9:FA:C0:9E:33:E3:37:EC X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:68:8c:75:09:78:0a:ec:5c:44:b1:2e:34:bf:83:8b:d2:b5: 5c:4b:92:e4:77:9e:64:40:e8:06:59:45:78:c6:26:69:03:d8: 89:98:60:6b:1f:10:87:27:c3:17:7b:07:07:f1:2e:78:03:cb: b1:89:7c:db:82:fd:0a:e3:40:ed:09:f9:83:3c:0e:33:1a:7d: 5b:90:61:04:fd:cd:66:ca:20:59:4e:b7:86:4a:7f:c8:7f:17: e9:0c:72:8f:23:b1:11:a2:52:69:2c:9d:bb:d1:ee:37:19:eb: f7:a9:31:11:09:45:b5:18:30:1c:e5:b5:da:6f:af:c6:f7:8e: 3c:cb:c8:1e:03:27:ba:98:86:32:d2:f6:93:46:ec:bd:e0:aa: 9f:bf:5f:16:c2:18:72:3d:e9:cc:e2:6c:de:4d:65:43:95:10: 14:fc:dd:d8:56:43:b3:85:2b:22:bd:54:9d:fe:6c:98:40:d3: d0:26:92:32:10:d5:fb:b2:cc:b3:1e:9b:07:e0:49:f9:c7:88: ea:45:a4:a4:e2:e0:0d:cc:3a:43:d8:36:17:e3:2f:44:26:2a: a7:78:33:42:b6:5d:fd:a0:dc:55:39:37:f8:1a:ae:21:18:45: a3:30:a1:56:9b:07:ee:ea:e1:4e:53:7c:4a:48:cd:6a:2a:1a: b7:dc:a7:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToPunSzFl0uvIs+cJinnwrupk8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTA1MTExNjE2NDFaFw0yNTA1MTQxNzA5NDFaMDMxMTAvBgNV BAMTKDEzREMwQzA4OTkyNDVFNTNGNTNGOThCNkU5RkFDMDlFMzNFMzM3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDA0Xtgi998rpyAizN2Ad3Qix hlKSfIk7rwdSmKSxacNO/29mDHUF1egyijGVWqA5btLwJzHJJ8Y5NB+Td1LZgf7P wDTGznL5gpLAuXhuevLvlKUXopwB/HVMxlhERQSCce2yXwrq1aIKCPkKnkzC+XFA i8P6YH61bZ+A1kwfrrNDlnirqreqFyirMfD89nUs/Dx523q9JQy7ukegaW9+GMyJ 9teoqpJEjTvrhlUW9dT+UfG/Bwgt8OsDwU6KSnilVT/Wy9n/0TgGyL3kljDLuB+A 22PfLtnmyjMx1ny3LeV4Obd70xcmTGtqRpsFWid7oAKIfPjJVBt2FROeL0frAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE9wMCJkkXlP1P5i26frAnjPjN+wwHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5ojHUJeArsXESxLjS/g4vStVxLkuR3nmRA 6AZZRXjGJmkD2ImYYGsfEIcnwxd7BwfxLngDy7GJfNuC/QrjQO0J+YM8DjMafVuQ YQT9zWbKIFlOt4ZKf8h/F+kMco8jsRGiUmksnbvR7jcZ6/epMREJRbUYMBzltdpv r8b3jjzLyB4DJ7qYhjLS9pNG7L3gqp+/XxbCGHI96czibN5NZUOVEBT83dhWQ7OF KyK9VJ3+bJhA09AmkjIQ1fuyzLMemwfgSfnHiOpFpKTi4A3MOkPYNhfjL0QmKqd4 M0K2Xf2g3FU5N/gariEYRaMwoVabB+7q4U5TfEpIzWoqGrfcp7w= -----END CERTIFICATE-----Generated at Mon May 12 11:22:53 2025 by rpki-client