$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: NRwQwsG03w+0HLIOWBJwY5JRQMj+kSPckfi0ACJ5xQ4= Subject key identifier: 07:FE:D1:53:B3:23:3F:CC:DE:44:D0:D3:9B:97:B9:86:D1:9C:33:31 Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 6A594D0E540FCB69E42C4761EFAF5CA90E5CCEAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 011B Signing time: Mon 30 Jun 2025 10:01:41 +0000 Manifest this update: Mon 30 Jun 2025 09:56:41 +0000 Manifest next update: Thu 03 Jul 2025 21:25:41 +0000 Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: UhTnOZ0eR4pV0pc2TNTMXOcqZMm3I9KiGgwKvyJXQRE=) 2: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: 4rTVjOS4Hm7IGA12Cv0vHaGkGh49LqSdz6edfuEs9Cs=) 3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: YVXU9bZeYflVSgxxKGLIQ5msIEKdutfulcIw6pY80+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:59:4d:0e:54:0f:cb:69:e4:2c:47:61:ef:af:5c:a9:0e:5c:ce:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Jun 30 09:56:41 2025 GMT Not After : Jul 3 21:25:41 2025 GMT Subject: CN=07FED153B3233FCCDE44D0D39B97B986D19C3331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:2d:bd:dd:15:af:cc:fe:c1:3e:93:03:2a: a7:4e:2b:6b:51:42:a2:7b:4f:ba:20:ec:9f:71:18: 9b:53:95:2b:35:cd:a6:21:40:12:5d:b5:c6:31:19: 1f:fd:7f:db:0f:39:3d:e2:54:ce:25:c6:a7:c3:2c: 67:46:55:67:4b:71:8e:00:2d:83:28:f9:4b:8d:d1: 11:88:e8:0d:2a:19:8e:88:b8:0a:73:ba:4f:94:e5: 11:31:e2:be:db:71:fa:76:5b:ad:61:b7:d1:15:2c: 97:23:b1:b5:11:2a:9d:f6:86:c1:c1:24:6f:ef:60: 86:1f:1c:2a:df:6f:ae:8f:a8:b3:49:28:17:44:a2: 65:a0:a4:50:cd:74:5b:e3:e9:9e:ea:a5:22:ec:f8: 5a:a2:d4:6a:52:ad:15:0f:bd:6e:73:c1:0f:4d:34: 66:36:8c:67:6b:f6:08:d3:db:3f:b9:82:37:ab:c2: 44:c4:39:37:13:a2:b3:ea:68:da:be:60:62:c1:62: a0:b9:a2:bb:83:1c:83:e6:eb:92:92:3a:2d:1d:92: 3b:c9:a9:3f:68:45:77:f0:12:01:c7:2f:f1:85:28: 23:d6:2e:af:26:1d:8f:1a:b2:03:4c:5e:82:f0:74: 81:1e:b5:37:d3:36:c8:b8:92:f6:20:d5:a2:ec:49: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FE:D1:53:B3:23:3F:CC:DE:44:D0:D3:9B:97:B9:86:D1:9C:33:31 X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3d:a5:26:09:93:cd:ae:a9:3b:74:04:b5:ec:c2:98:08:c1: 0f:e7:96:fa:2b:8b:ef:e0:c0:85:82:57:53:25:e0:61:16:14: 59:8a:63:a2:9b:c3:b1:a5:f7:6a:a6:7e:e0:e1:42:74:0d:31: e2:fb:09:95:7d:c1:d5:4c:4d:c8:18:0d:c2:32:15:76:09:db: 91:58:e4:33:79:06:12:be:78:94:d2:a8:54:34:83:86:39:47: d8:d7:3a:b2:c7:df:1d:16:58:1a:e2:cb:0a:a6:ab:ce:0b:b6: 16:39:99:d4:fa:7e:33:80:ce:e9:63:21:ba:fc:b7:a9:47:32: 18:7d:a7:8e:60:bd:b5:66:1b:30:55:fa:42:8f:99:22:2a:87: 0e:de:18:e6:8e:0c:48:48:bf:ab:df:3b:fc:61:2d:31:86:dc: 8a:b1:66:84:52:f4:50:ab:1f:3b:f2:a8:de:7d:3b:56:4f:b2: 88:ac:54:98:fe:04:ae:88:cf:54:57:ab:1d:ff:01:7d:4a:a0: 1f:11:43:17:98:b4:6b:dd:40:67:f5:d0:6b:59:cc:89:61:a0: bd:31:ea:d8:06:e8:2d:db:80:84:26:98:4c:1f:f5:1b:fc:97: f8:11:45:86:71:d0:ca:62:8e:7f:1e:6e:2a:65:d4:87:f1:4b: 0a:db:ec:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUallNDlQPy2nkLEdh769cqQ5czqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTA2MzAwOTU2NDFaFw0yNTA3MDMyMTI1NDFaMDMxMTAvBgNV BAMTKDA3RkVEMTUzQjMyMzNGQ0NERTQ0RDBEMzlCOTdCOTg2RDE5QzMzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Gy293RWvzP7BPpMDKqdOK2tR QqJ7T7og7J9xGJtTlSs1zaYhQBJdtcYxGR/9f9sPOT3iVM4lxqfDLGdGVWdLcY4A LYMo+UuN0RGI6A0qGY6IuApzuk+U5REx4r7bcfp2W61ht9EVLJcjsbURKp32hsHB JG/vYIYfHCrfb66PqLNJKBdEomWgpFDNdFvj6Z7qpSLs+Fqi1GpSrRUPvW5zwQ9N NGY2jGdr9gjT2z+5gjerwkTEOTcTorPqaNq+YGLBYqC5oruDHIPm65KSOi0dkjvJ qT9oRXfwEgHHL/GFKCPWLq8mHY8asgNMXoLwdIEetTfTNsi4kvYg1aLsSfA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB/7RU7MjP8zeRNDTm5e5htGcMzEwHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABc9pSYJk82uqTt0BLXswpgIwQ/nlvori+/g wIWCV1Ml4GEWFFmKY6Kbw7Gl92qmfuDhQnQNMeL7CZV9wdVMTcgYDcIyFXYJ25FY 5DN5BhK+eJTSqFQ0g4Y5R9jXOrLH3x0WWBriywqmq84LthY5mdT6fjOAzuljIbr8 t6lHMhh9p45gvbVmGzBV+kKPmSIqhw7eGOaODEhIv6vfO/xhLTGG3IqxZoRS9FCr HzvyqN59O1ZPsoisVJj+BK6Iz1RXqx3/AX1KoB8RQxeYtGvdQGf10GtZzIlhoL0x 6tgG6C3bgIQmmEwf9Rv8l/gRRYZx0Mpijn8ebipl1IfxSwrb7Fs= -----END CERTIFICATE-----Generated at Wed Jul 2 11:06:20 2025 by rpki-client