$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: FmhFxV2A6lv/X66WInvDzLue/rTyPi4iX8EZ+lmVSWQ= Subject key identifier: 7F:3C:30:07:22:57:55:2D:C7:B5:94:58:2A:9A:F1:86:A8:A8:33:43 Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 1E82BBEAAACA1F23D9E0B08E96851163DE172D15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 014D Signing time: Sun 19 Oct 2025 23:51:42 +0000 Manifest this update: Sun 19 Oct 2025 23:46:42 +0000 Manifest next update: Thu 23 Oct 2025 11:23:42 +0000 Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) 3: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: bi2w2muM2wKclvqrZO5mcdXXE6ySEaMkkTXd4vBwCiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:82:bb:ea:aa:ca:1f:23:d9:e0:b0:8e:96:85:11:63:de:17:2d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Oct 19 23:46:42 2025 GMT Not After : Oct 23 11:23:42 2025 GMT Subject: CN=7F3C30072257552DC7B594582A9AF186A8A83343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:60:96:93:9c:b8:b7:50:39:a7:56:c9:97: c7:ca:88:de:55:2e:65:70:54:ca:b6:18:af:94:e0: 3c:95:0d:04:f8:35:80:b2:b2:ae:65:03:c1:aa:6e: 10:f9:6e:bc:f1:ad:f0:ce:9b:6b:6e:72:f9:fd:3f: ff:35:bf:3e:bc:aa:bd:58:3c:8c:83:5d:98:82:10: b9:71:fc:18:ba:85:f8:ca:a8:c8:0f:d3:0b:24:3a: e4:e8:15:4c:c6:db:34:37:ba:84:af:06:cb:3b:e9: 4c:c2:9a:78:13:3f:64:54:91:10:2a:97:0b:1e:67: 22:29:37:a0:e4:15:2e:f8:46:c4:2b:97:95:0c:5f: bf:53:ba:b4:74:e5:0f:6f:5f:ad:4d:0a:60:84:39: 7e:10:22:16:21:2b:85:04:3d:0e:3a:23:ae:f3:67: 4a:c1:20:a0:a4:2d:aa:cf:10:37:82:19:d5:ef:b4: d7:5a:99:fc:4c:46:48:d2:bd:7a:0d:ea:ec:83:58: 2d:6d:e2:d8:fa:61:43:67:22:79:cf:a3:23:c3:4d: c8:13:5a:c1:61:1f:28:91:77:9e:b8:cf:c8:89:ed: f9:a3:06:2c:9c:10:c7:da:75:c1:c2:ce:fb:f5:67: 3a:6d:cf:6f:c7:c9:c1:27:aa:46:41:fe:2b:1d:94: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:30:07:22:57:55:2D:C7:B5:94:58:2A:9A:F1:86:A8:A8:33:43 X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:f2:64:1c:6c:eb:c8:c2:85:7b:19:ce:97:a6:de:b5:d5:6c: 4a:24:f6:f5:e6:f4:cf:ae:2b:55:2d:5f:c6:e1:a3:92:a9:61: 79:18:09:ec:ae:0e:92:75:1b:7d:7a:f6:fa:6b:50:7f:e0:11: 0e:fb:58:bf:ee:ec:39:87:f3:fc:1c:02:cc:f9:9a:04:b3:51: 7c:99:cd:aa:a3:9f:97:2c:89:83:89:1f:cc:15:88:6d:7d:2b: 21:5e:19:9b:a2:90:c3:18:93:dd:7f:d3:5d:04:5f:73:20:a4: c1:4a:51:0e:52:fe:fb:02:f9:d5:44:8e:64:e7:63:cb:12:4f: a5:ab:37:f6:0a:c3:6d:27:3e:58:f4:24:d1:54:0b:08:12:2e: eb:3d:84:d0:1d:dc:55:d0:63:6c:3a:eb:6e:a4:e5:64:9f:c5: 3e:c4:1e:70:de:5f:42:5b:7b:b5:f5:1b:69:13:1b:7b:70:87: a1:82:35:b8:7e:21:3e:4d:d9:94:64:ea:a1:d5:10:6c:ba:d8: 62:f2:99:48:b5:33:b3:ea:2c:ac:05:ea:d2:f3:3d:b0:c7:b0: f4:74:dd:eb:fa:7e:40:c9:1f:66:41:78:95:47:48:be:d9:55: 92:48:ba:63:b6:14:97:4f:45:43:62:0c:19:b8:6f:a6:59:fe: fd:92:8d:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoK76qrKHyPZ4LCOloURY94XLRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTEwMTkyMzQ2NDJaFw0yNTEwMjMxMTIzNDJaMDMxMTAvBgNV BAMTKDdGM0MzMDA3MjI1NzU1MkRDN0I1OTQ1ODJBOUFGMTg2QThBODMzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEg2CWk5y4t1A5p1bJl8fKiN5V LmVwVMq2GK+U4DyVDQT4NYCysq5lA8GqbhD5brzxrfDOm2tucvn9P/81vz68qr1Y PIyDXZiCELlx/Bi6hfjKqMgP0wskOuToFUzG2zQ3uoSvBss76UzCmngTP2RUkRAq lwseZyIpN6DkFS74RsQrl5UMX79TurR05Q9vX61NCmCEOX4QIhYhK4UEPQ46I67z Z0rBIKCkLarPEDeCGdXvtNdamfxMRkjSvXoN6uyDWC1t4tj6YUNnInnPoyPDTcgT WsFhHyiRd564z8iJ7fmjBiycEMfadcHCzvv1Zzptz2/HycEnqkZB/isdlOhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfzwwByJXVS3HtZRYKprxhqioM0MwHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzyZBxs68jChXsZzpem3rXVbEok9vXm9M+u K1UtX8bho5KpYXkYCeyuDpJ1G3169vprUH/gEQ77WL/u7DmH8/wcAsz5mgSzUXyZ zaqjn5csiYOJH8wViG19KyFeGZuikMMYk91/010EX3MgpMFKUQ5S/vsC+dVEjmTn Y8sST6WrN/YKw20nPlj0JNFUCwgSLus9hNAd3FXQY2w6626k5WSfxT7EHnDeX0Jb e7X1G2kTG3twh6GCNbh+IT5N2ZRk6qHVEGy62GLymUi1M7PqLKwF6tLzPbDHsPR0 3ev6fkDJH2ZBeJVHSL7ZVZJIumO2FJdPRUNiDBm4b6ZZ/v2SjVI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:38 2025 by rpki-client