$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: vzR8qIEZck6jYwnHoH1WyNGkU3npQLn1F1LRA3dxjik= Subject key identifier: FA:85:FA:B9:C5:2F:80:59:D3:CA:2A:D1:0E:D3:62:BF:A4:AC:BC:F8 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 203F3EFFF9BAF28CD590E039C32AFA1B560B9F58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 018B Signing time: Thu 21 Aug 2025 18:41:39 +0000 Manifest this update: Thu 21 Aug 2025 18:36:39 +0000 Manifest next update: Sun 24 Aug 2025 19:09:39 +0000 Files and hashes: 1: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: jwvNT82pgQCTP3WxxO/Qa3jj89ENM4/g+7FYPqsgU/k=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) 3: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) 4: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) 5: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3f:3e:ff:f9:ba:f2:8c:d5:90:e0:39:c3:2a:fa:1b:56:0b:9f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Aug 21 18:36:39 2025 GMT Not After : Aug 24 19:09:39 2025 GMT Subject: CN=FA85FAB9C52F8059D3CA2AD10ED362BFA4ACBCF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:41:54:24:f5:9a:b7:37:fa:7a:bb:af:35: 51:d9:35:1f:fe:71:47:c5:12:db:b4:29:98:38:8f: 42:22:e1:e9:28:28:8f:4a:19:d6:48:b8:aa:04:80: 6e:8f:22:0e:bd:da:92:cf:90:4d:8c:a7:50:f2:b5: 2a:e8:83:39:9f:c7:f5:6c:b0:8b:f8:de:c2:06:7d: 7c:20:83:bd:89:e7:0c:62:22:7b:08:67:ff:d9:c8: f2:84:9e:03:f5:15:67:70:9a:44:a3:0d:ae:82:0a: 20:a3:7f:ee:7e:42:0c:c9:c2:d4:49:e6:17:56:95: b9:35:40:4e:cd:0f:41:cc:59:d1:e8:77:12:c4:3b: e8:9d:64:33:00:50:6f:f3:b5:e7:43:f1:09:8f:50: f6:11:2d:8f:e8:2b:93:30:d7:35:7e:3e:e8:cb:4a: 9e:a6:44:17:40:1d:b1:ce:c0:68:34:13:48:9b:74: d2:0b:b6:ba:39:dc:8c:b2:38:d2:b7:e3:b2:40:44: 22:9d:63:97:fb:92:ae:f7:8e:77:49:38:68:27:fe: 69:84:fe:13:07:52:6e:b4:38:76:64:7f:bb:00:59: e3:f7:0e:68:81:03:98:7e:87:29:d7:78:eb:b8:97: 8c:fc:df:78:85:1f:4c:a8:50:75:8b:a0:fa:f8:7a: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:85:FA:B9:C5:2F:80:59:D3:CA:2A:D1:0E:D3:62:BF:A4:AC:BC:F8 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7b:93:8f:f6:2b:cc:25:bd:c0:1f:14:32:fa:3d:ef:3f:c2: 69:ca:aa:cc:38:dc:74:94:2c:6a:e5:9e:e4:ef:df:66:d3:47: f7:76:7d:f8:cb:8d:13:94:f1:0c:ce:30:61:89:c5:38:f2:3c: b1:df:29:ff:59:93:7f:eb:87:92:31:9e:80:ac:cc:44:d6:5a: 30:dd:e8:f5:c7:14:6b:1e:05:b8:2a:cb:c8:44:39:d4:6a:6d: dd:07:ba:4f:e9:bb:ce:ec:2c:10:a9:38:28:70:40:1f:23:b6: 2e:46:09:9b:1f:71:cc:7a:9f:01:a7:d0:2d:8b:49:4e:32:66: e7:51:75:ac:66:b2:cb:cf:fe:51:40:df:d3:d1:a4:81:09:32: 53:74:a7:da:24:81:7e:bc:2c:e6:8f:dd:55:9a:5d:e7:21:76: 6b:fe:d0:80:42:25:de:6d:2a:08:12:da:c0:95:8a:ba:ec:ce: fb:8e:94:1a:e5:06:4e:2d:6e:2f:43:55:0c:94:a7:ae:75:16: 50:b6:6a:a2:b3:37:1f:9f:4e:3b:03:66:55:7e:20:66:ea:e5: 7a:03:7d:6d:c7:13:a7:e0:ae:ad:b2:7d:f5:d4:4d:68:99:2f: 71:e2:77:e3:4a:47:6f:c8:be:07:1a:65:76:96:b4:c0:2b:ea: 80:f5:80:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUID8+//m68ozVkOA5wyr6G1YLn1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTA4MjExODM2MzlaFw0yNTA4MjQxOTA5MzlaMDMxMTAvBgNV BAMTKEZBODVGQUI5QzUyRjgwNTlEM0NBMkFEMTBFRDM2MkJGQTRBQ0JDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdL0FUJPWatzf6eruvNVHZNR/+ cUfFEtu0KZg4j0Ii4ekoKI9KGdZIuKoEgG6PIg692pLPkE2Mp1DytSrogzmfx/Vs sIv43sIGfXwgg72J5wxiInsIZ//ZyPKEngP1FWdwmkSjDa6CCiCjf+5+QgzJwtRJ 5hdWlbk1QE7ND0HMWdHodxLEO+idZDMAUG/ztedD8QmPUPYRLY/oK5Mw1zV+PujL Sp6mRBdAHbHOwGg0E0ibdNILtro53IyyONK347JARCKdY5f7kq73jndJOGgn/mmE /hMHUm60OHZkf7sAWeP3DmiBA5h+hynXeOu4l4z833iFH0yoUHWLoPr4ekwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+oX6ucUvgFnTyirRDtNiv6SsvPgwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR7k4/2K8wlvcAfFDL6Pe8/wmnKqsw43HSU LGrlnuTv32bTR/d2ffjLjROU8QzOMGGJxTjyPLHfKf9Zk3/rh5IxnoCszETWWjDd 6PXHFGseBbgqy8hEOdRqbd0Huk/pu87sLBCpOChwQB8jti5GCZsfccx6nwGn0C2L SU4yZudRdaxmssvP/lFA39PRpIEJMlN0p9okgX68LOaP3VWaXechdmv+0IBCJd5t KggS2sCVirrszvuOlBrlBk4tbi9DVQyUp651FlC2aqKzNx+fTjsDZlV+IGbq5XoD fW3HE6fgrq2yffXUTWiZL3Hid+NKR2/IvgcaZXaWtMAr6oD1gIE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:06:53 2025 by rpki-client