$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: xTZvJwxTiwCff9ddI/mwUagtRvBfcX6j1Yd0eXEinn8= Subject key identifier: 14:7A:B5:61:F7:05:64:63:AD:E0:14:65:E8:D2:C7:2E:B1:BA:C6:F6 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 72F4CE92CD0886FCA9613D9CA1AB857064CEED9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: 013A Signing time: Sun 19 Oct 2025 07:01:06 +0000 Manifest this update: Sun 19 Oct 2025 06:56:06 +0000 Manifest next update: Wed 22 Oct 2025 16:31:06 +0000 Files and hashes: 1: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: gWKpkYy8YGxsSDlwQQr+W1HOhkgsOnCpoEo04Bkou/c=) 2: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: fg/QZptFLqxRoiOqaYt9GVklul/Zo57x2b9Yx8hCCKw=) 3: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: jur3GwCCR/cxdnMD6W4cwMvOKZw4VghZsOtg/kxwW48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f4:ce:92:cd:08:86:fc:a9:61:3d:9c:a1:ab:85:70:64:ce:ed:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Oct 19 06:56:06 2025 GMT Not After : Oct 22 16:31:06 2025 GMT Subject: CN=147AB561F7056463ADE01465E8D2C72EB1BAC6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:cc:62:e0:4b:9a:1f:d8:f9:13:a5:64:61: 67:70:27:a9:73:d3:27:a4:05:73:66:97:02:82:c7: 0e:1d:10:a2:ef:7c:8f:62:e7:88:29:67:a6:ec:c5: b9:53:7a:5c:61:27:b6:94:0c:f9:55:a1:2d:50:80: c2:01:31:cc:fc:bd:da:81:4d:06:ec:a6:94:17:42: 13:96:3d:d5:e9:4a:25:8d:f3:e4:a2:fe:01:0e:95: d7:fe:10:12:de:c1:ba:7b:de:4f:3a:a2:d6:9a:a9: 35:be:d4:f8:31:64:2b:76:9c:08:e3:8e:a1:7b:0e: 3b:fd:23:0e:f9:71:32:5f:1b:99:3d:c7:f7:47:0c: 55:38:6d:5d:47:3c:5d:d4:14:76:f8:69:9f:3c:c7: ec:8a:5a:d5:6d:dd:26:3b:74:29:33:9b:ca:bb:97: be:3e:0b:ab:7d:78:78:df:49:43:27:d9:0d:f4:8d: 1a:a3:11:5a:61:22:90:4a:a3:20:4e:f2:e0:71:b3: 26:61:c4:a1:52:ab:9d:88:ec:94:60:49:2b:be:3a: 62:79:73:60:ea:ae:a6:7b:09:72:75:60:52:bb:cf: fe:42:62:6b:80:3f:84:58:c5:c0:33:77:e9:de:b0: df:22:99:a1:10:b0:f6:5f:6a:2b:44:3f:ed:de:0b: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:B5:61:F7:05:64:63:AD:E0:14:65:E8:D2:C7:2E:B1:BA:C6:F6 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:fd:33:87:07:03:bc:65:5c:d6:02:a2:c3:6e:0f:82:a3:c1: 49:89:81:cc:a4:1f:84:d2:f6:f5:a7:e3:35:09:d3:2d:e2:97: f8:7c:80:da:4e:1d:e9:d3:03:67:b2:93:7d:b6:dd:1c:0a:c7: f9:35:09:f3:65:8b:7f:cc:20:80:21:f9:1c:18:d7:51:d7:79: fe:6e:f8:ee:b4:40:e3:70:d2:2c:53:7c:bf:ff:ec:24:d3:0a: 7f:a2:40:dd:ee:6c:56:9f:82:10:0b:ee:43:e3:3b:9d:a3:20: 92:f8:24:b5:33:0d:d4:61:c9:3c:cf:4f:55:a7:8a:24:83:34: a5:0f:a7:0f:bd:17:7d:9b:55:60:d4:fc:ff:0f:85:60:0d:85: 45:c0:9c:58:8d:21:6a:7a:0c:7a:04:11:fa:00:e9:d0:00:d8: c5:72:18:f1:bd:de:1e:df:04:2d:d4:31:52:8d:1e:c9:2a:9a: dd:c1:ac:27:ac:c1:86:73:95:c5:d0:0b:65:48:49:0d:d3:ad: da:5c:b6:3c:7a:18:13:3b:ba:1a:3d:8a:8a:00:0e:ea:13:0b: d0:4c:9f:81:db:ab:a1:ef:56:5e:8d:84:60:70:46:d6:b2:58: 65:2b:36:04:b8:c9:17:d4:17:21:d6:90:02:0b:4a:f7:1a:5b: 90:03:d5:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvTOks0IhvypYT2coauFcGTO7Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNTEwMTkwNjU2MDZaFw0yNTEwMjIxNjMxMDZaMDMxMTAvBgNV BAMTKDE0N0FCNTYxRjcwNTY0NjNBREUwMTQ2NUU4RDJDNzJFQjFCQUM2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lMxi4EuaH9j5E6VkYWdwJ6lz 0yekBXNmlwKCxw4dEKLvfI9i54gpZ6bsxblTelxhJ7aUDPlVoS1QgMIBMcz8vdqB TQbsppQXQhOWPdXpSiWN8+Si/gEOldf+EBLewbp73k86otaaqTW+1PgxZCt2nAjj jqF7Djv9Iw75cTJfG5k9x/dHDFU4bV1HPF3UFHb4aZ88x+yKWtVt3SY7dCkzm8q7 l74+C6t9eHjfSUMn2Q30jRqjEVphIpBKoyBO8uBxsyZhxKFSq52I7JRgSSu+OmJ5 c2DqrqZ7CXJ1YFK7z/5CYmuAP4RYxcAzd+nesN8imaEQsPZfaitEP+3eC6jPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHq1YfcFZGOt4BRl6NLHLrG6xvYwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr9M4cHA7xlXNYCosNuD4KjwUmJgcykH4TS 9vWn4zUJ0y3il/h8gNpOHenTA2eyk3223RwKx/k1CfNli3/MIIAh+RwY11HXef5u +O60QONw0ixTfL//7CTTCn+iQN3ubFafghAL7kPjO52jIJL4JLUzDdRhyTzPT1Wn iiSDNKUPpw+9F32bVWDU/P8PhWANhUXAnFiNIWp6DHoEEfoA6dAA2MVyGPG93h7f BC3UMVKNHskqmt3BrCeswYZzlcXQC2VISQ3Trdpctjx6GBM7uho9iooADuoTC9BM n4Hbq6HvVl6NhGBwRtayWGUrNgS4yRfUFyHWkAILSvcaW5AD1Tg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:00 2025 by rpki-client