$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: bD+R782//Sv3K/sFQiKaC13LCDn1rRS8IMcMxcx7S/4= Subject key identifier: 97:1B:6D:3B:AE:DB:33:B3:20:1C:2F:7A:29:54:3C:2C:2B:20:F3:13 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 1DA5BB15E6ED5BCE4B387A5B27D8BE653BBAD809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: F1 Signing time: Sat 10 May 2025 02:41:05 +0000 Manifest this update: Sat 10 May 2025 02:36:05 +0000 Manifest next update: Tue 13 May 2025 04:30:05 +0000 Files and hashes: 1: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: XFLao5pJ9dAfGOqyWNKh/7MGyACqBoGaWN8mXL4TA9Q=) 2: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: BgUfjlBOik3lVreb6x1VhcmAzB8os2FuzbKBtvTz7gM=) 3: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: yu8z55+Tr/+kJKakk3Vmp/sSKFGPsRRjeFUSIw8Az4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a5:bb:15:e6:ed:5b:ce:4b:38:7a:5b:27:d8:be:65:3b:ba:d8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: May 10 02:36:05 2025 GMT Not After : May 13 04:30:05 2025 GMT Subject: CN=971B6D3BAEDB33B3201C2F7A29543C2C2B20F313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:13:97:bf:5c:91:c5:84:d4:ba:ed:30:dd:8d: f2:e0:8f:bf:f3:34:95:1d:11:d0:a3:74:b5:ee:e1: d1:c4:74:45:a4:98:05:f4:9d:49:40:17:a7:e5:2b: 16:8c:b1:04:3c:e3:1d:b8:61:a9:76:ab:de:ca:b4: 7b:c6:63:0d:e8:ea:0b:ce:f1:84:6a:14:5e:21:7a: 75:6c:40:fa:e0:9b:f3:31:de:06:66:0e:ed:96:6b: 67:fe:1d:6b:d7:a2:f0:58:d3:6e:67:51:52:05:4c: 81:b6:e4:01:26:ba:c7:a3:7d:86:75:a5:d9:63:c6: e7:df:65:9c:8d:be:f1:e1:79:9e:63:8c:e4:76:c5: 81:80:f6:a8:f4:2e:46:d6:e1:6d:8b:e9:df:d2:a0: 10:b3:37:79:06:04:38:52:e1:ba:52:79:2a:f2:09: da:05:ea:52:c9:11:dc:f1:ed:21:af:dd:0a:ef:ff: 7e:62:33:2f:ef:d0:a7:08:17:b2:94:4a:38:49:5a: e5:8e:3d:2b:81:7d:25:0c:e6:cc:c5:de:e8:f0:af: 4f:d3:ce:53:db:d9:fa:e4:eb:11:7c:f4:e9:0c:a0: 84:d6:40:3a:65:47:00:55:dc:19:55:11:f4:6f:00: 2e:63:67:ad:eb:6a:4c:fc:57:2a:fe:56:8d:45:03: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1B:6D:3B:AE:DB:33:B3:20:1C:2F:7A:29:54:3C:2C:2B:20:F3:13 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2b:65:c7:18:30:ea:e5:3c:01:f4:75:1e:bf:8c:1d:e5:a8: d9:9e:02:b7:b4:be:c0:b1:2b:a7:e7:48:6b:5c:ef:bd:e9:49: 63:ef:5b:4a:a0:fd:eb:62:a9:43:31:62:3d:13:25:8f:97:5e: 8b:a0:dc:ab:bd:93:bc:1c:51:4c:fa:34:c8:5a:e1:f4:de:2b: 42:7d:ce:e2:cc:00:91:17:4c:1b:ba:b9:13:e8:b7:63:1c:50: 31:7d:ac:28:e5:ae:78:05:e8:15:f4:94:95:9b:77:ff:b3:fd: af:6d:73:96:2d:3f:fb:89:38:f3:e7:6e:fb:cb:da:be:e5:64: 4e:0e:68:c8:18:9f:2c:77:75:5d:2c:24:22:3c:05:95:5c:9a: d5:73:e8:ea:15:ef:a5:21:60:13:ab:bb:ff:92:c8:af:87:fa: 87:15:78:24:b1:3a:e5:83:ca:ac:32:75:64:c4:7c:bd:a9:40: 1a:26:40:c9:ad:51:32:9f:52:15:63:f3:b8:22:10:f7:08:25: 11:f1:19:06:45:5a:29:f6:3b:19:d0:bf:d5:7f:8c:8e:16:29: f0:47:be:44:7c:b9:7e:b7:7b:f0:e3:0a:3c:c6:23:a3:6a:1a: b2:16:b0:8f:d7:0f:eb:14:34:7d:f4:99:81:0b:ae:c3:d4:31: 6b:36:14:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaW7FebtW85LOHpbJ9i+ZTu62AkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNTA1MTAwMjM2MDVaFw0yNTA1MTMwNDMwMDVaMDMxMTAvBgNV BAMTKDk3MUI2RDNCQUVEQjMzQjMyMDFDMkY3QTI5NTQzQzJDMkIyMEYzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQE5e/XJHFhNS67TDdjfLgj7/z NJUdEdCjdLXu4dHEdEWkmAX0nUlAF6flKxaMsQQ84x24Yal2q97KtHvGYw3o6gvO 8YRqFF4henVsQPrgm/Mx3gZmDu2Wa2f+HWvXovBY025nUVIFTIG25AEmusejfYZ1 pdljxuffZZyNvvHheZ5jjOR2xYGA9qj0LkbW4W2L6d/SoBCzN3kGBDhS4bpSeSry CdoF6lLJEdzx7SGv3Qrv/35iMy/v0KcIF7KUSjhJWuWOPSuBfSUM5szF3ujwr0/T zlPb2frk6xF89OkMoITWQDplRwBV3BlVEfRvAC5jZ63rakz8Vyr+Vo1FAy3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxttO67bM7MgHC96KVQ8LCsg8xMwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0rZccYMOrlPAH0dR6/jB3lqNmeAre0vsCx K6fnSGtc773pSWPvW0qg/etiqUMxYj0TJY+XXoug3Ku9k7wcUUz6NMha4fTeK0J9 zuLMAJEXTBu6uRPot2McUDF9rCjlrngF6BX0lJWbd/+z/a9tc5YtP/uJOPPnbvvL 2r7lZE4OaMgYnyx3dV0sJCI8BZVcmtVz6OoV76UhYBOru/+SyK+H+ocVeCSxOuWD yqwydWTEfL2pQBomQMmtUTKfUhVj87giEPcIJRHxGQZFWin2OxnQv9V/jI4WKfBH vkR8uX63e/DjCjzGI6NqGrIWsI/XD+sUNH30mYELrsPUMWs2FAs= -----END CERTIFICATE-----Generated at Sat May 10 08:21:56 2025 by rpki-client