$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: D5GbUED2cvrrLJ6yHkB63uGT42d/wHrMT3Ej1R1Fr2s= Subject key identifier: 95:F7:84:37:0B:A7:BD:A5:E7:76:64:3D:4D:16:78:C3:D7:0A:95:1D Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 4ACAC5808F44B499A1B3647F903F9D5C35ED7C39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 01AC Signing time: Mon 20 Oct 2025 02:21:12 +0000 Manifest this update: Mon 20 Oct 2025 02:16:12 +0000 Manifest next update: Thu 23 Oct 2025 11:18:12 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: 6mCj/I1IldjekX+zAz73/ph+7Z0Qf2kMcdyzxnJH0pU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ca:c5:80:8f:44:b4:99:a1:b3:64:7f:90:3f:9d:5c:35:ed:7c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Oct 20 02:16:12 2025 GMT Not After : Oct 23 11:18:12 2025 GMT Subject: CN=95F784370BA7BDA5E776643D4D1678C3D70A951D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:c9:ee:87:54:12:be:66:7d:7c:69:5b:48: 52:c6:f9:2a:74:14:bb:e0:0f:e6:61:a2:0c:09:5e: ab:a5:c8:79:0c:f0:c3:0e:87:76:bd:ca:f1:73:d0: ba:21:5b:50:95:b4:6f:1a:2b:c2:d6:d1:8c:b4:cf: ab:82:35:20:cf:30:8d:51:bd:ce:86:94:e3:ae:b3: 6f:ba:b7:fc:6b:87:7a:95:97:92:de:4e:c4:bb:07: a6:ee:a3:0a:4d:99:92:69:dd:b7:88:91:03:9e:40: a5:e4:02:4e:3b:42:47:49:86:78:aa:68:39:96:d7: c4:ec:63:f7:97:f2:fa:5c:59:5e:a8:a5:46:dc:0b: b8:d5:b1:3d:85:62:64:74:86:b1:18:b7:58:51:d1: 56:25:6f:7f:d3:5c:51:40:d2:11:b2:63:04:be:44: 39:0a:bc:3c:07:e8:e1:0e:0d:4c:3b:eb:51:4f:05: 09:5c:a5:7d:8a:71:42:7b:0a:a5:b6:c7:43:65:d8: d3:42:e0:0a:df:6b:24:68:97:4e:f5:1e:82:a6:d7: a3:ea:c1:f4:82:ac:7c:ef:82:a2:e7:98:d9:53:a6: 47:b6:14:f2:ab:a6:bd:53:dd:62:ae:bc:15:f8:f7: e6:5b:4a:62:48:15:f9:a5:94:49:05:a4:72:b0:bb: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F7:84:37:0B:A7:BD:A5:E7:76:64:3D:4D:16:78:C3:D7:0A:95:1D X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c1:50:4e:2b:b0:64:43:25:45:81:78:d3:b7:91:e4:c2:3a: 74:e3:f3:5a:1a:83:09:69:64:e8:c2:91:63:64:99:9f:23:b1: 31:6b:94:dd:4c:ba:8c:9a:6f:68:de:0f:2d:95:94:5e:f6:bd: 7c:44:98:63:71:8f:cb:6e:61:d9:69:42:6f:bc:5f:bb:75:e6: 2b:9f:1a:12:2d:a0:8f:e0:dc:bf:04:8e:5d:66:e1:0d:dd:bb: 2b:1f:6f:66:8d:54:88:c2:aa:a2:e6:58:a3:e5:e4:cc:19:aa: 3a:5e:56:9b:e7:4a:d8:4e:a9:b4:c0:2f:19:2f:60:3d:39:94: f3:5a:fd:a4:55:b3:c2:c1:94:09:3e:94:0a:43:f5:38:5d:a6: b8:ac:bd:c9:4f:9a:86:7f:62:63:d8:6c:9d:09:59:8f:42:74: ec:1d:d7:a9:24:b3:d9:c4:88:e0:a2:22:88:ba:d7:ac:59:dd: 8c:55:8c:d7:55:69:3c:d6:05:21:4e:86:a0:23:be:fa:17:2b: d6:dc:cb:18:3f:cd:a1:30:3a:2e:5e:19:ed:a4:f7:7a:53:9b: fe:d1:5d:dc:39:e5:e8:7a:de:2a:3b:64:22:30:60:64:d7:94: 95:b9:55:71:b5:9c:7b:af:cd:8b:93:7a:56:4d:88:ad:59:45: 98:f2:27:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsrFgI9EtJmhs2R/kD+dXDXtfDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNTEwMjAwMjE2MTJaFw0yNTEwMjMxMTE4MTJaMDMxMTAvBgNV BAMTKDk1Rjc4NDM3MEJBN0JEQTVFNzc2NjQzRDREMTY3OEMzRDcwQTk1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5k8nuh1QSvmZ9fGlbSFLG+Sp0 FLvgD+ZhogwJXqulyHkM8MMOh3a9yvFz0LohW1CVtG8aK8LW0Yy0z6uCNSDPMI1R vc6GlOOus2+6t/xrh3qVl5LeTsS7B6buowpNmZJp3beIkQOeQKXkAk47QkdJhniq aDmW18TsY/eX8vpcWV6opUbcC7jVsT2FYmR0hrEYt1hR0VYlb3/TXFFA0hGyYwS+ RDkKvDwH6OEODUw761FPBQlcpX2KcUJ7CqW2x0Nl2NNC4ArfayRol071HoKm16Pq wfSCrHzvgqLnmNlTpke2FPKrpr1T3WKuvBX49+ZbSmJIFfmllEkFpHKwu2pHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlfeENwunvaXndmQ9TRZ4w9cKlR0wHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXBUE4rsGRDJUWBeNO3keTCOnTj81oagwlp ZOjCkWNkmZ8jsTFrlN1Muoyab2jeDy2VlF72vXxEmGNxj8tuYdlpQm+8X7t15iuf GhItoI/g3L8Ejl1m4Q3duysfb2aNVIjCqqLmWKPl5MwZqjpeVpvnSthOqbTALxkv YD05lPNa/aRVs8LBlAk+lApD9ThdprisvclPmoZ/YmPYbJ0JWY9CdOwd16kks9nE iOCiIoi616xZ3YxVjNdVaTzWBSFOhqAjvvoXK9bcyxg/zaEwOi5eGe2k93pTm/7R Xdw55eh63io7ZCIwYGTXlJW5VXG1nHuvzYuTelZNiK1ZRZjyJ7k= -----END CERTIFICATE-----Generated at Mon Oct 20 12:33:16 2025 by rpki-client