$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: iuXglQ+7HsPNH8S9tjZxDbS+tX5vQXcL6pmhz+DFamM= Subject key identifier: 69:48:73:A7:30:7E:1A:07:CA:BE:9F:CB:33:08:9E:39:3B:C4:82:91 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 6AD6950AA27D2830BD6C1BA3D50BD8C9AA238047 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 0191 Signing time: Thu 21 Aug 2025 21:01:12 +0000 Manifest this update: Thu 21 Aug 2025 20:56:12 +0000 Manifest next update: Sun 24 Aug 2025 21:55:12 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: qNzWf7UAYU3WhtClJGbQ6sqnt2Lm9ZIsEBKLz8YBZRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d6:95:0a:a2:7d:28:30:bd:6c:1b:a3:d5:0b:d8:c9:aa:23:80:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Aug 21 20:56:12 2025 GMT Not After : Aug 24 21:55:12 2025 GMT Subject: CN=694873A7307E1A07CABE9FCB33089E393BC48291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:96:73:49:82:a1:73:0d:84:2a:f9:55:be: b5:89:eb:23:1f:b5:44:66:f9:6d:1d:30:d1:53:f6: df:dc:f5:e4:80:79:6e:fc:91:55:a3:38:d7:44:60: 22:00:96:ac:d5:a7:54:81:82:d9:2b:dc:fb:e7:25: 48:ea:f3:1f:9f:8a:d9:9b:dd:84:9e:18:95:10:c3: 18:5e:ed:51:b5:7a:f4:39:a2:10:ef:49:d4:83:86: 2e:c5:34:d9:3c:8c:1d:da:12:63:4c:04:36:dc:8d: c0:da:9e:ad:2b:c3:1a:43:c9:86:af:e3:95:89:9c: 3d:ee:b7:cd:41:e3:49:32:74:6a:89:3f:14:81:55: ad:82:27:0f:0e:b1:c9:77:16:98:cc:d0:c3:2f:a2: 41:6a:1f:4d:7a:16:76:33:a0:48:a4:0f:74:8d:49: 3c:98:bf:83:06:1c:81:39:e2:8d:80:aa:9b:40:b1: 16:c4:c4:8a:42:d3:e4:21:95:0c:b7:55:cb:b2:91: a8:16:9b:ed:ce:7f:b0:47:28:00:f1:bc:c3:0e:3f: da:b8:f7:17:4f:4b:13:da:66:c2:c0:16:f2:a0:39: 7b:c1:de:8a:4c:6c:7c:5d:85:38:10:d2:01:f0:18: 9f:6b:4f:f0:d3:db:cd:8e:cd:5b:cc:c8:f7:23:cc: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:48:73:A7:30:7E:1A:07:CA:BE:9F:CB:33:08:9E:39:3B:C4:82:91 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a1:7c:f6:dd:db:cf:12:5a:5f:ed:2b:1a:f0:b8:7c:19:69: a8:aa:25:f6:ce:cd:5a:18:70:3c:95:4b:8a:32:b3:5e:c5:9f: 20:3f:d0:a8:9b:6c:1f:eb:b9:91:d2:cd:16:15:5f:e5:2e:30: e6:f4:ad:99:bd:ac:25:17:a5:4f:3e:ad:6c:25:ae:e2:5d:44: fa:a1:9f:71:30:b2:b0:d3:7b:ef:93:74:30:2c:90:01:b0:04: 19:47:e2:9c:d4:5c:a6:21:46:2d:2a:5b:cf:9a:8b:15:31:93: 05:7e:56:42:a4:e6:8d:3a:9f:f1:44:4c:74:d3:f4:ba:dd:50: 98:0e:ab:11:2e:1e:94:d6:00:6b:de:4a:4d:b0:ae:73:31:7b: e2:a0:8f:a0:93:c2:b1:c7:f2:e7:07:f4:9b:41:d5:27:47:0e: 5b:42:82:41:be:9b:51:97:97:45:61:ed:c3:67:67:0b:e6:73: 64:a4:e6:99:30:c8:78:df:f0:ae:7f:e0:81:9d:8a:c4:fd:9f: 56:c7:3c:49:8c:06:63:32:25:27:10:9d:15:d5:d5:9b:b3:10: d2:c8:a0:d2:de:54:b4:a7:c6:af:e0:67:6d:f2:eb:f8:fe:a4: 71:d2:9d:d1:7d:ef:6d:e0:8e:06:ac:a5:09:e5:69:46:ac:58: 60:47:e5:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUataVCqJ9KDC9bBuj1QvYyaojgEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNTA4MjEyMDU2MTJaFw0yNTA4MjQyMTU1MTJaMDMxMTAvBgNV BAMTKDY5NDg3M0E3MzA3RTFBMDdDQUJFOUZDQjMzMDg5RTM5M0JDNDgyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/JZzSYKhcw2EKvlVvrWJ6yMf tURm+W0dMNFT9t/c9eSAeW78kVWjONdEYCIAlqzVp1SBgtkr3PvnJUjq8x+fitmb 3YSeGJUQwxhe7VG1evQ5ohDvSdSDhi7FNNk8jB3aEmNMBDbcjcDanq0rwxpDyYav 45WJnD3ut81B40kydGqJPxSBVa2CJw8Oscl3FpjM0MMvokFqH016FnYzoEikD3SN STyYv4MGHIE54o2AqptAsRbExIpC0+QhlQy3VcuykagWm+3Of7BHKADxvMMOP9q4 9xdPSxPaZsLAFvKgOXvB3opMbHxdhTgQ0gHwGJ9rT/DT282OzVvMyPcjzOvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaUhzpzB+GgfKvp/LMwieOTvEgpEwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACahfPbd288SWl/tKxrwuHwZaaiqJfbOzVoY cDyVS4oys17FnyA/0KibbB/ruZHSzRYVX+UuMOb0rZm9rCUXpU8+rWwlruJdRPqh n3EwsrDTe++TdDAskAGwBBlH4pzUXKYhRi0qW8+aixUxkwV+VkKk5o06n/FETHTT 9LrdUJgOqxEuHpTWAGveSk2wrnMxe+Kgj6CTwrHH8ucH9JtB1SdHDltCgkG+m1GX l0Vh7cNnZwvmc2Sk5pkwyHjf8K5/4IGdisT9n1bHPEmMBmMyJScQnRXV1ZuzENLI oNLeVLSnxq/gZ23y6/j+pHHSndF9723gjgaspQnlaUasWGBH5Vo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:46 2025 by rpki-client