$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: +VQ9k7bN3rlkZUea9lVmpnnU02F9qoB9EP4RWI9TKgg= Subject key identifier: 16:70:1F:69:E6:6B:E6:7F:9C:0F:B3:8A:0A:53:98:4D:2F:B9:54:17 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 4A182E80502803F3E0108DDF009C2044D3413163 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 0390 Signing time: Sat 18 Oct 2025 20:51:10 +0000 Manifest this update: Sat 18 Oct 2025 20:46:10 +0000 Manifest next update: Wed 22 Oct 2025 05:39:10 +0000 Files and hashes: 1: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) 2: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: V+llfsCNR7y6TU77cBFpnyZtd2h5RHN1aRBUGlw7JPE=) 3: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) 4: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:18:2e:80:50:28:03:f3:e0:10:8d:df:00:9c:20:44:d3:41:31:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Oct 18 20:46:10 2025 GMT Not After : Oct 22 05:39:10 2025 GMT Subject: CN=16701F69E66BE67F9C0FB38A0A53984D2FB95417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:8a:d7:33:4c:ab:85:6c:1f:2f:38:ed:fb: 97:92:ce:e9:68:4d:44:c6:89:22:2d:ea:06:a4:a7: 12:49:38:42:95:eb:47:42:2d:68:44:93:4e:af:ef: 87:28:69:a8:0b:61:9a:be:35:f8:23:bb:60:71:d8: 07:55:ec:86:5a:d5:ff:6f:fc:0f:27:59:9e:38:0c: fa:00:62:8c:44:ad:bd:49:ab:8c:03:ac:a7:e5:cb: 70:ec:2a:a7:ed:b7:cb:b6:30:be:95:2b:b1:5c:e3: f6:b6:a6:9e:b1:a1:2c:61:a0:b7:21:34:89:5f:a9: 0b:fb:4e:fc:32:f0:28:c9:b7:43:ac:32:d5:10:7d: 24:9a:95:db:0b:75:1e:49:47:e5:0d:f2:0f:3a:e2: 6b:9b:9f:03:c2:34:c7:95:e0:1b:5f:a4:db:2c:5c: 11:41:b8:22:15:54:70:5c:7b:07:10:b4:47:38:a8: 25:7b:75:27:65:08:60:a3:01:f3:cf:32:15:d4:0a: 58:9b:b1:97:b6:65:85:53:e3:7f:c3:6a:4e:06:ed: b7:0e:a0:b1:32:f0:61:50:16:a3:c7:4e:aa:91:c8: 18:b4:4c:30:96:0d:23:1a:9b:c2:40:37:a7:75:81: 80:c3:36:84:15:8c:ca:c8:fd:f8:8c:2c:35:0f:74: c2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:70:1F:69:E6:6B:E6:7F:9C:0F:B3:8A:0A:53:98:4D:2F:B9:54:17 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:50:7c:91:2c:90:e9:6f:15:98:a5:90:25:99:a0:df:2b:56: 3d:f8:43:ef:80:7c:39:5b:fb:cf:c5:ff:3b:5f:ea:f3:d6:1b: 6a:81:df:e4:12:6c:f4:89:22:8c:9b:5c:6b:1e:b7:32:22:67: 4f:e7:7b:4f:37:c9:f7:1c:b1:b1:60:09:c5:ba:4c:a1:b5:96: 23:4b:a2:8a:9f:25:a1:e5:1c:92:dd:16:36:9e:69:f7:67:5a: a4:8f:34:33:a9:a9:53:d9:ef:b6:0e:d6:d4:78:6a:f6:b4:f2: a8:6e:6f:85:fc:3d:7b:1d:16:0d:3b:de:2b:39:50:71:b8:d7: f3:60:04:0e:09:9c:66:f2:d8:5b:ff:47:38:71:e1:73:29:9a: 95:1b:a4:c5:f2:ac:fc:43:9c:f1:88:b1:89:39:13:d0:d6:cd: 02:5b:67:1b:c9:34:c1:38:bb:5b:7b:51:be:77:98:1d:c2:8e: 8b:3b:ef:f5:54:93:72:51:27:8e:d3:76:b3:05:a6:1a:e5:ea: 26:b8:4d:f2:2b:ba:f3:59:46:96:23:8d:1f:ad:68:8b:c1:b4: 80:df:3e:37:4d:ca:1d:e9:5d:79:a1:ab:96:ae:01:99:94:fe: b4:01:61:2a:4b:f0:81:5e:3a:0e:ac:7f:89:1e:f6:0a:55:f8: e6:bc:4d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShgugFAoA/PgEI3fAJwgRNNBMWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTEwMTgyMDQ2MTBaFw0yNTEwMjIwNTM5MTBaMDMxMTAvBgNV BAMTKDE2NzAxRjY5RTY2QkU2N0Y5QzBGQjM4QTBBNTM5ODREMkZCOTU0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzorXM0yrhWwfLzjt+5eSzulo TUTGiSIt6gakpxJJOEKV60dCLWhEk06v74coaagLYZq+Nfgju2Bx2AdV7IZa1f9v /A8nWZ44DPoAYoxErb1Jq4wDrKfly3DsKqftt8u2ML6VK7Fc4/a2pp6xoSxhoLch NIlfqQv7Tvwy8CjJt0OsMtUQfSSaldsLdR5JR+UN8g864mubnwPCNMeV4BtfpNss XBFBuCIVVHBcewcQtEc4qCV7dSdlCGCjAfPPMhXUClibsZe2ZYVT43/Dak4G7bcO oLEy8GFQFqPHTqqRyBi0TDCWDSMam8JAN6d1gYDDNoQVjMrI/fiMLDUPdMKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFnAfaeZr5n+cD7OKClOYTS+5VBcwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlQfJEskOlvFZilkCWZoN8rVj34Q++AfDlb +8/F/ztf6vPWG2qB3+QSbPSJIoybXGsetzIiZ0/ne083yfccsbFgCcW6TKG1liNL ooqfJaHlHJLdFjaeafdnWqSPNDOpqVPZ77YO1tR4ava08qhub4X8PXsdFg073is5 UHG41/NgBA4JnGby2Fv/Rzhx4XMpmpUbpMXyrPxDnPGIsYk5E9DWzQJbZxvJNME4 u1t7Ub53mB3Cjos77/VUk3JRJ47TdrMFphrl6ia4TfIruvNZRpYjjR+taIvBtIDf PjdNyh3pXXmhq5auAZmU/rQBYSpL8IFeOg6sf4ke9gpV+Oa8TVA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:02 2025 by rpki-client