$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: shOziqAYBDI1OIJ7Ic/qLpKdP3DO0/goja9quWrj9s0= Subject key identifier: B3:0D:AF:7C:DE:ED:85:01:ED:34:BC:82:96:30:F7:61:32:00:C8:18 Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 3859418DCCEE6601D640E7AD90A1C85147DD7E47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 0113 Signing time: Sun 20 Jul 2025 17:30:42 +0000 Manifest this update: Sun 20 Jul 2025 17:25:42 +0000 Manifest next update: Wed 23 Jul 2025 20:41:42 +0000 Files and hashes: 1: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: A7pqqbF7u0ZpACOGc4Ufz/ZXASP3ZjTUb7UXkXAAo1U=) 2: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: GdFQ16ys5THdsOt0JvI+f1x6ys8/DZCpLZHhWmZPVdg=) 3: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 0vbyY37xfecmYZZ06+vwEcy+Hnbk4rhg/muBGmLCtEA=) 4: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: 8rRzKbXxM7JbqlliFf/wDyC7Rc9CVk2AoWCVylO5lhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:59:41:8d:cc:ee:66:01:d6:40:e7:ad:90:a1:c8:51:47:dd:7e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Jul 20 17:25:42 2025 GMT Not After : Jul 23 20:41:42 2025 GMT Subject: CN=B30DAF7CDEED8501ED34BC829630F7613200C818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:fc:ec:c3:84:75:3c:99:4d:39:d2:ad:1b: 31:29:88:44:e0:a3:a2:9f:08:35:ac:d9:c9:76:8e: 0d:bb:e0:aa:14:35:a1:26:b8:0b:2c:8a:1e:45:ef: 08:b6:83:20:68:58:57:6d:12:1f:28:21:aa:3a:b6: 7f:40:9b:06:ce:56:1f:a8:65:60:22:fe:53:19:34: 1d:32:58:4a:9d:e9:ca:6c:7d:dc:37:0f:d7:cf:60: 94:cb:ba:88:89:8d:58:97:0f:b5:c9:5a:c9:21:53: 18:5a:99:58:04:f8:43:9f:2f:d0:a5:92:b8:65:32: 7a:46:38:64:9c:c4:09:2b:81:33:76:90:9b:dd:7a: 72:14:7b:73:9e:c9:21:21:a5:3b:65:dd:a2:52:9c: da:e1:70:72:7f:cf:37:92:59:a0:6e:dd:70:c2:c6: 01:7e:4d:e6:ea:03:07:43:bd:20:e1:08:90:e6:32: f2:a2:47:dc:4e:55:c0:c5:70:b1:66:90:c7:77:08: d6:56:f4:09:f1:87:f5:ba:16:e9:ec:a7:45:d1:ea: e7:21:9c:9c:ab:80:98:17:4f:a2:03:6e:fc:4c:cf: b0:16:4a:6b:40:32:b8:c2:13:4f:e5:78:72:39:cf: d9:7e:95:cf:fb:0b:00:07:f7:55:b0:2f:ef:cc:14: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0D:AF:7C:DE:ED:85:01:ED:34:BC:82:96:30:F7:61:32:00:C8:18 X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0e:cb:38:b7:8f:2e:b2:67:4f:5f:49:26:31:35:ac:ac:df: 69:67:59:71:7f:37:54:68:7d:e5:98:d8:7a:f8:ce:ea:aa:0b: e5:13:5b:1d:5c:e2:a4:6a:01:f7:73:8c:5b:8a:56:a5:da:8b: ee:a0:05:3b:b8:c8:03:d8:a4:50:0f:a2:0e:a4:96:80:52:23: 92:6d:22:83:18:68:63:98:67:2a:74:6d:cd:9a:16:4e:0a:d5: 4f:0d:55:c3:25:57:18:a8:fc:d0:34:03:d8:35:97:77:3c:e1: 4d:99:46:0b:d2:e3:81:96:19:b5:c3:c2:98:38:9f:33:6a:37: 88:5b:c5:33:ef:88:b7:07:86:1a:88:8d:d7:87:1b:c4:38:fc: 8f:d2:6c:2c:71:6d:fc:f4:29:b3:52:f4:0a:3c:a5:73:e8:b5: a8:e6:86:9d:1f:40:1e:8a:e4:12:2d:7d:b0:1a:51:59:e6:64: e9:b0:50:d6:4e:56:ae:1b:5c:4b:ae:c2:21:09:0d:e4:01:bc: 2a:a6:e5:b7:25:37:ee:1d:76:f5:5a:d3:72:08:90:6d:c7:4b: 62:2e:a7:fa:e0:c6:76:61:64:3e:c8:fe:3b:a6:1a:2b:12:30: 5e:be:8e:c9:7d:a3:a7:6f:0b:c7:77:48:ea:43:49:0f:74:ad: 70:18:b7:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFlBjczuZgHWQOetkKHIUUfdfkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTA3MjAxNzI1NDJaFw0yNTA3MjMyMDQxNDJaMDMxMTAvBgNV BAMTKEIzMERBRjdDREVFRDg1MDFFRDM0QkM4Mjk2MzBGNzYxMzIwMEM4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGvzsw4R1PJlNOdKtGzEpiETg o6KfCDWs2cl2jg274KoUNaEmuAssih5F7wi2gyBoWFdtEh8oIao6tn9AmwbOVh+o ZWAi/lMZNB0yWEqd6cpsfdw3D9fPYJTLuoiJjViXD7XJWskhUxhamVgE+EOfL9Cl krhlMnpGOGScxAkrgTN2kJvdenIUe3OeySEhpTtl3aJSnNrhcHJ/zzeSWaBu3XDC xgF+TebqAwdDvSDhCJDmMvKiR9xOVcDFcLFmkMd3CNZW9Anxh/W6Funsp0XR6uch nJyrgJgXT6IDbvxMz7AWSmtAMrjCE0/leHI5z9l+lc/7CwAH91WwL+/MFJZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsw2vfN7thQHtNLyCljD3YTIAyBgwHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEOyzi3jy6yZ09fSSYxNays32lnWXF/N1Ro feWY2Hr4zuqqC+UTWx1c4qRqAfdzjFuKVqXai+6gBTu4yAPYpFAPog6kloBSI5Jt IoMYaGOYZyp0bc2aFk4K1U8NVcMlVxio/NA0A9g1l3c84U2ZRgvS44GWGbXDwpg4 nzNqN4hbxTPviLcHhhqIjdeHG8Q4/I/SbCxxbfz0KbNS9Ao8pXPotajmhp0fQB6K 5BItfbAaUVnmZOmwUNZOVq4bXEuuwiEJDeQBvCqm5bclN+4ddvVa03IIkG3HS2Iu p/rgxnZhZD7I/jumGisSMF6+jsl9o6dvC8d3SOpDSQ90rXAYt5g= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:19 2025 by rpki-client