$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: pEWe3bOGdyr0OYmq7iH4+OJ5CT2qBODklXQvrwrCl24= Subject key identifier: 7B:04:D5:DB:68:B4:97:49:90:3C:AA:BA:94:9E:A8:C0:1F:15:6F:D5 Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 088A3CAB101E17EB59C861BB7F3E2C00C8973C24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0124 Signing time: Mon 21 Jul 2025 00:01:41 +0000 Manifest this update: Sun 20 Jul 2025 23:56:41 +0000 Manifest next update: Thu 24 Jul 2025 11:20:41 +0000 Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: UhTnOZ0eR4pV0pc2TNTMXOcqZMm3I9KiGgwKvyJXQRE=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: YVXU9bZeYflVSgxxKGLIQ5msIEKdutfulcIw6pY80+k=) 3: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: /7rj6cJT3zO1Y7LZbIOwn1vQjOFl7e+PMBkuIe6WaYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8a:3c:ab:10:1e:17:eb:59:c8:61:bb:7f:3e:2c:00:c8:97:3c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Jul 20 23:56:41 2025 GMT Not After : Jul 24 11:20:41 2025 GMT Subject: CN=7B04D5DB68B49749903CAABA949EA8C01F156FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:41:c7:f9:b2:2c:85:75:20:84:35:3d:9d:e1: a1:f8:aa:08:5b:6a:ba:51:f8:96:dd:8f:32:25:32: 1a:9c:bd:99:bd:a8:2f:7b:38:e1:c6:9a:a2:7d:76: f2:1b:b4:61:20:90:df:71:89:7a:cc:48:8f:ae:87: ba:21:72:ca:c7:df:6f:42:da:d7:86:33:60:c9:93: 11:61:0d:e7:00:8b:cf:cd:7d:cc:1f:e0:b4:bd:83: 44:38:16:89:8b:a2:5e:0f:2c:9c:0d:34:cf:a7:99: e9:7b:7d:38:d6:f1:79:f4:c8:94:e5:76:de:e8:88: 29:6e:1d:ce:4d:49:12:0a:db:36:80:27:55:98:9b: e6:ce:ea:64:83:bc:ea:a1:2d:af:d3:1d:c7:6c:e7: 1d:7a:ed:14:f5:28:99:8a:04:01:0a:be:1f:23:bb: 60:cc:28:3d:5c:b9:a4:4c:71:cb:03:b0:d3:ed:f8: d8:22:d9:76:7e:a5:5a:9e:d8:77:f4:09:ce:af:f4: 60:9a:fe:83:e2:54:49:d3:58:e4:77:fa:0f:f3:69: d1:cf:6b:15:82:79:e3:92:fa:20:f6:c2:e2:c2:2b: bb:73:0d:c6:e6:70:33:8f:01:44:8c:63:21:6d:e5: d8:b5:1f:68:c3:ce:49:cf:58:d8:41:69:df:19:7f: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:04:D5:DB:68:B4:97:49:90:3C:AA:BA:94:9E:A8:C0:1F:15:6F:D5 X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7a:02:64:1b:11:82:df:f5:f2:4e:b6:fa:07:45:6d:f3:46: a6:f3:dd:29:2d:06:9d:50:f8:41:1d:fa:c0:b9:a2:cc:96:02: b4:ef:20:b7:a1:57:43:60:cf:fe:4e:1b:43:ba:61:0b:5e:12: 29:aa:76:0d:6b:98:36:86:3c:98:f2:49:62:34:93:09:48:09: 4b:fd:d6:61:e2:b6:ba:55:78:3d:be:02:86:d1:0c:58:ef:4a: 03:55:8f:4a:ad:fd:38:59:b2:ae:45:da:dd:ed:83:fb:31:3b: 2f:60:29:62:15:ae:2d:f1:0b:d6:15:61:15:a6:35:d8:81:34: cf:76:04:4f:c8:93:d8:28:6f:e4:a7:5d:24:e0:06:38:3e:9f: fc:b2:3b:be:a0:74:0b:ef:62:60:3c:3d:c1:07:20:27:52:c8: 90:d2:89:37:8c:81:e0:e2:a4:7f:d1:1e:25:b7:b7:f9:43:61: 70:a8:4f:34:d4:b2:cf:59:dc:67:f2:8a:46:24:92:49:af:2d: 23:4f:38:f6:bc:99:16:23:71:e5:39:26:62:84:c6:05:fa:f8: 0f:17:29:9c:c9:51:a0:90:b8:50:3f:b1:09:c0:27:9c:d3:21: c2:d4:6c:b8:fa:ff:ec:6e:a0:c2:c6:e1:eb:ae:68:ae:97:49: f9:15:5c:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIo8qxAeF+tZyGG7fz4sAMiXPCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTA3MjAyMzU2NDFaFw0yNTA3MjQxMTIwNDFaMDMxMTAvBgNV BAMTKDdCMDRENURCNjhCNDk3NDk5MDNDQUFCQTk0OUVBOEMwMUYxNTZGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyQcf5siyFdSCENT2d4aH4qghb arpR+JbdjzIlMhqcvZm9qC97OOHGmqJ9dvIbtGEgkN9xiXrMSI+uh7ohcsrH329C 2teGM2DJkxFhDecAi8/Nfcwf4LS9g0Q4FomLol4PLJwNNM+nmel7fTjW8Xn0yJTl dt7oiCluHc5NSRIK2zaAJ1WYm+bO6mSDvOqhLa/THcds5x167RT1KJmKBAEKvh8j u2DMKD1cuaRMccsDsNPt+Ngi2XZ+pVqe2Hf0Cc6v9GCa/oPiVEnTWOR3+g/zadHP axWCeeOS+iD2wuLCK7tzDcbmcDOPAUSMYyFt5di1H2jDzknPWNhBad8Zf62PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUewTV22i0l0mQPKq6lJ6owB8Vb9UwHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACR6AmQbEYLf9fJOtvoHRW3zRqbz3SktBp1Q +EEd+sC5osyWArTvILehV0Ngz/5OG0O6YQteEimqdg1rmDaGPJjySWI0kwlICUv9 1mHitrpVeD2+AobRDFjvSgNVj0qt/ThZsq5F2t3tg/sxOy9gKWIVri3xC9YVYRWm NdiBNM92BE/Ik9gob+SnXSTgBjg+n/yyO76gdAvvYmA8PcEHICdSyJDSiTeMgeDi pH/RHiW3t/lDYXCoTzTUss9Z3GfyikYkkkmvLSNPOPa8mRYjceU5JmKExgX6+A8X KZzJUaCQuFA/sQnAJ5zTIcLUbLj6/+xuoMLG4euuaK6XSfkVXGg= -----END CERTIFICATE-----Generated at Mon Jul 21 12:23:35 2025 by rpki-client