$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: pvpmb0Znsz+trT9HdaeOeLTy5DB2SVceSZ02g2Zw+9Q= Subject key identifier: 3B:7F:7C:FA:79:AA:E3:C4:75:C2:63:7A:3C:6D:13:EE:49:93:82:21 Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 4EC7E465C595E90013885212BAE90253E1E1A298 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 04A9 Signing time: Wed 04 Jun 2025 17:01:51 +0000 Manifest this update: Wed 04 Jun 2025 16:56:51 +0000 Manifest next update: Sat 07 Jun 2025 22:36:51 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: Sm62aNJEfaLw+aY7EWdMw5KrALvivISKgbtRkKNGwyw=) 2: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=) 3: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c7:e4:65:c5:95:e9:00:13:88:52:12:ba:e9:02:53:e1:e1:a2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Jun 4 16:56:51 2025 GMT Not After : Jun 7 22:36:51 2025 GMT Subject: CN=3B7F7CFA79AAE3C475C2637A3C6D13EE49938221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:d1:97:f7:b4:f4:ab:11:df:ea:f4:a2:ff: 41:a4:b8:32:64:9b:39:4a:97:2c:41:a1:de:e8:ec: 88:57:64:f1:6b:6e:82:df:64:75:cb:e1:ea:c8:56: 5c:d0:15:fe:d8:d7:e9:49:10:9c:4f:3b:90:68:af: 9c:55:71:8b:57:ac:c8:3c:56:72:c9:8d:5b:02:ae: dc:46:67:50:8a:45:40:dc:c9:8d:a2:2b:65:0f:ec: 21:fe:f4:d1:e4:48:73:2c:4c:49:81:8f:06:0a:a6: 2c:bd:d3:ea:71:27:2b:73:6e:8a:4c:a2:fc:6c:31: 46:21:5e:f9:6d:6a:93:29:92:0d:f3:9a:43:b9:ea: d6:07:cb:e5:9f:21:d8:63:82:3b:05:4f:38:39:96: 90:20:69:79:86:d9:88:09:b8:27:e9:82:06:80:ba: ae:5b:f0:6b:64:40:69:52:23:42:ae:1c:ef:68:3b: 63:8d:9a:df:4b:87:1e:04:8e:7e:3e:91:38:aa:4c: e7:a0:25:2f:95:d1:a4:ec:95:54:46:40:98:9f:b5: 60:68:0d:0b:75:66:9d:a5:93:b2:44:f3:51:4b:b2: 7c:86:1b:61:12:96:5b:b1:e3:7c:69:e0:c6:98:09: 16:27:7f:3b:34:3f:c1:9b:9c:2b:1b:18:32:5a:5a: c3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7F:7C:FA:79:AA:E3:C4:75:C2:63:7A:3C:6D:13:EE:49:93:82:21 X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:89:5c:0c:c7:95:1b:89:ad:26:c6:ed:af:de:5b:01:21:0a: 50:cc:47:c7:3a:54:bb:e2:73:ad:fd:f9:b8:8c:fc:1d:c6:be: 04:25:e3:0e:b6:7e:d5:8f:0f:08:c7:81:1e:a0:ac:da:99:53: fc:99:24:ba:a2:cc:61:7a:7e:2a:13:e3:b5:9b:b9:af:c1:cf: ed:e5:aa:1e:90:7a:02:27:63:19:f4:d6:d1:0a:4a:0b:e1:6a: 2c:d4:91:b5:70:fa:9e:b7:45:8c:5c:ee:b8:70:51:dc:19:9d: af:f7:00:a7:cc:3d:72:c9:8a:14:70:5b:17:7b:84:8b:c1:32: ac:1b:85:36:88:8f:35:29:a2:63:b4:19:be:1d:c6:11:16:40: ca:3d:a2:92:2e:08:c8:4c:36:70:a1:a5:95:fc:02:74:1e:2c: bb:00:3b:c5:9f:f5:cb:06:3a:27:2d:30:7f:b7:c1:04:9f:ce: d0:30:fd:5a:3a:38:6e:ca:7e:07:21:b5:da:22:46:9b:4e:5b: a0:48:f6:44:7d:32:8b:ed:1d:4e:e9:79:ce:6c:59:77:12:c3: 9b:59:44:43:7c:59:fd:eb:2a:9a:ef:d2:1a:e1:c5:f3:5a:08: 92:b5:78:40:0f:da:28:c2:55:95:5a:6a:dd:b9:4d:f2:a4:63: e3:da:ca:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsfkZcWV6QATiFISuukCU+HhopgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA2MDQxNjU2NTFaFw0yNTA2MDcyMjM2NTFaMDMxMTAvBgNV BAMTKDNCN0Y3Q0ZBNzlBQUUzQzQ3NUMyNjM3QTNDNkQxM0VFNDk5MzgyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdtGX97T0qxHf6vSi/0GkuDJk mzlKlyxBod7o7IhXZPFrboLfZHXL4erIVlzQFf7Y1+lJEJxPO5Bor5xVcYtXrMg8 VnLJjVsCrtxGZ1CKRUDcyY2iK2UP7CH+9NHkSHMsTEmBjwYKpiy90+pxJytzbopM ovxsMUYhXvltapMpkg3zmkO56tYHy+WfIdhjgjsFTzg5lpAgaXmG2YgJuCfpggaA uq5b8GtkQGlSI0KuHO9oO2ONmt9Lhx4Ejn4+kTiqTOegJS+V0aTslVRGQJiftWBo DQt1Zp2lk7JE81FLsnyGG2ESllux43xp4MaYCRYnfzs0P8GbnCsbGDJaWsPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO398+nmq48R1wmN6PG0T7kmTgiEwHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaJXAzHlRuJrSbG7a/eWwEhClDMR8c6VLvi c639+biM/B3GvgQl4w62ftWPDwjHgR6grNqZU/yZJLqizGF6fioT47Wbua/Bz+3l qh6QegInYxn01tEKSgvhaizUkbVw+p63RYxc7rhwUdwZna/3AKfMPXLJihRwWxd7 hIvBMqwbhTaIjzUpomO0Gb4dxhEWQMo9opIuCMhMNnChpZX8AnQeLLsAO8Wf9csG OictMH+3wQSfztAw/Vo6OG7KfgchtdoiRptOW6BI9kR9MovtHU7pec5sWXcSw5tZ REN8Wf3rKprv0hrhxfNaCJK1eEAP2ijCVZVaat25TfKkY+Paync= -----END CERTIFICATE-----Generated at Fri Jun 6 16:49:15 2025 by rpki-client