$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: IAF5P1IdPRXaktURKUHm4kSP6KiYMy3wUJ4i+mA2p9c= Subject key identifier: C2:40:FA:AB:04:CB:EA:00:D0:F4:EC:18:D3:0E:FC:22:F5:26:30:DA Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 4D09567609060D58F92941F7A917EB4FD11D7BB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 048E Signing time: Fri 04 Apr 2025 21:11:49 +0000 Manifest this update: Fri 04 Apr 2025 21:06:49 +0000 Manifest next update: Tue 08 Apr 2025 04:34:49 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: evCa3/6gzuQBhpuYJmE4WsOstwYY9ukw3YE7nPKDRVc=) 2: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=) 3: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:09:56:76:09:06:0d:58:f9:29:41:f7:a9:17:eb:4f:d1:1d:7b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Apr 4 21:06:49 2025 GMT Not After : Apr 8 04:34:49 2025 GMT Subject: CN=C240FAAB04CBEA00D0F4EC18D30EFC22F52630DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:e7:4d:cf:56:9d:5a:2a:54:43:82:6d:4e: f7:e7:06:d1:18:9d:06:27:ed:3c:8e:7d:43:bc:f7: 3d:1a:27:54:02:5f:8a:73:56:d1:62:03:92:f0:07: a6:46:ef:06:7d:91:cf:4a:fb:fc:cb:5e:5a:c4:3b: 8c:ae:31:4f:4c:52:0e:1f:f6:aa:89:b5:b4:15:b3: a6:66:f0:f7:ba:f9:1d:ef:d3:e1:a3:4d:cf:f8:6d: c9:80:57:3e:2e:ad:11:6d:ac:ad:66:29:60:8b:d5: 2a:ea:35:91:fe:f3:95:4b:7c:13:f9:6b:a6:d2:0f: 55:31:2e:29:b3:2a:ae:0c:c8:c6:51:c5:73:5c:fb: 12:6b:c8:02:f4:a3:64:8c:af:47:ae:bd:5f:b1:f8: 79:8e:ed:d4:40:61:6e:e3:7d:49:f1:e6:64:9a:44: 95:0e:3a:2e:c4:74:1c:9b:9f:86:d8:19:de:82:14: fc:4c:00:a2:eb:18:a9:b1:f8:f8:39:8a:9e:10:df: 28:1a:0c:6f:21:45:68:0d:03:06:b0:ce:e4:2a:0a: d1:31:45:d2:a8:82:eb:61:39:0d:91:aa:6b:97:10: 16:88:89:34:4c:20:a7:dd:76:d0:92:15:b2:2f:ce: 13:e5:6c:b7:df:04:42:77:b4:a6:48:69:5b:e0:54: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:40:FA:AB:04:CB:EA:00:D0:F4:EC:18:D3:0E:FC:22:F5:26:30:DA X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d9:9c:56:42:c5:7d:d0:e3:15:4c:1e:10:d9:3a:6c:dd:8e: ca:ab:2a:c8:e6:a0:4e:cb:5e:8f:98:50:e7:12:ca:45:29:17: 5b:dc:b2:1e:8b:48:1f:70:67:23:6f:4e:01:44:d2:61:06:ca: 3f:d3:14:b2:0a:57:6b:04:35:81:aa:00:0b:59:43:41:72:89: c9:23:83:9f:f9:9e:7e:a8:8c:63:cd:a3:23:1a:6d:07:d7:b9: 04:43:66:61:80:d1:e9:af:74:01:a2:c2:72:fa:c2:55:bd:f5: 7d:59:22:c1:10:a0:6e:9a:13:1b:65:25:eb:f3:2a:b8:0f:07: 1f:6e:7c:4f:62:42:bc:79:80:cd:3f:53:f9:27:8f:19:68:89: 63:8b:f2:f8:45:d2:75:6b:ca:35:8f:30:33:b2:64:7f:a9:a2: 80:fb:94:d0:13:7d:89:8c:f0:6f:02:51:44:b9:52:77:72:d3: 34:f2:da:91:40:db:e4:95:ed:82:bc:c3:54:cb:01:11:e3:08: ca:b0:09:14:44:a0:bf:b0:29:69:d3:00:53:11:3b:8b:a9:99: 50:06:4b:0c:d0:44:96:b8:3d:48:53:26:ba:1f:fc:28:65:fb: a3:19:5c:83:0d:2b:db:1b:34:c0:14:97:f3:2d:e4:eb:35:b5: f9:81:2f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQlWdgkGDVj5KUH3qRfrT9Ede7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA0MDQyMTA2NDlaFw0yNTA0MDgwNDM0NDlaMDMxMTAvBgNV BAMTKEMyNDBGQUFCMDRDQkVBMDBEMEY0RUMxOEQzMEVGQzIyRjUyNjMwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Y+dNz1adWipUQ4JtTvfnBtEY nQYn7TyOfUO89z0aJ1QCX4pzVtFiA5LwB6ZG7wZ9kc9K+/zLXlrEO4yuMU9MUg4f 9qqJtbQVs6Zm8Pe6+R3v0+GjTc/4bcmAVz4urRFtrK1mKWCL1SrqNZH+85VLfBP5 a6bSD1UxLimzKq4MyMZRxXNc+xJryAL0o2SMr0euvV+x+HmO7dRAYW7jfUnx5mSa RJUOOi7EdBybn4bYGd6CFPxMAKLrGKmx+Pg5ip4Q3ygaDG8hRWgNAwawzuQqCtEx RdKoguthOQ2RqmuXEBaIiTRMIKfddtCSFbIvzhPlbLffBEJ3tKZIaVvgVHXvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwkD6qwTL6gDQ9OwY0w78IvUmMNowHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbZnFZCxX3Q4xVMHhDZOmzdjsqrKsjmoE7L Xo+YUOcSykUpF1vcsh6LSB9wZyNvTgFE0mEGyj/TFLIKV2sENYGqAAtZQ0Fyickj g5/5nn6ojGPNoyMabQfXuQRDZmGA0emvdAGiwnL6wlW99X1ZIsEQoG6aExtlJevz KrgPBx9ufE9iQrx5gM0/U/knjxloiWOL8vhF0nVryjWPMDOyZH+pooD7lNATfYmM 8G8CUUS5Undy0zTy2pFA2+SV7YK8w1TLARHjCMqwCRREoL+wKWnTAFMRO4upmVAG SwzQRJa4PUhTJrof/Chl+6MZXIMNK9sbNMAUl/Mt5Os1tfmBL6c= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:06 2025 by rpki-client