$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: lDDwWeWHZJH/EWdkz/cEwWihByLd/wXUzM56OGDYal4= Subject key identifier: 5D:CA:4D:82:75:37:9A:96:0E:9E:45:EF:AF:AB:B4:16:9D:B7:B1:AE Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 20181067CC8415B3B0C2EAA56B60348DE76045E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0139 Signing time: Thu 04 Sep 2025 07:11:43 +0000 Manifest this update: Thu 04 Sep 2025 07:06:43 +0000 Manifest next update: Sun 07 Sep 2025 08:04:43 +0000 Files and hashes: 1: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: d+8I7fCWINKQS8/+Oj2kJcUD54PAqVbZTfwgGcI6cBA=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) 3: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 08:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:18:10:67:cc:84:15:b3:b0:c2:ea:a5:6b:60:34:8d:e7:60:45:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Sep 4 07:06:43 2025 GMT Not After : Sep 7 08:04:43 2025 GMT Subject: CN=5DCA4D8275379A960E9E45EFAFABB4169DB7B1AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:75:fe:ca:00:dc:c3:ff:95:46:87:d4:b6:f2: 96:c5:b2:5e:b8:0d:31:5a:c8:54:79:94:b6:4b:82: fe:7e:47:70:2d:23:90:e7:f6:e0:de:66:d1:e4:15: 16:ee:18:c7:b9:d8:9d:91:29:40:d1:d8:2e:5b:00: cd:c4:2f:95:fa:60:c1:8e:0c:91:6f:b6:52:54:32: fc:50:b9:c5:3e:7e:b4:bc:5c:e6:51:55:f7:60:f1: 39:0e:50:2d:f9:8f:20:33:22:1e:df:99:ad:b3:31: bc:26:5d:50:e8:c0:2e:95:d7:9a:ba:60:25:47:98: 90:c8:8e:2b:dd:44:19:63:39:72:01:ba:62:e2:01: 38:98:7b:67:d8:47:45:0e:8d:ea:df:4a:b9:d1:72: 26:fb:bc:52:98:0c:ce:61:57:60:50:04:74:eb:2f: 47:36:fd:88:3f:ca:d5:6f:6c:4e:90:84:8f:50:65: 4c:7d:fc:ce:6a:46:13:ce:2c:bb:8d:b5:70:bb:54: 07:87:99:ce:33:4e:7c:10:fc:f9:70:c8:db:6f:30: 0e:63:c9:fa:d5:41:2c:7e:5a:8d:6a:ea:dc:33:c0: f6:cb:f5:c1:34:45:18:6b:0a:69:d3:91:2b:fd:a2: eb:d0:9d:ca:c5:fc:ba:b1:99:d8:9b:93:10:c1:da: 3e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CA:4D:82:75:37:9A:96:0E:9E:45:EF:AF:AB:B4:16:9D:B7:B1:AE X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:16:bd:20:a2:1c:51:80:a3:c9:1b:49:ea:6b:1d:16:ee:77: bc:bd:a2:0b:51:cf:d4:b1:1d:3b:c4:0c:f4:fc:cb:f1:0a:0a: 00:5d:59:e4:ee:37:83:a6:3a:61:a9:9e:3b:fd:33:e4:df:9c: de:39:c1:67:0a:a2:c3:1a:5a:d1:d3:14:ad:0e:34:00:36:9c: 0b:bd:28:7b:4c:44:d1:ab:65:37:28:89:95:d0:b1:b7:ee:4d: 93:e1:73:d6:a2:9b:33:79:50:90:ec:ef:2d:32:c5:4b:36:a0: 8c:42:39:7f:ea:6a:a2:03:77:0a:ec:44:cc:2a:c0:cd:96:28: 97:68:4c:27:46:70:c2:76:f1:3e:00:e6:8f:66:44:f1:53:56: 30:ef:94:b0:05:82:5d:1b:e5:2b:c3:e2:d9:fd:43:44:38:c2: 75:6a:78:f8:92:89:1f:e4:ee:67:7c:6a:eb:d8:4d:3a:3b:e1: 0f:0b:76:f9:a7:5d:75:04:5d:75:51:33:14:94:87:16:9f:34: 4d:8e:90:3d:78:d8:71:01:d2:b6:ca:78:f6:5f:74:84:aa:e4: 34:51:c0:72:32:fc:6d:6a:0a:65:88:90:3a:82:6d:21:30:cd: e9:46:7d:b7:84:2d:dc:ab:90:a6:85:14:b9:be:83:77:20:2a: f5:7f:b8:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBgQZ8yEFbOwwuqla2A0jedgReUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTA5MDQwNzA2NDNaFw0yNTA5MDcwODA0NDNaMDMxMTAvBgNV BAMTKDVEQ0E0RDgyNzUzNzlBOTYwRTlFNDVFRkFGQUJCNDE2OURCN0IxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7df7KANzD/5VGh9S28pbFsl64 DTFayFR5lLZLgv5+R3AtI5Dn9uDeZtHkFRbuGMe52J2RKUDR2C5bAM3EL5X6YMGO DJFvtlJUMvxQucU+frS8XOZRVfdg8TkOUC35jyAzIh7fma2zMbwmXVDowC6V15q6 YCVHmJDIjivdRBljOXIBumLiATiYe2fYR0UOjerfSrnRcib7vFKYDM5hV2BQBHTr L0c2/Yg/ytVvbE6QhI9QZUx9/M5qRhPOLLuNtXC7VAeHmc4zTnwQ/PlwyNtvMA5j yfrVQSx+Wo1q6twzwPbL9cE0RRhrCmnTkSv9ouvQncrF/LqxmdibkxDB2j6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXcpNgnU3mpYOnkXvr6u0Fp23sa4wHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIWvSCiHFGAo8kbSeprHRbud7y9ogtRz9Sx HTvEDPT8y/EKCgBdWeTuN4OmOmGpnjv9M+TfnN45wWcKosMaWtHTFK0ONAA2nAu9 KHtMRNGrZTcoiZXQsbfuTZPhc9aimzN5UJDs7y0yxUs2oIxCOX/qaqIDdwrsRMwq wM2WKJdoTCdGcMJ28T4A5o9mRPFTVjDvlLAFgl0b5SvD4tn9Q0Q4wnVqePiSiR/k 7md8auvYTTo74Q8LdvmnXXUEXXVRMxSUhxafNE2OkD142HEB0rbKePZfdISq5DRR wHIy/G1qCmWIkDqCbSEwzelGfbeELdyrkKaFFLm+g3cgKvV/uMQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:26 2025 by rpki-client