$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: NP1hSmE/stcRLxoetnE4T1AzgLSqSaMsuUMKdnW7fps= Subject key identifier: CC:00:C3:31:89:92:24:A8:D0:38:46:D1:16:66:23:68:97:99:23:EA Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 59559AEDF07FE4A917D8102FBCFBC80BEECFA377 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: F4 Signing time: Thu 03 Apr 2025 06:41:41 +0000 Manifest this update: Thu 03 Apr 2025 06:36:41 +0000 Manifest next update: Sun 06 Apr 2025 16:16:41 +0000 Files and hashes: 1: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: RLZc3AJXUmtgDlEvJA2GDRf5kZ6y22vijbbpbtnp4hY=) 2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: UhTnOZ0eR4pV0pc2TNTMXOcqZMm3I9KiGgwKvyJXQRE=) 3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: YVXU9bZeYflVSgxxKGLIQ5msIEKdutfulcIw6pY80+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:55:9a:ed:f0:7f:e4:a9:17:d8:10:2f:bc:fb:c8:0b:ee:cf:a3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Apr 3 06:36:41 2025 GMT Not After : Apr 6 16:16:41 2025 GMT Subject: CN=CC00C331899224A8D03846D116662368979923EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:93:2f:93:b8:25:e6:63:b7:7d:12:95:be: e0:c9:84:39:c4:ff:92:5d:03:99:6b:c4:1f:ee:ed: 0b:35:0c:6f:eb:69:34:1c:c8:d4:d2:a8:35:d9:3f: 86:24:31:06:6f:2d:89:1e:04:fa:7d:e9:1e:23:88: b1:bd:cf:12:7b:b9:8f:96:83:55:1b:06:93:ff:5c: e2:7f:6e:c7:42:ec:5b:28:e6:7f:dd:bf:94:5f:0f: 31:2b:1f:1e:e4:11:25:40:fc:39:77:07:7a:ac:bf: 6d:59:6b:6a:c0:16:8b:5f:28:9f:01:3d:d4:ad:b1: 4e:13:65:2f:b5:87:96:67:a8:33:25:fd:1c:72:f4: f6:45:78:04:1d:f6:55:ff:ef:90:2e:b0:a8:b6:2d: bd:30:a9:e7:09:8f:a5:c9:63:3f:3d:b7:e3:7d:ab: c9:23:de:07:86:17:b2:b3:3c:e7:39:ea:a9:34:a9: 96:37:69:ef:29:92:cd:b2:ee:d0:e9:d6:a2:4d:ff: 38:5f:2a:86:54:65:09:13:89:ba:03:a9:4a:8b:73: a4:f7:f0:66:c9:b2:8a:d9:28:12:be:ba:fc:67:8e: ef:0f:ff:85:b2:11:2e:7f:4a:05:7c:81:87:f5:96: 73:df:26:78:ad:9d:69:92:84:93:29:9f:42:85:c7: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:00:C3:31:89:92:24:A8:D0:38:46:D1:16:66:23:68:97:99:23:EA X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6b:14:b4:59:ca:dc:a9:e1:bf:59:6b:fb:89:74:aa:65:b3: c5:e7:da:9b:2c:a0:4b:01:1b:4a:9b:a3:05:3b:47:60:b7:32: 7a:45:1a:a3:75:15:19:18:52:a5:d7:bf:a7:6c:d7:b9:be:4b: e6:67:ed:7f:5e:9a:31:41:8f:70:fc:3c:90:d6:1e:8d:bc:6a: 07:b8:1b:e1:ff:5c:5d:0b:40:b9:25:22:e8:d5:0d:09:cb:77: c6:29:c6:17:f9:a8:20:e1:3d:2b:c1:b0:bb:fb:fa:4c:ed:4b: cd:f7:3e:0c:11:22:e1:70:d9:67:1e:81:ad:59:37:73:6f:cb: 90:e3:e4:f3:af:85:df:68:f6:1a:2a:55:78:b4:59:0e:41:e2: c6:60:58:f6:2e:a8:f9:2b:ca:d7:e6:8c:b8:b1:ff:1b:d9:3f: be:20:eb:ed:46:8e:f9:e8:d0:55:4b:87:cc:54:0a:7c:a8:c0: 5d:46:01:13:15:80:96:23:2f:5b:40:03:49:f4:89:c3:30:31: db:06:3f:8c:11:c0:60:fe:14:8e:7b:22:c8:3f:e8:d2:a0:bf: 3a:41:c6:80:5f:fe:9e:a4:2e:fb:39:b6:6b:5e:3f:35:db:0e: 62:7b:60:b1:ea:21:31:70:ae:0d:50:bd:69:85:86:e1:68:ea: 0f:fa:1c:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVWa7fB/5KkX2BAvvPvIC+7Po3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTA0MDMwNjM2NDFaFw0yNTA0MDYxNjE2NDFaMDMxMTAvBgNV BAMTKENDMDBDMzMxODk5MjI0QThEMDM4NDZEMTE2NjYyMzY4OTc5OTIzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFr5Mvk7gl5mO3fRKVvuDJhDnE /5JdA5lrxB/u7Qs1DG/raTQcyNTSqDXZP4YkMQZvLYkeBPp96R4jiLG9zxJ7uY+W g1UbBpP/XOJ/bsdC7Fso5n/dv5RfDzErHx7kESVA/Dl3B3qsv21Za2rAFotfKJ8B PdStsU4TZS+1h5ZnqDMl/Rxy9PZFeAQd9lX/75AusKi2Lb0wqecJj6XJYz89t+N9 q8kj3geGF7KzPOc56qk0qZY3ae8pks2y7tDp1qJN/zhfKoZUZQkTiboDqUqLc6T3 8GbJsorZKBK+uvxnju8P/4WyES5/SgV8gYf1lnPfJnitnWmShJMpn0KFx+X9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzADDMYmSJKjQOEbRFmYjaJeZI+owHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5rFLRZytyp4b9Za/uJdKpls8Xn2pssoEsB G0qbowU7R2C3MnpFGqN1FRkYUqXXv6ds17m+S+Zn7X9emjFBj3D8PJDWHo28age4 G+H/XF0LQLklIujVDQnLd8Ypxhf5qCDhPSvBsLv7+kztS833PgwRIuFw2Wcega1Z N3Nvy5Dj5POvhd9o9hoqVXi0WQ5B4sZgWPYuqPkrytfmjLix/xvZP74g6+1Gjvno 0FVLh8xUCnyowF1GARMVgJYjL1tAA0n0icMwMdsGP4wRwGD+FI57Isg/6NKgvzpB xoBf/p6kLvs5tmtePzXbDmJ7YLHqITFwrg1QvWmFhuFo6g/6HLo= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:14 2025 by rpki-client