$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: h7g8eO6xebxSclQTETMnhyKjSXZ5tseH7IrMQaki99A= Subject key identifier: 08:73:59:2B:24:7D:57:07:77:74:CF:33:70:2D:58:7B:89:12:EA:7E Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 41A4CBA5DDF0A9A66B95596083E26A921133DC3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 0192 Signing time: Fri 05 Sep 2025 14:01:38 +0000 Manifest this update: Fri 05 Sep 2025 13:56:38 +0000 Manifest next update: Mon 08 Sep 2025 14:16:38 +0000 Files and hashes: 1: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: gmRjgcgB2leGAqed+7ntg1UB7xHkliFHDgomPZDcXPE=) 2: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) 3: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 5: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a4:cb:a5:dd:f0:a9:a6:6b:95:59:60:83:e2:6a:92:11:33:dc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Sep 5 13:56:38 2025 GMT Not After : Sep 8 14:16:38 2025 GMT Subject: CN=0873592B247D57077774CF33702D587B8912EA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0c:7d:c8:b5:b1:3d:78:05:dd:ad:4d:54:b2: ac:f9:07:97:c2:79:34:f6:ab:5a:21:3b:14:d9:79: f1:de:80:7b:58:96:eb:a9:e6:41:81:0e:79:9f:69: 45:28:8a:f3:3f:f8:8c:42:c0:58:5e:9f:08:60:94: 05:4c:83:60:ab:26:02:d4:de:5b:dc:71:66:c9:4a: c4:0e:a6:d5:fa:0e:0e:e5:4d:8b:42:8a:30:a6:f0: ff:d2:d8:eb:da:51:8e:3c:49:eb:3f:43:e7:d1:4e: 5a:ac:72:73:ce:dc:10:f8:0b:99:23:ce:ca:7c:63: 7a:55:57:30:7b:91:d3:2f:fc:67:1b:a2:94:4b:49: da:74:00:a8:14:69:b9:16:3c:5a:91:60:fd:75:ca: 8e:82:70:2b:0c:88:00:62:5f:f2:cc:c5:b2:cf:a1: 9d:41:0d:24:7f:40:94:e5:27:d5:b8:92:4b:65:c8: 0f:73:0d:d1:a7:0e:ae:87:1c:eb:72:e3:df:03:ef: 20:5c:1e:31:e6:37:f3:cc:eb:b8:03:b7:eb:4f:ea: 8b:01:e3:71:9a:45:c0:b6:ed:cd:77:53:ad:95:d1: 4e:b4:3e:e2:92:86:77:98:4e:26:0b:ce:74:c0:b5: 77:fd:d5:6f:46:27:d4:99:dc:1d:19:67:03:ee:aa: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:73:59:2B:24:7D:57:07:77:74:CF:33:70:2D:58:7B:89:12:EA:7E X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:df:ae:59:e7:b6:41:2c:a4:1f:d7:cf:5a:41:7a:7e:97:bd: 21:ab:05:7c:8b:81:14:8d:a9:64:78:1c:f9:40:09:1a:49:5d: 1c:af:cf:f9:87:0d:49:8f:70:9d:95:49:f6:c2:57:8e:71:2e: 72:a4:61:f2:17:90:a4:6a:75:5a:e8:5a:ab:08:35:fe:cb:14: 5b:c9:d2:e8:9c:da:2f:ec:68:75:29:b2:f7:80:2f:13:c0:30: 4b:76:57:58:ee:ff:20:aa:28:00:8b:4f:3a:eb:3c:04:67:52: 8d:6d:a2:7e:ea:61:24:5f:88:4b:d9:9f:b9:03:4c:2b:b7:6d: 0d:ff:ab:9a:37:74:1e:8e:c5:ae:ed:f5:49:67:91:08:35:fe: 77:20:8e:f4:5c:08:ae:85:be:e5:88:76:d0:e1:23:ce:91:2e: c9:28:ad:56:8f:23:c4:f5:70:10:c5:f1:ca:d7:d2:35:ff:ef: 82:a6:3e:32:e0:dc:80:7b:7a:66:a0:d5:3e:24:2e:ad:15:e0: 9e:96:4f:57:5a:84:b5:3e:5e:32:13:e0:d2:fa:af:70:ba:ea: 38:6c:3b:5e:bd:c1:c2:3c:29:4a:b2:d5:66:78:6a:24:5f:7e: 2e:53:20:2a:49:f5:fe:a3:b5:e9:d5:e9:a4:24:9c:7b:a6:4b: a2:fd:96:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQaTLpd3wqaZrlVlgg+JqkhEz3DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTA5MDUxMzU2MzhaFw0yNTA5MDgxNDE2MzhaMDMxMTAvBgNV BAMTKDA4NzM1OTJCMjQ3RDU3MDc3Nzc0Q0YzMzcwMkQ1ODdCODkxMkVBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyDH3ItbE9eAXdrU1Usqz5B5fC eTT2q1ohOxTZefHegHtYluup5kGBDnmfaUUoivM/+IxCwFhenwhglAVMg2CrJgLU 3lvccWbJSsQOptX6Dg7lTYtCijCm8P/S2OvaUY48Ses/Q+fRTlqscnPO3BD4C5kj zsp8Y3pVVzB7kdMv/GcbopRLSdp0AKgUabkWPFqRYP11yo6CcCsMiABiX/LMxbLP oZ1BDSR/QJTlJ9W4kktlyA9zDdGnDq6HHOty498D7yBcHjHmN/PM67gDt+tP6osB 43GaRcC27c13U62V0U60PuKShneYTiYLznTAtXf91W9GJ9SZ3B0ZZwPuqiIDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCHNZKyR9Vwd3dM8zcC1Ye4kS6n4wHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLfrlnntkEspB/Xz1pBen6XvSGrBXyLgRSN qWR4HPlACRpJXRyvz/mHDUmPcJ2VSfbCV45xLnKkYfIXkKRqdVroWqsINf7LFFvJ 0uic2i/saHUpsveALxPAMEt2V1ju/yCqKACLTzrrPARnUo1ton7qYSRfiEvZn7kD TCu3bQ3/q5o3dB6Oxa7t9UlnkQg1/ncgjvRcCK6FvuWIdtDhI86RLskorVaPI8T1 cBDF8crX0jX/74KmPjLg3IB7emag1T4kLq0V4J6WT1dahLU+XjIT4NL6r3C66jhs O169wcI8KUqy1WZ4aiRffi5TICpJ9f6jtenV6aQknHumS6L9ll8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:16:50 2025 by rpki-client