$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: Ka4vqWgRdlBjhIf+flsstORorem95MyK0cKsH5jTU7c= Subject key identifier: 22:05:BD:5A:E5:4C:62:24:16:51:E2:BE:70:65:C2:9D:27:2F:AE:21 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 75C1FD0E4364CEA56CC6A3EC3EA2D689A25DA533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 014E Signing time: Fri 04 Apr 2025 17:51:36 +0000 Manifest this update: Fri 04 Apr 2025 17:46:36 +0000 Manifest next update: Tue 08 Apr 2025 03:43:36 +0000 Files and hashes: 1: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: knCnX8hNb4jvTdshEaKjhkpplRfG8f6VFvTsDyxoJe0=) 2: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) 3: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 5: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c1:fd:0e:43:64:ce:a5:6c:c6:a3:ec:3e:a2:d6:89:a2:5d:a5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Apr 4 17:46:36 2025 GMT Not After : Apr 8 03:43:36 2025 GMT Subject: CN=2205BD5AE54C62241651E2BE7065C29D272FAE21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:61:e2:2c:cc:93:6b:41:de:40:16:48:1a: 37:8b:68:88:03:62:46:65:93:55:ac:f8:75:fc:5f: f2:08:f6:97:ac:2e:a1:f3:30:f6:59:57:a4:95:ed: 24:4f:49:9d:9c:64:63:01:8c:4d:7e:c7:10:71:af: 39:6e:89:73:f1:3e:67:43:c8:ae:40:6e:ef:73:27: d0:31:fd:ca:9c:0c:f1:e8:e7:ad:43:72:9a:2c:ea: 81:28:67:42:94:98:81:54:ae:5b:7f:12:b2:d2:1c: 40:e5:7b:43:c6:e6:dc:e0:25:64:1a:9c:26:c0:09: 1b:14:44:1f:03:d0:78:2d:1e:04:fa:4d:c1:f2:35: 49:f1:f8:a0:70:de:95:1c:ba:4c:90:37:48:e7:28: f9:09:b0:d3:86:c2:9c:71:e0:94:57:65:7a:5c:2f: eb:bc:26:c1:06:9f:b6:74:11:90:99:e8:d6:41:b5: 80:c0:e8:ed:81:3e:e6:82:6a:d9:7a:7c:c8:da:c9: 72:16:8e:eb:4d:19:5f:cb:7e:a8:2a:a8:9d:cb:9e: 26:fc:3c:7c:c7:f2:4e:59:e5:38:95:df:9f:9b:c4: 93:5e:73:f4:19:ed:1c:8c:27:1b:58:6a:f9:6b:bc: 33:c2:00:3b:83:d4:e5:e9:4d:35:0b:c7:b0:18:b7: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:05:BD:5A:E5:4C:62:24:16:51:E2:BE:70:65:C2:9D:27:2F:AE:21 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:09:a0:60:93:f0:eb:25:7a:d2:1f:24:09:c0:d3:87:55:11: 33:f1:43:b1:cc:44:43:39:2e:8f:02:d4:5c:47:12:86:76:51: c1:62:91:5a:0b:c4:db:26:8d:2a:77:d9:33:d3:73:d5:c5:92: fa:bf:ec:18:96:ce:3f:d0:23:52:d0:2c:90:5f:10:9a:04:ab: 9a:95:53:e5:23:85:88:6c:f6:4a:3d:6d:58:ca:de:2d:d3:9e: db:a2:92:b1:0e:dc:a8:e4:b5:20:dd:2f:2a:c1:c1:7d:ab:29: 6b:23:23:e5:93:61:91:4c:a6:5f:89:4c:f8:d4:8a:00:55:c2: 80:2c:16:bc:cf:ee:10:c6:ab:09:a6:58:5f:e9:c4:37:5b:36: 14:d7:51:ab:68:ef:5e:a1:f4:cb:f2:b1:01:02:da:d3:b3:26: f5:8b:37:f1:48:cd:46:b4:e2:60:df:e1:d7:d6:35:67:68:9f: 96:f9:eb:82:bc:69:84:08:ae:00:46:1a:26:8f:b3:d5:f2:25: 04:4c:a7:f0:c5:f4:32:12:ef:f6:10:c9:0b:4f:4a:c2:6b:14: bb:0b:d3:9c:54:11:a2:f3:1c:6c:45:87:bd:42:4f:23:b3:86: 1f:72:3d:5f:53:e1:1e:fb:a0:09:53:68:f7:a0:37:f5:28:8d: b1:3b:e9:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcH9DkNkzqVsxqPsPqLWiaJdpTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTA0MDQxNzQ2MzZaFw0yNTA0MDgwMzQzMzZaMDMxMTAvBgNV BAMTKDIyMDVCRDVBRTU0QzYyMjQxNjUxRTJCRTcwNjVDMjlEMjcyRkFFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIc2HiLMyTa0HeQBZIGjeLaIgD YkZlk1Ws+HX8X/II9pesLqHzMPZZV6SV7SRPSZ2cZGMBjE1+xxBxrzluiXPxPmdD yK5Abu9zJ9Ax/cqcDPHo561Dcpos6oEoZ0KUmIFUrlt/ErLSHEDle0PG5tzgJWQa nCbACRsURB8D0HgtHgT6TcHyNUnx+KBw3pUcukyQN0jnKPkJsNOGwpxx4JRXZXpc L+u8JsEGn7Z0EZCZ6NZBtYDA6O2BPuaCatl6fMjayXIWjutNGV/LfqgqqJ3Lnib8 PHzH8k5Z5TiV35+bxJNec/QZ7RyMJxtYavlrvDPCADuD1OXpTTULx7AYt5J5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIgW9WuVMYiQWUeK+cGXCnScvriEwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcJoGCT8OsletIfJAnA04dVETPxQ7HMREM5 Lo8C1FxHEoZ2UcFikVoLxNsmjSp32TPTc9XFkvq/7BiWzj/QI1LQLJBfEJoEq5qV U+UjhYhs9ko9bVjK3i3TntuikrEO3KjktSDdLyrBwX2rKWsjI+WTYZFMpl+JTPjU igBVwoAsFrzP7hDGqwmmWF/pxDdbNhTXUato716h9MvysQEC2tOzJvWLN/FIzUa0 4mDf4dfWNWdon5b564K8aYQIrgBGGiaPs9XyJQRMp/DF9DIS7/YQyQtPSsJrFLsL 05xUEaLzHGxFh71CTyOzhh9yPV9T4R77oAlTaPegN/UojbE76bk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:10 2025 by rpki-client