$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: AHWJkXc4e7OIi2PneXQgxRFfShWc84AEacjBrItcVxk= Subject key identifier: E7:30:36:2B:86:79:63:31:36:DB:CC:09:42:6A:79:CC:DF:A9:4A:29 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 3A963995F6EFA1DC85B37B3B48948FA84E46DF3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 0169 Signing time: Thu 05 Jun 2025 16:21:37 +0000 Manifest this update: Thu 05 Jun 2025 16:16:37 +0000 Manifest next update: Mon 09 Jun 2025 02:01:37 +0000 Files and hashes: 1: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 2: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) 3: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: Jf2fwQjzlZDDbUVKns+UdzY1rIaHvf30F/wmEewxkqc=) 4: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) 5: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:96:39:95:f6:ef:a1:dc:85:b3:7b:3b:48:94:8f:a8:4e:46:df:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Jun 5 16:16:37 2025 GMT Not After : Jun 9 02:01:37 2025 GMT Subject: CN=E730362B8679633136DBCC09426A79CCDFA94A29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:86:29:cd:57:66:27:a5:d4:0b:6b:06:5f: 69:75:0b:9d:9d:ed:e6:c7:82:bb:05:7b:e3:7b:ab: 07:f6:cd:89:f2:ae:68:00:61:b4:5e:48:cd:f0:52: 62:50:7a:2d:ec:14:e8:89:24:2f:9b:6b:f4:1c:13: 9b:ba:54:5f:37:eb:c9:fd:24:fa:3a:ed:62:74:59: f7:70:42:c5:0d:a3:e2:89:ba:bf:42:70:29:51:2f: be:b3:ad:e0:13:5e:06:df:c1:31:66:00:06:22:03: 65:38:1d:64:8e:7c:79:8c:5a:64:fc:3e:35:86:45: c1:89:cc:4b:75:c9:6e:9f:f4:d4:58:43:72:eb:74: da:4a:db:71:9f:56:28:53:b9:5b:1e:a0:5b:0c:79: 0a:4a:f0:e5:2a:d0:0b:08:5e:f1:83:1a:82:dc:58: 5e:89:41:fd:17:fe:8a:f7:e9:6a:92:7b:b4:71:5b: 0e:93:e2:e6:5d:b0:3b:f0:47:a4:4c:f3:7c:9d:c7: f9:06:d0:57:76:96:a5:cc:a5:5c:f4:a6:31:87:06: 14:de:a7:a6:13:a9:0e:57:66:ad:9a:09:69:5a:0a: 7e:41:ea:6b:7f:e4:0c:81:f4:a1:08:66:21:78:88: 73:89:a0:a0:a4:9b:fd:3f:21:0a:3a:f2:78:85:f9: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:30:36:2B:86:79:63:31:36:DB:CC:09:42:6A:79:CC:DF:A9:4A:29 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:38:03:8c:e2:bd:70:52:76:ae:79:12:47:53:db:5e:71:8d: 3f:b0:2d:cf:52:55:b3:96:27:94:7a:6d:f3:c3:82:0d:bd:8c: 81:91:9c:21:2c:b0:5c:72:38:c6:18:23:7c:4f:ff:b0:18:2a: 04:e8:5a:9e:15:8f:ce:86:8e:37:9b:e3:62:17:6a:b2:c7:d5: 46:8d:cd:f1:b9:48:76:a2:06:7a:31:64:4d:8d:81:5e:4b:27: 7f:61:6d:fe:6d:1a:d0:83:0e:43:ad:6b:69:e8:4c:0d:b0:2c: d4:10:b1:6f:53:fb:eb:af:7a:d2:04:e8:7d:41:c8:eb:b3:63: d9:9a:2c:a4:f3:a3:4c:84:c6:aa:33:89:63:58:83:d3:d7:4a: 12:d9:9a:df:6a:a6:40:ae:6f:56:7c:81:3b:1b:d5:45:ba:cf: 97:fc:55:ce:59:22:e1:ef:b7:6a:53:94:b9:d0:d6:79:62:30: 00:d8:ff:9b:db:cd:c4:a5:70:a0:17:04:8b:a2:84:28:6b:8f: 71:ee:4a:08:9b:45:62:6a:80:e4:4e:99:64:1b:b7:d2:02:47: cd:43:8a:74:e1:c7:57:ca:3a:ed:b8:24:96:bd:23:04:97:e5: 27:d5:d6:61:8d:71:32:38:10:3f:bf:0c:27:6f:8d:82:2b:f2: c6:c1:d2:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpY5lfbvodyFs3s7SJSPqE5G3z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTA2MDUxNjE2MzdaFw0yNTA2MDkwMjAxMzdaMDMxMTAvBgNV BAMTKEU3MzAzNjJCODY3OTYzMzEzNkRCQ0MwOTQyNkE3OUNDREZBOTRBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5IYpzVdmJ6XUC2sGX2l1C52d 7ebHgrsFe+N7qwf2zYnyrmgAYbReSM3wUmJQei3sFOiJJC+ba/QcE5u6VF8368n9 JPo67WJ0WfdwQsUNo+KJur9CcClRL76zreATXgbfwTFmAAYiA2U4HWSOfHmMWmT8 PjWGRcGJzEt1yW6f9NRYQ3LrdNpK23GfVihTuVseoFsMeQpK8OUq0AsIXvGDGoLc WF6JQf0X/or36WqSe7RxWw6T4uZdsDvwR6RM83ydx/kG0Fd2lqXMpVz0pjGHBhTe p6YTqQ5XZq2aCWlaCn5B6mt/5AyB9KEIZiF4iHOJoKCkm/0/IQo68niF+etdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5zA2K4Z5YzE228wJQmp5zN+pSikwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ4A4zivXBSdq55EkdT215xjT+wLc9SVbOW J5R6bfPDgg29jIGRnCEssFxyOMYYI3xP/7AYKgToWp4Vj86Gjjeb42IXarLH1UaN zfG5SHaiBnoxZE2NgV5LJ39hbf5tGtCDDkOta2noTA2wLNQQsW9T++uvetIE6H1B yOuzY9maLKTzo0yExqoziWNYg9PXShLZmt9qpkCub1Z8gTsb1UW6z5f8Vc5ZIuHv t2pTlLnQ1nliMADY/5vbzcSlcKAXBIuihChrj3HuSgibRWJqgOROmWQbt9ICR81D inThx1fKOu24JJa9IwSX5SfV1mGNcTI4ED+/DCdvjYIr8sbB0lE= -----END CERTIFICATE-----Generated at Sat Jun 7 14:07:16 2025 by rpki-client