$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: 0ayK3HOOS/2+JQbZIt4n1rfROB6+Tk15MppTRNNre6Y= Subject key identifier: D9:05:7C:2D:7B:DB:0E:8F:5D:42:A9:4D:51:6A:BF:3C:30:A7:3C:57 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 24D7127EEF0611820CFC546D08759217DFF64CEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: 0111 Signing time: Mon 21 Jul 2025 09:31:04 +0000 Manifest this update: Mon 21 Jul 2025 09:26:04 +0000 Manifest next update: Thu 24 Jul 2025 15:55:04 +0000 Files and hashes: 1: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: rArvUQl1bckNFEVnFq/9x+hxJ6rtKjMPh1W8LP75hBE=) 2: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: yu8z55+Tr/+kJKakk3Vmp/sSKFGPsRRjeFUSIw8Az4o=) 3: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: BgUfjlBOik3lVreb6x1VhcmAzB8os2FuzbKBtvTz7gM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d7:12:7e:ef:06:11:82:0c:fc:54:6d:08:75:92:17:df:f6:4c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Jul 21 09:26:04 2025 GMT Not After : Jul 24 15:55:04 2025 GMT Subject: CN=D9057C2D7BDB0E8F5D42A94D516ABF3C30A73C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:b0:21:bb:00:98:55:5a:1b:c7:ad:9c:b5: 60:47:30:98:f7:37:8c:0a:10:13:5b:e1:75:8b:bd: 4c:93:0e:ce:a2:11:83:87:8d:df:93:a1:a6:77:37: 2b:12:88:fa:4c:73:47:de:a1:87:31:5a:33:df:c7: 8d:d9:67:b6:7c:41:70:6d:be:87:cb:f7:e7:f2:f7: cf:35:90:94:cd:21:8e:77:30:77:f1:f4:30:ca:8e: 1e:5a:bf:b1:15:b7:76:9c:8b:4b:f8:6e:29:fa:0e: ac:7e:2f:db:38:44:7f:28:9f:96:95:95:03:08:c9: 8e:d4:76:81:cf:f9:c0:b3:17:04:64:74:bd:44:8c: d4:e8:31:f9:0e:4f:df:46:a5:e0:51:6e:26:25:a3: 54:75:20:04:57:fa:29:99:47:68:19:57:08:bc:65: 7d:55:50:64:71:dd:d3:27:df:a2:b6:fa:5e:9f:12: 8d:e9:63:a5:3f:92:e9:6e:a3:f7:4c:95:d6:ee:ba: a9:b1:32:49:72:5e:ba:3c:b1:eb:86:de:51:5e:4b: fa:ab:e6:25:12:45:47:e6:23:50:a7:a6:5f:77:39: 5b:e5:40:57:0a:9c:26:c9:2a:fa:e8:9c:30:fb:d2: 68:40:8f:ff:22:8f:8e:4a:72:d4:11:95:67:cd:f5: 3f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:05:7C:2D:7B:DB:0E:8F:5D:42:A9:4D:51:6A:BF:3C:30:A7:3C:57 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a8:56:f7:ef:0a:55:9f:e7:5b:d4:9a:87:30:88:74:51:38: bd:dc:ba:d7:a4:26:94:0c:27:78:33:15:2d:de:9b:3f:c7:0e: 8e:bb:cb:b7:8f:16:3d:32:47:ed:5d:b8:a5:08:f6:da:16:84: 47:b7:71:f6:ca:0f:f9:34:b9:3c:cd:ec:4a:db:59:3d:8a:88: 66:41:da:64:5d:77:8d:26:4b:b5:d9:3e:c6:0d:a8:f1:1e:b3: 7e:d5:ae:2c:b0:68:67:07:14:25:ed:14:ca:d9:47:b3:c9:23: 4d:c2:f9:4d:24:5c:11:5d:ef:a0:b7:36:54:10:fe:89:33:3e: 29:d3:ae:65:8b:fd:f7:13:ca:76:9b:87:5e:56:d7:d5:2e:90: 14:64:0a:8e:27:9a:7d:f2:66:3f:f4:6a:9e:0b:d7:b7:14:ab: 53:e2:05:17:5b:3e:9f:ee:4f:b7:94:d8:a6:0b:fc:f5:10:68: a4:74:a9:a8:d1:9e:05:20:47:b7:15:e8:73:f1:05:cf:e7:5c: 2b:2c:51:3a:a8:bf:c7:1e:d2:c2:9d:81:4a:c5:88:cf:e6:68: df:53:23:ed:d9:d1:46:d7:50:57:2d:aa:53:12:15:dd:1d:34: e5:41:de:a6:39:f0:1d:e7:d8:8d:ec:70:74:dc:9c:7a:40:e1: 84:a3:a3:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNcSfu8GEYIM/FRtCHWSF9/2TO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNTA3MjEwOTI2MDRaFw0yNTA3MjQxNTU1MDRaMDMxMTAvBgNV BAMTKEQ5MDU3QzJEN0JEQjBFOEY1RDQyQTk0RDUxNkFCRjNDMzBBNzNDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTrAhuwCYVVobx62ctWBHMJj3 N4wKEBNb4XWLvUyTDs6iEYOHjd+ToaZ3NysSiPpMc0feoYcxWjPfx43ZZ7Z8QXBt vofL9+fy9881kJTNIY53MHfx9DDKjh5av7EVt3aci0v4bin6Dqx+L9s4RH8on5aV lQMIyY7UdoHP+cCzFwRkdL1EjNToMfkOT99GpeBRbiYlo1R1IARX+imZR2gZVwi8 ZX1VUGRx3dMn36K2+l6fEo3pY6U/kuluo/dMldbuuqmxMklyXro8seuG3lFeS/qr 5iUSRUfmI1Cnpl93OVvlQFcKnCbJKvronDD70mhAj/8ij45KctQRlWfN9T9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2QV8LXvbDo9dQqlNUWq/PDCnPFcwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWoVvfvClWf51vUmocwiHRROL3cutekJpQM J3gzFS3emz/HDo67y7ePFj0yR+1duKUI9toWhEe3cfbKD/k0uTzN7ErbWT2KiGZB 2mRdd40mS7XZPsYNqPEes37VriywaGcHFCXtFMrZR7PJI03C+U0kXBFd76C3NlQQ /okzPinTrmWL/fcTynabh15W19UukBRkCo4nmn3yZj/0ap4L17cUq1PiBRdbPp/u T7eU2KYL/PUQaKR0qajRngUgR7cV6HPxBc/nXCssUTqov8ce0sKdgUrFiM/maN9T I+3Z0UbXUFctqlMSFd0dNOVB3qY58B3n2I3scHTcnHpA4YSjo+U= -----END CERTIFICATE-----Generated at Wed Jul 23 06:04:43 2025 by rpki-client