$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: P/+mHwqcrzqJ+HXnbw7NCx8Wpe3RayKULkjsjwvFmJE= Subject key identifier: D2:54:FF:92:E9:C9:B1:13:39:D6:A8:61:17:CE:67:94:91:B3:3D:69 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 06A70425DAAD97F40AC7CC4CF1F84B8D036E744D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: 0127 Signing time: Sat 06 Sep 2025 07:01:09 +0000 Manifest this update: Sat 06 Sep 2025 06:56:09 +0000 Manifest next update: Tue 09 Sep 2025 13:21:09 +0000 Files and hashes: 1: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: jur3GwCCR/cxdnMD6W4cwMvOKZw4VghZsOtg/kxwW48=) 2: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: z7p1B+WTxywb9H7TOcn0z3D/0gsJ3f2bzG+n4m7D58g=) 3: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: fg/QZptFLqxRoiOqaYt9GVklul/Zo57x2b9Yx8hCCKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a7:04:25:da:ad:97:f4:0a:c7:cc:4c:f1:f8:4b:8d:03:6e:74:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Sep 6 06:56:09 2025 GMT Not After : Sep 9 13:21:09 2025 GMT Subject: CN=D254FF92E9C9B11339D6A86117CE679491B33D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:12:0c:b2:fb:e9:10:ce:8a:30:15:db:2d: 79:cf:f0:ef:c8:f0:8e:33:22:81:90:f1:56:42:8f: ce:82:2c:dc:34:3f:0e:28:64:cc:37:bd:d5:90:4c: 93:9f:5a:63:ad:6f:b9:b1:ae:27:27:c3:70:ee:0b: 27:3d:66:de:3c:9d:31:46:bc:c7:75:b5:87:4c:fd: 1e:fb:67:96:49:80:25:a8:6f:af:9f:3e:76:87:af: c5:8f:6f:dd:b4:c3:c9:df:7f:36:11:9a:f1:d9:b2: fa:af:2c:3d:13:10:e1:23:42:3e:be:49:fc:9d:30: 16:6d:cf:a9:b7:26:86:94:09:ff:29:b6:4a:15:74: ec:92:29:57:d8:c8:a1:bd:fd:21:ee:79:bc:c6:68: a1:5d:79:95:86:5b:a9:13:3f:39:cd:45:5b:64:59: d6:73:22:75:9f:4e:58:74:13:4b:95:7b:a4:ce:7e: 55:32:c1:33:3f:d1:e6:9b:71:89:93:ba:b6:4b:34: 9b:4a:43:b5:0f:e2:14:f3:bb:52:f3:1a:c9:c9:eb: e6:3f:81:49:04:77:e9:21:42:33:c7:91:6a:b1:e2: 05:0e:f4:ef:00:81:cc:2b:18:ca:57:e0:34:d7:fb: dc:73:86:0b:75:6b:df:58:83:27:fc:c6:49:bc:69: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:54:FF:92:E9:C9:B1:13:39:D6:A8:61:17:CE:67:94:91:B3:3D:69 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:66:8d:bb:ac:93:52:35:36:c2:54:6e:09:c4:cf:72:8e:5f: 1d:8e:8b:7b:42:64:fa:a8:08:ee:75:13:79:24:7b:42:d7:21: d3:07:fe:e0:a3:3c:34:aa:6c:28:60:29:a4:90:2c:51:ff:fe: 1b:9b:39:3b:4a:4a:15:b0:2d:35:92:96:26:38:37:0b:b1:60: 9a:a9:94:42:d4:9f:4b:d6:7f:35:0a:2d:a9:5c:17:cd:c5:09: ed:a6:64:f6:55:85:5f:e7:75:c3:f6:1d:f4:8e:57:6a:55:fe: af:77:a9:ba:a7:5d:20:10:b6:09:c6:c0:92:e1:84:c8:03:7d: 2a:7d:b2:0f:43:0e:bb:7e:aa:3f:74:32:5f:d9:61:35:9b:0b: de:b3:24:6a:a2:68:af:a4:80:c4:65:1b:68:b2:6a:da:02:02: 44:25:66:d6:77:84:b3:8b:f0:94:3f:50:94:f9:d7:50:a7:c4: 8a:b2:c4:89:27:98:2f:bd:24:74:36:56:b3:cb:c3:81:bc:63: 6d:cb:14:c8:da:73:8c:0c:7f:bb:41:b0:1d:a3:73:e6:85:be: c3:45:f1:5e:95:58:21:57:af:83:b7:be:12:96:57:33:5f:44: ec:89:da:39:92:e8:21:a7:aa:30:b8:88:92:e7:47:dd:22:ee: de:30:14:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBqcEJdqtl/QKx8xM8fhLjQNudE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNTA5MDYwNjU2MDlaFw0yNTA5MDkxMzIxMDlaMDMxMTAvBgNV BAMTKEQyNTRGRjkyRTlDOUIxMTMzOUQ2QTg2MTE3Q0U2Nzk0OTFCMzNENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HBIMsvvpEM6KMBXbLXnP8O/I 8I4zIoGQ8VZCj86CLNw0Pw4oZMw3vdWQTJOfWmOtb7mxricnw3DuCyc9Zt48nTFG vMd1tYdM/R77Z5ZJgCWob6+fPnaHr8WPb920w8nffzYRmvHZsvqvLD0TEOEjQj6+ SfydMBZtz6m3JoaUCf8ptkoVdOySKVfYyKG9/SHuebzGaKFdeZWGW6kTPznNRVtk WdZzInWfTlh0E0uVe6TOflUywTM/0eabcYmTurZLNJtKQ7UP4hTzu1LzGsnJ6+Y/ gUkEd+khQjPHkWqx4gUO9O8AgcwrGMpX4DTX+9xzhgt1a99Ygyf8xkm8aQ5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0lT/kunJsRM51qhhF85nlJGzPWkwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpmjbusk1I1NsJUbgnEz3KOXx2Oi3tCZPqo CO51E3kke0LXIdMH/uCjPDSqbChgKaSQLFH//hubOTtKShWwLTWSliY4NwuxYJqp lELUn0vWfzUKLalcF83FCe2mZPZVhV/ndcP2HfSOV2pV/q93qbqnXSAQtgnGwJLh hMgDfSp9sg9DDrt+qj90Ml/ZYTWbC96zJGqiaK+kgMRlG2iyatoCAkQlZtZ3hLOL 8JQ/UJT511CnxIqyxIknmC+9JHQ2VrPLw4G8Y23LFMjac4wMf7tBsB2jc+aFvsNF 8V6VWCFXr4O3vhKWVzNfROyJ2jmS6CGnqjC4iJLnR90i7t4wFFQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:06 2025 by rpki-client