$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: jI1LaCt6gZEA8GXU8hQwNNMttqehyUiRtH5+xjL+IFk= Subject key identifier: 37:34:A7:5F:AC:FD:0D:1E:BB:92:CF:B6:DC:12:06:94:B2:CC:0F:D9 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 28621C3DCFB662D9DF35164AC3D7673FB50116C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: 9A Signing time: Sun 15 Jun 2025 22:11:34 +0000 Manifest this update: Sun 15 Jun 2025 22:06:34 +0000 Manifest next update: Thu 19 Jun 2025 05:50:34 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 2: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: Bl4Kjig10HndtQpxMz6zLrvT9LNWD9SHWJVj1eattu4=) 3: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) 4: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 05:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:62:1c:3d:cf:b6:62:d9:df:35:16:4a:c3:d7:67:3f:b5:01:16:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Jun 15 22:06:34 2025 GMT Not After : Jun 19 05:50:34 2025 GMT Subject: CN=3734A75FACFD0D1EBB92CFB6DC120694B2CC0FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:5e:30:cd:44:8d:0a:b4:79:87:b1:1c:8e: b0:23:42:b1:5c:5e:84:50:f7:8a:1d:70:6e:48:5a: 26:f4:10:13:0f:0b:5c:2e:4c:64:4d:0d:5a:f0:a5: aa:89:64:e0:d4:f9:ac:39:f3:07:a9:06:db:87:01: 62:0a:12:9e:ed:4d:98:14:ed:0d:98:42:92:7b:9f: 69:db:a3:be:39:c7:52:8a:4c:ac:bd:e2:8b:78:f5: d9:b5:d5:72:c6:4a:f1:62:19:72:e1:44:e4:3a:1b: 2b:b4:ca:92:80:94:f7:3e:06:d1:f4:c7:db:10:cb: 0e:3c:1f:e7:ab:9a:06:57:12:59:98:d2:6f:2e:77: 9d:8f:fe:1d:28:98:5e:db:ec:8b:6e:bf:b2:70:b4: a4:05:39:08:2b:9b:e7:e9:b5:ca:76:79:3c:06:eb: 42:8a:9a:25:d8:ae:c9:01:11:ae:0c:bc:ad:de:8f: d6:55:71:58:4c:ea:37:e5:30:b4:02:c1:6a:8e:b1: 8d:1c:56:4c:8f:be:c3:1c:b0:28:09:b3:f5:72:b5: f6:fe:c8:53:c1:d8:02:5b:0e:7e:13:58:a8:95:cc: 10:af:0b:fa:94:1f:f7:8d:d2:aa:95:0d:9b:56:c2: 21:39:8f:88:82:81:6a:62:18:38:ee:b3:78:4a:5f: c7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:34:A7:5F:AC:FD:0D:1E:BB:92:CF:B6:DC:12:06:94:B2:CC:0F:D9 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a7:ed:85:c5:06:3a:6a:55:8d:e2:6b:6c:59:b8:1a:fb:2d: 7a:d8:76:3a:d3:2a:df:09:52:58:57:66:16:4d:af:d8:df:48: 9a:51:54:57:49:2e:7f:03:0a:a1:fc:af:a2:6a:51:d0:8e:86: ea:c8:f0:c2:56:e2:c9:0d:41:1e:8a:13:1c:a1:52:aa:cf:1c: 03:bc:f7:07:1b:d8:4c:03:04:41:d8:2d:81:ba:08:c4:82:26: 6e:d4:9a:51:d0:55:74:65:0e:33:27:31:a9:b5:b6:db:3e:85: 2a:91:55:68:0f:7d:2a:26:78:75:70:1f:1a:30:6c:db:6e:71: a8:97:83:98:d3:4b:cd:d2:b0:99:ca:7c:8e:a0:63:c3:91:72: e0:0f:17:dc:a3:01:10:56:24:c3:77:1e:de:eb:5d:0a:f3:91: 86:59:b9:18:c4:36:fa:ea:b8:cb:3d:d2:6d:a9:49:e4:19:f4: 80:b3:48:cc:43:16:cd:72:b6:cd:1b:53:68:ee:d7:d5:55:2e: a5:0a:a9:0d:a4:3e:30:68:e6:a7:5f:7e:a4:2e:bd:2a:60:e7: 33:d2:51:4b:cc:7a:e0:94:54:4f:3f:4b:00:3e:c9:eb:48:83: f1:de:47:50:a5:01:fa:51:af:81:fa:c5:54:65:f9:fd:ea:94: b7:c8:7e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGIcPc+2YtnfNRZKw9dnP7UBFsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTA2MTUyMjA2MzRaFw0yNTA2MTkwNTUwMzRaMDMxMTAvBgNV BAMTKDM3MzRBNzVGQUNGRDBEMUVCQjkyQ0ZCNkRDMTIwNjk0QjJDQzBGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAF4wzUSNCrR5h7EcjrAjQrFc XoRQ94odcG5IWib0EBMPC1wuTGRNDVrwpaqJZODU+aw58wepBtuHAWIKEp7tTZgU 7Q2YQpJ7n2nbo745x1KKTKy94ot49dm11XLGSvFiGXLhROQ6Gyu0ypKAlPc+BtH0 x9sQyw48H+ermgZXElmY0m8ud52P/h0omF7b7Ituv7JwtKQFOQgrm+fptcp2eTwG 60KKmiXYrskBEa4MvK3ej9ZVcVhM6jflMLQCwWqOsY0cVkyPvsMcsCgJs/Vytfb+ yFPB2AJbDn4TWKiVzBCvC/qUH/eN0qqVDZtWwiE5j4iCgWpiGDjus3hKX8ejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNzSnX6z9DR67ks+23BIGlLLMD9kwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALan7YXFBjpqVY3ia2xZuBr7LXrYdjrTKt8J UlhXZhZNr9jfSJpRVFdJLn8DCqH8r6JqUdCOhurI8MJW4skNQR6KExyhUqrPHAO8 9wcb2EwDBEHYLYG6CMSCJm7UmlHQVXRlDjMnMam1tts+hSqRVWgPfSomeHVwHxow bNtucaiXg5jTS83SsJnKfI6gY8ORcuAPF9yjARBWJMN3Ht7rXQrzkYZZuRjENvrq uMs90m2pSeQZ9ICzSMxDFs1yts0bU2ju19VVLqUKqQ2kPjBo5qdffqQuvSpg5zPS UUvMeuCUVE8/SwA+yetIg/HeR1ClAfpRr4H6xVRl+f3qlLfIfj4= -----END CERTIFICATE-----Generated at Tue Jun 17 08:17:10 2025 by rpki-client