$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: H4UjHnxxkXWdJi4OQN+pVb/W8ue2DceF95e0Er5zL6I= Subject key identifier: F6:F3:02:C2:21:18:C0:3F:9A:02:5A:EB:70:A1:22:6B:CC:CD:0F:8D Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 238D53FAA6E24BA53A636511DAE67ED7316EC917 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: 84 Signing time: Sat 26 Apr 2025 00:11:34 +0000 Manifest this update: Sat 26 Apr 2025 00:06:34 +0000 Manifest next update: Tue 29 Apr 2025 11:22:34 +0000 Files and hashes: 1: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: yYxyQlZHDUCqjhWnxGwna2YHOXEaXaKsQmKUucE7XFU=) 2: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 3: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) 4: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8d:53:fa:a6:e2:4b:a5:3a:63:65:11:da:e6:7e:d7:31:6e:c9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Apr 26 00:06:34 2025 GMT Not After : Apr 29 11:22:34 2025 GMT Subject: CN=F6F302C22118C03F9A025AEB70A1226BCCCD0F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:f8:4b:e6:fa:28:a6:9c:8c:ef:61:ed:b6: 19:b3:41:bc:72:6d:74:f9:de:d1:ae:32:19:c0:c2: db:03:81:20:8d:6f:f3:04:5f:53:7c:ac:b3:59:2f: 30:11:8f:9d:b5:3c:37:8e:8d:26:ac:e5:00:f3:ec: 38:db:89:e4:da:4f:03:e3:04:08:bb:a2:95:1f:03: 55:52:a8:c7:79:ec:56:d6:db:f5:1e:c1:e1:ba:fb: 2b:21:ce:1d:d1:ef:4d:a6:8e:d1:33:be:98:c1:90: 1f:f9:7e:70:90:ec:30:8f:0e:a8:e4:6c:41:ca:d0: e8:00:8f:e9:0b:42:35:ff:b1:e7:f8:a4:25:84:87: bd:de:29:11:d7:c6:19:31:e6:6b:cf:0a:5e:b1:c7: 7a:be:9d:00:15:7f:46:62:8e:6c:ab:8c:2c:57:79: 53:13:7f:20:ae:34:7c:8e:b1:67:45:05:65:01:d7: d2:38:51:66:2d:4a:1c:92:53:46:82:58:25:31:a2: b1:e2:5a:f2:f0:75:a4:95:36:21:58:e8:d7:d4:45: 0c:94:8c:9e:14:bd:63:d8:bd:c1:26:b1:99:28:42: d8:21:8e:f2:f8:c8:0a:d5:a5:11:fd:19:4b:3c:eb: d4:0d:77:83:99:64:81:f0:b7:be:c3:d2:61:2b:03: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F3:02:C2:21:18:C0:3F:9A:02:5A:EB:70:A1:22:6B:CC:CD:0F:8D X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5c:bf:00:06:3a:81:89:b2:dc:e2:c8:00:a9:2d:54:8b:6b: 9f:fa:c9:1b:4d:75:c6:91:65:6c:56:b8:c2:6e:39:fc:70:20: fe:0e:62:6d:84:a1:7d:f1:cd:08:d3:0d:4d:99:bc:00:78:10: 93:13:e7:3e:2b:9a:3c:9c:72:02:00:53:72:5f:ce:27:8a:a3: 68:75:b4:d8:db:52:bc:68:4b:51:b2:0e:5c:69:43:66:92:f6: da:d6:8b:78:9d:36:ff:8c:b3:32:50:5c:f9:3a:e2:c0:ec:0a: ee:08:9e:a1:b4:a2:7e:33:7f:6a:10:f9:e4:2b:0d:41:16:fb: 9b:61:8a:db:6a:6d:56:41:5f:9e:40:04:b8:1e:84:2d:57:09: 4f:73:75:3a:ff:bb:8b:61:08:c9:c1:cd:bb:cd:e3:da:8d:b7: 4f:60:ad:c3:47:5f:2a:f8:eb:1d:fb:52:7f:23:f4:be:68:35: 16:6a:16:78:61:24:35:ec:f4:cb:a0:66:67:09:e9:9d:a3:1c: d4:e0:b9:11:cb:42:86:aa:06:df:32:65:13:7d:a5:b0:4b:e2: ee:97:ba:28:e5:c1:bd:c2:ab:a0:3a:b9:c9:7f:73:e5:94:bf: fb:97:b6:12:f3:e8:8a:cc:c6:53:8e:ff:2a:08:6c:6c:30:82: d1:44:0a:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI41T+qbiS6U6Y2UR2uZ+1zFuyRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTA0MjYwMDA2MzRaFw0yNTA0MjkxMTIyMzRaMDMxMTAvBgNV BAMTKEY2RjMwMkMyMjExOEMwM0Y5QTAyNUFFQjcwQTEyMjZCQ0NDRDBGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdzPhL5vooppyM72HtthmzQbxy bXT53tGuMhnAwtsDgSCNb/MEX1N8rLNZLzARj521PDeOjSas5QDz7DjbieTaTwPj BAi7opUfA1VSqMd57FbW2/UeweG6+yshzh3R702mjtEzvpjBkB/5fnCQ7DCPDqjk bEHK0OgAj+kLQjX/sef4pCWEh73eKRHXxhkx5mvPCl6xx3q+nQAVf0ZijmyrjCxX eVMTfyCuNHyOsWdFBWUB19I4UWYtShySU0aCWCUxorHiWvLwdaSVNiFY6NfURQyU jJ4UvWPYvcEmsZkoQtghjvL4yArVpRH9GUs869QNd4OZZIHwt77D0mErA3O1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9vMCwiEYwD+aAlrrcKEia8zND40wHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFcvwAGOoGJstziyACpLVSLa5/6yRtNdcaR ZWxWuMJuOfxwIP4OYm2EoX3xzQjTDU2ZvAB4EJMT5z4rmjyccgIAU3JfzieKo2h1 tNjbUrxoS1GyDlxpQ2aS9trWi3idNv+MszJQXPk64sDsCu4InqG0on4zf2oQ+eQr DUEW+5thittqbVZBX55ABLgehC1XCU9zdTr/u4thCMnBzbvN49qNt09grcNHXyr4 6x37Un8j9L5oNRZqFnhhJDXs9MugZmcJ6Z2jHNTguRHLQoaqBt8yZRN9pbBL4u6X uijlwb3Cq6A6ucl/c+WUv/uXthLz6IrMxlOO/yoIbGwwgtFECn4= -----END CERTIFICATE-----Generated at Sun Apr 27 12:17:25 2025 by rpki-client