$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: 6pi3snz/i4oObbMjuokMxmRLRPP873rJiXcDNBazR2c= Subject key identifier: D2:BB:7E:35:BF:60:7D:8A:B5:11:EC:B6:6D:42:5D:3D:03:A7:B5:BD Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 3B335D7EA5644DDC12640D56B33ECF46C2B81848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 49 Signing time: Thu 07 Aug 2025 00:50:56 +0000 Manifest this update: Thu 07 Aug 2025 00:45:56 +0000 Manifest next update: Sun 10 Aug 2025 07:42:56 +0000 Files and hashes: 1: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 3: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: dgcO5eBn0RLSYhIkGw9ATcT0vmFwEkE5rFc6TlQSwlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:33:5d:7e:a5:64:4d:dc:12:64:0d:56:b3:3e:cf:46:c2:b8:18:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Aug 7 00:45:56 2025 GMT Not After : Aug 10 07:42:56 2025 GMT Subject: CN=D2BB7E35BF607D8AB511ECB66D425D3D03A7B5BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a0:48:95:e3:d9:da:7c:0f:86:71:cd:25:b9: 91:72:c1:5f:1a:91:ab:fc:e3:f7:fc:0e:a5:fc:45: b9:c2:c9:6c:61:12:c0:79:69:09:d5:32:60:df:d5: f2:d0:88:8a:aa:88:0d:c0:29:ee:5d:c8:a0:62:ed: 21:80:1c:49:b4:a6:b2:6a:b1:76:c9:b7:2a:73:a4: 4c:14:9b:b2:ee:93:93:d5:42:2f:5b:9c:56:57:bb: ec:d3:9f:f9:0c:9c:e6:87:8b:93:cd:1c:c0:58:5f: 63:84:3a:a2:00:5f:9a:4c:96:6e:fa:04:59:94:49: 82:9f:4f:73:4c:ab:d5:89:ac:8b:a9:82:d1:a4:0b: b3:c7:f1:25:ef:f5:e8:0d:69:06:af:ac:a6:50:6f: 7b:b9:59:54:65:d7:b7:e3:3b:f9:fe:d7:7c:3b:e5: 6d:9a:3c:34:8f:17:c4:2b:02:7e:9c:ab:2d:50:83: 54:ba:65:88:db:27:f6:7a:ae:52:b4:16:7d:52:56: 28:23:82:46:f5:27:0f:16:31:0e:89:9b:c1:57:5c: ae:e5:21:6c:f3:a1:35:89:b0:a7:da:c9:2b:04:80: 4e:9e:60:b7:cf:c8:f5:ea:1c:bf:de:6c:3e:e6:69: ac:e4:19:e2:cb:d8:95:83:56:9e:39:f7:c0:8c:2b: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BB:7E:35:BF:60:7D:8A:B5:11:EC:B6:6D:42:5D:3D:03:A7:B5:BD X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:60:dc:5c:75:2b:ed:f3:bb:39:64:bb:38:73:e5:e6:c0:ce: b9:f4:6a:32:68:6f:6b:8b:f8:44:d7:1a:62:20:12:10:37:27: ae:2c:c6:a0:ee:c9:e6:92:63:fc:72:6f:72:c8:1b:22:d6:c1: 64:25:81:e2:c5:99:c0:82:4c:d1:6f:08:6c:c0:a5:9b:e8:89: 5a:61:11:d1:76:30:23:58:2b:bc:5d:81:6f:a8:19:04:af:33: 32:a2:4d:83:9c:3f:97:ee:59:e9:f8:75:76:62:21:f9:6e:8b: 55:a5:2c:a5:4e:93:49:39:73:eb:5d:94:34:1e:a4:c4:0e:ac: 45:b3:24:39:4a:12:73:26:e3:06:a9:69:7e:b1:c0:63:5e:65: 40:a4:1d:af:0f:ba:d0:48:33:c3:ef:51:d9:81:5a:cd:5f:66: 7f:14:ff:f5:bb:c5:94:ab:4d:99:73:fa:83:33:78:09:8e:f9: 14:ca:1d:f9:72:2c:ae:c7:83:e3:6b:bf:3d:c9:75:13:3e:53: c2:a2:e0:21:33:7d:62:94:86:c5:2b:5a:09:d5:06:fc:51:33: a8:26:e8:9d:c9:6c:3f:e7:9c:1f:fc:69:f8:25:29:56:ad:0f: b7:dc:5f:80:15:f2:c5:6e:b9:42:3e:9e:c7:6e:98:80:5f:49: 9e:5d:89:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzNdfqVkTdwSZA1Wsz7PRsK4GEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA4MDcwMDQ1NTZaFw0yNTA4MTAwNzQyNTZaMDMxMTAvBgNV BAMTKEQyQkI3RTM1QkY2MDdEOEFCNTExRUNCNjZENDI1RDNEMDNBN0I1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDooEiV49nafA+Gcc0luZFywV8a kav84/f8DqX8RbnCyWxhEsB5aQnVMmDf1fLQiIqqiA3AKe5dyKBi7SGAHEm0prJq sXbJtypzpEwUm7Luk5PVQi9bnFZXu+zTn/kMnOaHi5PNHMBYX2OEOqIAX5pMlm76 BFmUSYKfT3NMq9WJrIupgtGkC7PH8SXv9egNaQavrKZQb3u5WVRl17fjO/n+13w7 5W2aPDSPF8QrAn6cqy1Qg1S6ZYjbJ/Z6rlK0Fn1SVigjgkb1Jw8WMQ6Jm8FXXK7l IWzzoTWJsKfaySsEgE6eYLfPyPXqHL/ebD7maazkGeLL2JWDVp4598CMK5a3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0rt+Nb9gfYq1Eey2bUJdPQOntb0wHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZg3Fx1K+3zuzlkuzhz5ebAzrn0ajJob2uL +ETXGmIgEhA3J64sxqDuyeaSY/xyb3LIGyLWwWQlgeLFmcCCTNFvCGzApZvoiVph EdF2MCNYK7xdgW+oGQSvMzKiTYOcP5fuWen4dXZiIflui1WlLKVOk0k5c+tdlDQe pMQOrEWzJDlKEnMm4wapaX6xwGNeZUCkHa8PutBIM8PvUdmBWs1fZn8U//W7xZSr TZlz+oMzeAmO+RTKHflyLK7Hg+Nrvz3JdRM+U8Ki4CEzfWKUhsUrWgnVBvxRM6gm 6J3JbD/nnB/8afglKVatD7fcX4AV8sVuuUI+nsdumIBfSZ5die8= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:05 2025 by rpki-client