$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: lP+jSTB1yCZOBDNBw802xiF+kSSJvwFDLqvwaP0pGPc= Subject key identifier: 1F:23:A0:61:E0:FD:F4:AB:8F:B8:5F:E4:AF:71:01:B7:1A:2E:E6:4C Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 2E746BEC56F079806D75934D4B192D1E174CDCFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 32 Signing time: Sun 15 Jun 2025 22:00:56 +0000 Manifest this update: Sun 15 Jun 2025 21:55:56 +0000 Manifest next update: Thu 19 Jun 2025 06:29:56 +0000 Files and hashes: 1: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: Aqu6O+hHZHOAKkB2EDfxYvvndu1geUJhr1zY7Y/YfcY=) 2: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 3: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:74:6b:ec:56:f0:79:80:6d:75:93:4d:4b:19:2d:1e:17:4c:dc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Jun 15 21:55:56 2025 GMT Not After : Jun 19 06:29:56 2025 GMT Subject: CN=1F23A061E0FDF4AB8FB85FE4AF7101B71A2EE64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:7f:96:31:2f:e8:8b:bb:b5:ba:77:c0:39: 3a:29:8c:54:d0:78:b4:7e:e1:29:85:e1:58:32:f5: 09:a2:18:04:2c:8a:33:ad:b7:3c:04:2c:11:63:69: 9f:6c:1a:88:ea:cd:e6:d7:a6:b8:f5:e2:26:69:af: b6:57:5e:81:70:97:f2:ea:46:ef:d9:7e:03:c7:9d: 9a:13:97:0a:7e:06:be:d3:c2:09:a3:1c:ce:71:b3: d5:84:b3:a8:d1:a2:8d:19:19:54:e8:f4:17:75:a9: 55:67:2d:09:b3:6f:28:bc:5c:a5:64:d1:c9:f3:f3: 41:e3:f9:01:ed:48:91:15:80:74:aa:3d:2c:c0:f9: ca:fb:51:bb:bf:fe:b6:f5:b7:d8:07:9c:2c:89:0d: 1b:45:77:cd:bf:0d:61:a0:53:15:d0:5b:6f:38:ef: 82:93:ea:43:db:52:a9:75:00:6d:36:bf:0d:f7:59: d3:e8:7d:be:ae:9d:d1:fc:a0:e4:7e:31:a7:f1:29: 31:61:7c:c4:1e:11:42:7f:50:65:5b:ac:6a:a2:df: 54:3d:5b:36:19:d8:73:d6:a1:eb:2a:03:11:fb:47: 4f:be:74:1e:b9:c4:ce:fb:e7:94:24:a0:12:d9:fc: aa:62:9d:71:c7:82:3c:ba:da:18:76:e9:7b:c8:b9: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:23:A0:61:E0:FD:F4:AB:8F:B8:5F:E4:AF:71:01:B7:1A:2E:E6:4C X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:52:d4:a0:9f:86:3b:7e:b9:de:ca:d5:e5:0e:41:f2:cc:ce: 0a:6f:0d:9d:a2:52:ee:60:19:c1:60:22:9f:b3:0c:cd:21:ff: 69:bd:19:24:42:5b:cc:0e:d1:72:fa:ce:25:85:db:54:67:c3: 6d:8c:88:64:02:c6:61:4a:31:60:2a:81:0d:80:33:d7:bd:9a: b1:ad:57:c0:74:ae:42:59:e7:38:9c:47:8a:0e:c7:ae:d0:6c: 78:58:fa:86:66:8e:6b:8d:81:f1:a5:23:cc:5d:f3:e3:f5:ec: 22:e9:d7:d3:2c:9a:59:34:ee:af:07:1f:97:9a:62:ad:6c:9b: 3e:e1:82:c6:cc:a3:80:d1:d2:5b:c3:51:b2:37:a7:e0:b9:39: 3c:af:4c:9e:b1:7d:94:e9:22:8d:7a:fc:45:e5:9f:8c:53:5f: a2:c0:f9:8c:a9:93:11:6f:e7:43:73:74:e1:31:c2:fe:ec:e3: 0a:3f:44:71:2f:ba:83:83:0a:dd:b8:9c:e1:4e:b0:16:40:08: 34:54:20:16:2d:b2:24:c7:ad:3d:e0:ff:4f:c7:5e:bb:8c:10: 04:62:8d:57:74:20:f4:bf:c2:8c:a5:db:a5:d3:e7:c1:34:b5: 8f:4c:a9:58:b3:eb:7e:c7:a2:1e:eb:60:ac:3c:bc:99:3d:03: 52:4e:9b:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnRr7FbweYBtdZNNSxktHhdM3PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA2MTUyMTU1NTZaFw0yNTA2MTkwNjI5NTZaMDMxMTAvBgNV BAMTKDFGMjNBMDYxRTBGREY0QUI4RkI4NUZFNEFGNzEwMUI3MUEyRUU2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXj3+WMS/oi7u1unfAOTopjFTQ eLR+4SmF4Vgy9QmiGAQsijOttzwELBFjaZ9sGojqzebXprj14iZpr7ZXXoFwl/Lq Ru/ZfgPHnZoTlwp+Br7TwgmjHM5xs9WEs6jRoo0ZGVTo9Bd1qVVnLQmzbyi8XKVk 0cnz80Hj+QHtSJEVgHSqPSzA+cr7Ubu//rb1t9gHnCyJDRtFd82/DWGgUxXQW284 74KT6kPbUql1AG02vw33WdPofb6undH8oOR+MafxKTFhfMQeEUJ/UGVbrGqi31Q9 WzYZ2HPWoesqAxH7R0++dB65xM7755QkoBLZ/KpinXHHgjy62hh26XvIuXlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyOgYeD99KuPuF/kr3EBtxou5kwwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5S1KCfhjt+ud7K1eUOQfLMzgpvDZ2iUu5g GcFgIp+zDM0h/2m9GSRCW8wO0XL6ziWF21Rnw22MiGQCxmFKMWAqgQ2AM9e9mrGt V8B0rkJZ5zicR4oOx67QbHhY+oZmjmuNgfGlI8xd8+P17CLp19Msmlk07q8HH5ea Yq1smz7hgsbMo4DR0lvDUbI3p+C5OTyvTJ6xfZTpIo16/EXln4xTX6LA+YypkxFv 50NzdOExwv7s4wo/RHEvuoODCt24nOFOsBZACDRUIBYtsiTHrT3g/0/HXruMEARi jVd0IPS/woyl26XT58E0tY9MqViz637Hoh7rYKw8vJk9A1JOm1U= -----END CERTIFICATE-----Generated at Wed Jun 18 01:55:36 2025 by rpki-client