$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: SF14Q2PuEGJbUODqkR9xS+SLjR9qJWGLBaAtVtEuCgc= Subject key identifier: F0:A0:ED:ED:62:7B:2D:23:65:22:DF:C5:0B:36:D8:79:EF:3E:33:6F Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 4B34CA07960F560D83500257DF6FB55675E55BD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: A0 Signing time: Sun 29 Jun 2025 16:31:34 +0000 Manifest this update: Sun 29 Jun 2025 16:26:34 +0000 Manifest next update: Thu 03 Jul 2025 02:04:34 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 2: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: 7/Psm5vvqWhX9JgUkrgZNaE56HwKjiu7ZzNZDijHdDY=) 3: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) 4: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:34:ca:07:96:0f:56:0d:83:50:02:57:df:6f:b5:56:75:e5:5b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Jun 29 16:26:34 2025 GMT Not After : Jul 3 02:04:34 2025 GMT Subject: CN=F0A0EDED627B2D236522DFC50B36D879EF3E336F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:b4:fd:81:5e:cd:36:f5:b8:0b:ce:37:1c: b2:78:ff:90:45:cd:b3:6b:45:8e:ea:19:c1:62:73: 8f:2a:c9:de:3d:b8:73:44:d5:5f:ae:c5:da:ed:8b: e7:27:0e:6f:b5:40:c6:b9:11:8c:f6:38:6e:0b:16: 77:eb:cf:a1:57:6b:67:7b:e0:3d:74:4e:68:50:19: e2:49:55:d3:33:a7:72:04:72:be:d1:56:f0:dc:cd: 46:74:99:a2:f0:60:20:8a:55:f8:30:45:47:b7:a2: 33:c2:e6:f2:2e:5e:07:66:9c:77:b5:88:c0:4d:54: a4:0f:f9:62:5c:67:2f:77:4b:4b:ee:d7:bb:29:ed: 57:96:b6:45:07:48:6b:82:94:4e:84:8f:75:cd:c5: 16:e0:c4:cd:59:50:77:76:49:7c:3a:f7:ae:de:f7: 4c:59:f8:0d:73:03:bb:f2:89:c1:0b:f2:f6:eb:c8: ca:4c:28:9f:f9:f1:07:bc:9b:67:14:58:a5:5a:3c: b7:e4:56:7a:14:bd:fb:f1:eb:27:22:03:0d:2c:a8: cc:da:3f:d9:65:9b:96:07:e5:7b:47:b1:c7:32:3e: eb:79:83:df:8b:82:30:ec:6e:80:e8:f7:3b:43:0b: dc:cf:38:67:77:c4:97:f8:6c:cf:67:80:d8:e4:22: 91:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A0:ED:ED:62:7B:2D:23:65:22:DF:C5:0B:36:D8:79:EF:3E:33:6F X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1d:b8:c5:af:3a:9e:63:75:7a:aa:65:bd:6f:1a:e0:8c:b8: be:6b:9d:58:4b:5b:68:bd:ae:b6:b5:ce:ed:53:83:59:9e:64: 6d:ac:17:0f:69:2c:a0:e5:13:37:b8:c7:a2:72:b9:5e:13:9a: 07:d7:c2:d8:7d:9a:4f:16:8e:72:47:38:80:85:47:5b:c0:cb: 54:c5:d0:f3:a8:c4:5d:fc:fd:f7:48:99:ed:00:09:a9:2e:29: 45:23:1f:39:e6:72:05:2e:2c:68:bf:5d:b9:3e:cb:ea:dc:84: b8:6f:27:44:fa:09:cc:ed:4e:23:fa:c1:25:eb:5f:b1:ff:ae: ac:42:8c:2c:17:2d:eb:8c:6c:b7:38:18:1b:a3:2c:ae:ab:00: 7a:45:3f:46:20:a8:ba:12:b7:68:e6:b9:54:66:57:50:b4:dc: 02:e8:40:e5:22:d0:a1:9a:79:91:3c:0b:2c:4c:5b:de:6d:b0: cb:4a:67:4c:6b:5f:ec:c7:29:ff:39:c4:a0:9c:0e:96:40:5e: 18:94:28:cf:d7:0a:e5:26:a1:54:24:6a:5d:3b:4d:5e:3b:e7: 38:51:e1:e1:1a:5c:dc:47:bb:80:cb:9e:65:74:31:c6:f3:2e: fb:1a:f6:c1:1f:fe:3d:75:8a:5e:29:7b:5f:4b:ac:09:3b:0f: 95:48:0c:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzTKB5YPVg2DUAJX32+1VnXlW9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTA2MjkxNjI2MzRaFw0yNTA3MDMwMjA0MzRaMDMxMTAvBgNV BAMTKEYwQTBFREVENjI3QjJEMjM2NTIyREZDNTBCMzZEODc5RUYzRTMzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YLT9gV7NNvW4C843HLJ4/5BF zbNrRY7qGcFic48qyd49uHNE1V+uxdrti+cnDm+1QMa5EYz2OG4LFnfrz6FXa2d7 4D10TmhQGeJJVdMzp3IEcr7RVvDczUZ0maLwYCCKVfgwRUe3ojPC5vIuXgdmnHe1 iMBNVKQP+WJcZy93S0vu17sp7VeWtkUHSGuClE6Ej3XNxRbgxM1ZUHd2SXw6967e 90xZ+A1zA7vyicEL8vbryMpMKJ/58Qe8m2cUWKVaPLfkVnoUvfvx6yciAw0sqMza P9llm5YH5XtHsccyPut5g9+LgjDsboDo9ztDC9zPOGd3xJf4bM9ngNjkIpHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8KDt7WJ7LSNlIt/FCzbYee8+M28wHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUduMWvOp5jdXqqZb1vGuCMuL5rnVhLW2i9 rra1zu1Tg1meZG2sFw9pLKDlEze4x6JyuV4TmgfXwth9mk8WjnJHOICFR1vAy1TF 0POoxF38/fdIme0ACakuKUUjHznmcgUuLGi/Xbk+y+rchLhvJ0T6CcztTiP6wSXr X7H/rqxCjCwXLeuMbLc4GBujLK6rAHpFP0YgqLoSt2jmuVRmV1C03ALoQOUi0KGa eZE8CyxMW95tsMtKZ0xrX+zHKf85xKCcDpZAXhiUKM/XCuUmoVQkal07TV475zhR 4eEaXNxHu4DLnmV0McbzLvsa9sEf/j11il4pe19LrAk7D5VIDD0= -----END CERTIFICATE-----Generated at Tue Jul 1 23:23:29 2025 by rpki-client