$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: mHkoxVNCAdrjo9CkOZHlnFfNo5LfCkQUWm/z2914Kyk= Subject key identifier: 45:AE:66:DD:D6:D9:AF:BE:83:50:C3:0D:75:03:80:06:BB:25:61:8E Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 3934823F78215077454E20C6AF1EBB8FB2780273 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 6A Signing time: Sun 19 Oct 2025 23:30:56 +0000 Manifest this update: Sun 19 Oct 2025 23:25:56 +0000 Manifest next update: Thu 23 Oct 2025 07:53:56 +0000 Files and hashes: 1: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 2: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 3: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: X9NNVSnVuiVIq0v+PG7SKrRzGKnWFth0WA8mpm6Z2IY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:34:82:3f:78:21:50:77:45:4e:20:c6:af:1e:bb:8f:b2:78:02:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Oct 19 23:25:56 2025 GMT Not After : Oct 23 07:53:56 2025 GMT Subject: CN=45AE66DDD6D9AFBE8350C30D75038006BB25618E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:db:cf:df:15:ea:48:2c:f5:48:45:11:d9: 1e:24:24:04:1f:ff:23:f3:dd:c4:f5:5d:79:7b:34: 77:ac:28:fa:bb:2d:86:28:12:63:49:8c:d8:eb:f0: 8f:1e:7a:1a:be:d4:db:a6:3f:f1:cf:14:d6:60:fa: 27:ea:1a:6f:57:af:7a:ff:bf:5c:21:01:fe:65:27: 8f:71:67:ab:10:c6:97:8f:0f:5f:9b:dd:68:5b:64: b9:07:77:b5:b1:d5:35:44:08:e3:b3:f2:c7:7e:65: a5:cc:2f:1f:09:9a:05:b1:f2:1f:34:32:a1:cc:b6: 4a:6d:6a:c3:a0:27:8a:6a:3b:03:6b:98:08:ae:28: 12:60:e8:1c:c6:f6:6c:58:35:1c:9b:9a:68:c3:e3: 73:35:6a:18:0e:ea:87:73:37:fe:77:be:d0:e1:b4: 83:8e:ee:91:f7:7e:2a:3e:b4:c1:1c:49:2d:8f:74: dc:72:57:87:bb:25:96:7c:75:fc:f3:0f:07:17:3e: 06:01:65:3f:40:57:b6:e4:99:ea:72:01:e0:28:8c: b6:dd:ee:fe:9e:3d:48:3e:c7:a8:e6:85:4d:15:cf: b7:50:72:4c:7b:2f:54:ab:8d:94:52:b6:43:a7:bc: e8:58:3b:5f:a2:a3:e5:32:b4:a5:c2:65:94:fb:64: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AE:66:DD:D6:D9:AF:BE:83:50:C3:0D:75:03:80:06:BB:25:61:8E X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3d:5d:ce:21:34:8b:38:de:56:75:67:5a:af:da:71:2e:1d: 6a:d5:0b:b6:3f:92:f1:72:40:4f:3b:0e:14:f8:e8:d7:d1:e4: bf:c3:7d:7e:9d:fc:bc:62:db:1f:50:9a:68:e0:bf:24:7e:61: 77:65:43:39:85:0f:51:2b:cd:a7:f4:aa:19:9b:39:1c:58:21: ea:2e:88:d3:e7:81:5c:7c:a9:1d:87:07:72:0a:b6:fc:33:2a: 32:94:86:4a:bc:b1:0a:84:67:f3:47:fe:87:f4:3a:b5:f9:54: 42:11:04:d8:42:43:bf:0b:6a:61:67:ae:94:b1:43:b6:66:16: 8c:42:aa:f4:4b:95:48:8d:f6:dd:83:f7:77:bb:08:46:e7:63: 33:d5:86:12:1a:6c:99:16:67:40:7d:aa:ce:14:3a:e8:1d:b9: 74:7d:95:68:ba:75:ae:51:c7:b8:0b:41:fb:70:f0:23:76:82: b4:4e:9b:9d:a8:23:ae:78:1c:5a:47:b5:a5:f1:dd:29:f4:04: cf:3a:46:b9:d4:59:1b:b5:6e:00:c1:d2:0c:7e:db:31:a1:8b: 16:28:fa:6b:61:be:74:bb:86:87:57:07:c8:43:de:10:25:ee: a9:41:c2:9e:7e:44:f3:5c:6d:21:d4:5e:35:c4:2a:15:ea:fd: cd:ff:13:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTSCP3ghUHdFTiDGrx67j7J4AnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTEwMTkyMzI1NTZaFw0yNTEwMjMwNzUzNTZaMDMxMTAvBgNV BAMTKDQ1QUU2NkRERDZEOUFGQkU4MzUwQzMwRDc1MDM4MDA2QkIyNTYxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mNvP3xXqSCz1SEUR2R4kJAQf /yPz3cT1XXl7NHesKPq7LYYoEmNJjNjr8I8eehq+1NumP/HPFNZg+ifqGm9Xr3r/ v1whAf5lJ49xZ6sQxpePD1+b3WhbZLkHd7Wx1TVECOOz8sd+ZaXMLx8JmgWx8h80 MqHMtkptasOgJ4pqOwNrmAiuKBJg6BzG9mxYNRybmmjD43M1ahgO6odzN/53vtDh tIOO7pH3fio+tMEcSS2PdNxyV4e7JZZ8dfzzDwcXPgYBZT9AV7bkmepyAeAojLbd 7v6ePUg+x6jmhU0Vz7dQckx7L1SrjZRStkOnvOhYO1+io+UytKXCZZT7ZGZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURa5m3dbZr76DUMMNdQOABrslYY4wHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY9Xc4hNIs43lZ1Z1qv2nEuHWrVC7Y/kvFy QE87DhT46NfR5L/DfX6d/Lxi2x9QmmjgvyR+YXdlQzmFD1Erzaf0qhmbORxYIeou iNPngVx8qR2HB3IKtvwzKjKUhkq8sQqEZ/NH/of0OrX5VEIRBNhCQ78LamFnrpSx Q7ZmFoxCqvRLlUiN9t2D93e7CEbnYzPVhhIabJkWZ0B9qs4UOugduXR9lWi6da5R x7gLQftw8CN2grROm52oI654HFpHtaXx3Sn0BM86RrnUWRu1bgDB0gx+2zGhixYo +mthvnS7hodXB8hD3hAl7qlBwp5+RPNcbSHUXjXEKhXq/c3/E84= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:03 2025 by rpki-client