$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: +Yxg0KtdaIakREE4No6vypkeTuLcxRLnl/E1d9s0FQs= Subject key identifier: 9B:E0:D7:63:F8:D5:BA:9D:1E:AA:0F:B8:CB:1C:48:62:18:44:7A:B8 Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 5D13392D7FF9C7E4F749B9B89C7BB2BB1E7B05CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 50 Signing time: Fri 22 Aug 2025 10:40:58 +0000 Manifest this update: Fri 22 Aug 2025 10:35:58 +0000 Manifest next update: Mon 25 Aug 2025 19:53:58 +0000 Files and hashes: 1: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 2: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 3: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: MoFnjpIWrTXxHj/TSu0cI4A61g45jk0B85vvMFbT85I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:13:39:2d:7f:f9:c7:e4:f7:49:b9:b8:9c:7b:b2:bb:1e:7b:05:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Aug 22 10:35:58 2025 GMT Not After : Aug 25 19:53:58 2025 GMT Subject: CN=9BE0D763F8D5BA9D1EAA0FB8CB1C486218447AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:a6:e2:fb:d1:e7:0c:31:f8:55:2c:78:bd: 76:c4:08:2f:bf:3b:20:96:5a:ad:e8:0b:77:6a:46: 51:1d:26:07:cc:d9:93:ed:b5:92:20:f1:91:d0:d9: 28:97:1e:56:ba:ed:58:0f:35:63:1b:51:d5:dd:d9: 76:86:93:9c:a3:f5:e1:c7:43:72:2b:58:0a:ab:b5: 1a:b8:15:01:33:fa:73:9e:70:0c:42:be:09:40:ab: a6:3c:a5:24:cc:51:cb:93:5f:16:04:e0:b2:6d:45: db:f9:46:08:7b:df:c6:88:0f:8e:be:d7:a5:ad:fa: 94:a9:2e:3a:71:86:64:d6:43:73:d0:56:1a:e6:d3: 97:d2:ad:b9:7c:61:bd:7a:a6:5f:e3:e3:34:f5:36: 67:09:0f:7b:2e:cf:f4:d5:6c:1c:48:42:fe:0b:55: 8a:07:f1:d9:64:dd:74:be:9c:fc:ef:37:eb:cf:1e: ce:a3:1b:f1:83:a6:fb:fe:f1:6a:4d:99:a1:48:f4: 5d:05:27:3e:84:eb:a1:c6:e6:57:9e:2f:27:70:f3: 48:f4:2c:48:3f:16:6c:bb:06:a8:5e:d7:96:d9:f6: 73:01:54:68:9e:96:f8:2e:98:45:aa:c2:01:e4:b9: 91:20:94:48:c3:4d:76:19:7a:e2:59:ec:00:2d:65: dd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E0:D7:63:F8:D5:BA:9D:1E:AA:0F:B8:CB:1C:48:62:18:44:7A:B8 X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:3f:d1:54:6f:78:1c:cd:d9:46:3a:66:27:6c:96:f1:2a:26: 1a:fa:34:01:90:66:37:a3:a4:a1:bf:c0:76:93:c3:98:52:bd: af:24:dd:6b:5d:7d:6d:5b:67:4a:1a:20:ec:52:b1:77:d8:e2: 66:ef:45:7f:56:67:08:40:0e:52:8a:9c:9c:b5:69:ac:f7:1a: 5b:e5:f1:17:ef:03:d7:9b:46:a9:9b:3a:02:5a:83:aa:b5:8f: 9c:6f:b7:2f:5c:44:fa:42:61:26:39:08:56:70:0b:fd:6a:c0: 58:1c:be:92:02:a3:ed:ef:62:fa:45:80:fd:c9:57:34:92:e3: 83:74:fc:bc:ab:2d:58:8b:7e:ca:14:15:c4:95:29:08:ea:51: 7c:c3:15:70:9b:ce:f3:c0:71:59:47:7f:b6:13:4c:e1:12:9b: 67:78:1d:da:c5:75:01:94:8f:b8:ba:39:b3:b5:ec:67:5f:71: 88:01:80:d9:47:40:73:c8:3a:81:19:06:8a:a8:f1:00:ce:4c: b1:65:91:e5:77:88:cf:cc:c1:c1:64:87:d4:38:51:03:1a:a9: 3c:1a:cf:59:b2:e5:c1:ef:25:2a:80:8a:36:9b:57:95:b5:e2: 65:99:cc:b2:00:d5:8d:73:8d:79:2a:e4:bb:02:d2:b2:c4:76: cc:c5:73:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRM5LX/5x+T3Sbm4nHuyux57Bc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA4MjIxMDM1NThaFw0yNTA4MjUxOTUzNThaMDMxMTAvBgNV BAMTKDlCRTBENzYzRjhENUJBOUQxRUFBMEZCOENCMUM0ODYyMTg0NDdBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4qbi+9HnDDH4VSx4vXbECC+/ OyCWWq3oC3dqRlEdJgfM2ZPttZIg8ZHQ2SiXHla67VgPNWMbUdXd2XaGk5yj9eHH Q3IrWAqrtRq4FQEz+nOecAxCvglAq6Y8pSTMUcuTXxYE4LJtRdv5Rgh738aID46+ 16Wt+pSpLjpxhmTWQ3PQVhrm05fSrbl8Yb16pl/j4zT1NmcJD3suz/TVbBxIQv4L VYoH8dlk3XS+nPzvN+vPHs6jG/GDpvv+8WpNmaFI9F0FJz6E66HG5leeLydw80j0 LEg/Fmy7Bqhe15bZ9nMBVGielvgumEWqwgHkuZEglEjDTXYZeuJZ7AAtZd2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+DXY/jVup0eqg+4yxxIYhhEergwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQ/0VRveBzN2UY6ZidslvEqJhr6NAGQZjej pKG/wHaTw5hSva8k3WtdfW1bZ0oaIOxSsXfY4mbvRX9WZwhADlKKnJy1aaz3Glvl 8RfvA9ebRqmbOgJag6q1j5xvty9cRPpCYSY5CFZwC/1qwFgcvpICo+3vYvpFgP3J VzSS44N0/LyrLViLfsoUFcSVKQjqUXzDFXCbzvPAcVlHf7YTTOESm2d4HdrFdQGU j7i6ObO17GdfcYgBgNlHQHPIOoEZBoqo8QDOTLFlkeV3iM/MwcFkh9Q4UQMaqTwa z1my5cHvJSqAijabV5W14mWZzLIA1Y1zjXkq5LsC0rLEdszFc68= -----END CERTIFICATE-----Generated at Sat Aug 23 14:11:04 2025 by rpki-client