$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: YEtg5heMY88Ly8uqTS5Ak43xrbkg8OcCnBsgCgn5wOs= Subject key identifier: 49:CC:46:E0:FE:39:7C:52:9B:35:DD:56:23:33:60:C5:19:98:67:1D Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 5FF9B5F3FD451BEC466C55E2826B8209AC5326C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 38 Signing time: Sun 29 Jun 2025 16:40:53 +0000 Manifest this update: Sun 29 Jun 2025 16:35:53 +0000 Manifest next update: Thu 03 Jul 2025 03:35:53 +0000 Files and hashes: 1: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 3: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: NgfOE5cQSNxZcWDt6WEEjP29qF33mhNFQJu5MI+tjus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f9:b5:f3:fd:45:1b:ec:46:6c:55:e2:82:6b:82:09:ac:53:26:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Jun 29 16:35:53 2025 GMT Not After : Jul 3 03:35:53 2025 GMT Subject: CN=49CC46E0FE397C529B35DD56233360C51998671D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:0f:48:5c:43:29:6f:d6:59:4b:4d:6e:8d: 2d:ee:41:d4:d6:21:15:f1:25:88:61:32:fc:6b:ad: bc:5d:9a:c8:21:37:c0:9f:65:5e:41:05:94:0a:9b: 4a:50:96:af:65:11:ff:47:73:49:3e:17:1d:69:89: 2a:33:ae:82:5d:92:b7:df:41:ea:31:b2:75:55:e5: c3:41:b3:22:f2:0e:4c:1b:f2:f6:c2:48:f3:49:24: 71:4a:c2:32:bd:a2:96:46:e5:7b:bf:de:b3:d7:a2: 8f:15:8e:fb:2d:e8:c7:b3:a9:f0:52:86:00:c1:94: 22:18:79:78:e0:58:f1:79:99:51:97:a9:0a:14:83: a5:70:b8:af:5c:7e:cd:ad:f1:15:b1:e8:74:fc:2c: 97:d5:d5:f6:77:39:bd:00:39:4a:b1:f9:5c:2e:c3: f5:83:da:60:ec:a5:31:ed:b9:11:d0:94:18:42:10: f4:82:c4:f9:c8:30:5e:09:2f:d4:99:4b:ae:ec:81: 8a:17:c7:8d:80:eb:f0:8c:5f:a7:90:b5:24:68:68: 1a:ce:ab:c2:b4:f4:c0:ce:27:33:2d:56:86:89:56: 16:48:e9:8e:78:79:b4:0c:eb:1d:b9:27:5a:24:af: 8f:72:2f:34:43:41:37:9d:f9:fc:0f:10:aa:e2:70: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CC:46:E0:FE:39:7C:52:9B:35:DD:56:23:33:60:C5:19:98:67:1D X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:06:2b:2f:b5:cc:64:7d:e5:a7:24:b5:fa:de:7d:90:be:71: bb:0c:8f:ea:fe:08:08:46:e5:d9:6a:49:60:f2:a8:38:f1:a0: 68:93:ea:11:ee:71:f5:8d:90:80:ed:27:c1:79:94:66:75:54: 14:ac:ae:a2:6e:52:26:39:4b:1f:63:90:bf:d7:c5:9b:95:da: c3:67:f5:e1:ca:1e:33:06:ef:79:ad:c9:cb:45:9c:bc:53:6d: 67:93:50:ee:14:7c:3b:2d:5b:d3:e3:72:03:a0:95:54:ad:95: d7:b5:cf:53:ad:64:83:47:d5:ca:1f:19:3c:33:44:b7:cd:3a: cd:6d:e4:89:f9:9c:71:94:54:43:7c:5b:02:5e:0f:e8:d9:0a: 19:ce:d5:fb:4a:fb:ba:02:72:d9:59:1e:93:e5:c3:5a:4c:99: e6:e7:60:cc:b3:ed:cb:38:41:8b:6c:c9:20:76:34:b8:e4:4c: 54:f2:50:e5:60:e7:11:77:0a:19:59:13:36:ca:5e:0e:5e:e8: 23:46:81:0a:dc:d3:21:b9:56:5c:56:fa:de:3e:25:1f:5b:33: f6:9f:3e:01:23:5f:d3:b5:e3:09:9a:d8:db:41:66:7c:a8:a0: ab:6b:9b:d5:93:7c:cd:69:d0:1e:e2:35:f8:97:89:71:a7:e2: d5:b9:87:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/m18/1FG+xGbFXigmuCCaxTJsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA2MjkxNjM1NTNaFw0yNTA3MDMwMzM1NTNaMDMxMTAvBgNV BAMTKDQ5Q0M0NkUwRkUzOTdDNTI5QjM1REQ1NjIzMzM2MEM1MTk5ODY3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJg9IXEMpb9ZZS01ujS3uQdTW IRXxJYhhMvxrrbxdmsghN8CfZV5BBZQKm0pQlq9lEf9Hc0k+Fx1piSozroJdkrff QeoxsnVV5cNBsyLyDkwb8vbCSPNJJHFKwjK9opZG5Xu/3rPXoo8Vjvst6MezqfBS hgDBlCIYeXjgWPF5mVGXqQoUg6VwuK9cfs2t8RWx6HT8LJfV1fZ3Ob0AOUqx+Vwu w/WD2mDspTHtuRHQlBhCEPSCxPnIMF4JL9SZS67sgYoXx42A6/CMX6eQtSRoaBrO q8K09MDOJzMtVoaJVhZI6Y54ebQM6x25J1okr49yLzRDQTed+fwPEKricB9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUScxG4P45fFKbNd1WIzNgxRmYZx0wHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYGKy+1zGR95acktfrefZC+cbsMj+r+CAhG 5dlqSWDyqDjxoGiT6hHucfWNkIDtJ8F5lGZ1VBSsrqJuUiY5Sx9jkL/XxZuV2sNn 9eHKHjMG73mtyctFnLxTbWeTUO4UfDstW9PjcgOglVStlde1z1OtZINH1cofGTwz RLfNOs1t5In5nHGUVEN8WwJeD+jZChnO1ftK+7oCctlZHpPlw1pMmebnYMyz7cs4 QYtsySB2NLjkTFTyUOVg5xF3ChlZEzbKXg5e6CNGgQrc0yG5VlxW+t4+JR9bM/af PgEjX9O14wma2NtBZnyooKtrm9WTfM1p0B7iNfiXiXGn4tW5h8U= -----END CERTIFICATE-----Generated at Tue Jul 1 01:59:48 2025 by rpki-client