$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: 6F90tEhML0maIEe6dOWE9Fbmp3SNTz74VMa9LO1VY1c= Subject key identifier: C8:93:57:84:A5:9E:A3:EB:27:87:4B:9E:C0:C4:D4:15:17:80:31:74 Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 7233CCA250242172D9DA5F5438C3760673AE478E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 41 Signing time: Sun 20 Jul 2025 08:00:53 +0000 Manifest this update: Sun 20 Jul 2025 07:55:53 +0000 Manifest next update: Wed 23 Jul 2025 09:51:53 +0000 Files and hashes: 1: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 3: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: vGk02T6Tch5cH7jzilLfK2OHPmPtam+EJXO/8xm0ujQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:33:cc:a2:50:24:21:72:d9:da:5f:54:38:c3:76:06:73:ae:47:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Jul 20 07:55:53 2025 GMT Not After : Jul 23 09:51:53 2025 GMT Subject: CN=C8935784A59EA3EB27874B9EC0C4D41517803174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f3:f9:69:67:fd:62:88:76:01:c0:bd:47:af: b2:12:ab:03:0a:20:09:cb:2b:9f:db:77:c9:61:27: 17:60:b2:2e:3e:f3:00:d4:3e:98:e5:92:3e:80:c0: b2:ed:af:3a:02:2a:9f:be:9d:bd:15:4a:1f:1d:bc: 19:8f:82:af:c6:20:cc:83:74:e7:e3:62:ae:c7:e3: 7b:9a:ab:58:db:3d:05:80:ad:b0:98:53:43:b1:c9: 4d:09:1d:ee:9f:3d:9c:76:e5:c5:81:71:cf:78:84: f7:9f:7b:e3:9b:b5:42:f6:0f:37:bd:92:98:ea:63: e2:86:4c:37:ec:00:6e:7a:94:bb:56:90:a0:63:ef: 10:c4:15:03:f0:2d:4a:d9:4c:94:5d:95:5e:12:f4: d5:45:c0:88:8b:6c:22:97:85:5c:c0:b0:46:8e:0f: 48:45:9d:a5:f2:61:27:d3:e6:c8:4a:46:e3:5d:58: 87:24:f7:c7:60:02:43:c6:31:bb:4d:7c:4f:89:50: df:8c:72:41:fa:ed:93:00:07:35:c3:a1:ac:f0:b2: 80:e8:5b:7d:65:83:61:3b:af:08:cb:3c:49:fe:a5: 60:c4:03:a3:1c:f5:ab:25:f5:93:61:19:ba:0b:f9: 5f:4d:09:73:fe:1a:e7:a7:63:41:a4:d1:93:a7:af: 19:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:93:57:84:A5:9E:A3:EB:27:87:4B:9E:C0:C4:D4:15:17:80:31:74 X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9c:90:5f:7e:b9:f7:35:2a:eb:4f:ad:b5:b6:a6:e3:c7:ee: 2d:2a:dc:72:f4:c1:73:6f:58:6b:e6:87:db:80:2b:82:1e:d9: dd:b4:15:f0:74:09:73:47:91:46:5e:d8:6f:c2:7d:83:1a:14: 0c:19:4f:a5:a4:02:fe:8b:29:19:9a:8f:52:5a:8e:57:6a:60: ab:c8:24:5e:f9:9d:73:a0:74:82:99:3f:81:97:66:20:bf:ce: 38:c6:a2:35:5f:5f:0b:2b:9c:d8:f9:e2:c3:7e:a3:5b:b4:f8: e4:cf:0e:4c:33:3e:10:2f:bb:cf:bd:e9:c7:62:dc:10:29:c1: 8b:37:59:50:1b:3d:e5:e1:06:8a:1c:b9:9e:67:08:6d:29:84: 5e:71:19:e5:30:c7:e3:10:d0:fd:fc:c8:b1:20:2c:8a:cc:5f: cd:2b:f6:02:6b:78:ef:dc:e2:f4:14:37:06:6e:19:77:80:a7: 87:a4:17:2d:74:c6:83:87:02:f3:d5:05:98:64:3a:5f:4f:d4: b8:98:b4:eb:e5:4f:98:ed:b9:96:37:a7:a8:d2:53:ba:3a:18: 62:a8:71:aa:d9:1b:46:a9:98:29:b1:5b:bf:00:ef:1e:c4:00: f9:f7:bc:79:db:e9:69:86:f2:5d:74:d3:d5:b0:64:f0:5a:e7: dc:54:9d:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjPMolAkIXLZ2l9UOMN2BnOuR44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA3MjAwNzU1NTNaFw0yNTA3MjMwOTUxNTNaMDMxMTAvBgNV BAMTKEM4OTM1Nzg0QTU5RUEzRUIyNzg3NEI5RUMwQzRENDE1MTc4MDMxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8/lpZ/1iiHYBwL1Hr7ISqwMK IAnLK5/bd8lhJxdgsi4+8wDUPpjlkj6AwLLtrzoCKp++nb0VSh8dvBmPgq/GIMyD dOfjYq7H43uaq1jbPQWArbCYU0OxyU0JHe6fPZx25cWBcc94hPefe+ObtUL2Dze9 kpjqY+KGTDfsAG56lLtWkKBj7xDEFQPwLUrZTJRdlV4S9NVFwIiLbCKXhVzAsEaO D0hFnaXyYSfT5shKRuNdWIck98dgAkPGMbtNfE+JUN+MckH67ZMABzXDoazwsoDo W31lg2E7rwjLPEn+pWDEA6Mc9asl9ZNhGboL+V9NCXP+GuenY0Gk0ZOnrxkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyJNXhKWeo+snh0uewMTUFReAMXQwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALeckF9+ufc1KutPrbW2puPH7i0q3HL0wXNv WGvmh9uAK4Ie2d20FfB0CXNHkUZe2G/CfYMaFAwZT6WkAv6LKRmaj1JajldqYKvI JF75nXOgdIKZP4GXZiC/zjjGojVfXwsrnNj54sN+o1u0+OTPDkwzPhAvu8+96cdi 3BApwYs3WVAbPeXhBoocuZ5nCG0phF5xGeUwx+MQ0P38yLEgLIrMX80r9gJreO/c 4vQUNwZuGXeAp4ekFy10xoOHAvPVBZhkOl9P1LiYtOvlT5jtuZY3p6jSU7o6GGKo carZG0apmCmxW78A7x7EAPn3vHnb6WmG8l1009WwZPBa59xUnfo= -----END CERTIFICATE-----Generated at Mon Jul 21 23:22:00 2025 by rpki-client