$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: COQZv7AALrRtZsjSpRyllVU0CK2oWUqM7QeGvyMq5Qs= Subject key identifier: 8E:2E:B3:A3:AD:75:93:E6:7F:54:52:79:C2:D0:08:1C:60:CC:09:61 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 751C3DE9B19D22A7D9B953597EED567C55937600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: 95 Signing time: Wed 04 Jun 2025 14:11:36 +0000 Manifest this update: Wed 04 Jun 2025 14:06:36 +0000 Manifest next update: Sat 07 Jun 2025 19:51:36 +0000 Files and hashes: 1: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) 2: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: GDrAVvo0PjGXMYA+OBw0qdqPYY/oLFPQGPMRPHArRyE=) 3: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1c:3d:e9:b1:9d:22:a7:d9:b9:53:59:7e:ed:56:7c:55:93:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Jun 4 14:06:36 2025 GMT Not After : Jun 7 19:51:36 2025 GMT Subject: CN=8E2EB3A3AD7593E67F545279C2D0081C60CC0961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:a8:f2:dd:23:44:11:1f:77:b4:1b:16:b0: cd:c8:b6:14:90:e9:86:51:d6:49:93:7f:4a:80:be: e5:0c:ba:01:4b:54:56:31:dd:f4:a1:98:04:0e:cd: 61:d9:30:49:92:a5:2b:31:a2:06:41:c1:0d:d9:70: aa:31:f3:02:38:f0:e3:e3:3d:78:29:a5:97:97:9d: b6:bd:f2:53:71:a3:37:45:cc:44:ef:37:17:44:d6: ed:c5:be:d4:4e:12:6d:8a:78:93:91:82:1c:71:f2: 59:96:29:f3:e5:a5:8e:a6:06:18:79:7b:cc:91:c7: 31:1b:62:12:7b:81:22:db:27:68:b0:1b:2b:db:79: 68:c7:37:73:e6:e9:b6:8d:f7:70:29:9a:f2:79:59: 22:b4:de:b7:5a:5d:a3:54:84:ab:b5:4e:d7:58:ea: 72:9b:a9:d7:05:0e:89:8b:37:8d:9a:e7:7b:1d:7e: d8:bc:94:74:41:89:5c:90:ba:66:af:d9:c0:a8:62: 99:66:af:e1:28:cd:05:b9:1c:0c:2f:59:8c:c1:e1: 13:00:c5:ef:9e:b9:30:6f:a3:e3:72:a6:5a:d4:3f: a7:44:d3:3d:6c:9c:33:f0:fa:36:ab:d3:2b:93:39: 42:c6:f8:62:8a:66:3c:e2:87:91:1d:4b:05:7c:e8: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2E:B3:A3:AD:75:93:E6:7F:54:52:79:C2:D0:08:1C:60:CC:09:61 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a8:d7:ed:e1:16:ae:d9:55:b6:56:b0:87:d6:ae:dd:26:fa: fb:cc:48:e5:dc:60:8b:fa:b2:eb:29:ef:1f:d9:1f:db:d1:57: d8:a9:ec:65:46:9b:6f:f1:4d:ec:18:26:d9:9b:b1:86:3d:16: f3:5c:2f:ca:d9:77:d7:8d:9d:8c:f7:29:86:4e:b9:d8:56:d8: 77:5c:2a:c5:1c:f4:ae:04:55:ce:ee:71:b2:e8:69:c1:c9:df: 1d:94:9f:ca:43:b4:30:73:77:13:2b:36:03:5c:48:5e:4f:03: 4c:0f:2a:09:b5:c1:ec:ed:8a:3e:c2:43:6b:1a:46:fc:c4:dc: 19:6c:51:bd:f7:4f:78:35:52:b7:4c:8b:79:3f:ac:4a:bc:7f: cd:11:3a:0e:38:0e:44:8e:84:66:2f:07:88:c7:65:bd:58:ff: ed:26:50:3e:07:58:28:d5:b4:04:61:2a:81:86:b2:22:57:ab: 5a:e4:29:57:00:d8:42:17:1f:65:a7:9d:cc:25:fa:22:45:ff: 2c:38:8d:f5:2c:81:49:e3:7e:a6:eb:f7:7e:f1:f9:a9:f3:8a: bd:0d:cb:87:59:25:87:71:3c:c8:fa:64:81:96:2a:f3:14:49: 03:c1:5a:0e:e2:93:03:3e:56:8b:95:a9:8e:52:ca:d6:a4:48: 02:fd:b4:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRw96bGdIqfZuVNZfu1WfFWTdgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTA2MDQxNDA2MzZaFw0yNTA2MDcxOTUxMzZaMDMxMTAvBgNV BAMTKDhFMkVCM0EzQUQ3NTkzRTY3RjU0NTI3OUMyRDAwODFDNjBDQzA5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrKjy3SNEER93tBsWsM3IthSQ 6YZR1kmTf0qAvuUMugFLVFYx3fShmAQOzWHZMEmSpSsxogZBwQ3ZcKox8wI48OPj PXgppZeXnba98lNxozdFzETvNxdE1u3FvtROEm2KeJORghxx8lmWKfPlpY6mBhh5 e8yRxzEbYhJ7gSLbJ2iwGyvbeWjHN3Pm6baN93ApmvJ5WSK03rdaXaNUhKu1TtdY 6nKbqdcFDomLN42a53sdfti8lHRBiVyQumav2cCoYplmr+EozQW5HAwvWYzB4RMA xe+euTBvo+NyplrUP6dE0z1snDPw+jar0yuTOULG+GKKZjzih5EdSwV86ImZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUji6zo611k+Z/VFJ5wtAIHGDMCWEwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2o1+3hFq7ZVbZWsIfWrt0m+vvMSOXcYIv6 susp7x/ZH9vRV9ip7GVGm2/xTewYJtmbsYY9FvNcL8rZd9eNnYz3KYZOudhW2Hdc KsUc9K4EVc7ucbLoacHJ3x2Un8pDtDBzdxMrNgNcSF5PA0wPKgm1weztij7CQ2sa RvzE3BlsUb33T3g1UrdMi3k/rEq8f80ROg44DkSOhGYvB4jHZb1Y/+0mUD4HWCjV tARhKoGGsiJXq1rkKVcA2EIXH2Wnncwl+iJF/yw4jfUsgUnjfqbr937x+anzir0N y4dZJYdxPMj6ZIGWKvMUSQPBWg7ikwM+VouVqY5SytakSAL9tH8= -----END CERTIFICATE-----Generated at Fri Jun 6 04:58:20 2025 by rpki-client