$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: UoQCQ9vAYAK8jSNKSTfBWb0iumbwkArJpRnFTdcvEzU= Subject key identifier: D4:07:07:F1:ED:93:06:4D:1A:37:D5:58:6D:AD:D2:DA:CC:0B:A5:BA Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 6572E27364E0E39BB765C88B99C5D3894F02ED88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 2C Signing time: Mon 02 Jun 2025 17:10:52 +0000 Manifest this update: Mon 02 Jun 2025 17:05:52 +0000 Manifest next update: Thu 05 Jun 2025 23:50:52 +0000 Files and hashes: 1: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 2: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: 0SVqONWvoPOBl3YdEeWVzmmqyW5VFaHdoUXNjdweMlo=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 23:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:72:e2:73:64:e0:e3:9b:b7:65:c8:8b:99:c5:d3:89:4f:02:ed:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Jun 2 17:05:52 2025 GMT Not After : Jun 5 23:50:52 2025 GMT Subject: CN=D40707F1ED93064D1A37D5586DADD2DACC0BA5BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:9a:5d:14:f2:7e:01:fa:c6:30:0c:ec:6e: c3:32:ac:cc:10:4e:7d:bd:94:e4:38:0b:c9:32:da: 95:b1:02:36:2d:25:b9:d0:53:92:f9:2f:ed:81:59: 56:96:8d:19:64:42:58:61:f7:70:22:a6:17:93:81: b0:72:93:d9:87:ba:2f:fe:82:a6:68:4c:90:39:1f: 4e:c6:d4:48:ba:cb:63:9e:bd:93:09:b9:ba:96:72: 7d:21:69:09:2f:4f:5f:29:e3:9d:0b:95:14:5a:17: 19:3f:66:2d:d5:13:ec:8f:9d:04:06:37:92:db:7d: 99:09:62:5f:87:19:f7:eb:07:7c:04:d8:4a:71:19: 94:b1:ca:9e:11:b7:fb:8b:98:21:de:13:4a:04:1a: bb:e6:3a:b9:46:14:a4:43:59:b5:cc:40:95:1c:da: 29:b4:c4:e6:cd:15:a6:59:c3:70:89:40:7c:95:dd: f7:11:1a:47:4b:ed:e5:91:0a:59:cc:43:c7:53:f3: ce:56:0e:38:ed:60:05:8c:ff:68:02:53:6a:28:6e: fe:de:b9:3d:51:c0:be:76:97:0a:d1:ae:90:e8:13: 01:89:71:1d:fb:9b:45:1a:28:42:08:07:be:b9:ff: 5e:f3:5a:ea:6c:3e:e2:25:d2:73:7f:83:f3:50:c3: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:07:07:F1:ED:93:06:4D:1A:37:D5:58:6D:AD:D2:DA:CC:0B:A5:BA X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cd:c4:93:64:7b:3c:cf:e9:68:0d:26:be:d5:a7:bf:50:a0: 30:92:ad:00:f8:5b:2f:df:c7:0b:1b:22:f9:bf:90:fb:02:3e: 8d:cd:df:c7:84:85:4d:fd:af:04:31:c6:6f:6c:2f:e2:b9:c9: 66:96:25:48:2c:ae:8b:a0:28:a7:54:0b:93:c2:7b:8c:b1:0c: be:6d:17:3d:c8:a3:72:cc:c7:98:01:90:f1:16:d6:4b:62:bd: 91:91:a6:10:f8:cf:51:d2:88:7c:22:23:ad:08:51:61:98:4b: c6:2e:ac:3a:26:c8:4b:17:e9:63:dc:e5:58:c8:ad:f3:10:4e: 04:67:d8:ab:28:67:7e:94:88:ed:bc:ee:cd:73:d7:14:bd:ed: 7e:3a:74:ff:1f:a7:7e:72:b3:f5:41:dc:60:a8:75:05:5e:f7: 3f:c2:75:33:43:09:85:e0:a9:2c:b5:27:5d:c2:18:6c:71:bd: 33:49:6d:cf:ae:ab:4f:78:1a:e0:90:70:e8:c7:32:39:b7:b0: 9d:3b:bd:7e:89:22:df:73:79:f5:a4:c5:48:b7:7a:b9:3d:e6: 2d:89:a9:ca:f0:df:1b:e0:ff:3c:bb:8a:54:85:bf:a3:cc:a4: d2:1b:c1:0a:f4:37:01:d6:29:c4:ac:18:10:83:8a:25:8f:97: 84:55:24:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXLic2Tg45u3ZciLmcXTiU8C7YgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA2MDIxNzA1NTJaFw0yNTA2MDUyMzUwNTJaMDMxMTAvBgNV BAMTKEQ0MDcwN0YxRUQ5MzA2NEQxQTM3RDU1ODZEQUREMkRBQ0MwQkE1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAw5pdFPJ+AfrGMAzsbsMyrMwQ Tn29lOQ4C8ky2pWxAjYtJbnQU5L5L+2BWVaWjRlkQlhh93AipheTgbByk9mHui/+ gqZoTJA5H07G1Ei6y2OevZMJubqWcn0haQkvT18p450LlRRaFxk/Zi3VE+yPnQQG N5LbfZkJYl+HGffrB3wE2EpxGZSxyp4Rt/uLmCHeE0oEGrvmOrlGFKRDWbXMQJUc 2im0xObNFaZZw3CJQHyV3fcRGkdL7eWRClnMQ8dT885WDjjtYAWM/2gCU2oobv7e uT1RwL52lwrRrpDoEwGJcR37m0UaKEIIB765/17zWupsPuIl0nN/g/NQwxaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1AcH8e2TBk0aN9VYba3S2swLpbowHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbNxJNkezzP6WgNJr7Vp79QoDCSrQD4Wy/f xwsbIvm/kPsCPo3N38eEhU39rwQxxm9sL+K5yWaWJUgsrougKKdUC5PCe4yxDL5t Fz3Io3LMx5gBkPEW1ktivZGRphD4z1HSiHwiI60IUWGYS8YurDomyEsX6WPc5VjI rfMQTgRn2KsoZ36UiO287s1z1xS97X46dP8fp35ys/VB3GCodQVe9z/CdTNDCYXg qSy1J13CGGxxvTNJbc+uq094GuCQcOjHMjm3sJ07vX6JIt9zefWkxUi3erk95i2J qcrw3xvg/zy7ilSFv6PMpNIbwQr0NwHWKcSsGBCDiiWPl4RVJLU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:43 2025 by rpki-client