$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: Z8BMUFjlReopGyw3Xt5px8Y80wvrvtQtovRf2P8T+YE= Subject key identifier: D6:59:1F:7F:83:9A:C5:ED:49:CE:1F:1D:2D:E0:92:7A:FC:C8:0C:EB Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 70E9E52D6F93CA98ED28C485B6FA0DF7C5B30FA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 57 Signing time: Sun 07 Sep 2025 05:30:53 +0000 Manifest this update: Sun 07 Sep 2025 05:25:53 +0000 Manifest next update: Wed 10 Sep 2025 08:28:53 +0000 Files and hashes: 1: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 2: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: 6OP23IC/01xDTTegxXbeLbdqi89BXFNdoWSlEY+2tpE=) 3: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e9:e5:2d:6f:93:ca:98:ed:28:c4:85:b6:fa:0d:f7:c5:b3:0f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Sep 7 05:25:53 2025 GMT Not After : Sep 10 08:28:53 2025 GMT Subject: CN=D6591F7F839AC5ED49CE1F1D2DE0927AFCC80CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:26:94:a0:c4:6d:8c:15:6e:cf:34:00:85: fc:59:df:0f:6a:3b:d3:8a:0e:ab:8b:82:06:cf:8e: b6:25:4a:88:34:48:cd:95:2a:d3:6a:a1:1b:89:74: ca:03:ac:ad:89:6a:e7:b9:17:21:16:de:9f:07:35: e9:94:b9:7d:ef:29:65:d1:a5:dd:10:dd:ee:10:ef: 90:63:af:fc:9d:2d:5f:53:7d:64:79:b0:6c:4b:2a: b1:36:f1:47:0d:84:07:a6:ac:eb:95:d9:00:07:91: 13:93:c9:5c:be:a2:46:32:ce:49:fb:37:7b:40:19: 0e:42:b3:e4:58:d9:6b:68:cf:e0:ac:1a:42:e5:e9: ec:e9:72:e1:8e:d1:23:e8:79:f8:a0:63:f6:d3:f4: 21:28:86:4c:86:f2:11:62:ee:19:6d:9c:c4:fe:cc: e9:e1:63:b4:0e:69:0d:b1:86:d4:b1:db:91:55:cc: 8f:1a:7b:b8:b2:53:fd:40:5d:48:7c:20:3d:b4:72: 64:3b:ac:99:1d:84:30:c4:fe:3e:0c:91:cb:ec:33: 2a:2a:b1:0a:74:2e:7f:60:f6:b1:c3:d7:1a:f5:7e: b6:67:61:13:97:08:83:8b:6f:a6:b8:50:ba:dd:2d: 58:34:3a:52:16:cb:4e:5c:38:39:dc:a0:5f:66:e7: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:59:1F:7F:83:9A:C5:ED:49:CE:1F:1D:2D:E0:92:7A:FC:C8:0C:EB X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:dd:17:6d:94:5f:18:8d:29:b4:03:3a:3e:8e:7c:39:42:63: 79:d9:ee:81:6c:30:66:d3:21:5a:c0:f1:a4:f5:5e:10:60:3c: 8a:33:2f:58:81:20:05:82:34:05:b0:21:99:11:50:49:71:d0: a7:19:d7:ba:8d:6b:ae:e3:a6:57:d7:c8:58:19:69:78:cb:eb: 6b:94:e7:b7:4d:12:ee:d9:c1:b2:e5:18:27:8f:bc:cf:10:23: 19:f2:13:40:79:a8:a3:6f:8f:c4:43:28:15:b5:c2:36:d1:57: 9f:92:4b:cf:21:ca:be:4d:62:57:3b:54:fc:fd:bf:14:2c:50: 7a:20:87:a6:79:a2:b5:6a:26:90:97:25:e4:6d:2a:1e:eb:b6: c0:84:a7:68:70:b0:b1:2c:01:b3:48:c8:84:e8:b0:70:7a:52: d8:30:f2:97:e8:95:0f:ab:43:a4:93:d6:23:f8:14:e2:e3:6d: 46:f9:d3:4f:d7:71:6c:35:84:34:9c:75:6e:fb:50:25:a0:00: cf:2c:ce:9b:ee:48:71:9c:14:a2:2c:1c:18:9c:65:91:cb:25: 42:39:34:f2:ff:6a:46:23:f4:cd:c2:2d:0e:bd:28:f5:a4:85: 9f:bb:0c:fc:72:1a:93:6c:2d:f3:89:66:b2:9c:a8:8a:fa:74: a7:05:36:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOnlLW+TypjtKMSFtvoN98WzD6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA5MDcwNTI1NTNaFw0yNTA5MTAwODI4NTNaMDMxMTAvBgNV BAMTKEQ2NTkxRjdGODM5QUM1RUQ0OUNFMUYxRDJERTA5MjdBRkNDODBDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9iaUoMRtjBVuzzQAhfxZ3w9q O9OKDquLggbPjrYlSog0SM2VKtNqoRuJdMoDrK2Jaue5FyEW3p8HNemUuX3vKWXR pd0Q3e4Q75Bjr/ydLV9TfWR5sGxLKrE28UcNhAemrOuV2QAHkROTyVy+okYyzkn7 N3tAGQ5Cs+RY2Wtoz+CsGkLl6ezpcuGO0SPoefigY/bT9CEohkyG8hFi7hltnMT+ zOnhY7QOaQ2xhtSx25FVzI8ae7iyU/1AXUh8ID20cmQ7rJkdhDDE/j4MkcvsMyoq sQp0Ln9g9rHD1xr1frZnYROXCIOLb6a4ULrdLVg0OlIWy05cODncoF9m58H1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lkff4Oaxe1Jzh8dLeCSevzIDOswHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfdF22UXxiNKbQDOj6OfDlCY3nZ7oFsMGbT IVrA8aT1XhBgPIozL1iBIAWCNAWwIZkRUElx0KcZ17qNa67jplfXyFgZaXjL62uU 57dNEu7ZwbLlGCePvM8QIxnyE0B5qKNvj8RDKBW1wjbRV5+SS88hyr5NYlc7VPz9 vxQsUHogh6Z5orVqJpCXJeRtKh7rtsCEp2hwsLEsAbNIyITosHB6Utgw8pfolQ+r Q6ST1iP4FOLjbUb500/XcWw1hDScdW77UCWgAM8szpvuSHGcFKIsHBicZZHLJUI5 NPL/akYj9M3CLQ69KPWkhZ+7DPxyGpNsLfOJZrKcqIr6dKcFNmY= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:41 2025 by rpki-client