$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: 5cPrJMAlDDjqlKBwH7Vx5ro5Qub0p3tHP7RT5iCMQhc= Subject key identifier: CE:FF:16:7F:1A:2B:34:09:D9:BF:24:F1:E3:C2:1C:79:3B:52:40:E8 Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 38B6E4D50AB7E9651EFC0FDE94B58AF7BC898ACA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 12 Signing time: Fri 04 Apr 2025 00:00:51 +0000 Manifest this update: Thu 03 Apr 2025 23:55:51 +0000 Manifest next update: Mon 07 Apr 2025 03:14:51 +0000 Files and hashes: 1: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: KXENIu3nFfJh6qTLZjxcpehJrdQSdzGywbsq6wv4D9o=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 03:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b6:e4:d5:0a:b7:e9:65:1e:fc:0f:de:94:b5:8a:f7:bc:89:8a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Apr 3 23:55:51 2025 GMT Not After : Apr 7 03:14:51 2025 GMT Subject: CN=CEFF167F1A2B3409D9BF24F1E3C21C793B5240E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:ae:51:20:be:22:ea:62:97:52:db:06:34: 9b:4b:3a:a4:c0:6a:d6:69:0c:42:c9:48:dc:da:5a: 29:3b:23:28:e6:6c:cf:fd:72:6f:90:a3:06:43:53: c2:94:85:6b:8d:bb:34:41:8e:5f:76:b7:ed:c4:a6: c1:d7:72:55:68:8f:33:a7:c5:70:f4:d1:94:3b:12: 60:d7:7c:0b:19:99:72:20:13:29:04:c8:bf:4e:75: 17:dd:b2:ee:5e:6a:a8:11:dc:f0:f7:19:42:ab:c8: e2:6e:12:7d:13:64:f1:f8:0d:98:52:15:a3:3e:ab: 81:44:29:2c:24:4a:97:7a:32:ec:f0:4a:57:2b:c3: 77:03:55:2c:be:73:cb:c5:e6:21:86:7d:3c:8a:d7: 0e:31:76:c7:bb:90:f9:b7:59:6b:02:6f:20:da:b0: 9c:d4:26:85:9e:68:09:cc:2f:d7:e4:ec:2c:57:b5: 75:bb:f8:05:e1:92:be:94:5b:f8:9c:93:4c:6f:b2: 20:66:4e:52:50:00:02:4e:bf:7b:4f:fb:33:a4:c2: f9:ed:b1:bb:a7:03:29:d6:42:c4:58:4b:59:64:20: 31:8b:69:b6:71:4e:75:c3:10:c4:7b:0a:1a:35:d4: 1e:38:63:6f:fb:eb:26:c4:86:c1:c9:45:89:d1:0f: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FF:16:7F:1A:2B:34:09:D9:BF:24:F1:E3:C2:1C:79:3B:52:40:E8 X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:06:88:df:dd:e4:0e:3e:1e:54:9d:c3:1b:76:42:50:2e:65: b7:2e:f9:cb:5c:2a:06:6f:36:a7:2d:15:6a:2f:8c:15:f1:bd: c3:56:1b:40:06:0b:de:59:46:b1:e6:49:54:4c:43:eb:6a:f6: 61:4c:8b:c8:43:af:fa:9a:05:f6:ba:82:26:07:1e:77:58:fd: 3e:4a:3a:75:22:80:d2:82:6e:4b:53:b5:0d:33:37:be:2c:c9: 1d:b8:f9:26:44:bb:cb:0a:14:53:e7:53:93:90:0d:f4:89:54: 22:bf:b9:d0:47:66:47:70:fd:60:73:c0:1a:43:d6:7b:59:1c: 90:2e:4e:23:2b:1f:a8:d9:2f:57:74:46:88:fa:ae:16:28:15: 6f:f6:e3:04:31:34:be:20:3d:39:b0:c4:c1:e9:33:32:25:90: f8:19:8b:68:ae:22:ff:4c:fb:e0:1b:75:29:8d:a4:93:f6:55: 3b:c8:3a:6a:1e:38:0f:b5:66:e9:a2:15:f6:cb:a0:06:2b:a7: 71:95:f2:b7:89:6d:8f:9d:4f:57:4b:86:c8:42:59:4e:5e:2b: b6:08:30:c5:f5:da:9a:71:2f:fc:ae:36:3e:76:f1:96:a8:23: 21:1c:12:6f:1e:0f:78:43:76:55:36:48:c8:5d:fb:3f:8f:1f: ed:41:3f:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLbk1Qq36WUe/A/elLWK97yJisowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA0MDMyMzU1NTFaFw0yNTA0MDcwMzE0NTFaMDMxMTAvBgNV BAMTKENFRkYxNjdGMUEyQjM0MDlEOUJGMjRGMUUzQzIxQzc5M0I1MjQwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEK5RIL4i6mKXUtsGNJtLOqTA atZpDELJSNzaWik7IyjmbM/9cm+QowZDU8KUhWuNuzRBjl92t+3EpsHXclVojzOn xXD00ZQ7EmDXfAsZmXIgEykEyL9OdRfdsu5eaqgR3PD3GUKryOJuEn0TZPH4DZhS FaM+q4FEKSwkSpd6MuzwSlcrw3cDVSy+c8vF5iGGfTyK1w4xdse7kPm3WWsCbyDa sJzUJoWeaAnML9fk7CxXtXW7+AXhkr6UW/ick0xvsiBmTlJQAAJOv3tP+zOkwvnt sbunAynWQsRYS1lkIDGLabZxTnXDEMR7Cho11B44Y2/76ybEhsHJRYnRD6x9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzv8WfxorNAnZvyTx48IceTtSQOgwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcGiN/d5A4+HlSdwxt2QlAuZbcu+ctcKgZv NqctFWovjBXxvcNWG0AGC95ZRrHmSVRMQ+tq9mFMi8hDr/qaBfa6giYHHndY/T5K OnUigNKCbktTtQ0zN74syR24+SZEu8sKFFPnU5OQDfSJVCK/udBHZkdw/WBzwBpD 1ntZHJAuTiMrH6jZL1d0Roj6rhYoFW/24wQxNL4gPTmwxMHpMzIlkPgZi2iuIv9M ++AbdSmNpJP2VTvIOmoeOA+1ZumiFfbLoAYrp3GV8reJbY+dT1dLhshCWU5eK7YI MMX12ppxL/yuNj528ZaoIyEcEm8eD3hDdlU2SMhd+z+PH+1BP64= -----END CERTIFICATE-----Generated at Sat Apr 5 21:17:17 2025 by rpki-client