$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: 7130kb5+jSjBFZIVFhCB5yk18PZr85GoQgBWSbtu92E= Subject key identifier: 66:AD:B7:36:11:9D:C0:6B:79:CF:51:25:F9:3F:C9:1D:8B:C9:A7:52 Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 26A09E0E1302E8C2FDD66DEBB5C9F1F7F36AA0FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 0259 Signing time: Sun 19 Oct 2025 02:31:24 +0000 Manifest this update: Sun 19 Oct 2025 02:26:24 +0000 Manifest next update: Wed 22 Oct 2025 04:32:24 +0000 Files and hashes: 1: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: YDauFPpdOn1zqv1CqW4upPW5j9/H3WQk729COl4aXHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a0:9e:0e:13:02:e8:c2:fd:d6:6d:eb:b5:c9:f1:f7:f3:6a:a0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Oct 19 02:26:24 2025 GMT Not After : Oct 22 04:32:24 2025 GMT Subject: CN=66ADB736119DC06B79CF5125F93FC91D8BC9A752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:bb:e0:32:a3:7f:4c:cf:dd:29:d0:99:7a: 66:ba:31:e0:f6:b2:99:52:96:0b:a3:0f:83:24:37: 22:0f:d2:0c:9e:ba:c2:41:40:c3:38:c1:fd:ad:b1: 20:c3:e2:58:a1:35:9a:ee:11:f1:5c:6d:9a:bc:04: ba:4a:4f:23:41:ff:60:3e:48:69:32:06:e2:b2:24: 05:f0:60:a6:ec:5b:27:df:cc:e7:fb:45:3b:f9:db: f4:b7:ac:98:d3:51:61:17:92:81:09:83:29:f7:d3: 67:af:12:b8:0c:92:78:51:9a:d4:7f:05:73:a3:f3: b7:cf:4e:76:af:2e:12:ab:a2:03:cc:77:f3:bd:88: 80:3d:20:57:07:e9:69:8a:0d:c5:6c:91:f6:ef:13: 04:19:71:12:0d:64:6e:83:be:74:46:3c:2e:cc:d7: 06:82:f3:45:16:30:ba:6b:64:82:15:00:28:7d:c1: b2:29:2e:1d:c6:f0:f3:07:5e:12:6e:6f:fd:42:18: e3:f1:8a:26:e0:16:a5:22:70:ee:00:5e:dd:a8:33: 15:c1:f3:73:3c:f6:2f:bc:76:93:87:f9:6e:6e:07: ec:76:10:b6:7f:50:a9:a6:31:e2:88:84:85:4d:7c: 45:9a:a9:74:3a:4c:1d:b1:d3:8e:03:fa:c0:5f:50: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AD:B7:36:11:9D:C0:6B:79:CF:51:25:F9:3F:C9:1D:8B:C9:A7:52 X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6c:a8:e3:29:b4:22:27:e5:f6:3d:0a:a7:a5:63:3e:8a:6f: e1:4f:e3:97:7d:40:61:ec:b3:40:2d:6f:53:67:f4:05:fd:33: bf:eb:3a:f6:b7:28:18:d0:c8:ca:13:1b:6e:0d:b0:ac:44:d3: 96:bb:4f:54:1d:59:84:01:79:8d:43:15:7b:b1:8f:9a:ec:23: ed:2c:fc:fd:09:07:ed:41:29:90:36:49:e1:5f:87:d0:b9:75: 15:3c:50:e4:a4:60:d8:8b:fe:ec:81:16:68:4e:37:ff:0f:06: 59:a3:36:50:bb:8a:7e:17:d1:90:0a:6d:88:70:0f:fa:b9:d9: e6:5a:f9:54:65:ad:a3:86:ca:f4:0c:23:c9:d2:64:9b:55:19: 74:e8:95:ff:c5:66:89:22:c5:4c:c4:27:1f:95:58:da:cf:87: d5:4c:f9:6d:70:3c:0e:4d:5c:ba:9b:40:91:40:7c:84:bd:6d: 9f:02:75:74:ea:65:ae:3f:22:55:ee:92:4a:10:58:2b:7e:64: d6:af:e2:7b:07:5b:c6:a0:06:ca:bc:58:67:65:ad:c8:81:8f: 97:66:8d:a4:ac:b4:47:86:d9:9b:82:d6:68:c0:b8:5e:93:0c: b8:fd:78:8f:75:54:13:1b:16:98:3c:86:54:f1:3d:e8:e3:46: 62:95:72:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqCeDhMC6ML91m3rtcnx9/NqoPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNTEwMTkwMjI2MjRaFw0yNTEwMjIwNDMyMjRaMDMxMTAvBgNV BAMTKDY2QURCNzM2MTE5REMwNkI3OUNGNTEyNUY5M0ZDOTFEOEJDOUE3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8LvgMqN/TM/dKdCZema6MeD2 splSlgujD4MkNyIP0gyeusJBQMM4wf2tsSDD4lihNZruEfFcbZq8BLpKTyNB/2A+ SGkyBuKyJAXwYKbsWyffzOf7RTv52/S3rJjTUWEXkoEJgyn302evErgMknhRmtR/ BXOj87fPTnavLhKrogPMd/O9iIA9IFcH6WmKDcVskfbvEwQZcRINZG6DvnRGPC7M 1waC80UWMLprZIIVACh9wbIpLh3G8PMHXhJub/1CGOPxiibgFqUicO4AXt2oMxXB 83M89i+8dpOH+W5uB+x2ELZ/UKmmMeKIhIVNfEWaqXQ6TB2x044D+sBfUFmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZq23NhGdwGt5z1El+T/JHYvJp1IwHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBsqOMptCIn5fY9CqelYz6Kb+FP45d9QGHs s0Atb1Nn9AX9M7/rOva3KBjQyMoTG24NsKxE05a7T1QdWYQBeY1DFXuxj5rsI+0s /P0JB+1BKZA2SeFfh9C5dRU8UOSkYNiL/uyBFmhON/8PBlmjNlC7in4X0ZAKbYhw D/q52eZa+VRlraOGyvQMI8nSZJtVGXTolf/FZokixUzEJx+VWNrPh9VM+W1wPA5N XLqbQJFAfIS9bZ8CdXTqZa4/IlXukkoQWCt+ZNav4nsHW8agBsq8WGdlrciBj5dm jaSstEeG2ZuC1mjAuF6TDLj9eI91VBMbFpg8hlTxPejjRmKVcqA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:37 2025 by rpki-client