$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: kLPpjPxoNK+kaQ/+Gu1Pl+R/XMKGi/w7FPt1enw6uLs= Subject key identifier: A5:CA:7B:8D:5C:36:7C:8B:56:D7:72:CF:F8:66:9B:4C:12:6E:D4:D2 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 22A6B07A1D9689FFE5953C02A2165669612D805B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: D1 Signing time: Sun 19 Oct 2025 16:51:40 +0000 Manifest this update: Sun 19 Oct 2025 16:46:40 +0000 Manifest next update: Wed 22 Oct 2025 18:05:40 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) 3: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: IKysO+38TH6Gp20TFoVEHET0FXkg0Vm4qQ1KJ8fpuwE=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a6:b0:7a:1d:96:89:ff:e5:95:3c:02:a2:16:56:69:61:2d:80:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Oct 19 16:46:40 2025 GMT Not After : Oct 22 18:05:40 2025 GMT Subject: CN=A5CA7B8D5C367C8B56D772CFF8669B4C126ED4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:e9:73:2d:d5:0d:01:b6:92:c9:5c:c3:f3: 64:25:65:51:74:6d:56:05:a3:97:52:82:eb:43:dc: 99:dd:da:0d:5c:7b:90:27:9f:e7:79:5f:94:44:0e: e6:ae:d0:4b:bb:fb:2c:d3:37:aa:11:8c:ea:a8:74: 7d:bd:4a:3c:f7:f1:3b:69:8c:f9:8a:de:0c:6b:0f: 3b:92:d7:13:6c:02:88:3f:d0:a7:11:74:51:95:06: 1e:aa:70:42:eb:2f:b3:4a:ce:b2:5a:be:d5:63:cf: 03:92:4b:b2:34:f7:73:9e:25:6e:f0:8f:c9:7e:7b: 8e:78:47:0f:b2:c6:7e:8c:e7:e5:7c:2c:17:0a:7a: 1c:d1:12:1b:d0:0d:db:e9:80:a0:08:b7:73:67:2b: 01:09:30:d9:b8:d9:b4:51:cc:2b:ca:ad:28:db:42: 29:d6:e6:9f:5f:07:a8:7b:d4:8b:16:b6:1e:0a:a6: 91:71:55:15:c3:83:cd:39:80:d4:e9:91:d0:ec:92: e9:54:27:d4:72:5a:d3:c6:43:5a:2c:18:da:47:58: b4:82:81:2e:b1:c7:e2:6b:3b:75:09:5b:bd:18:5d: 04:e6:0b:1b:46:de:d1:02:4d:03:68:80:fd:38:62: a1:20:49:fd:67:7b:a9:c4:10:09:4e:13:f1:e7:51: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CA:7B:8D:5C:36:7C:8B:56:D7:72:CF:F8:66:9B:4C:12:6E:D4:D2 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:15:6f:3a:7d:76:7d:4f:ac:76:d5:f3:ac:ec:34:82:ba:24: 01:9f:d7:60:8c:63:aa:29:10:38:cd:56:26:7d:ce:e6:2b:5d: cf:da:28:0d:f8:a9:0c:b7:bd:d0:87:36:02:b2:4b:f4:4e:48: 68:bf:5f:21:06:db:5b:08:d9:03:44:43:9d:23:8a:cb:3a:02: 03:f3:f2:2f:93:bf:f9:aa:16:b0:ef:ee:d8:cc:36:a0:51:b0: e8:03:e3:34:1b:cb:7d:f4:f7:7c:49:97:50:54:0b:05:9c:76: 0b:d1:f0:d4:27:9a:89:f1:d6:be:46:6a:1d:4a:62:3a:b4:79: e8:9c:de:84:69:84:4d:2d:3c:94:13:8a:8f:f8:0f:7d:e4:be: 50:02:54:94:44:b7:a7:a4:0f:0a:b4:31:ee:78:cf:0b:4b:1a: ab:44:70:6a:0c:33:dc:d9:34:9e:48:8c:aa:11:3a:48:a5:44: e0:83:99:a9:55:87:55:3a:23:da:ff:55:d6:33:76:ba:0a:14: b2:d7:30:10:04:c0:7c:2a:60:c1:28:6e:2f:b6:00:41:1a:df: 43:14:30:87:53:ba:17:5f:af:11:8e:80:d3:ef:5c:c4:ce:9b: da:c5:86:6e:70:c5:2b:9b:bf:54:9d:67:82:31:4f:57:37:4c: a4:6a:37:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqaweh2Wif/llTwCohZWaWEtgFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTEwMTkxNjQ2NDBaFw0yNTEwMjIxODA1NDBaMDMxMTAvBgNV BAMTKEE1Q0E3QjhENUMzNjdDOEI1NkQ3NzJDRkY4NjY5QjRDMTI2RUQ0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFOlzLdUNAbaSyVzD82QlZVF0 bVYFo5dSgutD3Jnd2g1ce5Ann+d5X5REDuau0Eu7+yzTN6oRjOqodH29Sjz38Ttp jPmK3gxrDzuS1xNsAog/0KcRdFGVBh6qcELrL7NKzrJavtVjzwOSS7I093OeJW7w j8l+e454Rw+yxn6M5+V8LBcKehzREhvQDdvpgKAIt3NnKwEJMNm42bRRzCvKrSjb QinW5p9fB6h71IsWth4KppFxVRXDg805gNTpkdDskulUJ9RyWtPGQ1osGNpHWLSC gS6xx+JrO3UJW70YXQTmCxtG3tECTQNogP04YqEgSf1ne6nEEAlOE/HnUWm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpcp7jVw2fItW13LP+GabTBJu1NIwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYVbzp9dn1PrHbV86zsNIK6JAGf12CMY6op EDjNViZ9zuYrXc/aKA34qQy3vdCHNgKyS/ROSGi/XyEG21sI2QNEQ50jiss6AgPz 8i+Tv/mqFrDv7tjMNqBRsOgD4zQby33093xJl1BUCwWcdgvR8NQnmonx1r5Gah1K Yjq0eeic3oRphE0tPJQTio/4D33kvlACVJREt6ekDwq0Me54zwtLGqtEcGoMM9zZ NJ5IjKoROkilROCDmalVh1U6I9r/VdYzdroKFLLXMBAEwHwqYMEobi+2AEEa30MU MIdTuhdfrxGOgNPvXMTOm9rFhm5wxSubv1SdZ4IxT1c3TKRqN1k= -----END CERTIFICATE-----Generated at Mon Oct 20 21:31:40 2025 by rpki-client