$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: LzdbqLFCiePXg0E318mADFVAMRTK+HgX0egMZNzlLdQ= Subject key identifier: 61:DE:96:A5:63:96:91:7C:72:A7:3D:C0:86:55:49:FB:31:EA:8C:48 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 73C33FC9997617ED77AA2B3356B1D9C367A281CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: B8 Signing time: Sat 23 Aug 2025 15:31:37 +0000 Manifest this update: Sat 23 Aug 2025 15:26:37 +0000 Manifest next update: Wed 27 Aug 2025 00:25:37 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) 3: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: 472AiQfX4a+9cTDYKASrrtf1vtl2GqKBXrSCnAHk4bk=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c3:3f:c9:99:76:17:ed:77:aa:2b:33:56:b1:d9:c3:67:a2:81:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Aug 23 15:26:37 2025 GMT Not After : Aug 27 00:25:37 2025 GMT Subject: CN=61DE96A56396917C72A73DC0865549FB31EA8C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:e3:c4:f0:85:e1:0e:a6:0c:7f:9b:a6:56: ce:29:0c:8a:4e:3f:e4:79:81:4a:ab:52:04:2f:55: 05:4d:40:60:99:63:5a:cd:14:db:fc:12:20:82:65: 73:8d:6b:95:36:4c:d1:ce:57:a7:1a:10:38:36:e3: 6a:54:01:ab:b8:79:e6:30:d3:5a:ba:fd:f8:b4:db: 46:6b:41:e2:fc:c2:62:8f:02:e2:c2:d8:1a:b9:4d: 48:bd:47:80:ad:7d:fc:d6:2e:69:0e:88:1c:3c:0e: ee:6e:49:d2:65:50:2d:ec:ed:e1:6a:bf:92:e6:9f: 0c:6b:62:ce:c5:8f:7c:53:39:fb:4e:db:19:c2:15: fa:0b:da:46:5d:0b:cc:b7:f1:ad:c6:f2:cf:04:af: 50:de:98:aa:ea:2b:09:3b:c7:3c:46:c7:e9:9a:53: a0:87:53:e9:1d:f8:19:30:ba:67:14:a4:00:fd:36: 38:93:87:3e:5e:49:d1:15:fa:c5:14:9d:ec:ca:23: fe:b4:45:2f:f0:5c:e7:d8:5d:06:09:78:87:77:f8: 28:0e:0e:3e:9f:0c:17:d9:e5:be:13:96:34:62:da: 13:cd:1d:dd:22:e7:13:ed:a0:76:94:ea:8a:a6:af: 32:68:f1:b2:f0:a0:5b:35:0b:bb:73:11:55:ec:91: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DE:96:A5:63:96:91:7C:72:A7:3D:C0:86:55:49:FB:31:EA:8C:48 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:25:be:27:4a:00:7c:5b:80:35:94:fc:f0:f3:40:80:d0:e1: 48:4e:fb:c5:ff:32:73:d3:3c:98:58:d2:3b:a2:56:98:bc:19: f0:29:42:df:f5:2b:27:75:7a:22:b6:4c:0d:cc:2c:47:28:d5: 34:60:2c:bd:40:a4:21:ea:a3:e3:80:c6:66:2f:ba:c1:e7:d3: 37:e0:a7:33:58:52:30:19:80:bf:f5:d2:c4:b9:3b:f2:ae:4d: 15:38:f0:16:ea:72:e2:33:25:48:e7:52:9c:9e:1e:d4:21:f1: 6c:e1:9a:2e:78:87:ea:c4:20:bf:30:bc:b0:79:4a:6c:03:11: 2e:a5:ca:82:f8:17:fb:51:04:d3:e8:aa:3b:c8:97:c1:08:90: de:8f:4c:26:2f:d1:66:ec:e1:5a:3a:84:2b:cb:38:7e:8c:b0: 78:f2:ea:b5:85:d6:65:4a:64:a5:0f:55:bf:13:f7:52:5c:bf: 42:62:9b:83:5d:b7:a5:9e:ba:45:a0:2c:09:c1:02:53:a3:13: 2d:0d:35:65:d5:e5:8c:c6:ec:cf:2d:22:2e:4d:44:f4:6f:7a: 7c:f5:bf:b4:80:ef:a3:5c:6b:0d:20:79:2b:2d:87:0e:f4:1c: 06:13:e0:21:2a:95:36:0e:e4:3d:0a:27:6a:38:df:03:0f:ba: 5b:19:bf:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8M/yZl2F+13qiszVrHZw2eigcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTA4MjMxNTI2MzdaFw0yNTA4MjcwMDI1MzdaMDMxMTAvBgNV BAMTKDYxREU5NkE1NjM5NjkxN0M3MkE3M0RDMDg2NTU0OUZCMzFFQThDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzuPE8IXhDqYMf5umVs4pDIpO P+R5gUqrUgQvVQVNQGCZY1rNFNv8EiCCZXONa5U2TNHOV6caEDg242pUAau4eeYw 01q6/fi020ZrQeL8wmKPAuLC2Bq5TUi9R4CtffzWLmkOiBw8Du5uSdJlUC3s7eFq v5LmnwxrYs7Fj3xTOftO2xnCFfoL2kZdC8y38a3G8s8Er1DemKrqKwk7xzxGx+ma U6CHU+kd+BkwumcUpAD9NjiThz5eSdEV+sUUnezKI/60RS/wXOfYXQYJeId3+CgO Dj6fDBfZ5b4TljRi2hPNHd0i5xPtoHaU6oqmrzJo8bLwoFs1C7tzEVXskQdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYd6WpWOWkXxypz3AhlVJ+zHqjEgwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUlvidKAHxbgDWU/PDzQIDQ4UhO+8X/MnPT PJhY0juiVpi8GfApQt/1Kyd1eiK2TA3MLEco1TRgLL1ApCHqo+OAxmYvusHn0zfg pzNYUjAZgL/10sS5O/KuTRU48BbqcuIzJUjnUpyeHtQh8Wzhmi54h+rEIL8wvLB5 SmwDES6lyoL4F/tRBNPoqjvIl8EIkN6PTCYv0Wbs4Vo6hCvLOH6MsHjy6rWF1mVK ZKUPVb8T91Jcv0Jim4Ndt6WeukWgLAnBAlOjEy0NNWXV5YzG7M8tIi5NRPRvenz1 v7SA76Ncaw0geSsthw70HAYT4CEqlTYO5D0KJ2o43wMPulsZv24= -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:14 2025 by rpki-client