$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: P8JDDQusSScWvqDROEWwzC08niqiW18GnRhAtB+9og4= Subject key identifier: BA:EF:17:01:23:09:DF:C6:56:4B:57:5C:0A:78:39:4F:58:32:3F:64 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 331E1D77730F3782A8B912502BD8BD6B9C8AC49B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0110 Signing time: Sun 29 Jun 2025 05:11:58 +0000 Manifest this update: Sun 29 Jun 2025 05:06:58 +0000 Manifest next update: Wed 02 Jul 2025 11:43:58 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: TOax4udCmVbXceDYP4g6G/R+yWPF7G0TZvIrJ2cCnJg=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: InZb4Svv3A2DHv8YSHBBCPvqo5sWpcXYdxwGVe0a300=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1e:1d:77:73:0f:37:82:a8:b9:12:50:2b:d8:bd:6b:9c:8a:c4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Jun 29 05:06:58 2025 GMT Not After : Jul 2 11:43:58 2025 GMT Subject: CN=BAEF17012309DFC6564B575C0A78394F58323F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4c:f5:46:f1:25:3c:e0:ad:0d:53:1d:2f:5f: 9d:d1:23:53:52:b2:81:5d:a9:bc:c8:6e:83:ec:31: 00:7f:43:fd:2e:63:14:3c:50:28:d5:58:76:20:cd: 59:dd:36:4e:43:1b:0f:88:4f:ad:c4:4b:1b:c4:b2: 64:2e:99:41:5a:3d:84:67:bf:d5:da:fb:d6:e1:77: 3b:c8:00:93:5e:2f:1e:25:aa:b0:7e:ee:71:d8:0f: 51:63:0e:a1:b0:29:c7:5a:32:a7:89:14:2a:d4:a7: 28:1a:6d:c9:54:5b:e2:78:b5:86:32:a7:fc:70:a3: a7:5d:2f:d0:81:f0:09:9f:5b:2b:77:21:c7:84:96: 7e:32:6a:98:c8:46:04:dd:dc:76:00:7d:cd:67:63: ba:c8:78:8e:b0:fc:8f:f2:de:ce:61:8b:f5:5c:ae: a0:33:f0:82:1a:a5:01:76:b3:54:e1:54:82:11:5d: 2c:c3:80:b9:6e:9e:ea:ea:fd:0b:85:ee:66:c5:77: d0:68:8b:cd:b2:0e:ec:d6:10:f1:47:28:23:cb:cd: 7f:a2:99:02:23:87:aa:1c:34:bc:c8:0f:74:d5:78: 3f:88:0a:0f:ae:01:3a:ab:84:0d:27:38:78:64:cb: d3:c3:a5:01:8b:8e:0d:93:1b:32:07:2c:38:42:18: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EF:17:01:23:09:DF:C6:56:4B:57:5C:0A:78:39:4F:58:32:3F:64 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e4:07:61:91:ba:f0:97:a0:34:7a:cb:e9:7d:51:6d:3d:0f: e1:e8:e3:5a:43:76:05:5c:49:b9:ae:1b:dd:b6:49:51:94:0d: c2:e7:f1:95:81:d2:6d:39:29:16:e5:e5:2e:f2:5f:18:1e:88: 9c:b2:54:ea:61:55:fc:f9:6f:c9:92:c3:0b:db:ec:0b:54:4a: ce:9d:01:f3:d0:c8:c5:45:95:93:7b:e7:92:13:9c:08:89:7b: b8:3a:33:31:11:1f:38:a6:cd:b5:40:92:37:6b:ca:22:03:e2: f1:cd:37:b7:cb:ea:22:36:53:56:ac:e0:40:86:a6:45:5b:ba: 15:e2:c4:30:aa:50:1d:1b:5c:63:39:90:92:99:5c:7b:35:02: 61:be:49:bc:9f:fb:58:4f:d3:8f:61:46:7f:1f:da:c2:e6:6e: bb:1b:df:3e:9b:d4:f6:a9:76:70:2a:fd:32:b0:19:6a:b6:c7: 32:6f:ba:7f:8f:69:da:79:36:6d:1a:84:9c:ca:6e:b6:fe:b1: f9:71:06:12:31:e2:7e:ce:65:c5:42:cd:3c:b7:61:e6:c4:d6: a9:3c:71:e1:f5:9c:ae:6f:5c:6f:7b:28:40:41:65:0a:f3:af: 8d:52:8d:25:92:f3:5d:05:7f:08:c4:86:bb:f3:ed:57:a3:0e: 81:e9:46:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMx4dd3MPN4KouRJQK9i9a5yKxJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTA2MjkwNTA2NThaFw0yNTA3MDIxMTQzNThaMDMxMTAvBgNV BAMTKEJBRUYxNzAxMjMwOURGQzY1NjRCNTc1QzBBNzgzOTRGNTgzMjNGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwTPVG8SU84K0NUx0vX53RI1NS soFdqbzIboPsMQB/Q/0uYxQ8UCjVWHYgzVndNk5DGw+IT63ESxvEsmQumUFaPYRn v9Xa+9bhdzvIAJNeLx4lqrB+7nHYD1FjDqGwKcdaMqeJFCrUpygabclUW+J4tYYy p/xwo6ddL9CB8AmfWyt3IceEln4yapjIRgTd3HYAfc1nY7rIeI6w/I/y3s5hi/Vc rqAz8IIapQF2s1ThVIIRXSzDgLlunurq/QuF7mbFd9Boi82yDuzWEPFHKCPLzX+i mQIjh6ocNLzID3TVeD+ICg+uATqrhA0nOHhky9PDpQGLjg2TGzIHLDhCGN0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuu8XASMJ38ZWS1dcCng5T1gyP2QwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3kB2GRuvCXoDR6y+l9UW09D+Ho41pDdgVc SbmuG922SVGUDcLn8ZWB0m05KRbl5S7yXxgeiJyyVOphVfz5b8mSwwvb7AtUSs6d AfPQyMVFlZN755ITnAiJe7g6MzERHzimzbVAkjdryiID4vHNN7fL6iI2U1as4ECG pkVbuhXixDCqUB0bXGM5kJKZXHs1AmG+Sbyf+1hP049hRn8f2sLmbrsb3z6b1Pap dnAq/TKwGWq2xzJvun+Padp5Nm0ahJzKbrb+sflxBhIx4n7OZcVCzTy3YebE1qk8 ceH1nK5vXG97KEBBZQrzr41SjSWS810FfwjEhrvz7VejDoHpRq0= -----END CERTIFICATE-----Generated at Sun Jun 29 21:41:14 2025 by rpki-client