$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: dm3zSWxY7crkoDs6R2wScZRDZyj9pRVCa/FBeXS3pyE= Subject key identifier: B6:5B:67:19:01:E6:1B:09:0D:98:DB:E3:AC:6E:C9:13:7A:5C:04:A7 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 7DD8BE999CBCACD617147F12427569B9CA861E2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0128 Signing time: Fri 22 Aug 2025 10:02:03 +0000 Manifest this update: Fri 22 Aug 2025 09:57:03 +0000 Manifest next update: Mon 25 Aug 2025 14:27:03 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: S/JMtxwTvqlT5hOZKXJvQGDG/137r0z9PKEKjxEmzHM=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: InZb4Svv3A2DHv8YSHBBCPvqo5sWpcXYdxwGVe0a300=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d8:be:99:9c:bc:ac:d6:17:14:7f:12:42:75:69:b9:ca:86:1e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Aug 22 09:57:03 2025 GMT Not After : Aug 25 14:27:03 2025 GMT Subject: CN=B65B671901E61B090D98DBE3AC6EC9137A5C04A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ca:ad:2e:86:1a:2d:2a:fc:58:8c:bb:6e:f3: f9:a8:4c:e2:38:4a:f3:a4:6d:d1:00:2a:1c:5f:79: 91:ab:7b:98:0b:8d:26:ff:dc:06:fe:cb:b4:9e:ab: 3b:12:d5:2b:d0:9c:b3:be:f0:2c:12:38:fc:f3:69: d8:73:a8:6a:8b:ff:ef:11:c3:c6:94:4c:39:25:24: 8a:f6:31:30:1b:84:31:7d:05:01:cf:ad:ba:01:e4: 5e:e1:2f:c7:c1:7b:b2:07:fd:d8:e8:2c:11:7a:1b: 5b:08:e2:61:04:4a:f6:e0:96:6c:b7:57:71:79:a4: e8:33:f7:a3:b4:b8:54:97:89:ea:3e:9c:05:4b:4a: 60:ae:8c:f8:19:cf:d7:97:70:3d:fb:dc:4c:07:fb: 99:2e:ab:a9:7d:35:77:57:b0:db:f0:19:f6:19:7e: bf:d2:67:9d:35:ad:2e:63:3e:54:17:9f:5f:68:76: 4a:76:9c:35:4b:f5:2b:60:f8:70:6f:cb:47:0c:46: 13:b5:2c:a1:dd:51:b6:59:83:29:92:3a:38:0b:6f: f7:e3:01:9a:db:ed:9f:30:60:e2:6a:e1:35:25:4e: 0d:85:81:e5:65:21:82:77:d7:1d:fb:d8:43:9c:05: a1:c0:fc:77:eb:bd:32:5f:70:71:14:de:3b:5b:15: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5B:67:19:01:E6:1B:09:0D:98:DB:E3:AC:6E:C9:13:7A:5C:04:A7 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:63:cb:7b:43:22:74:c0:ef:07:86:51:e6:31:46:56:b5:37: 95:da:03:db:34:23:13:6d:3d:30:f2:a9:8e:13:d0:1a:e3:94: 39:29:e5:ec:b0:6f:b1:67:e7:23:4e:cc:ea:b6:76:06:c9:d5: 56:ec:74:b3:e9:dd:5d:16:5d:fa:70:cf:63:60:20:3a:16:8b: 2c:6e:ad:44:71:8a:d6:51:02:f4:4c:a7:62:96:06:ab:14:b9: 7d:f6:0b:2f:df:0a:af:05:55:9f:e4:18:78:b6:f5:9e:0c:7f: 8a:80:5e:6e:d7:a0:0b:3b:42:df:ed:87:80:3f:b0:f5:67:bb: bc:42:0b:38:bd:43:ab:50:95:40:7b:38:03:59:ae:61:8c:0d: ce:c7:e3:60:71:f3:f6:bb:da:c7:26:18:f4:58:a3:13:ec:c1: 08:43:f6:82:1d:46:fe:f2:9a:73:fe:75:26:30:c7:0e:1f:7d: 47:2f:14:66:d5:28:67:1a:9f:68:73:bd:72:5a:ca:a1:99:1e: de:93:8f:86:e4:71:a3:13:2f:b1:01:16:4c:fe:34:ab:9d:78: 9e:60:d0:82:71:5e:7a:e6:8b:e4:0a:27:db:c4:5a:db:eb:b2: 5a:61:eb:4c:83:23:cd:98:f4:ac:c8:3d:8b:72:36:4f:1e:7d: 61:1e:8c:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdi+mZy8rNYXFH8SQnVpucqGHi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTA4MjIwOTU3MDNaFw0yNTA4MjUxNDI3MDNaMDMxMTAvBgNV BAMTKEI2NUI2NzE5MDFFNjFCMDkwRDk4REJFM0FDNkVDOTEzN0E1QzA0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDayq0uhhotKvxYjLtu8/moTOI4 SvOkbdEAKhxfeZGre5gLjSb/3Ab+y7SeqzsS1SvQnLO+8CwSOPzzadhzqGqL/+8R w8aUTDklJIr2MTAbhDF9BQHPrboB5F7hL8fBe7IH/djoLBF6G1sI4mEESvbglmy3 V3F5pOgz96O0uFSXieo+nAVLSmCujPgZz9eXcD373EwH+5kuq6l9NXdXsNvwGfYZ fr/SZ501rS5jPlQXn19odkp2nDVL9Stg+HBvy0cMRhO1LKHdUbZZgymSOjgLb/fj AZrb7Z8wYOJq4TUlTg2FgeVlIYJ31x372EOcBaHA/HfrvTJfcHEU3jtbFbCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtltnGQHmGwkNmNvjrG7JE3pcBKcwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9jy3tDInTA7weGUeYxRla1N5XaA9s0IxNt PTDyqY4T0BrjlDkp5eywb7Fn5yNOzOq2dgbJ1VbsdLPp3V0WXfpwz2NgIDoWiyxu rURxitZRAvRMp2KWBqsUuX32Cy/fCq8FVZ/kGHi29Z4Mf4qAXm7XoAs7Qt/th4A/ sPVnu7xCCzi9Q6tQlUB7OANZrmGMDc7H42Bx8/a72scmGPRYoxPswQhD9oIdRv7y mnP+dSYwxw4ffUcvFGbVKGcan2hzvXJayqGZHt6Tj4bkcaMTL7EBFkz+NKudeJ5g 0IJxXnrmi+QKJ9vEWtvrslph60yDI82Y9KzIPYtyNk8efWEejAo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:16 2025 by rpki-client