$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: YPZQ0qEJW+9k2lEJZ4gg9V0Bo8F0TKXwLgPS9QyMdDg= Subject key identifier: 28:3D:5A:AB:64:F8:F1:2D:F8:03:0F:B5:98:92:C9:7E:EE:66:0E:60 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 278E655A84D6AE85A31EBD2219249588868FBAF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0143 Signing time: Mon 20 Oct 2025 07:42:02 +0000 Manifest this update: Mon 20 Oct 2025 07:37:02 +0000 Manifest next update: Thu 23 Oct 2025 15:21:02 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: tjLd/MwVmuBldzSHqEun/r6In3AbIEQKFddXC+pAFII=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8e:65:5a:84:d6:ae:85:a3:1e:bd:22:19:24:95:88:86:8f:ba:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Oct 20 07:37:02 2025 GMT Not After : Oct 23 15:21:02 2025 GMT Subject: CN=283D5AAB64F8F12DF8030FB59892C97EEE660E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:34:c0:b3:13:5b:bd:4b:23:d7:1f:71:2c: ba:6f:d0:f1:27:06:fa:9b:bc:cc:b0:c6:75:cb:cb: 8f:8f:13:8d:f5:27:92:69:1e:cf:7d:5f:0a:7e:03: 32:26:57:71:3f:15:03:c6:72:f8:ac:8e:86:a3:35: 4c:dc:19:97:c5:fa:5e:8e:18:59:d2:7d:b4:03:2a: 95:21:c6:7e:44:52:73:66:97:c8:e5:5d:c0:34:6c: 2b:33:0b:18:03:8e:d9:9e:e9:67:d3:a5:ea:d1:0e: d1:9f:63:3d:90:97:e6:bf:27:06:b0:9b:c3:66:35: 67:d9:da:0b:dc:98:90:c7:a2:77:5f:d6:1c:f7:0f: 78:1c:ac:fa:83:4a:94:1a:41:a8:c1:b8:4b:d7:f8: bd:78:3a:b8:f3:f8:e4:90:1f:aa:1e:d9:7b:2d:b9: 1f:f7:55:af:6a:a0:c8:3b:99:e2:4b:31:2e:48:37: 77:f6:34:1f:ec:f1:27:63:60:82:e8:45:42:3c:9e: 24:6e:0f:ce:13:f5:c8:85:ae:3e:b4:f8:59:97:3d: 86:05:64:3b:64:9d:e3:a9:4f:1a:32:4b:4e:fe:8f: 76:f0:e4:ce:da:f4:f2:69:34:d3:66:0c:38:94:79: 13:6c:6a:34:eb:eb:e9:ae:51:2b:80:41:2d:ee:50: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3D:5A:AB:64:F8:F1:2D:F8:03:0F:B5:98:92:C9:7E:EE:66:0E:60 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:40:30:d8:e1:8d:59:03:2e:2f:01:5b:78:a6:81:50:96:09: 4c:b1:83:df:99:ed:68:e9:f5:48:29:84:9b:71:8a:52:29:5b: 72:0f:b1:79:df:46:50:5e:df:e9:4b:37:6a:de:e5:6e:88:18: b8:23:38:ae:8e:a5:c4:a8:49:cf:00:e8:9f:8a:30:37:38:94: c2:64:f0:bd:7c:90:91:2b:f8:4f:e5:e6:90:66:0a:dc:c3:8d: 67:16:4e:ff:38:bb:2e:b0:17:1e:de:0f:52:f8:36:ac:e6:0f: fc:e3:7e:91:c0:fe:46:30:1f:fe:f0:59:d6:c0:46:4c:89:32: 67:29:0e:09:bc:4d:f7:b4:00:45:ee:85:bd:8e:ec:55:09:90: 6b:90:f6:f1:d0:95:1f:e3:cd:1d:a4:d2:61:6b:ae:f6:87:93: ff:36:95:f4:94:3f:86:62:b4:ae:b8:4b:02:dd:41:0a:e5:4d: db:1e:23:7c:3a:eb:31:96:da:f4:d2:c5:ef:66:97:c4:99:ea: 82:41:3b:7c:05:7b:1b:a8:6d:b7:4a:62:59:f5:36:1a:45:ae: fd:ce:c6:12:55:65:e0:54:38:33:b9:e9:a6:8d:e0:8f:c4:ec: 1c:a2:35:b3:34:7c:95:f5:92:71:ce:c0:8e:bd:42:6c:8d:4e: 72:c9:4f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ45lWoTWroWjHr0iGSSViIaPuvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTEwMjAwNzM3MDJaFw0yNTEwMjMxNTIxMDJaMDMxMTAvBgNV BAMTKDI4M0Q1QUFCNjRGOEYxMkRGODAzMEZCNTk4OTJDOTdFRUU2NjBFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFDTAsxNbvUsj1x9xLLpv0PEn BvqbvMywxnXLy4+PE431J5JpHs99Xwp+AzImV3E/FQPGcvisjoajNUzcGZfF+l6O GFnSfbQDKpUhxn5EUnNml8jlXcA0bCszCxgDjtme6WfTperRDtGfYz2Ql+a/Jwaw m8NmNWfZ2gvcmJDHondf1hz3D3gcrPqDSpQaQajBuEvX+L14Orjz+OSQH6oe2Xst uR/3Va9qoMg7meJLMS5IN3f2NB/s8SdjYILoRUI8niRuD84T9ciFrj60+FmXPYYF ZDtkneOpTxoyS07+j3bw5M7a9PJpNNNmDDiUeRNsajTr6+muUSuAQS3uUPAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKD1aq2T48S34Aw+1mJLJfu5mDmAwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFAMNjhjVkDLi8BW3imgVCWCUyxg9+Z7Wjp 9UgphJtxilIpW3IPsXnfRlBe3+lLN2re5W6IGLgjOK6OpcSoSc8A6J+KMDc4lMJk 8L18kJEr+E/l5pBmCtzDjWcWTv84uy6wFx7eD1L4NqzmD/zjfpHA/kYwH/7wWdbA RkyJMmcpDgm8Tfe0AEXuhb2O7FUJkGuQ9vHQlR/jzR2k0mFrrvaHk/82lfSUP4Zi tK64SwLdQQrlTdseI3w66zGW2vTSxe9ml8SZ6oJBO3wFexuobbdKYln1NhpFrv3O xhJVZeBUODO56aaN4I/E7ByiNbM0fJX1knHOwI69QmyNTnLJT2M= -----END CERTIFICATE-----Generated at Mon Oct 20 23:07:29 2025 by rpki-client