$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: 05o5LJQ1ibO/7woXwWub3A49r+Ja5a/YAzbI1tvKgvw= Subject key identifier: 2C:AA:1C:8F:56:D7:5B:91:E0:80:1B:F2:34:BE:9C:C7:B5:47:B8:5F Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 5504D5B919FA7F28ED37D1FD0CDFAC2F3C823BE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 0239 Signing time: Thu 21 Aug 2025 20:20:04 +0000 Manifest this update: Thu 21 Aug 2025 20:15:04 +0000 Manifest next update: Mon 25 Aug 2025 03:19:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: lnH3QZx/ctS401oFl/o52Yiw4Tv6jlL3M2iLKVNHoXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:04:d5:b9:19:fa:7f:28:ed:37:d1:fd:0c:df:ac:2f:3c:82:3b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Aug 21 20:15:04 2025 GMT Not After : Aug 25 03:19:04 2025 GMT Subject: CN=2CAA1C8F56D75B91E0801BF234BE9CC7B547B85F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:8a:8e:8e:15:96:1b:ca:38:89:c1:70:18: f8:f6:ec:e6:53:8e:23:17:36:65:87:73:73:c1:0a: 93:4d:b0:07:d4:6d:16:11:0c:aa:81:af:de:a0:e8: 5b:cb:1b:15:62:16:55:21:ba:1d:c8:44:09:a7:ea: 32:bb:3d:f4:99:92:25:4a:51:82:c4:0c:f7:73:44: c7:fe:95:14:1e:e7:a1:19:40:e4:b9:3b:70:33:4c: 55:e5:ad:0a:ce:a5:29:25:22:f6:77:c9:34:96:7e: fa:66:72:b4:20:db:5f:a3:51:9c:81:db:f8:7c:01: d4:87:46:ae:f8:f4:16:c6:14:ed:8d:99:87:bb:1a: f3:21:c7:21:08:fb:97:75:af:cc:44:f5:54:09:e0: d4:45:65:1c:b2:1c:86:ea:cb:ac:c4:09:13:4b:c2: 3c:e6:a3:d0:4a:87:ff:7c:10:fa:b2:74:e4:6f:bf: f1:43:3b:43:be:ed:e4:2d:1d:d4:f6:33:9d:0d:48: 7b:55:81:a8:6c:3d:10:3a:88:2d:18:be:d4:57:6f: 42:8f:03:a5:4b:77:5c:16:93:71:51:58:15:5a:db: e9:02:29:c4:a0:ff:bb:19:ee:7e:7c:dd:c2:fa:ed: 54:d8:46:14:e0:40:ce:7f:12:32:0d:36:84:b1:6e: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AA:1C:8F:56:D7:5B:91:E0:80:1B:F2:34:BE:9C:C7:B5:47:B8:5F X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:78:aa:b5:cf:13:64:13:a4:7c:77:8d:a6:e4:96:d6:e0:82: 74:29:11:a1:65:a6:a7:b5:ab:94:41:c2:d2:15:43:75:7e:7f: 6f:c3:67:14:ee:d4:68:4d:eb:8a:59:2b:bd:99:85:13:8a:02: 7d:b3:f2:52:e1:79:64:85:a4:4d:86:8a:12:68:a2:5f:23:76: 47:a2:cc:66:97:0c:da:6a:22:0c:00:80:ca:56:8a:eb:54:e0: 6a:4f:47:8e:4a:23:c8:a1:f1:2c:4e:3a:a3:c7:95:d7:1a:08: 09:66:e6:40:bc:96:3a:cf:f6:6c:96:a0:c7:f1:f2:11:af:79: 43:33:5d:09:9e:12:0a:b6:5b:05:fb:24:ad:be:6a:4b:f9:e5: 9e:ff:07:92:dd:5f:20:92:87:2d:45:f3:9f:ab:90:ff:8e:9d: ab:f8:50:bc:a1:ac:34:22:77:e3:16:e0:14:f1:d2:18:ac:7b: 77:ce:da:de:98:05:12:31:f1:c9:d1:92:c0:d1:c0:9b:b0:fb: db:e2:04:c3:3d:c0:37:96:57:8e:a9:69:35:6d:c8:68:fd:47: 74:24:78:c1:a4:ff:af:a2:a1:d6:89:4d:25:32:a9:7e:7b:5a: 05:7f:b4:e2:b3:37:b8:62:ad:43:78:6a:cd:b7:fc:b0:49:5a: d3:b0:d2:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQTVuRn6fyjtN9H9DN+sLzyCO+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTA4MjEyMDE1MDRaFw0yNTA4MjUwMzE5MDRaMDMxMTAvBgNV BAMTKDJDQUExQzhGNTZENzVCOTFFMDgwMUJGMjM0QkU5Q0M3QjU0N0I4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQN4qOjhWWG8o4icFwGPj27OZT jiMXNmWHc3PBCpNNsAfUbRYRDKqBr96g6FvLGxViFlUhuh3IRAmn6jK7PfSZkiVK UYLEDPdzRMf+lRQe56EZQOS5O3AzTFXlrQrOpSklIvZ3yTSWfvpmcrQg21+jUZyB 2/h8AdSHRq749BbGFO2NmYe7GvMhxyEI+5d1r8xE9VQJ4NRFZRyyHIbqy6zECRNL wjzmo9BKh/98EPqydORvv/FDO0O+7eQtHdT2M50NSHtVgahsPRA6iC0YvtRXb0KP A6VLd1wWk3FRWBVa2+kCKcSg/7sZ7n583cL67VTYRhTgQM5/EjINNoSxbo2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULKocj1bXW5HggBvyNL6cx7VHuF8wHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ4qrXPE2QTpHx3jabkltbggnQpEaFlpqe1 q5RBwtIVQ3V+f2/DZxTu1GhN64pZK72ZhROKAn2z8lLheWSFpE2GihJool8jdkei zGaXDNpqIgwAgMpWiutU4GpPR45KI8ih8SxOOqPHldcaCAlm5kC8ljrP9myWoMfx 8hGveUMzXQmeEgq2WwX7JK2+akv55Z7/B5LdXyCShy1F85+rkP+Onav4ULyhrDQi d+MW4BTx0hise3fO2t6YBRIx8cnRksDRwJuw+9viBMM9wDeWV46paTVtyGj9R3Qk eMGk/6+iodaJTSUyqX57WgV/tOKzN7hirUN4as23/LBJWtOw0tg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:39 2025 by rpki-client