$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: J775tOXz2noGb3nVPA6E0NaOtYlKZ0sNj8o1n9kdWKk= Subject key identifier: C2:1F:87:7F:35:17:71:AA:63:AC:A8:89:B4:20:59:3F:0D:51:78:4A Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 1C741FAB44EDF2BC38D5EA2701229521861745E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: E7 Signing time: Fri 27 Jun 2025 21:01:20 +0000 Manifest this update: Fri 27 Jun 2025 20:56:20 +0000 Manifest next update: Tue 01 Jul 2025 09:00:20 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: ORJHV0duRyjNGftElnsI84btGRRbqaipLIQRX2X/eX8=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:74:1f:ab:44:ed:f2:bc:38:d5:ea:27:01:22:95:21:86:17:45:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Jun 27 20:56:20 2025 GMT Not After : Jul 1 09:00:20 2025 GMT Subject: CN=C21F877F351771AA63ACA889B420593F0D51784A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:57:c1:35:37:34:51:af:24:ce:62:df:3b: 93:dc:eb:36:52:f3:25:30:36:a1:b7:fa:aa:2e:c5: be:12:bf:9d:1d:94:ed:f2:3f:3d:b3:07:33:e9:dc: 1f:a5:7b:d7:e3:7b:8b:d8:39:82:d1:b4:5d:f6:d6: c9:0e:ed:f8:1e:9b:b4:45:71:4b:5b:a2:e5:bc:15: 4e:c0:bb:a4:72:78:c1:34:36:6c:3c:20:4e:0b:d4: 6e:d6:eb:0c:bf:78:31:9a:fb:1a:c5:1c:62:3e:9f: d5:31:d5:05:eb:43:64:64:a3:96:2f:91:34:5c:32: b4:c2:f3:17:c9:88:cd:7b:94:2d:73:8d:43:08:9b: 26:0c:73:47:9f:67:33:ca:a5:ff:15:10:cc:9a:0d: d9:4a:96:3f:e1:b1:e1:35:1c:66:bf:1b:0a:54:14: 66:11:8c:bd:ab:37:55:19:3b:91:d6:5e:4e:ca:ac: 9c:ae:40:27:aa:82:f1:7b:2c:48:9b:0a:e0:d7:c3: 46:93:81:09:40:6e:a3:29:b2:0c:51:ac:44:a6:c4: 90:b7:84:be:43:16:bf:5d:ab:27:26:8e:0d:c5:fb: f8:3e:47:11:18:e4:1c:9f:4e:3d:b6:52:0c:3b:2e: b2:55:74:85:60:bf:43:9c:1d:da:b0:3f:46:b1:56: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1F:87:7F:35:17:71:AA:63:AC:A8:89:B4:20:59:3F:0D:51:78:4A X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:de:10:09:a7:b5:b6:39:b5:6f:00:19:2f:00:bb:36:32:9d: 6c:e9:fc:e5:6f:d6:aa:10:93:82:75:32:69:6b:bd:c4:63:d5: 02:45:31:91:e9:9c:d3:ab:32:75:4b:3e:d7:50:ce:da:fb:6e: 3e:34:f4:92:f8:22:62:fe:34:54:30:e5:9f:00:d6:b8:b8:92: eb:02:33:ab:fb:44:65:3d:c5:cd:34:20:53:7f:04:30:b8:29: 6b:86:ae:c6:04:e6:36:23:e8:32:78:09:96:70:c0:83:f7:99: 7a:b0:b0:96:b8:e0:a8:6d:7c:0d:dd:ba:13:1c:54:d9:b1:bc: e5:6e:d4:39:0d:3c:31:46:60:58:7b:a6:fb:f6:1e:7b:bc:46: ae:b4:ce:79:b4:45:a1:12:7b:ad:15:d1:da:eb:2c:39:5b:cb: a0:8e:c8:ac:27:e0:70:f5:88:64:b6:20:37:28:d2:7c:b6:9e: 80:33:ff:e1:d0:25:3b:ab:56:9a:d8:b3:06:a5:0b:f6:f8:31: 03:90:a2:4f:0f:9b:26:37:4d:49:20:99:c6:b3:df:d1:85:9e: 12:52:43:e7:75:b4:73:da:86:03:a8:9b:3a:ef:d5:d3:dd:14: 68:4f:07:3f:c3:d2:9e:4e:06:3c:9e:4e:28:19:f4:be:5e:ed: dc:26:52:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHQfq0Tt8rw41eonASKVIYYXRecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTA2MjcyMDU2MjBaFw0yNTA3MDEwOTAwMjBaMDMxMTAvBgNV BAMTKEMyMUY4NzdGMzUxNzcxQUE2M0FDQTg4OUI0MjA1OTNGMEQ1MTc4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgVfBNTc0Ua8kzmLfO5Pc6zZS 8yUwNqG3+qouxb4Sv50dlO3yPz2zBzPp3B+le9fje4vYOYLRtF321skO7fgem7RF cUtbouW8FU7Au6RyeME0Nmw8IE4L1G7W6wy/eDGa+xrFHGI+n9Ux1QXrQ2Rko5Yv kTRcMrTC8xfJiM17lC1zjUMImyYMc0efZzPKpf8VEMyaDdlKlj/hseE1HGa/GwpU FGYRjL2rN1UZO5HWXk7KrJyuQCeqgvF7LEibCuDXw0aTgQlAbqMpsgxRrESmxJC3 hL5DFr9dqycmjg3F+/g+RxEY5ByfTj22Ugw7LrJVdIVgv0OcHdqwP0axVid3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwh+HfzUXcapjrKiJtCBZPw1ReEowHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIneEAmntbY5tW8AGS8AuzYynWzp/OVv1qoQ k4J1MmlrvcRj1QJFMZHpnNOrMnVLPtdQztr7bj409JL4ImL+NFQw5Z8A1ri4kusC M6v7RGU9xc00IFN/BDC4KWuGrsYE5jYj6DJ4CZZwwIP3mXqwsJa44KhtfA3duhMc VNmxvOVu1DkNPDFGYFh7pvv2Hnu8Rq60znm0RaESe60V0drrLDlby6COyKwn4HD1 iGS2IDco0ny2noAz/+HQJTurVprYswalC/b4MQOQok8PmyY3TUkgmcaz39GFnhJS Q+d1tHPahgOomzrv1dPdFGhPBz/D0p5OBjyeTigZ9L5e7dwmUhI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:31 2025 by rpki-client