$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: wPSnZQooPKcmSd0V7kZ7rHtG8sZ9mCs1ybWk8N2CCJ4= Subject key identifier: 70:C7:91:E9:DA:41:3C:27:0A:E8:8F:68:38:AE:E0:26:2D:F9:A4:23 Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 1B503DA18EACE5176B26F45EF754AF82FC287E9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: FF Signing time: Fri 22 Aug 2025 08:21:22 +0000 Manifest this update: Fri 22 Aug 2025 08:16:22 +0000 Manifest next update: Mon 25 Aug 2025 15:37:22 +0000 Files and hashes: 1: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) 2: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: y0XFVcXz52QOhY1vxv0PVCMVgubkmAj/U9V4REkD3jk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:50:3d:a1:8e:ac:e5:17:6b:26:f4:5e:f7:54:af:82:fc:28:7e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Aug 22 08:16:22 2025 GMT Not After : Aug 25 15:37:22 2025 GMT Subject: CN=70C791E9DA413C270AE88F6838AEE0262DF9A423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:60:70:4d:79:95:02:77:9a:49:85:dd:f8: 8c:51:c5:cd:be:fc:2c:5d:20:33:8c:73:7b:e3:f1: 59:40:ba:b3:e1:ed:78:68:ec:63:18:08:75:43:7f: ef:f6:ec:00:8c:41:a7:ad:0f:9f:7c:3f:08:39:22: 49:5e:8b:8a:19:9c:ed:a8:14:9b:ab:f0:4e:13:04: ed:6a:10:75:fb:c8:dd:b2:e9:c3:0a:3d:35:44:56: bb:74:f1:b5:e1:d7:23:94:ad:8e:9f:c1:39:29:72: 03:30:b0:2e:78:e5:84:3e:fc:e7:f0:f6:d2:64:48: 05:68:24:71:6e:aa:09:af:c6:4e:cd:c7:ee:5e:43: 6e:d3:f3:0d:c7:c0:3e:56:cd:1b:54:81:f4:e2:a5: 70:01:9e:75:84:eb:81:34:41:06:1c:a9:d5:71:8c: 30:11:c6:dd:ec:54:1e:0e:e0:8b:1c:ad:b5:b6:fd: 22:83:9f:6d:60:7f:8d:5f:73:a4:6e:a1:5f:9f:72: 2f:d3:46:6d:c8:7c:0c:a0:fa:84:fc:23:df:d8:28: 2e:f1:fb:99:82:32:1b:c5:d0:94:2a:28:55:51:4e: 03:cf:1b:ef:ec:d6:93:3e:33:ff:c7:f1:5a:f1:ae: e2:c1:da:cf:16:20:a6:49:c7:63:82:e6:6b:05:cd: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C7:91:E9:DA:41:3C:27:0A:E8:8F:68:38:AE:E0:26:2D:F9:A4:23 X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3d:09:26:f8:7b:54:92:24:5d:08:2e:ec:26:14:3f:89:5f: 96:b8:d3:e3:c3:28:b1:7f:93:23:b8:1d:f8:90:ea:2b:5e:90: 7f:c4:12:3d:7d:b6:bf:a5:c7:0d:01:93:a6:09:ab:52:4e:57: 34:fe:42:84:43:48:11:dd:05:dc:a8:af:f1:f3:24:7b:d9:43: f0:59:1f:16:85:06:b0:54:5b:0b:da:41:9a:c8:c5:d5:3f:c2: 43:08:10:4f:ed:24:ab:85:ff:3b:af:88:d7:8c:d0:b9:a7:75: 2e:86:1d:37:0a:25:91:44:09:8b:87:af:a5:46:e7:e2:7c:57: 7b:04:f2:0b:c6:de:b9:12:2e:3a:98:02:f2:16:ea:a9:d4:96: d5:7c:1b:93:d3:15:f4:30:87:ff:77:b0:54:c3:9b:0a:8e:84: a8:0f:7a:33:b3:d2:e8:11:bd:c2:8a:71:d6:a7:30:3d:03:05: 8b:f0:21:17:25:4e:6b:0c:6a:0f:a8:64:47:b1:6b:84:3e:fe: de:0a:35:05:eb:50:d4:79:b5:42:1a:e4:03:51:93:21:fa:dd: 4e:f7:09:ed:de:6f:07:b9:ae:c8:3d:00:67:8a:f5:1f:e1:a9: a3:8c:09:f1:e4:69:de:69:7f:24:17:4e:81:e7:92:8a:8a:64: 58:81:3b:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1A9oY6s5RdrJvRe91SvgvwofpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTA4MjIwODE2MjJaFw0yNTA4MjUxNTM3MjJaMDMxMTAvBgNV BAMTKDcwQzc5MUU5REE0MTNDMjcwQUU4OEY2ODM4QUVFMDI2MkRGOUE0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohmBwTXmVAneaSYXd+IxRxc2+ /CxdIDOMc3vj8VlAurPh7Xho7GMYCHVDf+/27ACMQaetD598Pwg5Iklei4oZnO2o FJur8E4TBO1qEHX7yN2y6cMKPTVEVrt08bXh1yOUrY6fwTkpcgMwsC545YQ+/Ofw 9tJkSAVoJHFuqgmvxk7Nx+5eQ27T8w3HwD5WzRtUgfTipXABnnWE64E0QQYcqdVx jDARxt3sVB4O4IscrbW2/SKDn21gf41fc6RuoV+fci/TRm3IfAyg+oT8I9/YKC7x +5mCMhvF0JQqKFVRTgPPG+/s1pM+M//H8VrxruLB2s8WIKZJx2OC5msFzfcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMeR6dpBPCcK6I9oOK7gJi35pCMwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFs9CSb4e1SSJF0ILuwmFD+JX5a40+PDKLF/ kyO4HfiQ6itekH/EEj19tr+lxw0Bk6YJq1JOVzT+QoRDSBHdBdyor/HzJHvZQ/BZ HxaFBrBUWwvaQZrIxdU/wkMIEE/tJKuF/zuviNeM0LmndS6GHTcKJZFECYuHr6VG 5+J8V3sE8gvG3rkSLjqYAvIW6qnUltV8G5PTFfQwh/93sFTDmwqOhKgPejOz0ugR vcKKcdanMD0DBYvwIRclTmsMag+oZEexa4Q+/t4KNQXrUNR5tUIa5ANRkyH63U73 Ce3ebwe5rsg9AGeK9R/hqaOMCfHkad5pfyQXToHnkoqKZFiBO1o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:58 2025 by rpki-client