$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: SB8lseMFy5bMATaqhxUTifsBbruywFmtIALbZDaxmKw= Subject key identifier: C0:DA:1C:47:7C:48:D7:0A:36:54:D8:6E:93:BF:E8:49:99:A1:66:96 Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 10E4AA59D553E1DAE140782071DC7EBE2C92F927 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 0119 Signing time: Sat 18 Oct 2025 10:01:27 +0000 Manifest this update: Sat 18 Oct 2025 09:56:27 +0000 Manifest next update: Tue 21 Oct 2025 14:10:27 +0000 Files and hashes: 1: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) 2: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: UfTzWalkinFhD+rxft/WEFF49JztibXISaD6knJdXGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e4:aa:59:d5:53:e1:da:e1:40:78:20:71:dc:7e:be:2c:92:f9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Oct 18 09:56:27 2025 GMT Not After : Oct 21 14:10:27 2025 GMT Subject: CN=C0DA1C477C48D70A3654D86E93BFE84999A16696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:ed:c6:25:bb:3c:41:d1:e9:40:47:43:4e: be:4c:93:a7:b2:cb:66:e8:d9:8f:93:7a:53:c7:1a: df:8d:11:30:d6:fb:07:7d:b5:a9:15:83:ea:5c:a2: fd:98:ff:4f:45:cd:5c:db:df:4a:fb:ce:17:84:15: 8e:8a:be:3b:7b:3a:1c:41:a1:c4:ba:d4:2d:b6:35: af:bf:91:43:e6:16:d6:9f:7c:36:04:4c:be:22:24: 54:8d:26:e1:1a:aa:77:a6:6b:2e:83:04:a7:dd:f4: 1a:26:4d:4d:5f:bc:4d:a7:7b:63:95:2e:56:bf:13: 7e:f8:59:b5:2d:7d:5d:02:33:8d:47:b0:97:86:ab: 2d:9b:fe:b0:95:05:0a:d1:cd:1a:0e:40:a0:ac:d7: c4:6f:28:92:6c:40:f9:4c:e9:6c:08:4e:92:a9:de: eb:8d:7c:64:d8:9c:13:d5:7d:2f:ab:67:f9:fb:3a: 7e:4d:4c:24:00:fb:a6:d8:ac:12:ea:e1:03:ae:07: b5:f5:fb:5e:a8:55:90:3c:e1:b7:b6:25:cc:58:e6: 28:59:68:39:35:55:db:be:31:d9:83:91:76:4b:13: 8d:26:ca:a1:b7:b7:bd:cf:b2:c6:90:92:52:83:51: a3:d0:19:76:1b:59:13:58:43:a8:e3:23:4c:49:07: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:1C:47:7C:48:D7:0A:36:54:D8:6E:93:BF:E8:49:99:A1:66:96 X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4b:36:09:b6:89:08:1f:a4:f5:e8:ab:1e:01:74:5f:a1:ae: 42:7d:b4:45:3b:6d:0e:5a:fc:77:8a:0e:87:b7:9a:fb:0d:5e: 06:4e:8c:13:87:34:cd:95:35:0a:4d:c9:d7:6f:76:5c:71:78: 6e:79:d9:e3:1b:d6:1d:77:2b:50:18:0c:4b:e0:b6:9b:c5:e3: ac:f7:de:1c:c9:fe:5e:94:96:27:fd:b5:17:bc:61:8e:13:24: 6a:16:24:00:14:9b:68:fd:6f:58:5a:ba:6d:ef:11:c2:af:3c: 44:91:4e:77:c8:43:6f:87:ab:e8:68:81:ee:74:20:37:fa:cc: d3:ae:7e:4c:51:46:bf:55:d0:92:8c:e6:9b:f3:e1:96:10:d0: ed:11:9b:7d:36:d3:19:64:b6:d5:55:c4:dd:51:8b:5f:32:1f: 93:7e:74:ee:44:94:f2:de:ae:20:99:d5:9b:ab:47:2b:cd:e5: 60:ca:5c:66:bc:6d:2f:12:93:23:4a:e6:1e:db:f2:b4:12:2f: c6:94:a3:00:8b:f5:a6:2d:49:50:3f:e0:11:78:ca:bc:42:96: 8d:09:58:20:9b:f9:04:e5:19:06:4c:b7:18:88:01:cd:c9:f8: 51:d6:b7:2d:5e:88:5a:2f:58:3f:c6:a4:15:b4:0f:1c:c9:d9: 8d:07:2b:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEOSqWdVT4drhQHggcdx+viyS+ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTEwMTgwOTU2MjdaFw0yNTEwMjExNDEwMjdaMDMxMTAvBgNV BAMTKEMwREExQzQ3N0M0OEQ3MEEzNjU0RDg2RTkzQkZFODQ5OTlBMTY2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFO3GJbs8QdHpQEdDTr5Mk6ey y2bo2Y+TelPHGt+NETDW+wd9takVg+pcov2Y/09FzVzb30r7zheEFY6Kvjt7OhxB ocS61C22Na+/kUPmFtaffDYETL4iJFSNJuEaqnemay6DBKfd9BomTU1fvE2ne2OV Lla/E374WbUtfV0CM41HsJeGqy2b/rCVBQrRzRoOQKCs18RvKJJsQPlM6WwITpKp 3uuNfGTYnBPVfS+rZ/n7On5NTCQA+6bYrBLq4QOuB7X1+16oVZA84be2JcxY5ihZ aDk1Vdu+MdmDkXZLE40myqG3t73PssaQklKDUaPQGXYbWRNYQ6jjI0xJB9tPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwNocR3xI1wo2VNhuk7/oSZmhZpYwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRLNgm2iQgfpPXoqx4BdF+hrkJ9tEU7bQ5a /HeKDoe3mvsNXgZOjBOHNM2VNQpNyddvdlxxeG552eMb1h13K1AYDEvgtpvF46z3 3hzJ/l6Ulif9tRe8YY4TJGoWJAAUm2j9b1haum3vEcKvPESRTnfIQ2+Hq+hoge50 IDf6zNOufkxRRr9V0JKM5pvz4ZYQ0O0Rm3020xlkttVVxN1Ri18yH5N+dO5ElPLe riCZ1ZurRyvN5WDKXGa8bS8SkyNK5h7b8rQSL8aUowCL9aYtSVA/4BF4yrxClo0J WCCb+QTlGQZMtxiIAc3J+FHWty1eiFovWD/GpBW0DxzJ2Y0HKwY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:14 2025 by rpki-client