$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: UBG/eJFGPzSKjpyNuMxyiD1IIy+m1UeNHWZmb3n4knk= Subject key identifier: AE:50:61:E6:30:9E:20:2D:F0:99:93:C9:7D:48:78:F9:F6:63:9D:8D Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 2C46E4FF4ED15DE0C9D23C699CBF145E6DBF8A21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: B1 Signing time: Thu 07 Aug 2025 14:41:38 +0000 Manifest this update: Thu 07 Aug 2025 14:36:38 +0000 Manifest next update: Sun 10 Aug 2025 22:18:38 +0000 Files and hashes: 1: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: g+HaWe2TGWQ3jtysAdzOLDLu3Qjk/N3ldzmF1JSUT9E=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) 3: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:46:e4:ff:4e:d1:5d:e0:c9:d2:3c:69:9c:bf:14:5e:6d:bf:8a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Aug 7 14:36:38 2025 GMT Not After : Aug 10 22:18:38 2025 GMT Subject: CN=AE5061E6309E202DF09993C97D4878F9F6639D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:02:a3:c7:45:c2:d4:2f:d3:c9:3c:b5:3e: 34:1e:af:5a:91:df:e4:2e:d7:42:88:78:e0:1d:19: 7a:ea:bf:a7:f4:86:83:e7:39:71:91:bf:ad:63:48: 93:62:c8:9b:50:3d:62:6d:a7:ec:2d:49:01:2b:09: d2:2f:85:3e:57:20:05:96:d5:6e:0a:a1:c3:0a:5b: eb:7c:1a:78:95:96:15:70:a9:b2:83:e8:75:07:65: 7b:80:da:e4:01:9a:1f:23:e0:c2:dc:f4:b6:25:e3: fb:64:60:fe:01:c0:dd:67:9e:68:ac:6c:3b:b2:52: a0:98:f6:f1:06:a3:52:29:7d:e2:9b:d2:86:8d:4e: c8:4b:56:31:fd:90:8e:a6:b9:1e:07:0d:5b:15:41: 78:2f:3a:d3:21:09:61:07:4b:4f:45:7e:ad:51:6c: 18:e2:ab:19:d1:46:1c:0e:00:ce:5e:aa:e0:fd:39: 8d:a0:13:f5:9a:56:e1:a2:97:5b:b1:0c:80:20:d1: 7a:3f:d7:6c:e9:63:52:59:bf:c3:81:b0:0c:1f:2e: c9:20:bc:b7:a1:b4:ec:1b:1d:84:25:24:51:c3:34: b8:ad:bb:5f:b4:a4:5a:42:ab:40:29:c2:e4:e9:53: 8c:1e:43:b6:b8:7b:53:d7:1a:f5:a5:8c:27:e8:ae: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:50:61:E6:30:9E:20:2D:F0:99:93:C9:7D:48:78:F9:F6:63:9D:8D X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0e:fa:79:e6:a6:f1:26:1c:2f:a6:60:11:da:f8:da:ef:47: b3:1e:bc:ac:21:13:68:fe:d7:35:c9:96:51:a4:0c:23:c4:ed: 45:a5:f1:1e:21:4e:46:4e:54:78:f7:ba:00:b3:42:6a:8d:24: 70:b5:92:12:32:c9:32:a0:74:2f:ff:4b:a5:64:7b:9f:d8:6f: f9:b3:15:74:81:0a:61:5e:e8:36:5a:67:03:0b:e9:01:bd:ff: a1:48:f5:9f:d0:fd:86:87:97:ae:4c:3d:39:c0:b3:cc:6f:ff: 69:5b:f0:9b:5d:41:2a:51:e3:0d:4a:81:e8:bf:42:e1:c2:03: b6:a1:c2:0b:80:95:c1:29:2f:a8:ea:d9:d1:13:36:9d:4d:49: 50:b1:4c:5d:e9:c2:a3:48:47:5e:47:99:de:e0:34:fe:b3:b9: 37:04:67:e0:40:97:4c:b1:8c:89:06:c3:09:3d:a6:bc:a6:53: 4e:82:dc:e3:ca:69:05:77:56:7c:22:1e:73:98:51:bd:20:ee: 2f:c7:c9:84:cd:95:ec:25:31:41:67:4a:ed:58:bc:d4:49:1c: 91:99:8f:b9:1a:7b:b5:16:d6:f5:a5:5c:94:95:90:06:3f:a9: 98:ff:f8:15:d9:de:0b:3f:92:f7:1d:86:34:70:1d:53:42:61: 68:07:26:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEbk/07RXeDJ0jxpnL8UXm2/iiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTA4MDcxNDM2MzhaFw0yNTA4MTAyMjE4MzhaMDMxMTAvBgNV BAMTKEFFNTA2MUU2MzA5RTIwMkRGMDk5OTNDOTdENDg3OEY5RjY2MzlEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+gKjx0XC1C/TyTy1PjQer1qR 3+Qu10KIeOAdGXrqv6f0hoPnOXGRv61jSJNiyJtQPWJtp+wtSQErCdIvhT5XIAWW 1W4KocMKW+t8GniVlhVwqbKD6HUHZXuA2uQBmh8j4MLc9LYl4/tkYP4BwN1nnmis bDuyUqCY9vEGo1IpfeKb0oaNTshLVjH9kI6muR4HDVsVQXgvOtMhCWEHS09Ffq1R bBjiqxnRRhwOAM5equD9OY2gE/WaVuGil1uxDIAg0Xo/12zpY1JZv8OBsAwfLskg vLehtOwbHYQlJFHDNLitu1+0pFpCq0ApwuTpU4weQ7a4e1PXGvWljCforv1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrlBh5jCeIC3wmZPJfUh4+fZjnY0wHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsO+nnmpvEmHC+mYBHa+NrvR7MevKwhE2j+ 1zXJllGkDCPE7UWl8R4hTkZOVHj3ugCzQmqNJHC1khIyyTKgdC//S6Vke5/Yb/mz FXSBCmFe6DZaZwML6QG9/6FI9Z/Q/YaHl65MPTnAs8xv/2lb8JtdQSpR4w1Kgei/ QuHCA7ahwguAlcEpL6jq2dETNp1NSVCxTF3pwqNIR15Hmd7gNP6zuTcEZ+BAl0yx jIkGwwk9prymU06C3OPKaQV3VnwiHnOYUb0g7i/HyYTNlewlMUFnSu1YvNRJHJGZ j7kae7UW1vWlXJSVkAY/qZj/+BXZ3gs/kvcdhjRwHVNCYWgHJk8= -----END CERTIFICATE-----Generated at Sat Aug 9 20:46:10 2025 by rpki-client