$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: 4f6NdKGVFIec9tXaQTPdY0jzZOn0otilefHrrhBMrh4= Subject key identifier: F8:E2:C3:6E:95:3B:8B:39:2A:B7:85:6C:15:C7:F3:ED:A8:B3:DA:87 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 536E9812D2B258807C7914EF930AB0F3732599DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: D8 Signing time: Tue 04 Nov 2025 21:41:38 +0000 Manifest this update: Tue 04 Nov 2025 21:36:38 +0000 Manifest next update: Fri 07 Nov 2025 22:13:38 +0000 Files and hashes: 1: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) 2: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: WZarh1cr6Jdw/it8ED4K8rWY16+viXdQubYclOAMHdU=) 3: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6e:98:12:d2:b2:58:80:7c:79:14:ef:93:0a:b0:f3:73:25:99:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Nov 4 21:36:38 2025 GMT Not After : Nov 7 22:13:38 2025 GMT Subject: CN=F8E2C36E953B8B392AB7856C15C7F3EDA8B3DA87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:10:40:e9:40:73:96:2a:39:ed:80:30:f8: a1:cc:3c:3c:50:c4:71:3f:46:aa:d9:e8:99:39:0e: 9b:3b:7d:c9:da:0b:7a:ed:a4:ad:2e:58:26:a5:6a: a5:31:a6:68:7b:1b:f7:41:03:ed:e7:3c:59:30:42: 16:aa:42:15:96:52:05:9c:fc:6a:4b:4c:fe:16:18: da:44:2e:26:bd:c6:54:46:ed:7c:c4:95:fb:0c:a7: 05:cf:f5:6a:ca:ce:0b:6f:a3:3c:5b:92:cb:5c:26: dd:97:25:48:53:6e:a4:bd:63:2a:6c:43:fb:9c:c4: b7:ec:d5:d1:55:f9:54:a0:55:9e:a0:54:64:cb:11: 6d:2d:b0:b1:17:86:98:e2:5a:a2:45:24:9c:49:c7: e7:9e:f3:ee:c2:ee:e9:fe:bb:16:39:51:5c:ea:87: 01:ca:51:f8:a7:46:7d:55:d8:fc:96:27:64:86:2a: 50:f8:38:e5:f1:eb:cc:96:72:69:b3:b9:c5:b5:db: 00:4a:2c:8e:48:dd:e0:30:fb:bf:5d:06:db:96:35: 21:0f:aa:2d:9c:1c:8d:d0:fc:d6:03:73:29:44:4a: f8:d5:1c:0d:9c:12:7c:5c:82:d8:23:8f:cb:16:4b: 11:08:9e:11:f8:24:65:25:e5:d4:76:0f:16:ff:96: a9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:C3:6E:95:3B:8B:39:2A:B7:85:6C:15:C7:F3:ED:A8:B3:DA:87 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f6:40:f5:bf:3b:80:5b:75:fa:02:3a:0e:0c:ea:ba:3a:d1: 1b:8c:92:86:bd:f1:51:7c:73:02:d3:74:45:2b:0b:af:71:8e: 89:6b:63:b5:80:1f:99:03:15:5d:92:1e:4a:76:b3:92:fb:62: 4a:23:ec:7e:3e:a9:e5:82:2c:60:92:7b:c5:66:a0:4c:c5:15: aa:75:25:30:d7:df:93:50:bd:d1:11:ce:6c:04:91:e4:8c:a6: 3a:87:45:09:b9:69:1d:ba:92:de:79:df:ce:ce:01:db:a1:b3: 23:e3:4f:55:6f:23:3c:ef:86:65:e7:d4:65:7e:20:21:88:d0: ca:69:09:be:4b:43:32:c1:ce:dd:d4:31:17:7e:b7:b3:a9:5a: 8e:d8:e7:04:4b:e0:85:bd:37:a0:95:d9:7c:a1:a4:02:83:83: e1:47:ce:96:0e:1c:c8:71:9b:0f:6d:ad:0b:ce:82:bb:30:f3: 53:6a:fb:bb:e4:98:ab:29:c4:0d:09:b8:78:96:57:c0:a5:ab: 22:6a:c2:24:52:db:3f:36:54:bf:26:e9:84:8d:be:05:ab:c4: 91:5b:80:87:f1:23:c1:f5:84:cd:a3:ca:dc:44:29:69:a3:25: e6:29:50:29:2b:62:26:60:2e:99:c6:2a:ab:fc:8a:14:bf:cf: 09:be:85:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU26YEtKyWIB8eRTvkwqw83Mlmd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTExMDQyMTM2MzhaFw0yNTExMDcyMjEzMzhaMDMxMTAvBgNV BAMTKEY4RTJDMzZFOTUzQjhCMzkyQUI3ODU2QzE1QzdGM0VEQThCM0RBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EBBA6UBzlio57YAw+KHMPDxQ xHE/RqrZ6Jk5Dps7fcnaC3rtpK0uWCalaqUxpmh7G/dBA+3nPFkwQhaqQhWWUgWc /GpLTP4WGNpELia9xlRG7XzElfsMpwXP9WrKzgtvozxbkstcJt2XJUhTbqS9Yyps Q/ucxLfs1dFV+VSgVZ6gVGTLEW0tsLEXhpjiWqJFJJxJx+ee8+7C7un+uxY5UVzq hwHKUfinRn1V2PyWJ2SGKlD4OOXx68yWcmmzucW12wBKLI5I3eAw+79dBtuWNSEP qi2cHI3Q/NYDcylESvjVHA2cEnxcgtgjj8sWSxEInhH4JGUl5dR2Dxb/lql1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+OLDbpU7izkqt4VsFcfz7aiz2ocwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/2QPW/O4BbdfoCOg4M6ro60RuMkoa98VF8 cwLTdEUrC69xjolrY7WAH5kDFV2SHkp2s5L7Ykoj7H4+qeWCLGCSe8VmoEzFFap1 JTDX35NQvdERzmwEkeSMpjqHRQm5aR26kt55387OAduhsyPjT1VvIzzvhmXn1GV+ ICGI0MppCb5LQzLBzt3UMRd+t7OpWo7Y5wRL4IW9N6CV2XyhpAKDg+FHzpYOHMhx mw9trQvOgrsw81Nq+7vkmKspxA0JuHiWV8ClqyJqwiRS2z82VL8m6YSNvgWrxJFb gIfxI8H1hM2jytxEKWmjJeYpUCkrYiZgLpnGKqv8ihS/zwm+hdI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:08:25 2025 by rpki-client