$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: EnWtSDdDxXp7+Ft3FcQkSUOrKGiiSesMaziJuS/iX2g= Subject key identifier: 6C:A1:94:E9:18:C8:01:4F:A5:DC:C0:04:C5:1E:70:0C:94:0C:E0:14 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 0639EDE17360F6409E5EF43262FF3BEC87528EB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 010A Signing time: Sun 15 Jun 2025 19:22:03 +0000 Manifest this update: Sun 15 Jun 2025 19:17:03 +0000 Manifest next update: Thu 19 Jun 2025 00:57:03 +0000 Files and hashes: 1: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: InZb4Svv3A2DHv8YSHBBCPvqo5sWpcXYdxwGVe0a300=) 2: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: bsu7jBZ2XMbcYpzDeXvfF0Xf4Ayu8Mijgm6f6AX1ZGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:39:ed:e1:73:60:f6:40:9e:5e:f4:32:62:ff:3b:ec:87:52:8e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Jun 15 19:17:03 2025 GMT Not After : Jun 19 00:57:03 2025 GMT Subject: CN=6CA194E918C8014FA5DCC004C51E700C940CE014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:2c:bc:a4:67:b2:12:12:4f:d2:01:d7:55: 3e:4f:d1:67:13:fa:4f:18:54:06:61:9e:e5:eb:37: ae:d0:9b:26:8b:16:48:b1:51:9c:9a:d0:99:c6:b7: 6d:61:af:c5:a5:1f:72:bc:ff:8b:a5:da:cd:91:8b: 13:b1:d1:f2:e8:f9:69:b8:f0:25:ad:a9:47:03:83: 29:9c:49:37:a9:b4:91:a3:d9:d6:da:37:9c:d9:26: 9b:8f:7a:62:7a:d6:4f:00:1c:8d:8c:a1:1d:2d:13: 98:41:c0:0f:11:6f:a7:a1:c6:cb:b3:e2:69:0d:52: ad:8d:46:f3:c0:65:04:2a:53:b3:68:77:c6:e4:40: e3:06:34:63:35:03:c8:a9:de:90:5a:0e:f2:12:c7: f3:21:7c:a1:bc:0d:21:b8:e5:d9:d5:7a:05:ff:5c: 05:db:92:bf:d1:9e:45:06:23:6b:1a:2c:2c:6d:3d: a4:82:fc:47:1c:1a:f6:04:16:9f:c2:ed:35:eb:0a: 41:e2:b9:3d:3b:3c:f1:7c:65:c0:19:3b:15:42:2d: ed:7d:65:9d:6a:4a:8e:61:df:ad:0c:8a:8b:d6:86: 87:60:3c:a3:40:93:e4:d7:b0:cf:31:30:55:5a:b7: b9:b4:bf:cc:97:e1:d2:08:10:40:58:43:45:a5:15: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A1:94:E9:18:C8:01:4F:A5:DC:C0:04:C5:1E:70:0C:94:0C:E0:14 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dc:61:c8:ee:cb:6f:63:85:15:af:af:1d:29:46:c6:c9:23: d6:56:3d:da:ba:03:dd:65:71:c2:4f:f3:04:ad:db:4c:e2:c4: 7e:4c:b8:97:6c:89:46:04:30:69:b8:e5:e7:cb:72:68:d1:88: 55:19:83:0d:7c:bb:eb:4e:dd:eb:96:dd:f2:59:77:f5:69:14: 1c:66:7c:58:b2:f2:94:0a:bc:ca:e0:d9:2a:44:da:44:25:6e: 8b:52:bc:e0:60:72:72:b7:a0:11:6c:94:10:c3:23:e6:8c:c0: 91:56:1d:74:10:f5:7a:17:37:19:35:70:4d:de:b0:83:dd:a0: 53:23:3e:97:43:19:fe:49:84:97:97:33:5c:71:cb:c5:f1:97: 7c:5d:13:7a:8c:50:f8:99:0f:c0:5f:11:7e:5e:bf:ef:51:2c: a1:d9:65:d9:4e:3e:55:5f:b8:41:d0:5f:6a:24:51:d4:71:e0: 70:67:b2:42:b9:27:bb:6e:6c:3d:e0:eb:c9:b7:89:33:0e:8a: 72:00:46:ef:60:63:42:88:c0:b4:d4:6c:03:75:9a:e1:87:ad: e0:ae:0a:4f:8d:e6:fc:57:7c:f9:ad:34:0b:9b:30:d3:eb:7d: 31:10:2f:97:61:77:5a:2d:45:bd:68:24:47:38:34:29:7a:29: 69:f8:d0:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjnt4XNg9kCeXvQyYv877IdSjrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTA2MTUxOTE3MDNaFw0yNTA2MTkwMDU3MDNaMDMxMTAvBgNV BAMTKDZDQTE5NEU5MThDODAxNEZBNURDQzAwNEM1MUU3MDBDOTQwQ0UwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSyy8pGeyEhJP0gHXVT5P0WcT +k8YVAZhnuXrN67QmyaLFkixUZya0JnGt21hr8WlH3K8/4ul2s2RixOx0fLo+Wm4 8CWtqUcDgymcSTeptJGj2dbaN5zZJpuPemJ61k8AHI2MoR0tE5hBwA8Rb6ehxsuz 4mkNUq2NRvPAZQQqU7Nod8bkQOMGNGM1A8ip3pBaDvISx/MhfKG8DSG45dnVegX/ XAXbkr/RnkUGI2saLCxtPaSC/EccGvYEFp/C7TXrCkHiuT07PPF8ZcAZOxVCLe19 ZZ1qSo5h360MiovWhodgPKNAk+TXsM8xMFVat7m0v8yX4dIIEEBYQ0WlFS7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbKGU6RjIAU+l3MAExR5wDJQM4BQwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvcYcjuy29jhRWvrx0pRsbJI9ZWPdq6A91l ccJP8wSt20zixH5MuJdsiUYEMGm45efLcmjRiFUZgw18u+tO3euW3fJZd/VpFBxm fFiy8pQKvMrg2SpE2kQlbotSvOBgcnK3oBFslBDDI+aMwJFWHXQQ9XoXNxk1cE3e sIPdoFMjPpdDGf5JhJeXM1xxy8Xxl3xdE3qMUPiZD8BfEX5ev+9RLKHZZdlOPlVf uEHQX2okUdRx4HBnskK5J7tubD3g68m3iTMOinIARu9gY0KIwLTUbAN1muGHreCu Ck+N5vxXfPmtNAubMNPrfTEQL5dhd1otRb1oJEc4NCl6KWn40NY= -----END CERTIFICATE-----Generated at Mon Jun 16 01:31:18 2025 by rpki-client