$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: C7t/reMNKWMZQ6dpkYSCAEMs3Mlsr2jQ7fgjIcAYmtw= Subject key identifier: 31:CC:F8:8C:71:6F:A0:E5:FA:CB:15:9C:C9:71:A8:09:B4:94:6E:60 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 01868EBE085AE11E3E8FF92C5DA4010F491396FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0149 Signing time: Sun 02 Nov 2025 20:42:02 +0000 Manifest this update: Sun 02 Nov 2025 20:37:02 +0000 Manifest next update: Thu 06 Nov 2025 04:11:02 +0000 Files and hashes: 1: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) 2: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: aS+ifvF2PdiO0HUd4omFRiv3YYtMdX5VLUWbRxxPFi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:8e:be:08:5a:e1:1e:3e:8f:f9:2c:5d:a4:01:0f:49:13:96:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Nov 2 20:37:02 2025 GMT Not After : Nov 6 04:11:02 2025 GMT Subject: CN=31CCF88C716FA0E5FACB159CC971A809B4946E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:8e:6e:31:22:ea:80:b6:8f:88:6d:b6:c1: f7:a5:14:4f:fb:88:6e:aa:2b:a5:07:ab:d0:4f:c4: 18:20:9d:ef:36:03:b0:5b:0d:fd:df:fd:1f:1a:03: 05:79:74:88:a5:c0:16:68:ea:ef:06:76:d1:f2:ff: a2:ea:c6:9a:bd:3c:dc:4a:d4:6e:a8:78:19:33:2e: 03:a5:7a:03:33:3f:b4:ad:95:f0:35:41:d6:6d:d9: 5f:b1:75:a0:fa:15:14:06:4b:e8:62:a5:0d:d3:1d: 38:a7:ad:86:4f:01:65:2a:ed:a9:b8:e0:dd:34:fe: f4:d0:7c:62:bd:24:3e:43:6c:0f:28:a5:7f:f1:e1: fd:b1:34:b5:70:56:e3:c3:84:4b:0e:18:c8:04:37: a8:57:c4:83:9a:c4:a5:3e:9b:6e:77:43:2d:44:d3: 60:36:00:c1:21:a0:0f:b9:c6:94:92:52:50:86:5b: 4e:52:e9:e9:a0:00:a7:79:2e:69:5c:a7:3f:61:b9: 17:a5:bd:e6:a3:7f:e0:20:a3:c5:63:1a:ca:cb:67: d9:80:80:4b:22:a8:5e:77:12:c0:fa:c7:89:10:db: b8:9d:7f:b7:71:14:51:1a:d6:f4:67:ae:b3:c5:1b: 65:da:8f:6d:f4:45:79:24:ea:78:83:a8:25:46:f1: a0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CC:F8:8C:71:6F:A0:E5:FA:CB:15:9C:C9:71:A8:09:B4:94:6E:60 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f7:3e:c9:31:2a:b2:e7:b6:b2:48:2b:a6:05:d8:42:98:94: 97:e3:24:b2:4f:39:ea:14:ef:6c:aa:93:e9:6c:c7:f8:36:d8: 85:cf:b7:d6:d2:e4:c0:b5:23:08:6e:11:c4:b1:f5:8f:b2:58: 8c:77:94:74:54:9c:30:0f:fc:00:b0:a2:aa:ca:85:9f:34:02: 31:b1:e5:65:da:76:f3:8f:f5:a0:fd:3d:e7:e5:59:e4:52:de: 3c:cf:6e:19:9f:77:d4:d8:56:6a:6d:08:79:86:d7:47:1c:56: e7:b7:fb:c7:d2:9b:2b:d5:11:8b:5c:18:46:96:f7:98:3d:7d: 5c:c5:32:7a:18:fc:42:70:b7:97:b6:c5:bc:3c:18:a7:c5:86: 91:d0:fb:3b:e4:d3:fd:dd:2e:70:3e:90:62:4e:b0:4f:ea:4b: ed:7e:1a:78:33:c0:34:bb:e2:0b:68:66:c2:84:30:fe:76:55: d6:96:74:57:c7:f6:27:ad:ce:7f:8a:24:7f:af:4e:23:36:1f: 87:a9:3f:27:a5:3e:63:35:69:7c:e8:e3:86:e4:d4:29:33:97: d5:bf:81:7a:85:c3:65:58:3f:72:dd:a1:28:70:b8:7c:c8:58: 2a:3b:01:7c:04:9b:10:df:a7:d1:15:b2:e3:d7:8b:fb:9b:99: 48:41:43:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYaOvgha4R4+j/ksXaQBD0kTlv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTExMDIyMDM3MDJaFw0yNTExMDYwNDExMDJaMDMxMTAvBgNV BAMTKDMxQ0NGODhDNzE2RkEwRTVGQUNCMTU5Q0M5NzFBODA5QjQ5NDZFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CI5uMSLqgLaPiG22wfelFE/7 iG6qK6UHq9BPxBggne82A7BbDf3f/R8aAwV5dIilwBZo6u8GdtHy/6Lqxpq9PNxK 1G6oeBkzLgOlegMzP7StlfA1QdZt2V+xdaD6FRQGS+hipQ3THTinrYZPAWUq7am4 4N00/vTQfGK9JD5DbA8opX/x4f2xNLVwVuPDhEsOGMgEN6hXxIOaxKU+m253Qy1E 02A2AMEhoA+5xpSSUlCGW05S6emgAKd5Lmlcpz9huRelveajf+Ago8VjGsrLZ9mA gEsiqF53EsD6x4kQ27idf7dxFFEa1vRnrrPFG2Xaj230RXkk6niDqCVG8aCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMcz4jHFvoOX6yxWcyXGoCbSUbmAwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD3PskxKrLntrJIK6YF2EKYlJfjJLJPOeoU 72yqk+lsx/g22IXPt9bS5MC1IwhuEcSx9Y+yWIx3lHRUnDAP/ACwoqrKhZ80AjGx 5WXadvOP9aD9PeflWeRS3jzPbhmfd9TYVmptCHmG10ccVue3+8fSmyvVEYtcGEaW 95g9fVzFMnoY/EJwt5e2xbw8GKfFhpHQ+zvk0/3dLnA+kGJOsE/qS+1+GngzwDS7 4gtoZsKEMP52VdaWdFfH9ietzn+KJH+vTiM2H4epPyelPmM1aXzo44bk1Ckzl9W/ gXqFw2VYP3LdoShwuHzIWCo7AXwEmxDfp9EVsuPXi/ubmUhBQ8g= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:50 2025 by rpki-client