$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: j2suRHwT1MmNgpcIFXuBUdvO6cfpfs7ikiD6jt5HgPM= Subject key identifier: A7:89:2B:59:1C:A8:4A:B0:80:16:EB:06:3F:D6:CB:57:F2:FB:75:FD Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 1EF1AC0FB50DC8282DD0827F88913E6CB985A27E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0121 Signing time: Wed 06 Aug 2025 15:32:01 +0000 Manifest this update: Wed 06 Aug 2025 15:27:01 +0000 Manifest next update: Sat 09 Aug 2025 23:58:01 +0000 Files and hashes: 1: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: InZb4Svv3A2DHv8YSHBBCPvqo5sWpcXYdxwGVe0a300=) 2: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: FkRo6p30ct60oDVEE5bJ1G/SE1lw6qSUCUjLD14FUpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 23:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f1:ac:0f:b5:0d:c8:28:2d:d0:82:7f:88:91:3e:6c:b9:85:a2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Aug 6 15:27:01 2025 GMT Not After : Aug 9 23:58:01 2025 GMT Subject: CN=A7892B591CA84AB08016EB063FD6CB57F2FB75FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:4f:43:cf:28:d3:e3:27:e9:1a:be:cb:a0: c3:00:18:9b:2c:46:fc:89:fb:6e:f0:49:80:ea:1f: 39:6d:ff:3b:4b:3c:8b:87:9d:53:0a:c9:15:24:43: dd:41:96:78:24:9c:d0:23:07:d1:7d:42:21:46:a8: 32:46:00:27:9a:69:98:ac:25:48:14:7c:d1:5b:64: 5f:52:38:58:37:a8:fb:7b:50:63:a0:19:27:94:33: fe:42:83:64:36:f4:11:ad:c7:2f:46:b2:ab:2e:bb: 8a:50:03:18:66:34:9f:10:2b:e7:ab:ee:db:56:85: b9:bc:8f:e2:b8:f3:00:c6:48:48:c7:37:9f:27:55: b0:4a:b0:b4:15:71:84:4e:ed:89:e8:c8:5d:28:9a: 12:99:7b:8b:83:1f:71:39:16:ff:11:5b:9d:6a:f8: 6a:9a:60:93:a5:8b:36:22:27:7c:67:59:ee:62:07: 78:d5:b8:61:50:3a:d3:f0:86:52:c9:d9:9b:f3:67: cf:5f:7e:cd:5a:b7:45:fd:ca:73:9e:1d:04:a9:e5: 86:40:c9:48:ab:f4:14:1c:16:e1:c1:dc:56:0a:f2: 69:3e:38:f0:6b:bc:7e:2d:2c:b0:af:7c:ae:6f:42: a4:d1:8f:02:0e:02:0b:3e:c2:4f:44:8b:31:4e:33: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:89:2B:59:1C:A8:4A:B0:80:16:EB:06:3F:D6:CB:57:F2:FB:75:FD X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:56:b9:3c:23:ea:6d:ff:0b:94:73:73:dc:0e:fb:68:72:b7: d8:d3:a5:30:08:53:b2:df:04:66:d1:60:9a:34:35:c0:61:02: e1:8d:dc:3e:5b:01:7f:d6:bc:b5:4f:04:ea:ce:31:92:37:ff: d7:1c:d2:96:34:1c:0d:d3:d9:92:77:0f:b2:61:5c:2f:28:ac: 40:3a:4c:ee:b7:ed:fb:b5:b9:59:55:5c:d5:40:f7:25:dc:a1: 21:74:1c:5a:6f:59:c0:9a:67:99:41:a6:67:77:b5:55:48:88: 88:37:c6:d6:7d:79:57:fd:42:57:95:ef:79:2c:da:77:57:a7: cb:62:93:cd:ce:3f:d2:f8:d6:60:6c:72:9c:a2:d6:e3:77:f4: 93:ac:d4:1e:0c:d2:9a:b6:de:43:18:1c:67:1c:5a:6e:56:7c: a2:6a:48:c4:c4:e3:47:ad:ab:7c:82:80:a6:e3:88:b5:a2:1d: e3:b8:3f:bf:3e:02:3d:a6:7d:2f:35:c7:3e:ed:5a:be:66:3c: a5:bc:79:8d:11:8f:57:b5:d7:ce:e6:15:20:59:42:4f:b3:92: f0:1b:5a:6f:04:d1:6a:ba:13:d1:cd:c6:b6:d9:f7:a9:c5:d8: 4a:4c:92:dd:0e:a3:7a:d7:f8:ec:72:19:19:7c:f1:9e:50:9b: 4c:e0:13:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvGsD7UNyCgt0IJ/iJE+bLmFon4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTA4MDYxNTI3MDFaFw0yNTA4MDkyMzU4MDFaMDMxMTAvBgNV BAMTKEE3ODkyQjU5MUNBODRBQjA4MDE2RUIwNjNGRDZDQjU3RjJGQjc1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxE9DzyjT4yfpGr7LoMMAGJss RvyJ+27wSYDqHzlt/ztLPIuHnVMKyRUkQ91BlngknNAjB9F9QiFGqDJGACeaaZis JUgUfNFbZF9SOFg3qPt7UGOgGSeUM/5Cg2Q29BGtxy9Gsqsuu4pQAxhmNJ8QK+er 7ttWhbm8j+K48wDGSEjHN58nVbBKsLQVcYRO7YnoyF0omhKZe4uDH3E5Fv8RW51q +GqaYJOlizYiJ3xnWe5iB3jVuGFQOtPwhlLJ2ZvzZ89ffs1at0X9ynOeHQSp5YZA yUir9BQcFuHB3FYK8mk+OPBrvH4tLLCvfK5vQqTRjwIOAgs+wk9EizFOM7oDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp4krWRyoSrCAFusGP9bLV/L7df0wHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVWuTwj6m3/C5Rzc9wO+2hyt9jTpTAIU7Lf BGbRYJo0NcBhAuGN3D5bAX/WvLVPBOrOMZI3/9cc0pY0HA3T2ZJ3D7JhXC8orEA6 TO637fu1uVlVXNVA9yXcoSF0HFpvWcCaZ5lBpmd3tVVIiIg3xtZ9eVf9QleV73ks 2ndXp8tik83OP9L41mBscpyi1uN39JOs1B4M0pq23kMYHGccWm5WfKJqSMTE40et q3yCgKbjiLWiHeO4P78+Aj2mfS81xz7tWr5mPKW8eY0Rj1e1187mFSBZQk+zkvAb Wm8E0Wq6E9HNxrbZ96nF2EpMkt0Oo3rX+OxyGRl88Z5Qm0zgE/g= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:20 2025 by rpki-client