$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: w0m2qTivgsCBCSDHX81owhd4nmcuRCPBZhS1LhNlDE4= Subject key identifier: 0B:46:06:15:CA:6A:20:BC:AC:9B:BE:75:B7:CD:7D:CF:3A:26:B5:5E Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 15B33232CEE9FABA0F145F08B853510FDF2E17F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 021B Signing time: Sun 15 Jun 2025 11:20:04 +0000 Manifest this update: Sun 15 Jun 2025 11:15:04 +0000 Manifest next update: Wed 18 Jun 2025 16:55:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: T3jpKLWb65Yd5Zb3sPPEaIftrHg9NmnPTR/2up3MUfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b3:32:32:ce:e9:fa:ba:0f:14:5f:08:b8:53:51:0f:df:2e:17:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Jun 15 11:15:04 2025 GMT Not After : Jun 18 16:55:04 2025 GMT Subject: CN=0B460615CA6A20BCAC9BBE75B7CD7DCF3A26B55E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:04:13:67:f5:1d:fd:51:6e:4b:a2:d1:3d: 04:64:f1:13:a4:8d:db:80:e5:0a:74:a0:11:94:90: b4:5f:6c:4f:5f:5a:6e:5f:46:e4:35:6b:94:f4:c2: 6f:5f:3d:48:5e:3f:88:9e:e0:19:ab:0d:1c:ab:02: 96:3a:a2:e0:42:f5:45:7e:bf:56:3d:0d:34:df:2a: 87:e4:42:4d:ff:9c:b2:c6:9d:b7:6d:ab:5b:a5:84: d6:c9:23:b4:f7:64:92:89:ea:32:db:f0:94:a4:18: 08:17:f0:60:0d:68:f8:b4:06:37:ab:b2:8e:cd:d6: 04:70:86:4f:d3:bd:80:88:c3:dd:d4:66:6a:2d:cc: 44:f7:bf:91:8e:65:0a:06:f6:63:75:45:c8:4a:5d: cb:2f:fe:6e:7b:97:04:82:72:fd:a7:d8:0a:96:ec: ae:ba:d4:09:97:19:37:b6:29:a7:ff:18:8d:c4:c3: 52:a6:1f:01:4c:24:9d:56:66:46:bc:6c:ca:4c:77: 4f:66:ad:75:f4:fa:e9:14:e3:47:72:6a:39:08:00: 08:67:3c:59:77:15:bf:3a:34:9c:e6:97:87:82:81: fb:00:02:dc:37:1b:16:74:54:b9:4a:bf:31:c4:4d: bb:8c:8a:78:a7:6f:3b:6f:76:d0:77:cf:c1:9d:b9: 3d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:46:06:15:CA:6A:20:BC:AC:9B:BE:75:B7:CD:7D:CF:3A:26:B5:5E X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:dc:22:9b:82:2b:65:da:3f:ac:3c:02:7f:be:fc:c0:45: 98:6d:f4:b3:91:a4:2d:3e:15:49:da:bc:22:c9:d4:79:34:74: 01:00:58:95:8c:d9:3c:80:33:9a:f8:8f:c7:61:ed:4b:6b:4a: 34:48:6c:b7:41:22:bc:88:82:f3:d5:cb:31:38:81:52:23:b6: 91:e9:02:e1:30:7e:f6:ad:4c:84:91:fb:20:db:80:75:0e:7f: 48:6b:0e:b4:e1:74:6b:c9:ed:20:0e:bf:12:64:85:a8:f1:b2: 99:19:3c:87:9d:b5:13:63:d2:a1:2f:24:aa:46:99:58:27:f1: 23:4e:28:b2:43:3d:23:71:7f:e4:42:de:fc:6c:16:ce:8b:68: 7c:ce:f6:5d:a0:47:6e:65:9a:2a:a0:3d:0b:e3:3a:7a:58:bd: 5c:59:dc:02:fa:d0:4c:d1:7b:6d:17:df:19:be:10:2b:5d:8a: f0:a6:47:d6:3a:13:8c:82:2a:c9:b6:a1:85:19:23:d3:55:a7: d9:67:e6:cb:ae:2f:49:13:0d:dd:2c:dd:f4:aa:a4:68:8b:a0: 76:63:21:c4:48:12:07:7b:eb:57:3a:17:97:05:51:a4:17:8e: 78:62:96:36:6c:95:b0:a8:1a:0a:17:e8:02:75:17:25:56:64: 08:a5:4d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbMyMs7p+roPFF8IuFNRD98uF/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTA2MTUxMTE1MDRaFw0yNTA2MTgxNjU1MDRaMDMxMTAvBgNV BAMTKDBCNDYwNjE1Q0E2QTIwQkNBQzlCQkU3NUI3Q0Q3RENGM0EyNkI1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0AQTZ/Ud/VFuS6LRPQRk8ROk jduA5Qp0oBGUkLRfbE9fWm5fRuQ1a5T0wm9fPUheP4ie4BmrDRyrApY6ouBC9UV+ v1Y9DTTfKofkQk3/nLLGnbdtq1ulhNbJI7T3ZJKJ6jLb8JSkGAgX8GANaPi0Bjer so7N1gRwhk/TvYCIw93UZmotzET3v5GOZQoG9mN1RchKXcsv/m57lwSCcv2n2AqW 7K661AmXGTe2Kaf/GI3Ew1KmHwFMJJ1WZka8bMpMd09mrXX0+ukU40dyajkIAAhn PFl3Fb86NJzml4eCgfsAAtw3GxZ0VLlKvzHETbuMininbztvdtB3z8GduT0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC0YGFcpqILysm751t819zzomtV4wHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4U3CKbgitl2j+sPAJ/vvzARZht9LORpC0+ FUnavCLJ1Hk0dAEAWJWM2TyAM5r4j8dh7UtrSjRIbLdBIryIgvPVyzE4gVIjtpHp AuEwfvatTISR+yDbgHUOf0hrDrThdGvJ7SAOvxJkhajxspkZPIedtRNj0qEvJKpG mVgn8SNOKLJDPSNxf+RC3vxsFs6LaHzO9l2gR25lmiqgPQvjOnpYvVxZ3AL60EzR e20X3xm+ECtdivCmR9Y6E4yCKsm2oYUZI9NVp9ln5suuL0kTDd0s3fSqpGiLoHZj IcRIEgd761c6F5cFUaQXjnhiljZslbCoGgoX6AJ1FyVWZAilTVs= -----END CERTIFICATE-----Generated at Mon Jun 16 22:25:31 2025 by rpki-client