$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: isHVEqyYGYStcYIMQRPjOPNgmzbcBXvK/UisR9/2yIk= Subject key identifier: 65:5A:E4:83:B4:A7:9E:A0:C8:29:88:8B:DB:B3:C5:9E:56:08:E5:77 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 3B1D154D5839447D653BB23A2DE2C61945AD6757 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 0259 Signing time: Mon 03 Nov 2025 11:40:04 +0000 Manifest this update: Mon 03 Nov 2025 11:35:04 +0000 Manifest next update: Thu 06 Nov 2025 16:15:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: mZMYrGZRokq2kke5NSkIec0t5sidJ4KqogmVRp6IT+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1d:15:4d:58:39:44:7d:65:3b:b2:3a:2d:e2:c6:19:45:ad:67:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Nov 3 11:35:04 2025 GMT Not After : Nov 6 16:15:04 2025 GMT Subject: CN=655AE483B4A79EA0C829888BDBB3C59E5608E577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:90:8c:4d:63:64:62:e6:d3:b7:e6:4b:8e: 52:09:83:f9:14:e4:3b:40:e0:a5:02:da:92:3f:a0: a0:33:ab:ec:ff:e8:89:5b:02:1b:eb:18:5d:94:b2: 37:b3:d1:15:d4:2a:84:aa:f1:b8:b5:40:de:a5:b6: b9:f4:cf:ee:ca:6e:46:a7:85:b6:18:34:e3:d6:3f: 56:88:3f:6e:68:81:b8:de:f7:ba:6d:7a:f8:95:aa: 9f:9c:49:93:05:1d:01:e1:55:2d:7d:52:dd:cc:01: 6b:2e:35:f6:f4:9f:3b:fb:44:57:48:06:61:7c:04: 77:cb:a2:d4:43:0f:84:e4:65:d4:b4:14:07:df:77: 67:83:ea:99:56:99:9e:eb:aa:c1:40:ee:03:a9:94: 1e:bd:f0:58:35:d6:a3:58:30:56:08:50:7b:ae:cd: 1e:e8:94:35:2d:42:6b:9b:d8:de:59:94:cd:60:70: 88:de:77:db:a5:ee:f0:e5:4b:45:c3:1a:b9:a2:f1: 67:61:d4:d1:ae:64:62:89:6f:a1:6a:a0:9a:37:0f: 37:7d:a4:88:83:0e:85:ef:ec:a1:cd:13:f0:c1:04: 4e:bb:19:e0:b9:af:83:1e:0c:0f:79:a0:7b:c1:01: d9:f4:dc:25:aa:75:69:d4:1b:60:45:5b:5a:74:eb: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5A:E4:83:B4:A7:9E:A0:C8:29:88:8B:DB:B3:C5:9E:56:08:E5:77 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e1:3c:3a:f8:30:2b:ee:6c:99:1f:19:76:49:79:63:00:97: f1:97:da:6e:74:dc:55:83:69:bb:f3:ce:02:dd:d3:86:f9:f9: 7f:55:21:ab:1a:80:87:ea:27:ce:11:24:83:31:2f:06:36:95: 9d:03:07:d9:8a:c7:1f:ec:63:c5:ea:1f:01:0f:ac:a3:63:e7: bc:07:bf:10:4a:65:07:2b:fb:49:eb:1b:9c:2c:86:c2:9c:09: d6:5f:04:db:ec:ce:1d:3e:ad:3e:15:1e:fa:9f:d4:47:42:81: 07:7d:8a:44:49:e5:b7:3c:19:bc:b8:ac:74:b6:1f:ee:f0:3a: 0c:2b:8b:1e:18:2d:36:da:c4:19:b1:fd:5f:ac:38:ea:97:32: dd:40:57:59:02:a6:7f:9b:59:28:ad:44:8e:67:d4:0f:4f:2c: cc:bd:67:26:f6:bd:80:ed:38:9b:3f:90:44:d9:18:f7:70:d7: 06:5c:b1:8f:37:a3:e3:e3:8a:0a:4a:e0:67:b3:ac:b7:e6:dc: c4:f3:21:9e:fb:25:7f:8e:76:51:65:90:17:9b:26:9f:6b:98: af:7e:62:e7:94:6e:3c:62:83:f1:ab:60:4f:f1:f4:53:97:47: 52:3b:7b:76:b2:63:cd:c0:98:87:9f:5a:9f:95:33:19:2d:80: c0:25:fe:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOx0VTVg5RH1lO7I6LeLGGUWtZ1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTExMDMxMTM1MDRaFw0yNTExMDYxNjE1MDRaMDMxMTAvBgNV BAMTKDY1NUFFNDgzQjRBNzlFQTBDODI5ODg4QkRCQjNDNTlFNTYwOEU1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI15CMTWNkYubTt+ZLjlIJg/kU 5DtA4KUC2pI/oKAzq+z/6IlbAhvrGF2Usjez0RXUKoSq8bi1QN6ltrn0z+7Kbkan hbYYNOPWP1aIP25ogbje97pteviVqp+cSZMFHQHhVS19Ut3MAWsuNfb0nzv7RFdI BmF8BHfLotRDD4TkZdS0FAffd2eD6plWmZ7rqsFA7gOplB698Fg11qNYMFYIUHuu zR7olDUtQmub2N5ZlM1gcIjed9ul7vDlS0XDGrmi8Wdh1NGuZGKJb6FqoJo3Dzd9 pIiDDoXv7KHNE/DBBE67GeC5r4MeDA95oHvBAdn03CWqdWnUG2BFW1p060ntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVrkg7SnnqDIKYiL27PFnlYI5XcwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfhPDr4MCvubJkfGXZJeWMAl/GX2m503FWD abvzzgLd04b5+X9VIasagIfqJ84RJIMxLwY2lZ0DB9mKxx/sY8XqHwEPrKNj57wH vxBKZQcr+0nrG5wshsKcCdZfBNvszh0+rT4VHvqf1EdCgQd9ikRJ5bc8Gby4rHS2 H+7wOgwrix4YLTbaxBmx/V+sOOqXMt1AV1kCpn+bWSitRI5n1A9PLMy9Zyb2vYDt OJs/kETZGPdw1wZcsY83o+PjigpK4GezrLfm3MTzIZ77JX+OdlFlkBebJp9rmK9+ YueUbjxig/GrYE/x9FOXR1I7e3ayY83AmIefWp+VMxktgMAl/uc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:23 2025 by rpki-client