$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: KJ230HavrQGZAofcvYotP01wDyL4vQcTu4KwveGHPYA= Subject key identifier: 3D:0C:58:57:5A:12:26:A8:7E:52:BC:21:44:16:D1:CF:D4:A3:E7:A4 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 6CBA191B397827792635761252ADCE95B86F8457 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 0232 Signing time: Tue 05 Aug 2025 19:00:04 +0000 Manifest this update: Tue 05 Aug 2025 18:55:04 +0000 Manifest next update: Sat 09 Aug 2025 03:54:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: IOxyxgkvyGCxO18Wl7YdvC/gmzy6O0vtKgifo0KwQOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ba:19:1b:39:78:27:79:26:35:76:12:52:ad:ce:95:b8:6f:84:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Aug 5 18:55:04 2025 GMT Not After : Aug 9 03:54:04 2025 GMT Subject: CN=3D0C58575A1226A87E52BC214416D1CFD4A3E7A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:f8:e7:d1:d5:ae:a4:ba:39:2c:9c:9e:9b: a1:52:d6:24:ca:b3:2a:a9:52:7a:1e:ba:e9:90:03: 50:dc:ce:58:77:bc:d7:7c:a8:3f:63:8f:c3:5f:ef: 1c:f5:58:4c:90:73:59:9b:ec:14:09:20:d5:66:84: 94:b1:16:e2:c9:d5:3e:25:e8:ee:39:10:4f:87:33: f1:7d:0e:93:db:a8:b6:08:ca:79:e3:aa:e9:b9:a4: fb:a4:5d:75:b7:72:d5:76:3a:ee:25:b3:9c:fd:04: b1:d3:d5:98:0d:7a:64:02:2e:01:44:61:24:e2:00: 18:34:9b:a1:7a:6e:f4:83:4d:a6:b2:ee:1f:57:a8: 68:1b:77:0b:ed:21:ec:19:07:37:bc:62:c1:ca:49: 58:7d:36:c9:bb:4e:a2:85:53:47:0c:66:2e:fb:6d: b6:fd:1a:1a:33:ba:6e:8a:3b:84:35:80:e4:db:93: 55:08:9e:dd:b5:03:d6:2c:af:33:d8:73:cb:ad:93: c7:e8:bd:86:77:e0:af:fe:d9:d7:2f:4c:db:9b:c5: 93:6c:cc:15:27:4e:d9:4a:76:a3:37:96:23:63:ed: 92:6c:e4:d4:15:d7:67:1c:f4:09:ac:e0:2f:86:42: c4:81:48:b7:a3:06:c5:9a:96:fc:ea:69:63:cf:e3: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0C:58:57:5A:12:26:A8:7E:52:BC:21:44:16:D1:CF:D4:A3:E7:A4 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:60:f4:69:6f:70:0a:4f:86:90:db:74:75:82:22:d4:1b:48: f5:09:ed:b1:0a:f2:e9:3a:cd:ca:72:3b:69:53:ce:3a:1f:4e: 27:fd:5e:3e:88:04:a0:6d:69:1f:4c:08:b4:d7:7a:91:a0:9d: 8f:d7:be:43:e3:37:6d:6d:3d:51:58:72:ad:ab:a4:92:ae:fd: 66:28:4b:95:a2:d0:89:1d:8d:0d:76:b4:97:cb:e7:07:42:d9: 79:7b:f2:33:65:f5:d4:99:ee:e1:57:0c:16:ab:92:f0:5e:88: 41:43:77:4c:17:36:62:c6:10:d1:49:99:63:22:c5:f5:87:7f: 44:da:07:26:4a:ec:a6:aa:63:f1:b8:5b:b8:67:23:fc:14:28: 1e:a2:45:f0:a0:c6:2d:d9:6d:01:ba:4f:9f:4f:bb:58:8c:66: 1a:85:db:da:be:2f:d5:9a:2f:84:94:f6:f3:8a:c6:fb:92:e3: 9a:cf:72:af:fe:57:c6:c4:3e:17:5d:fa:3b:8a:bd:4c:54:fb: 16:b7:e5:33:ba:c5:07:36:e2:fd:2b:81:4d:73:af:b7:f1:45: 7f:c0:42:32:f2:27:a6:5b:cb:26:94:cb:a1:04:af:12:7d:36: 9d:a0:34:df:11:17:ae:c1:16:35:40:1d:8d:ce:2c:9b:b5:3b: d2:4d:ec:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLoZGzl4J3kmNXYSUq3OlbhvhFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTA4MDUxODU1MDRaFw0yNTA4MDkwMzU0MDRaMDMxMTAvBgNV BAMTKDNEMEM1ODU3NUExMjI2QTg3RTUyQkMyMTQ0MTZEMUNGRDRBM0U3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPfjn0dWupLo5LJyem6FS1iTK syqpUnoeuumQA1Dczlh3vNd8qD9jj8Nf7xz1WEyQc1mb7BQJINVmhJSxFuLJ1T4l 6O45EE+HM/F9DpPbqLYIynnjqum5pPukXXW3ctV2Ou4ls5z9BLHT1ZgNemQCLgFE YSTiABg0m6F6bvSDTaay7h9XqGgbdwvtIewZBze8YsHKSVh9Nsm7TqKFU0cMZi77 bbb9Ghozum6KO4Q1gOTbk1UInt21A9YsrzPYc8utk8fovYZ34K/+2dcvTNubxZNs zBUnTtlKdqM3liNj7ZJs5NQV12cc9Ams4C+GQsSBSLejBsWalvzqaWPP41v/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQxYV1oSJqh+UrwhRBbRz9Sj56QwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBg9GlvcApPhpDbdHWCItQbSPUJ7bEK8uk6 zcpyO2lTzjofTif9Xj6IBKBtaR9MCLTXepGgnY/XvkPjN21tPVFYcq2rpJKu/WYo S5Wi0IkdjQ12tJfL5wdC2Xl78jNl9dSZ7uFXDBarkvBeiEFDd0wXNmLGENFJmWMi xfWHf0TaByZK7KaqY/G4W7hnI/wUKB6iRfCgxi3ZbQG6T59Pu1iMZhqF29q+L9Wa L4SU9vOKxvuS45rPcq/+V8bEPhdd+juKvUxU+xa35TO6xQc24v0rgU1zr7fxRX/A QjLyJ6ZbyyaUy6EErxJ9Np2gNN8RF67BFjVAHY3OLJu1O9JN7B4= -----END CERTIFICATE-----Generated at Thu Aug 7 11:08:47 2025 by rpki-client