$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: oUlqr/RvUBUhwGG8+hcCW7tjc5IiFaqKrr+tJZUyQrw= Subject key identifier: DC:D0:B3:E1:B1:4D:92:53:7D:EC:16:61:AB:D8:04:73:E2:6B:36:90 Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 3B4F2255A711893594812E96B00E05D1D6E1AF52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: F8 Signing time: Wed 06 Aug 2025 02:51:25 +0000 Manifest this update: Wed 06 Aug 2025 02:46:25 +0000 Manifest next update: Sat 09 Aug 2025 14:28:25 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: d24BgD5GY2la2rJ51qqOL1XIn5ptwEibCWAEjSc/XPM=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4f:22:55:a7:11:89:35:94:81:2e:96:b0:0e:05:d1:d6:e1:af:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Aug 6 02:46:25 2025 GMT Not After : Aug 9 14:28:25 2025 GMT Subject: CN=DCD0B3E1B14D92537DEC1661ABD80473E26B3690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:f1:be:e9:66:42:1a:7a:52:ba:9d:e3:74: 93:f0:e1:d6:c6:ea:32:a4:41:5f:7e:c3:6e:d9:a7: 48:dc:ce:f8:32:5a:18:52:02:59:5d:11:a9:96:0b: 39:52:48:c4:e0:66:f1:47:9f:1a:fb:cc:cb:1a:8a: 23:6b:29:24:9c:74:08:1f:53:24:b0:ac:e6:36:75: e3:a3:09:af:de:98:2f:e3:37:ca:56:a9:16:d4:f3: 66:34:e4:a5:71:34:1a:90:19:47:85:b2:b3:93:10: f9:e7:79:da:4a:35:42:f2:df:cf:1f:6b:a6:04:bc: da:79:a1:f8:67:2d:24:d4:34:fd:5f:30:dc:b9:30: 8a:7b:34:28:8a:9a:e6:a0:9a:5e:6c:07:4a:4c:c6: b3:11:2a:99:ca:06:69:d7:b9:ad:46:c8:30:30:60: 68:fc:19:16:54:f9:9b:41:77:f9:75:47:63:c6:5b: cb:d7:25:27:e5:62:1f:0a:ac:74:c8:e4:1b:ff:dd: 42:7f:cd:1a:d9:ae:d8:04:39:63:fb:02:19:d7:7f: f9:f1:d4:ad:96:bc:34:59:c8:1e:07:99:41:55:23: 53:c0:19:21:26:69:cb:71:e0:72:2e:cc:23:e5:de: 23:3f:69:23:6c:3f:32:1b:c0:1b:d2:b4:2a:b1:4f: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D0:B3:E1:B1:4D:92:53:7D:EC:16:61:AB:D8:04:73:E2:6B:36:90 X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:98:5f:c7:01:9f:8a:dc:d5:b7:83:24:3b:bc:25:4d:63:24: 25:53:68:64:27:f2:33:8c:21:ae:40:ba:58:94:4c:fa:71:fc: 04:03:28:fd:ab:62:04:28:e4:3d:0d:5b:49:ec:18:c8:53:50: c8:2f:1c:59:5e:4f:45:d3:70:d5:15:e1:57:ce:ea:50:60:4c: 99:fc:08:0b:3f:f7:d9:42:7d:d6:f7:e1:6e:3e:cb:f2:bd:0a: 5a:c1:78:61:0c:84:be:24:e9:7a:d8:b5:ca:6b:09:68:ae:6c: 7d:76:c1:a2:4f:e3:95:0b:9a:e5:f1:7a:a8:04:0e:3c:99:9d: aa:0f:26:7d:d1:3c:54:b8:e1:26:fa:8b:9c:db:38:64:f1:7c: cd:9e:bf:9f:5e:0d:17:15:36:eb:3e:b1:c8:52:30:62:20:f2: 2d:70:86:2a:28:36:dc:ee:73:f0:5d:e0:70:b0:23:d3:a0:a1: 1f:0a:88:4f:dd:0e:03:7b:1a:be:60:9a:78:a3:19:75:e8:92: 3a:d4:8f:1f:4f:3a:6a:3b:b9:d1:70:c7:8c:5a:17:1d:9a:1f: bd:11:3e:de:b9:37:96:27:41:37:bf:6f:27:05:cd:5e:d0:7e: d9:94:29:71:4a:3d:cf:82:e0:5a:a0:cf:65:9a:63:d3:31:0b: 5a:db:58:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO08iVacRiTWUgS6WsA4F0dbhr1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTA4MDYwMjQ2MjVaFw0yNTA4MDkxNDI4MjVaMDMxMTAvBgNV BAMTKERDRDBCM0UxQjE0RDkyNTM3REVDMTY2MUFCRDgwNDczRTI2QjM2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNPG+6WZCGnpSup3jdJPw4dbG 6jKkQV9+w27Zp0jczvgyWhhSAlldEamWCzlSSMTgZvFHnxr7zMsaiiNrKSScdAgf UySwrOY2deOjCa/emC/jN8pWqRbU82Y05KVxNBqQGUeFsrOTEPnnedpKNULy388f a6YEvNp5ofhnLSTUNP1fMNy5MIp7NCiKmuagml5sB0pMxrMRKpnKBmnXua1GyDAw YGj8GRZU+ZtBd/l1R2PGW8vXJSflYh8KrHTI5Bv/3UJ/zRrZrtgEOWP7AhnXf/nx 1K2WvDRZyB4HmUFVI1PAGSEmactx4HIuzCPl3iM/aSNsPzIbwBvStCqxT1cZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NCz4bFNklN97BZhq9gEc+JrNpAwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWYX8cBn4rc1beDJDu8JU1jJCVTaGQn8jOM Ia5AuliUTPpx/AQDKP2rYgQo5D0NW0nsGMhTUMgvHFleT0XTcNUV4VfO6lBgTJn8 CAs/99lCfdb34W4+y/K9ClrBeGEMhL4k6XrYtcprCWiubH12waJP45ULmuXxeqgE DjyZnaoPJn3RPFS44Sb6i5zbOGTxfM2ev59eDRcVNus+schSMGIg8i1whiooNtzu c/Bd4HCwI9OgoR8KiE/dDgN7Gr5gmnijGXXokjrUjx9POmo7udFwx4xaFx2aH70R Pt65N5YnQTe/bycFzV7QftmUKXFKPc+C4Fqgz2WaY9MxC1rbWBk= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:13 2025 by rpki-client