$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: OhlSEF2TDjsykVU7yacSjM7hJLUOoDQbuQJzPUlL/i8= Subject key identifier: 10:88:F2:2F:F0:5D:85:CE:13:19:45:1D:94:AD:53:0A:D2:26:F8:7C Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 45151DA6C1130A6299915AA11C1AFC89CA06E4A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 0120 Signing time: Sun 02 Nov 2025 22:31:22 +0000 Manifest this update: Sun 02 Nov 2025 22:26:22 +0000 Manifest next update: Thu 06 Nov 2025 03:31:22 +0000 Files and hashes: 1: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) 2: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: dQxo8gMWT3/Qwy7Gz/fFjnMeKMAlCNi1G0rxl0R7Wk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:15:1d:a6:c1:13:0a:62:99:91:5a:a1:1c:1a:fc:89:ca:06:e4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Nov 2 22:26:22 2025 GMT Not After : Nov 6 03:31:22 2025 GMT Subject: CN=1088F22FF05D85CE1319451D94AD530AD226F87C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:a4:56:9a:98:b9:4c:b8:27:e7:75:46:ba: 4b:6f:11:41:82:7f:de:fb:39:2d:e3:90:52:fb:3f: 04:17:b0:b1:91:e6:3e:15:c3:d9:93:87:7e:8e:cd: 54:d0:3a:7e:ea:98:ae:7f:27:ab:64:f1:49:bf:58: 85:b3:66:63:77:4f:80:ec:4c:40:0d:35:40:4d:e0: 77:e9:5b:6f:86:a6:78:a6:3d:74:8d:c9:9c:71:d9: e4:3b:2a:d2:71:ef:d1:09:07:bb:bf:ba:3b:a1:ac: 00:ca:c7:83:33:1c:16:6a:50:a6:96:c9:55:48:11: 5e:c1:02:6a:6f:28:77:ba:9a:b3:b7:11:a3:51:7d: c9:5a:c1:6a:e2:f9:b3:c5:36:e9:18:64:25:cc:f0: 40:ad:92:fe:2a:8b:84:96:79:26:97:f8:18:75:60: e2:e7:bb:e4:e0:d2:c6:30:85:d8:b9:22:6f:a1:c7: bf:56:7c:13:e0:42:63:2b:8a:61:c2:9b:12:03:07: d6:50:0c:ed:e1:60:30:25:c9:34:b1:7f:70:66:b5: 16:07:04:2f:e5:c9:ec:ef:26:5d:29:00:49:36:f2: 4b:e9:b7:23:00:84:d1:02:d2:98:f3:54:96:a3:9f: d5:b7:15:da:42:9f:a8:0d:5f:b2:2f:53:b3:48:b3: 9a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:88:F2:2F:F0:5D:85:CE:13:19:45:1D:94:AD:53:0A:D2:26:F8:7C X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:39:97:ff:27:77:3f:aa:f0:47:5c:f6:45:9a:9a:2b:ae:ad: 25:83:c2:12:ad:c3:23:cf:c4:c6:5f:af:dc:c4:d9:2d:23:8b: 4d:b6:cd:1f:5c:1a:29:45:51:95:ae:79:5e:51:6f:f4:0b:e4: 16:94:41:62:1b:ea:d3:cd:03:03:67:91:09:7f:bc:eb:cd:7a: ed:72:18:b9:a0:ba:6a:1f:70:2b:45:82:53:a2:86:68:84:49: f9:c0:68:37:72:67:9c:db:2c:7a:0a:d9:58:21:9a:9d:95:26: b5:8d:97:5e:92:ba:81:27:7d:fb:8c:60:53:da:cd:65:b6:15: 9a:e5:b4:d7:27:69:81:66:5d:c9:4d:57:6f:63:7a:70:66:13: ce:ce:2b:b4:11:d7:95:be:b8:f7:82:e7:2b:cd:0f:c8:d8:49: 8b:90:1a:7f:d5:d6:d9:3f:7c:13:13:92:62:dc:e8:63:86:b3: 16:23:f3:44:57:b0:8a:6c:53:08:db:00:6b:9e:6f:2e:1b:45: f1:4c:66:43:1f:cd:4a:fa:94:0c:84:2b:bf:0f:6c:f9:93:f5: 03:1e:02:d0:0b:af:60:4d:ed:ea:a1:45:b2:35:4f:a3:30:6c: 04:e5:5a:db:76:99:fa:c8:72:df:26:71:df:9b:ff:07:db:71: 21:c7:70:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRUdpsETCmKZkVqhHBr8icoG5KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTExMDIyMjI2MjJaFw0yNTExMDYwMzMxMjJaMDMxMTAvBgNV BAMTKDEwODhGMjJGRjA1RDg1Q0UxMzE5NDUxRDk0QUQ1MzBBRDIyNkY4N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNaKRWmpi5TLgn53VGuktvEUGC f977OS3jkFL7PwQXsLGR5j4Vw9mTh36OzVTQOn7qmK5/J6tk8Um/WIWzZmN3T4Ds TEANNUBN4HfpW2+GpnimPXSNyZxx2eQ7KtJx79EJB7u/ujuhrADKx4MzHBZqUKaW yVVIEV7BAmpvKHe6mrO3EaNRfclawWri+bPFNukYZCXM8ECtkv4qi4SWeSaX+Bh1 YOLnu+Tg0sYwhdi5Im+hx79WfBPgQmMrimHCmxIDB9ZQDO3hYDAlyTSxf3BmtRYH BC/lyezvJl0pAEk28kvptyMAhNEC0pjzVJajn9W3FdpCn6gNX7IvU7NIs5qxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEIjyL/Bdhc4TGUUdlK1TCtIm+HwwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk5l/8ndz+q8Edc9kWamiuurSWDwhKtwyPP xMZfr9zE2S0ji022zR9cGilFUZWueV5Rb/QL5BaUQWIb6tPNAwNnkQl/vOvNeu1y GLmgumofcCtFglOihmiESfnAaDdyZ5zbLHoK2Vghmp2VJrWNl16SuoEnffuMYFPa zWW2FZrltNcnaYFmXclNV29jenBmE87OK7QR15W+uPeC5yvND8jYSYuQGn/V1tk/ fBMTkmLc6GOGsxYj80RXsIpsUwjbAGueby4bRfFMZkMfzUr6lAyEK78PbPmT9QMe AtALr2BN7eqhRbI1T6MwbATlWtt2mfrIct8mcd+b/wfbcSHHcBU= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:37 2025 by rpki-client