$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: GJ1bvZyvkVejzPq7sZU5wWRTe19lKkLuCd601vxBtFU= Subject key identifier: 6F:C0:8F:28:C7:0A:05:EE:A8:B0:E8:5D:4A:91:6B:B1:01:CB:25:E5 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 0281C7C8F9EF1AE5DFBA2C0F3C3610F4E4825F55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0119 Signing time: Sat 19 Jul 2025 14:11:59 +0000 Manifest this update: Sat 19 Jul 2025 14:06:59 +0000 Manifest next update: Tue 22 Jul 2025 21:43:59 +0000 Files and hashes: 1: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: InZb4Svv3A2DHv8YSHBBCPvqo5sWpcXYdxwGVe0a300=) 2: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: di+M8elULHZfcQGJnduJKDmMKI/AJqHIsnZMJzAB9Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:81:c7:c8:f9:ef:1a:e5:df:ba:2c:0f:3c:36:10:f4:e4:82:5f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Jul 19 14:06:59 2025 GMT Not After : Jul 22 21:43:59 2025 GMT Subject: CN=6FC08F28C70A05EEA8B0E85D4A916BB101CB25E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:bc:45:d8:44:5b:95:7a:0f:aa:a8:9a:ba: 32:1d:35:2e:cc:42:91:3d:a5:4e:79:21:cb:a6:ca: 91:e4:94:f5:76:0c:1c:42:08:33:19:2d:28:fb:02: b8:32:b7:e1:20:14:ab:c8:a6:5b:17:b6:3d:18:b7: 6c:ad:8b:36:b3:b4:92:43:b0:81:ed:9e:f2:8f:d6: 8c:c6:b6:34:c1:29:16:36:7a:38:7f:92:28:18:64: c1:0d:9e:6c:82:1a:68:1c:df:57:6c:c4:a2:cf:27: dd:39:e3:ae:e4:b7:50:11:b5:84:6b:65:6b:a5:c1: 26:ad:dd:1e:9d:09:63:06:4c:5b:29:5f:4b:ea:13: c3:6b:60:e8:ad:39:40:2e:20:bc:05:be:b1:02:35: 9d:bc:a2:64:4f:ba:98:19:40:57:e3:8c:66:76:2a: ad:47:3c:9d:f3:e4:9e:0b:6f:16:ae:7a:58:f8:54: ac:ce:ac:b0:47:37:c6:c4:db:b2:cd:3b:7f:73:17: c1:38:27:6a:3b:d4:36:51:00:d8:6f:44:e9:ec:24: 33:31:aa:48:92:1a:81:b7:72:26:92:75:c4:c3:eb: 5d:68:6a:e4:93:45:da:25:61:dd:8d:1b:17:79:fd: 19:ef:08:9c:c5:13:dc:64:8f:f0:42:6c:2f:5a:dd: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C0:8F:28:C7:0A:05:EE:A8:B0:E8:5D:4A:91:6B:B1:01:CB:25:E5 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:4a:78:7d:ac:1c:23:d2:42:d5:ca:9e:80:ce:d9:3e:79: fc:2d:da:ab:85:ea:cf:49:64:52:36:81:ec:5b:ab:ed:3d:08: ea:53:16:76:aa:42:c4:09:e2:58:86:09:3f:b4:45:25:c6:09: 65:d1:5c:da:ae:1f:58:60:20:0b:88:48:90:a3:77:9d:cd:82: d7:93:11:75:0f:0d:11:cb:e3:7c:d0:ef:77:2a:2f:3f:d0:43: 5c:d6:33:68:01:64:82:c5:c1:53:1d:4b:30:04:0f:26:74:38: 8f:83:8f:ef:df:c0:70:1e:e5:a3:6e:d4:82:ac:47:85:28:fe: 2e:4b:c6:e7:59:48:d8:fd:e4:ed:f6:27:09:12:bd:dc:70:8e: 3c:8b:9f:e7:3f:35:33:1d:d0:f2:ae:57:90:1f:ce:62:13:24: 35:1c:3a:ab:99:1c:02:b6:c9:49:43:0e:cd:95:93:99:50:40: 8b:fe:ee:91:6f:45:62:c8:32:5f:1f:cd:e9:72:b2:2e:3a:44: 6e:37:f4:ee:e0:5e:c3:8b:d7:c8:51:a5:37:0a:17:c6:80:23: cc:ab:c5:00:be:38:71:bb:49:5e:0a:9c:1c:95:59:c5:67:eb: ed:a9:f9:67:f8:75:5a:99:3c:28:5e:e3:13:35:e8:69:b9:3d: 90:7e:79:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoHHyPnvGuXfuiwPPDYQ9OSCX1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTA3MTkxNDA2NTlaFw0yNTA3MjIyMTQzNTlaMDMxMTAvBgNV BAMTKDZGQzA4RjI4QzcwQTA1RUVBOEIwRTg1RDRBOTE2QkIxMDFDQjI1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTrxF2ERblXoPqqiaujIdNS7M QpE9pU55IcumypHklPV2DBxCCDMZLSj7Argyt+EgFKvIplsXtj0Yt2ytizaztJJD sIHtnvKP1ozGtjTBKRY2ejh/kigYZMENnmyCGmgc31dsxKLPJ905467kt1ARtYRr ZWulwSat3R6dCWMGTFspX0vqE8NrYOitOUAuILwFvrECNZ28omRPupgZQFfjjGZ2 Kq1HPJ3z5J4Lbxauelj4VKzOrLBHN8bE27LNO39zF8E4J2o71DZRANhvROnsJDMx qkiSGoG3ciaSdcTD611oauSTRdolYd2NGxd5/RnvCJzFE9xkj/BCbC9a3c6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb8CPKMcKBe6osOhdSpFrsQHLJeUwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDASnh9rBwj0kLVyp6Aztk+efwt2quF6s9J ZFI2gexbq+09COpTFnaqQsQJ4liGCT+0RSXGCWXRXNquH1hgIAuISJCjd53NgteT EXUPDRHL43zQ73cqLz/QQ1zWM2gBZILFwVMdSzAEDyZ0OI+Dj+/fwHAe5aNu1IKs R4Uo/i5LxudZSNj95O32JwkSvdxwjjyLn+c/NTMd0PKuV5AfzmITJDUcOquZHAK2 yUlDDs2Vk5lQQIv+7pFvRWLIMl8fzelysi46RG439O7gXsOL18hRpTcKF8aAI8yr xQC+OHG7SV4KnByVWcVn6+2p+Wf4dVqZPChe4xM16Gm5PZB+eb4= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:23 2025 by rpki-client