$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: jjeNDfYnGdyoyKTVifxgBZj1zc8xvKzcvD7orIa+xlc= Subject key identifier: CE:83:9A:53:CE:B8:2F:72:D9:DC:85:ED:D9:5D:05:31:7F:52:23:BA Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 47393E4558DDD939A71246751F1E11E36AC26E3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 022B Signing time: Sun 20 Jul 2025 20:20:04 +0000 Manifest this update: Sun 20 Jul 2025 20:15:04 +0000 Manifest next update: Thu 24 Jul 2025 03:44:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: bLXdbxpFnsZiSuQld0oMZKlZ3Y6ONnt1QDyEvnqKd0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:39:3e:45:58:dd:d9:39:a7:12:46:75:1f:1e:11:e3:6a:c2:6e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Jul 20 20:15:04 2025 GMT Not After : Jul 24 03:44:04 2025 GMT Subject: CN=CE839A53CEB82F72D9DC85EDD95D05317F5223BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:ad:c2:e9:83:82:b3:9c:7a:58:c2:9e:2a: 63:56:eb:6a:d4:2e:aa:ec:9e:3f:f6:69:78:6f:47: 47:ac:9d:34:ed:99:30:44:25:4d:98:4c:32:f4:c2: 5d:ce:28:a4:65:08:3c:d5:5e:cc:79:98:87:e6:a0: ba:81:11:67:a9:dd:25:39:5c:7d:fc:00:d0:af:01: 68:64:1a:fe:3b:e5:ad:2e:65:b6:1c:86:7e:6f:80: 24:44:99:50:ed:63:1b:66:2f:40:16:90:51:3a:e4: 8f:05:cf:08:80:e3:02:68:f4:7b:2d:34:88:f7:12: 04:07:c8:1c:9c:3c:25:0f:5b:1e:54:39:c4:92:83: b3:c3:1c:24:cf:6a:67:7f:97:9b:32:41:55:71:95: c9:29:4b:c5:ae:e4:53:34:98:a0:dd:d4:98:88:2c: e3:cc:ca:e2:5c:e6:bf:6c:cb:fa:34:50:24:14:bf: ac:f1:d8:bc:eb:12:8f:31:e1:60:1d:8a:eb:fc:c6: b2:87:64:53:8a:4f:86:cc:f4:0a:62:88:3a:ea:4a: 91:3a:29:a5:00:38:10:21:71:20:a8:52:94:98:c5: 0d:72:cd:c9:a3:b3:c6:11:9a:2f:08:f0:4c:43:18: 07:e4:8d:be:01:80:20:18:eb:89:ce:f3:09:b2:b5: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:9A:53:CE:B8:2F:72:D9:DC:85:ED:D9:5D:05:31:7F:52:23:BA X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:63:c1:7d:2f:05:17:b3:c9:63:2b:0a:ab:9b:a9:14:f5:60: 0d:00:c6:37:3a:f2:2c:b2:b7:69:ee:73:42:b8:dc:ac:57:6e: 04:67:17:29:4c:40:82:7e:9d:e8:09:9a:de:15:d4:e1:bc:56: bb:99:fb:cc:a1:9a:82:95:5f:4a:2e:2c:aa:de:67:9b:36:f2: 75:72:96:d1:43:1a:c8:f7:44:4f:68:99:f4:19:c6:e5:d4:04: d6:0c:3b:29:e8:f0:a4:c2:f4:1b:d9:a8:52:cc:2a:83:94:e2: 1e:7d:88:ff:49:27:4a:64:5e:d9:56:13:79:64:21:86:1c:df: 6d:93:25:92:4a:3f:f2:53:5a:5f:64:ac:60:2a:8c:a5:cc:3d: 9c:b5:63:5f:44:96:82:67:eb:fc:59:c0:f7:82:ac:d3:54:2d: 35:55:88:cf:6e:8e:09:c8:82:25:db:df:e0:f7:28:24:f4:28: 3c:16:d9:9a:f3:4b:ff:38:c2:51:6a:57:ce:cd:2e:7d:51:cc: 69:0c:09:1c:91:c9:4f:99:5b:af:75:0d:16:a0:60:53:bc:c9: a0:4f:17:27:7f:af:31:9e:9a:be:dd:52:e4:0f:e1:cf:d5:50: 56:54:5a:86:4f:9a:49:00:23:b8:99:08:19:8d:34:59:31:9d: f6:90:7b:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzk+RVjd2TmnEkZ1Hx4R42rCbj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTA3MjAyMDE1MDRaFw0yNTA3MjQwMzQ0MDRaMDMxMTAvBgNV BAMTKENFODM5QTUzQ0VCODJGNzJEOURDODVFREQ5NUQwNTMxN0Y1MjIzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2K3C6YOCs5x6WMKeKmNW62rU Lqrsnj/2aXhvR0esnTTtmTBEJU2YTDL0wl3OKKRlCDzVXsx5mIfmoLqBEWep3SU5 XH38ANCvAWhkGv475a0uZbYchn5vgCREmVDtYxtmL0AWkFE65I8FzwiA4wJo9Hst NIj3EgQHyBycPCUPWx5UOcSSg7PDHCTPamd/l5syQVVxlckpS8Wu5FM0mKDd1JiI LOPMyuJc5r9sy/o0UCQUv6zx2LzrEo8x4WAdiuv8xrKHZFOKT4bM9ApiiDrqSpE6 KaUAOBAhcSCoUpSYxQ1yzcmjs8YRmi8I8ExDGAfkjb4BgCAY64nO8wmytVe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzoOaU864L3LZ3IXt2V0FMX9SI7owHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERjwX0vBRezyWMrCqubqRT1YA0Axjc68iyy t2nuc0K43KxXbgRnFylMQIJ+negJmt4V1OG8VruZ+8yhmoKVX0ouLKreZ5s28nVy ltFDGsj3RE9omfQZxuXUBNYMOyno8KTC9BvZqFLMKoOU4h59iP9JJ0pkXtlWE3lk IYYc322TJZJKP/JTWl9krGAqjKXMPZy1Y19EloJn6/xZwPeCrNNULTVViM9ujgnI giXb3+D3KCT0KDwW2ZrzS/84wlFqV87NLn1RzGkMCRyRyU+ZW691DRagYFO8yaBP Fyd/rzGemr7dUuQP4c/VUFZUWoZPmkkAI7iZCBmNNFkxnfaQe0o= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:20 2025 by rpki-client