$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft File: 024ABFF2959A6144CC4889C70F77F968FA410EF1.mft (raw, json) Hash identifier: Fqdx1nSa4HWMYLIF8JXiWTIIHwQBEW6PmJhUUGVMTlM= Subject key identifier: 28:3D:29:B0:4D:8B:F1:06:DB:3F:B0:37:E4:E9:5C:C6:C0:3E:04:74 Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 Certificate issuer: /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Certificate serial: 4F16F01915525E5D6936B2D1A72D32452BA7AB11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft Manifest number: 02AE Signing time: Sat 19 Jul 2025 13:51:10 +0000 Manifest this update: Sat 19 Jul 2025 13:46:10 +0000 Manifest next update: Tue 22 Jul 2025 19:03:10 +0000 Files and hashes: 1: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: aay9Jvclfs8gBm7idaaHHT8mQr3TT32/vrVHbT4o17k=) 2: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: G2juGB6eftwsC+fsnzguy++P5zlF0bkzL2c8r+kWKkI=) 3: 024ABFF2959A6144CC4889C70F77F968FA410EF1.crl (hash: aeOWzLVwjDzD8tkHCbv2+j89KLrpGfKUExrdr3Lx9P4=) 4: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: ZcflU18QHaOG0H5AVVuZs+fe6ZIRvg4OT/QSDZzqWpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:16:f0:19:15:52:5e:5d:69:36:b2:d1:a7:2d:32:45:2b:a7:ab:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Validity Not Before: Jul 19 13:46:10 2025 GMT Not After : Jul 22 19:03:10 2025 GMT Subject: CN=283D29B04D8BF106DB3FB037E4E95CC6C03E0474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:16:1c:52:d6:a2:d6:51:22:f1:eb:be:7a: 3d:a1:f1:53:c1:f7:b2:0f:9a:ba:bc:97:27:b0:13: c2:48:e3:76:28:fe:a6:25:16:a3:a8:7c:69:60:98: 7f:81:bd:bc:fe:1d:64:d7:be:cf:ee:65:ee:de:ea: 89:f4:df:33:7e:92:a4:b1:38:b9:30:f7:1d:53:2e: ee:07:de:6c:d0:d2:4a:cc:7d:d1:ef:8a:67:ed:d1: 4a:dc:95:b2:dd:fd:7d:05:ef:c7:af:3f:f7:72:78: aa:ed:ae:85:19:03:cb:6b:4a:7b:d9:f4:47:a6:af: 92:f1:f2:bb:f2:73:21:c7:09:88:43:6f:81:20:ed: ce:17:77:8f:f0:69:d3:3a:6c:99:21:d4:2d:e2:ea: 1e:81:69:10:7e:54:62:13:01:f0:14:98:73:3c:6b: 13:96:74:a9:04:87:94:6c:65:ed:e9:67:1f:e2:7c: 14:e9:e9:ce:01:cc:7e:a7:ba:8a:97:5f:a2:c3:c8: ca:88:d9:1b:2a:3a:67:5e:be:8d:7e:ab:b0:b2:7d: e6:73:a6:fb:9e:71:56:8a:88:0c:88:29:b3:8e:6b: 48:40:e1:8a:5a:26:56:09:ab:6e:7b:25:f9:bb:1d: c3:a9:6c:b9:5b:96:9d:f3:06:fc:18:75:42:34:82: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3D:29:B0:4D:8B:F1:06:DB:3F:B0:37:E4:E9:5C:C6:C0:3E:04:74 X509v3 Authority Key Identifier: keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d5:53:49:27:c1:42:81:52:30:af:d9:54:f7:49:ee:4f:d6: 58:88:90:65:2b:67:11:83:a3:e5:7e:fc:e5:81:9c:5c:dc:5e: 4a:4c:d8:c2:8b:6a:19:47:1e:23:5a:e2:c0:79:44:22:d6:37: 42:40:82:a4:c5:61:ea:a3:fc:86:05:f2:52:61:b6:07:21:1a: 6b:ed:2b:1e:3c:8f:3e:59:f1:27:31:21:e4:6a:9b:26:9b:f1: b5:ca:79:45:db:84:6a:25:8d:18:30:84:a3:b3:ac:09:d7:35: 49:f6:84:30:fe:38:f8:f5:d5:67:72:b8:f7:db:2d:e3:be:9d: bd:ce:1b:7e:2f:e8:c6:9d:0c:7b:15:4a:fe:03:9e:f0:67:33: e2:e1:71:48:e6:f4:51:72:ae:1a:73:9c:0f:fe:1e:0f:35:3c: b8:1e:f0:1f:24:7e:d0:8f:67:85:ea:56:38:f9:0a:de:83:1a: 40:90:54:09:f0:8f:9a:e0:63:65:ca:50:37:a4:0a:b4:4f:e0: 95:85:e2:09:7b:1f:73:9b:7c:eb:ce:05:3b:7d:e3:19:46:62: 73:90:65:1e:20:c2:3e:6b:16:6a:be:57:f8:4d:0c:52:d5:1e: 17:ab:24:f4:a3:08:32:f3:07:e6:c2:48:97:6b:17:b3:4f:b5: f9:af:4f:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxbwGRVSXl1pNrLRpy0yRSunqxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhG QTQxMEVGMTAeFw0yNTA3MTkxMzQ2MTBaFw0yNTA3MjIxOTAzMTBaMDMxMTAvBgNV BAMTKDI4M0QyOUIwNEQ4QkYxMDZEQjNGQjAzN0U0RTk1Q0M2QzAzRTA0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlBYcUtai1lEi8eu+ej2h8VPB 97IPmrq8lyewE8JI43Yo/qYlFqOofGlgmH+Bvbz+HWTXvs/uZe7e6on03zN+kqSx OLkw9x1TLu4H3mzQ0krMfdHvimft0UrclbLd/X0F78evP/dyeKrtroUZA8trSnvZ 9Eemr5Lx8rvycyHHCYhDb4Eg7c4Xd4/wadM6bJkh1C3i6h6BaRB+VGITAfAUmHM8 axOWdKkEh5RsZe3pZx/ifBTp6c4BzH6nuoqXX6LDyMqI2RsqOmdevo1+q7CyfeZz pvuecVaKiAyIKbOOa0hA4YpaJlYJq257Jfm7HcOpbLlblp3zBvwYdUI0gtBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKD0psE2L8QbbP7A35OlcxsA+BHQwHwYDVR0j BBgwFoAUAkq/8pWaYUTMSInHD3f5aPpBDvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzFhOTQyNi0zYzM1LTQ3MGUtYmYzNC0zMGU3ZTQxNjAyY2IvMC8wMjRBQkZGMjk1 OUE2MTQ0Q0M0ODg5QzcwRjc3Rjk2OEZBNDEwRUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhGQTQx MEVGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5 NjhGQTQxMEVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLVU0knwUKBUjCv2VT3Se5P1liIkGUrZxGD o+V+/OWBnFzcXkpM2MKLahlHHiNa4sB5RCLWN0JAgqTFYeqj/IYF8lJhtgchGmvt Kx48jz5Z8ScxIeRqmyab8bXKeUXbhGoljRgwhKOzrAnXNUn2hDD+OPj11WdyuPfb LeO+nb3OG34v6MadDHsVSv4DnvBnM+LhcUjm9FFyrhpznA/+Hg81PLge8B8kftCP Z4XqVjj5Ct6DGkCQVAnwj5rgY2XKUDekCrRP4JWF4gl7H3ObfOvOBTt94xlGYnOQ ZR4gwj5rFmq+V/hNDFLVHherJPSjCDLzB+bCSJdrF7NPtfmvT8M= -----END CERTIFICATE-----Generated at Mon Jul 21 01:34:06 2025 by rpki-client