$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: oXX4eftt0euwpCEDqhQ/Kp2cYMHg7AcsEjOOGcfPlKQ= Subject key identifier: D7:68:35:49:8C:3D:33:83:84:D8:E8:40:86:EB:26:D9:71:DA:07:90 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 13B2D5BAEA0B511451803D116C7835781EC40371 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: BE Signing time: Sat 06 Sep 2025 14:01:37 +0000 Manifest this update: Sat 06 Sep 2025 13:56:37 +0000 Manifest next update: Tue 09 Sep 2025 22:28:37 +0000 Files and hashes: 1: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: KhQbT5g4XDEv67fnBikVKZml5vL0ozULMz9hoxOKw0A=) 2: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) 3: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) 4: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b2:d5:ba:ea:0b:51:14:51:80:3d:11:6c:78:35:78:1e:c4:03:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Sep 6 13:56:37 2025 GMT Not After : Sep 9 22:28:37 2025 GMT Subject: CN=D76835498C3D338384D8E84086EB26D971DA0790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:f2:42:07:4c:21:1a:5a:6e:c9:5c:1e:dd: a0:c9:80:47:63:5c:ad:ce:58:57:6b:4c:e1:2d:17: 6d:1c:fa:34:4a:85:f9:81:02:14:df:70:e6:0b:47: 28:30:35:8d:16:91:ff:a6:8e:83:24:48:d6:69:80: 27:ad:88:66:34:49:54:e6:1c:c6:5f:87:dc:00:70: c3:47:bb:dc:ff:a0:7a:94:d4:a3:02:32:ea:f2:19: 27:cf:37:96:7e:51:bb:48:cd:96:1a:2a:81:e5:80: 5a:7b:9b:62:da:a0:0a:fc:ee:f6:ca:0d:34:4e:7e: 01:f3:75:69:d8:cb:6b:68:95:fe:0d:6d:c7:8d:9f: 66:6b:14:c8:04:d4:cb:15:de:ce:ab:ce:39:13:02: be:a7:c8:18:ea:a2:12:f6:3f:87:c8:65:a4:a7:49: 21:98:78:2d:6c:03:96:b2:59:db:d3:2e:7b:86:c5: a4:c7:67:06:e0:87:5b:da:3e:eb:c5:8d:4f:b9:1c: ef:4a:98:66:8b:7c:35:15:e0:c5:8b:30:23:9b:bf: 79:d4:b9:6f:24:6e:97:dc:73:35:95:24:cd:9b:c3: 54:40:a3:08:80:bf:0d:94:46:21:6f:59:c7:02:24: 44:f5:43:46:55:80:53:4e:96:23:b1:26:42:cb:f5: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:68:35:49:8C:3D:33:83:84:D8:E8:40:86:EB:26:D9:71:DA:07:90 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1a:89:b0:36:0d:54:11:e5:cd:e1:9b:45:01:e9:1a:4e:1d: 63:e1:8a:24:20:e9:9c:e3:cd:6b:b3:34:ab:61:2d:e9:ec:16: 44:b4:36:19:86:31:10:25:49:a1:d5:a1:1f:8f:05:3a:cb:f1: 0f:6a:ce:cf:ac:a2:a4:ab:ac:ed:86:13:c4:e8:3f:7a:fa:23: 3b:e2:a3:8f:cc:62:2b:a8:2e:b3:bf:87:9f:72:be:4f:a4:ea: 63:1d:e9:d5:12:11:2d:46:22:74:c2:b9:6e:df:82:76:1b:0f: 7e:be:d2:c4:50:56:04:b7:cf:27:6e:4f:f4:92:59:3c:23:3e: cd:35:5f:e6:35:99:95:be:1a:94:0c:36:14:5b:f8:da:c2:6d: 7a:b3:07:62:a3:39:8d:d2:0d:a0:c6:f0:57:2a:7c:d2:84:02: 98:c0:01:b4:9b:60:5d:c1:4e:29:7e:52:8c:f2:eb:b0:74:92: 96:18:25:92:fc:f9:ef:19:6b:90:ba:c3:2b:81:4b:a7:ec:ce: 5f:ee:6c:a0:c0:bd:24:94:d7:7a:16:36:5a:7b:80:67:16:6d: d3:0c:d5:19:77:4d:a0:61:43:2f:a2:09:03:0a:31:c2:dc:69: ae:f0:f8:99:aa:d5:b7:af:04:05:19:03:f8:67:7e:c4:c1:77: 1c:e9:e7:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7LVuuoLURRRgD0RbHg1eB7EA3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTA5MDYxMzU2MzdaFw0yNTA5MDkyMjI4MzdaMDMxMTAvBgNV BAMTKEQ3NjgzNTQ5OEMzRDMzODM4NEQ4RTg0MDg2RUIyNkQ5NzFEQTA3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yfJCB0whGlpuyVwe3aDJgEdj XK3OWFdrTOEtF20c+jRKhfmBAhTfcOYLRygwNY0Wkf+mjoMkSNZpgCetiGY0SVTm HMZfh9wAcMNHu9z/oHqU1KMCMuryGSfPN5Z+UbtIzZYaKoHlgFp7m2LaoAr87vbK DTROfgHzdWnYy2tolf4NbceNn2ZrFMgE1MsV3s6rzjkTAr6nyBjqohL2P4fIZaSn SSGYeC1sA5ayWdvTLnuGxaTHZwbgh1vaPuvFjU+5HO9KmGaLfDUV4MWLMCObv3nU uW8kbpfcczWVJM2bw1RAowiAvw2URiFvWccCJET1Q0ZVgFNOliOxJkLL9WR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU12g1SYw9M4OE2OhAhusm2XHaB5AwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0aibA2DVQR5c3hm0UB6RpOHWPhiiQg6Zzj zWuzNKthLensFkS0NhmGMRAlSaHVoR+PBTrL8Q9qzs+soqSrrO2GE8ToP3r6Izvi o4/MYiuoLrO/h59yvk+k6mMd6dUSES1GInTCuW7fgnYbD36+0sRQVgS3zyduT/SS WTwjPs01X+Y1mZW+GpQMNhRb+NrCbXqzB2KjOY3SDaDG8FcqfNKEApjAAbSbYF3B Til+Uozy67B0kpYYJZL8+e8Za5C6wyuBS6fszl/ubKDAvSSU13oWNlp7gGcWbdMM 1Rl3TaBhQy+iCQMKMcLcaa7w+Jmq1bevBAUZA/hnfsTBdxzp59I= -----END CERTIFICATE-----Generated at Mon Sep 8 04:55:54 2025 by rpki-client