$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: /usnPYC/EUII2a20wsX3msz194GBp55536Aq3eBkUNk= Subject key identifier: 1F:33:BC:CF:79:0B:49:7D:DA:AA:2D:56:F6:F8:5E:AA:6B:20:66:56 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 36AB02A07C08941A483B4E5DF97C1621321A989D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 012F Signing time: Fri 05 Sep 2025 22:22:01 +0000 Manifest this update: Fri 05 Sep 2025 22:17:01 +0000 Manifest next update: Tue 09 Sep 2025 03:17:01 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: x5MSgBgrkH+2AAy5T685EZanumFe0/QdcsSJOZJCEa0=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ab:02:a0:7c:08:94:1a:48:3b:4e:5d:f9:7c:16:21:32:1a:98:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Sep 5 22:17:01 2025 GMT Not After : Sep 9 03:17:01 2025 GMT Subject: CN=1F33BCCF790B497DDAAA2D56F6F85EAA6B206656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:8f:1a:69:ff:26:2c:6e:2a:da:d5:97:ce: 08:60:35:c2:f3:f1:d1:be:72:81:11:dc:4b:c4:eb: c3:12:c1:90:16:c8:f5:d4:d2:c2:63:98:46:51:1d: 6e:e8:cc:38:81:91:9c:8a:53:f8:97:5d:95:a5:3a: 8c:fe:cd:a3:1e:7b:0a:6d:fc:eb:ec:68:71:e2:4e: c2:20:80:0d:36:e0:59:02:c9:cf:a9:04:32:e6:10: e3:b2:ba:f2:be:96:09:be:d7:aa:ab:d3:12:82:19: 81:96:3e:a6:05:aa:0c:ca:42:45:e8:f0:d5:51:24: fd:6f:98:44:d5:cb:64:20:49:9b:ca:16:5f:bd:a4: e4:65:fd:0b:2a:3d:35:b5:70:0e:c5:69:68:f6:f5: 72:33:bc:1c:c0:0a:17:af:22:8e:76:a6:4e:78:bf: ed:15:b6:27:2d:f7:1f:3d:0b:65:81:62:29:f3:e3: c4:f0:45:aa:f2:2f:41:11:f5:c8:6e:d7:47:4c:f5: f4:25:31:b1:14:64:ef:9b:1d:0b:ae:0b:0d:a9:52: fe:25:4f:ab:fb:11:c0:d9:c7:c0:25:4e:24:d6:6f: 2c:ff:7c:a1:f8:8e:b5:db:04:93:e2:42:70:fc:bd: 3a:9f:b9:0f:07:0c:4d:ae:db:69:40:ac:bb:53:17: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:33:BC:CF:79:0B:49:7D:DA:AA:2D:56:F6:F8:5E:AA:6B:20:66:56 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:95:dd:7e:83:da:26:4e:0d:a3:f5:39:aa:03:85:f9:c0:1f: 6e:1e:a1:ff:4e:fa:15:8a:ef:32:5e:c3:eb:a1:19:b1:f9:12: be:12:87:ec:fc:47:bc:d9:e7:c4:d0:f9:73:e1:eb:22:fc:22: 9e:c3:74:7e:64:49:4a:b8:67:a3:67:1c:88:81:46:53:23:06: be:32:ef:6e:fb:c7:e4:88:c0:2e:f3:36:50:7b:5e:1f:47:f6: 51:9d:a6:cb:9a:c6:4c:f8:12:31:5d:54:05:60:1f:08:bc:de: e6:19:3c:57:93:c5:68:52:b1:10:59:c3:c4:bc:a9:93:a5:e7: a3:fe:de:dd:50:71:95:dc:55:57:14:39:6c:ae:69:78:d2:39: 5d:7c:fe:17:93:5b:dc:2c:6e:44:19:fc:87:2d:aa:02:08:e9: 09:87:67:78:fd:94:a5:27:26:0f:3e:3b:b0:b4:cc:70:d5:96: 7d:03:e6:23:c9:a1:d6:86:76:60:af:7c:56:02:89:92:61:48: c8:10:43:ca:85:01:8e:60:66:05:2f:af:71:6d:f1:e4:7b:0c: e1:6c:bf:7e:80:90:9b:eb:90:8a:21:e8:b1:ff:d0:ed:47:cd: 94:28:37:7f:fa:4d:86:af:88:93:c9:a8:96:df:34:4e:b3:9c: 18:52:97:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqsCoHwIlBpIO05d+XwWITIamJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTA5MDUyMjE3MDFaFw0yNTA5MDkwMzE3MDFaMDMxMTAvBgNV BAMTKDFGMzNCQ0NGNzkwQjQ5N0REQUFBMkQ1NkY2Rjg1RUFBNkIyMDY2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AY8aaf8mLG4q2tWXzghgNcLz 8dG+coER3EvE68MSwZAWyPXU0sJjmEZRHW7ozDiBkZyKU/iXXZWlOoz+zaMeewpt /OvsaHHiTsIggA024FkCyc+pBDLmEOOyuvK+lgm+16qr0xKCGYGWPqYFqgzKQkXo 8NVRJP1vmETVy2QgSZvKFl+9pORl/QsqPTW1cA7FaWj29XIzvBzAChevIo52pk54 v+0Vtict9x89C2WBYinz48TwRaryL0ER9chu10dM9fQlMbEUZO+bHQuuCw2pUv4l T6v7EcDZx8AlTiTWbyz/fKH4jrXbBJPiQnD8vTqfuQ8HDE2u22lArLtTF/5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHzO8z3kLSX3aqi1W9vheqmsgZlYwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOV3X6D2iZODaP1OaoDhfnAH24eof9O+hWK 7zJew+uhGbH5Er4Sh+z8R7zZ58TQ+XPh6yL8Ip7DdH5kSUq4Z6NnHIiBRlMjBr4y 7277x+SIwC7zNlB7Xh9H9lGdpsuaxkz4EjFdVAVgHwi83uYZPFeTxWhSsRBZw8S8 qZOl56P+3t1QcZXcVVcUOWyuaXjSOV18/heTW9wsbkQZ/IctqgII6QmHZ3j9lKUn Jg8+O7C0zHDVln0D5iPJodaGdmCvfFYCiZJhSMgQQ8qFAY5gZgUvr3Ft8eR7DOFs v36AkJvrkIoh6LH/0O1HzZQoN3/6TYaviJPJqJbfNE6znBhSl4M= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:20 2025 by rpki-client