$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: WQNOWCaCGzKQeeLHJQAqkqT7ZYsgNf74kpc1iU84dIk= Subject key identifier: EF:06:D4:DD:13:E1:10:28:C2:86:5C:78:AF:94:47:CF:DF:FA:69:DC Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 56F404A29BF78E4C342E5713A5BBA71F99FF52B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 023F Signing time: Thu 04 Sep 2025 18:00:04 +0000 Manifest this update: Thu 04 Sep 2025 17:55:04 +0000 Manifest next update: Mon 08 Sep 2025 02:31:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: QQeTa0bTZ8LMCJndq+sIYD7Mt6NKx60fKMSxU4HmiK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 02:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f4:04:a2:9b:f7:8e:4c:34:2e:57:13:a5:bb:a7:1f:99:ff:52:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Sep 4 17:55:04 2025 GMT Not After : Sep 8 02:31:04 2025 GMT Subject: CN=EF06D4DD13E11028C2865C78AF9447CFDFFA69DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:13:26:e5:e2:5e:4d:b2:e8:da:ce:3e:a4: 43:79:61:de:18:51:e2:d3:41:5e:01:d2:88:13:4a: 7e:ee:dc:77:a4:7c:36:d5:76:99:67:49:8e:75:bf: 09:45:60:ea:08:38:21:1f:b0:c7:d4:c6:cc:99:98: 54:ff:76:69:a7:fd:ad:a6:89:65:02:0e:fa:af:4b: 06:4b:34:43:45:20:e1:ed:3a:54:d8:5c:44:cc:0e: db:b6:01:e5:2a:5a:81:9c:24:c6:24:e0:22:88:38: 40:84:db:d4:ab:3f:b8:be:b3:f7:ff:5e:6c:b5:78: 34:52:a9:fd:e4:e1:d2:86:2a:77:2a:fc:98:52:8f: 44:7e:83:10:3c:2d:02:84:23:26:77:30:2e:82:6d: f3:85:8f:46:e4:cb:aa:38:67:fe:20:30:61:53:f7: e2:ed:e3:8f:dd:a0:82:70:71:07:72:99:f9:10:b9: e9:87:a0:9e:be:47:43:bc:fc:d7:83:70:01:90:e3: 89:e0:d4:79:1a:9f:15:e2:69:92:5a:cf:56:ad:8c: f7:a1:af:dd:35:58:8e:7a:e2:3f:80:a8:59:93:ad: be:1c:48:e6:d5:8c:7c:f1:05:95:3c:ae:95:b7:5e: 46:f7:19:b0:16:f3:b8:8a:2b:78:58:1f:d9:2d:7c: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:06:D4:DD:13:E1:10:28:C2:86:5C:78:AF:94:47:CF:DF:FA:69:DC X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0d:1b:01:d1:20:d0:2f:e4:29:56:01:10:53:35:c2:a2:93: eb:22:4e:a0:11:00:bb:c9:b6:24:53:a3:07:0e:5b:5d:7c:5d: 3d:f0:5f:ba:8f:ac:e2:29:c5:52:d8:0c:7c:b8:0a:88:45:49: 03:1d:38:d8:ee:aa:d3:0b:10:87:6c:57:45:b6:43:2d:07:4b: 6e:f1:4c:00:24:62:de:15:1a:d1:ec:57:b7:41:68:d9:02:70: fb:20:0f:fe:f5:58:f5:d7:a0:34:ee:3e:e2:f1:3c:5b:4e:0c: 17:1a:2e:86:93:69:44:f6:fb:34:06:43:21:98:88:ce:38:51: f6:8e:7c:cb:85:af:40:6e:25:4a:69:4a:53:28:de:da:b8:a8: 11:da:da:a5:67:cc:77:f5:01:f5:f0:b9:25:11:14:90:1f:1a: be:09:7f:95:d5:58:5b:bd:17:93:05:26:f0:d0:2a:b2:89:38: 51:17:0c:18:ab:63:83:ab:b7:86:2b:52:87:1c:66:0c:43:c5: df:cd:c5:f8:50:36:f7:38:57:9a:03:57:7f:50:a3:c4:16:2e: af:46:a8:89:94:9c:aa:2f:26:0f:c8:db:29:1f:47:84:da:42: cf:4d:30:19:51:c0:51:14:70:7b:dd:e9:4a:6f:eb:c4:d4:a9: cd:96:e7:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvQEopv3jkw0LlcTpbunH5n/UrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTA5MDQxNzU1MDRaFw0yNTA5MDgwMjMxMDRaMDMxMTAvBgNV BAMTKEVGMDZENEREMTNFMTEwMjhDMjg2NUM3OEFGOTQ0N0NGREZGQTY5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xxMm5eJeTbLo2s4+pEN5Yd4Y UeLTQV4B0ogTSn7u3HekfDbVdplnSY51vwlFYOoIOCEfsMfUxsyZmFT/dmmn/a2m iWUCDvqvSwZLNENFIOHtOlTYXETMDtu2AeUqWoGcJMYk4CKIOECE29SrP7i+s/f/ Xmy1eDRSqf3k4dKGKncq/JhSj0R+gxA8LQKEIyZ3MC6CbfOFj0bky6o4Z/4gMGFT 9+Lt44/doIJwcQdymfkQuemHoJ6+R0O8/NeDcAGQ44ng1HkanxXiaZJaz1atjPeh r901WI564j+AqFmTrb4cSObVjHzxBZU8rpW3Xkb3GbAW87iKK3hYH9ktfFZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7wbU3RPhECjChlx4r5RHz9/6adwwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMNGwHRINAv5ClWARBTNcKik+siTqARALvJ tiRTowcOW118XT3wX7qPrOIpxVLYDHy4CohFSQMdONjuqtMLEIdsV0W2Qy0HS27x TAAkYt4VGtHsV7dBaNkCcPsgD/71WPXXoDTuPuLxPFtODBcaLoaTaUT2+zQGQyGY iM44UfaOfMuFr0BuJUppSlMo3tq4qBHa2qVnzHf1AfXwuSURFJAfGr4Jf5XVWFu9 F5MFJvDQKrKJOFEXDBirY4Ort4YrUoccZgxDxd/NxfhQNvc4V5oDV39Qo8QWLq9G qImUnKovJg/I2ykfR4TaQs9NMBlRwFEUcHvd6Upv68TUqc2W580= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:20 2025 by rpki-client