$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft File: 024ABFF2959A6144CC4889C70F77F968FA410EF1.mft (raw, json) Hash identifier: 5TCSeH2p2jxhm5JLwp0Vyvpe7JQFE1eE3zNKhcupezk= Subject key identifier: 37:1D:6B:79:3C:3B:EE:6C:F4:E2:18:31:1E:8D:22:9A:72:EB:27:F6 Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 Certificate issuer: /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Certificate serial: 0C72CC3C6F21553C45101554E9AF4CCAA8C3EB13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft Manifest number: 02C4 Signing time: Sat 06 Sep 2025 16:41:13 +0000 Manifest this update: Sat 06 Sep 2025 16:36:13 +0000 Manifest next update: Tue 09 Sep 2025 21:58:13 +0000 Files and hashes: 1: 024ABFF2959A6144CC4889C70F77F968FA410EF1.crl (hash: XgUG+SzDglyqgNr8F5ObPxzJV0VAa88CAWycg01L7M8=) 2: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: Dc4qfVtP8INNtKjh1IR53nYnK3S3BQyGrJeyd5Z5XHM=) 3: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: QdIixnzSq8N8sCH+dxKebIKtXdrr8qVttS8Xci0wB7M=) 4: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: QO9yzDb4CC7G7ZrOt9x3m3LlZY080vHY8ADNw1G145c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:72:cc:3c:6f:21:55:3c:45:10:15:54:e9:af:4c:ca:a8:c3:eb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Validity Not Before: Sep 6 16:36:13 2025 GMT Not After : Sep 9 21:58:13 2025 GMT Subject: CN=371D6B793C3BEE6CF4E218311E8D229A72EB27F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8a:4c:4c:53:c5:12:0b:ee:63:2a:34:f5:8a: b7:14:0b:2e:9b:34:fb:6d:3e:a6:1a:94:d9:02:f2: 79:f2:ba:86:67:28:08:17:a8:cd:d2:92:27:12:1f: b4:67:6e:3d:16:7d:c0:29:67:79:4f:37:91:0f:71: bb:be:c9:a6:f4:12:59:06:fd:d1:bf:be:cb:f9:db: 94:ff:98:eb:05:59:ed:00:3b:cd:1c:40:0c:d6:14: d6:ae:12:01:45:f7:8b:de:bd:ef:8d:c7:ff:4a:ec: 7d:7c:b3:20:36:74:c7:ec:94:dc:52:b1:6f:6c:a3: 64:79:16:3d:58:a0:fd:05:5e:a6:28:51:f8:0a:4b: 0e:4c:4c:c8:61:96:4a:9b:bb:3c:03:c3:80:3c:a9: a1:d7:81:3c:82:a0:e4:e7:45:32:99:86:34:21:97: 3a:dc:2d:f3:ce:e8:36:8c:da:83:7d:ef:d7:1f:a3: 26:49:08:c9:27:96:3f:54:52:42:06:68:75:fb:04: 60:ba:e8:25:17:72:c9:b7:0e:ed:4c:80:2c:97:89: a3:e2:f6:78:87:15:37:06:2f:a3:46:b2:c6:f0:6c: 28:be:22:63:71:88:8a:fb:4f:fd:ac:62:76:a4:86: 8b:ba:fd:23:bc:d7:a8:48:d2:48:e9:48:95:fd:07: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1D:6B:79:3C:3B:EE:6C:F4:E2:18:31:1E:8D:22:9A:72:EB:27:F6 X509v3 Authority Key Identifier: keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c0:4a:f8:ca:d7:06:d3:ff:9f:26:dd:54:3b:57:9c:d3:f0: e8:79:d7:06:98:a1:c5:9f:aa:07:cb:4e:c9:2f:f4:ef:b6:cc: 3d:d0:79:a0:8a:b0:9b:ba:dd:e0:04:c5:7b:0a:06:64:9e:54: 70:e5:0a:c1:fe:c5:10:ac:a3:72:6a:f4:56:b9:04:fd:33:c7: 2f:33:ee:71:39:07:6d:7b:1e:71:24:22:68:44:df:3b:37:14: 44:4c:08:78:85:ae:ee:25:6b:75:8f:8f:aa:fe:1c:96:68:cf: 50:89:c6:64:51:0c:be:c3:f8:47:35:5f:a6:ad:48:1b:89:87: 14:56:4c:9f:5e:76:1e:4f:ff:25:51:6b:49:f5:4c:c6:12:b2: f6:dc:a4:8d:94:92:70:3f:60:fa:0e:34:da:c0:63:35:da:6d: 23:52:a3:2e:c9:ce:a0:43:8a:2e:63:f8:3d:56:85:fc:81:0e: ea:f2:5a:31:42:47:cc:6e:18:20:0b:87:42:8f:0b:02:02:20: 9a:45:29:78:bf:e4:3f:41:5e:f2:16:fc:fc:08:fa:22:9d:34: c6:ba:93:20:f2:2a:34:ae:fc:e3:d3:c8:b7:85:d2:a0:49:a2: a8:86:f5:70:a7:6b:09:b1:c5:bf:9d:62:9e:a4:00:80:cb:5b: ac:3f:28:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHLMPG8hVTxFEBVU6a9MyqjD6xMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhG QTQxMEVGMTAeFw0yNTA5MDYxNjM2MTNaFw0yNTA5MDkyMTU4MTNaMDMxMTAvBgNV BAMTKDM3MUQ2Qjc5M0MzQkVFNkNGNEUyMTgzMTFFOEQyMjlBNzJFQjI3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXikxMU8USC+5jKjT1ircUCy6b NPttPqYalNkC8nnyuoZnKAgXqM3SkicSH7Rnbj0WfcApZ3lPN5EPcbu+yab0ElkG /dG/vsv525T/mOsFWe0AO80cQAzWFNauEgFF94veve+Nx/9K7H18syA2dMfslNxS sW9so2R5Fj1YoP0FXqYoUfgKSw5MTMhhlkqbuzwDw4A8qaHXgTyCoOTnRTKZhjQh lzrcLfPO6DaM2oN979cfoyZJCMknlj9UUkIGaHX7BGC66CUXcsm3Du1MgCyXiaPi 9niHFTcGL6NGssbwbCi+ImNxiIr7T/2sYnakhou6/SO816hI0kjpSJX9BzJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNx1reTw77mz04hgxHo0imnLrJ/YwHwYDVR0j BBgwFoAUAkq/8pWaYUTMSInHD3f5aPpBDvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzFhOTQyNi0zYzM1LTQ3MGUtYmYzNC0zMGU3ZTQxNjAyY2IvMC8wMjRBQkZGMjk1 OUE2MTQ0Q0M0ODg5QzcwRjc3Rjk2OEZBNDEwRUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhGQTQx MEVGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5 NjhGQTQxMEVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXASvjK1wbT/58m3VQ7V5zT8Oh51waYocWf qgfLTskv9O+2zD3QeaCKsJu63eAExXsKBmSeVHDlCsH+xRCso3Jq9Fa5BP0zxy8z 7nE5B217HnEkImhE3zs3FERMCHiFru4la3WPj6r+HJZoz1CJxmRRDL7D+Ec1X6at SBuJhxRWTJ9edh5P/yVRa0n1TMYSsvbcpI2UknA/YPoONNrAYzXabSNSoy7JzqBD ii5j+D1WhfyBDuryWjFCR8xuGCALh0KPCwICIJpFKXi/5D9BXvIW/PwI+iKdNMa6 kyDyKjSu/OPTyLeF0qBJoqiG9XCnawmxxb+dYp6kAIDLW6w/KMk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:50 2025 by rpki-client