$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: kxEGHnluaiSn6iDhEipmBwn3MoDdm1vqTmrfdnAGzgI= Subject key identifier: F6:7D:D9:F2:70:CA:EF:23:2F:1E:74:42:93:5B:77:1D:81:9D:D7:F6 Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 6ACB1B6B578B980C4A1378D60C8CE973144997CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 0106 Signing time: Sun 07 Sep 2025 01:51:22 +0000 Manifest this update: Sun 07 Sep 2025 01:46:22 +0000 Manifest next update: Wed 10 Sep 2025 10:49:22 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: /QrxshWiAQ7BxI+F3+aIPfdRPWRN8U+7c/Qf2Py0Hd4=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:cb:1b:6b:57:8b:98:0c:4a:13:78:d6:0c:8c:e9:73:14:49:97:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Sep 7 01:46:22 2025 GMT Not After : Sep 10 10:49:22 2025 GMT Subject: CN=F67DD9F270CAEF232F1E7442935B771D819DD7F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:38:df:0a:12:cb:3e:29:f7:24:b1:3c:1c: 3f:dd:ee:b3:6d:bc:8b:d1:d3:37:32:a2:de:6e:72: ae:7d:75:44:0d:09:de:4a:43:bf:a2:d6:84:37:51: d5:01:26:db:db:a5:d8:64:b2:f1:69:fe:75:db:80: 3a:72:12:60:12:bb:15:a2:38:fa:b3:8b:1b:e8:65: 36:0e:3c:82:5c:ff:ee:87:f8:32:a7:e0:1e:8c:35: 2b:5e:d5:77:2b:2e:27:54:08:1d:a1:9b:b9:64:e5: a7:11:5b:8e:38:3b:18:69:c3:b9:83:9b:44:cc:44: d7:a8:ba:f0:78:36:62:cd:28:5e:08:ae:8b:83:d5: 2d:28:b0:c8:7c:90:dc:22:90:97:06:6b:07:70:70: c6:3c:38:bf:eb:a0:87:31:84:8c:e4:9c:aa:41:31: c7:c7:81:c2:03:a1:5f:58:8a:8d:7f:aa:56:42:6a: 05:a6:8f:ff:01:37:5f:92:dc:32:35:15:c1:6c:11: 29:de:b4:bb:37:f7:3a:e6:13:1c:ef:32:ca:d0:b6: ed:91:85:f3:ad:0d:87:03:13:aa:dd:fe:93:e3:c1: 8a:a5:58:48:36:46:28:dd:54:a6:1e:70:55:6f:18: 3b:22:80:82:4b:0c:9f:05:59:03:42:8f:33:ad:62: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7D:D9:F2:70:CA:EF:23:2F:1E:74:42:93:5B:77:1D:81:9D:D7:F6 X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:40:e0:37:44:28:34:f2:4d:c1:90:34:fd:54:f2:dd:75:b9: ed:95:90:95:45:38:9f:18:ca:9b:98:aa:26:cd:26:1a:b5:4b: 8a:ab:96:dd:7d:be:0c:26:77:31:68:ab:f3:d3:09:08:57:de: ee:fc:7c:45:2a:b7:3a:72:5a:f1:de:cd:6a:b5:5e:c4:a8:f5: 97:08:69:af:e3:fb:5d:c1:69:fd:a5:fe:21:bb:25:c2:22:bf: f5:4d:49:0a:ea:86:ca:59:ea:a0:ae:b9:21:a1:2b:af:70:92: 43:34:3c:86:7a:e2:87:8c:39:2c:4c:49:7a:7a:d6:95:54:38: fe:70:2e:d2:4d:a4:d5:b6:ce:a1:27:cc:57:5d:51:a6:fd:2f: 58:d0:8a:0f:62:33:a0:7b:0d:79:68:01:1a:6c:40:4d:40:73: 97:95:1e:c5:28:02:b1:70:af:67:fc:0f:11:9b:bb:bb:d3:c4: b8:67:18:74:99:3e:21:02:6d:02:08:61:c9:9d:f8:63:61:e5: 8a:1c:12:15:9d:30:c1:f5:ca:f4:93:41:65:57:d4:2c:e5:68: 6f:1b:e9:d2:2f:cf:7b:d0:9f:5a:03:b9:42:9f:c6:7c:25:13: 6b:75:4c:03:a2:14:a6:f4:1a:20:d8:dd:2f:12:4e:f0:4c:36: 07:ad:a8:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUassba1eLmAxKE3jWDIzpcxRJl8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTA5MDcwMTQ2MjJaFw0yNTA5MTAxMDQ5MjJaMDMxMTAvBgNV BAMTKEY2N0REOUYyNzBDQUVGMjMyRjFFNzQ0MjkzNUI3NzFEODE5REQ3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohzjfChLLPin3JLE8HD/d7rNt vIvR0zcyot5ucq59dUQNCd5KQ7+i1oQ3UdUBJtvbpdhksvFp/nXbgDpyEmASuxWi OPqzixvoZTYOPIJc/+6H+DKn4B6MNSte1XcrLidUCB2hm7lk5acRW444Oxhpw7mD m0TMRNeouvB4NmLNKF4IrouD1S0osMh8kNwikJcGawdwcMY8OL/roIcxhIzknKpB McfHgcIDoV9Yio1/qlZCagWmj/8BN1+S3DI1FcFsESnetLs39zrmExzvMsrQtu2R hfOtDYcDE6rd/pPjwYqlWEg2RijdVKYecFVvGDsigIJLDJ8FWQNCjzOtYlRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9n3Z8nDK7yMvHnRCk1t3HYGd1/YwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpA4DdEKDTyTcGQNP1U8t11ue2VkJVFOJ8Y ypuYqibNJhq1S4qrlt19vgwmdzFoq/PTCQhX3u78fEUqtzpyWvHezWq1XsSo9ZcI aa/j+13Baf2l/iG7JcIiv/VNSQrqhspZ6qCuuSGhK69wkkM0PIZ64oeMOSxMSXp6 1pVUOP5wLtJNpNW2zqEnzFddUab9L1jQig9iM6B7DXloARpsQE1Ac5eVHsUoArFw r2f8DxGbu7vTxLhnGHSZPiECbQIIYcmd+GNh5YocEhWdMMH1yvSTQWVX1CzlaG8b 6dIvz3vQn1oDuUKfxnwlE2t1TAOiFKb0GiDY3S8STvBMNgetqK0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client