$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: Cpoaeft59mKeI2TLPir65KzZXvpGDEOtxtzLQAeBdqM= Subject key identifier: 00:BC:0D:49:EC:AC:03:EF:FC:41:6A:04:8D:6A:82:CF:8A:06:67:D2 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 27C29E268474669D9EF8F81B7B95EF3518825461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 0221 Signing time: Fri 18 Jul 2025 21:10:58 +0000 Manifest this update: Fri 18 Jul 2025 21:05:58 +0000 Manifest next update: Tue 22 Jul 2025 06:27:58 +0000 Files and hashes: 1: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: sh5TYY+kSsxR1pmF4DA1+vUfc+JlTOxylxIbw3b89Eo=) 2: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: TLRYIuvZGbaiuR45wMh0qCjq6EgqR10zKpqH2oIshi8=) 3: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=) 4: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: 2GRWO9/Q0MpgVDiM1R341bc3uq7zSgQtLGeuDYAy19g=) 5: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=) 6: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: +gGFIbmz6MNLj5Vm2IvAwgGsv19fCAUik3uGncQgwzA=) 7: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: MqPsWsjfl+dvyk5ktsSY4CI6tIF3C/cx5WnXAN8LB/s=) 8: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 06:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c2:9e:26:84:74:66:9d:9e:f8:f8:1b:7b:95:ef:35:18:82:54:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Jul 18 21:05:58 2025 GMT Not After : Jul 22 06:27:58 2025 GMT Subject: CN=00BC0D49ECAC03EFFC416A048D6A82CF8A0667D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5c:05:58:8c:61:04:eb:65:84:96:a3:32:99: 3b:36:49:e5:15:f4:a1:12:5b:2d:65:1b:2a:d8:e7: 06:db:d5:eb:2e:6f:54:45:ea:42:6f:50:12:c3:d8: ea:be:a0:d6:b4:34:b1:25:9d:45:e1:4e:ad:5e:b0: cd:2f:a2:46:7f:11:bf:07:a2:0a:7a:d1:c1:6f:7d: 67:a5:3a:23:8a:e9:69:c2:08:1f:e2:02:b5:f4:00: 4d:0a:53:96:3f:15:4e:94:1f:34:9a:94:c5:fa:a7: d4:01:01:57:a6:79:6d:a1:ab:b5:76:73:4a:ab:ef: 59:fb:cd:96:77:03:23:c5:03:9a:79:55:37:ba:92: e7:fb:97:ab:1b:ba:69:65:f1:75:0d:61:07:33:4d: 41:c1:24:13:62:7c:6b:74:5b:64:ec:22:75:31:63: fe:94:b9:bc:6f:c9:73:f3:10:d5:58:7c:0b:dc:ef: ed:c7:8a:63:38:73:51:35:72:14:24:74:29:76:66: 14:86:22:b7:e7:b0:25:46:42:0d:b7:15:88:78:f7: 66:54:4e:eb:33:9b:46:9d:01:ee:e4:51:00:20:b2: 48:27:f3:f8:05:f7:08:75:07:8a:2d:d4:39:33:1b: 55:43:42:eb:25:32:19:fe:4f:c4:e6:de:80:8e:46: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BC:0D:49:EC:AC:03:EF:FC:41:6A:04:8D:6A:82:CF:8A:06:67:D2 X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:03:3a:cd:7d:b6:6c:05:af:43:6e:af:d5:64:05:c8:09:c9: 14:56:17:ba:45:f9:06:b0:84:c8:6f:b2:9f:4a:36:31:d1:ea: a5:52:ee:52:28:f7:24:23:a8:96:eb:ff:39:7f:24:73:ed:a3: cf:25:7f:4a:31:f9:f7:d1:f6:c8:bf:ec:b0:e0:d7:00:44:74: 65:df:7a:72:96:3e:d0:eb:9b:ac:af:b7:e1:ad:78:63:67:23: bb:48:22:73:1b:31:d9:2d:df:3d:54:5b:89:f4:7d:f8:40:dd: 73:56:e0:4c:08:45:9c:ce:ce:9a:f3:0f:6f:05:1e:b7:1e:1e: 57:c9:06:53:87:fb:75:7f:9a:61:8d:2b:ee:78:ab:f1:1c:7f: 43:79:aa:61:0a:22:07:41:70:30:6c:39:d9:32:87:94:bd:43: 3b:c9:c4:d5:ac:d9:bd:d0:34:c0:14:8e:ba:1b:5f:2b:6e:e4: 26:53:c9:f4:25:54:74:a5:4a:bd:cb:5c:bf:a7:35:70:d5:5c: ad:22:cd:f1:50:6e:1d:2a:28:21:a6:08:23:80:9f:cd:38:9d: 90:98:f6:8a:b1:e9:d7:83:bb:65:06:c4:89:3e:e0:84:f5:a2: 2d:4f:00:5e:f9:72:36:84:11:61:0b:0e:07:f6:13:76:e2:9c: 69:19:85:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8KeJoR0Zp2e+Pgbe5XvNRiCVGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTA3MTgyMTA1NThaFw0yNTA3MjIwNjI3NThaMDMxMTAvBgNV BAMTKDAwQkMwRDQ5RUNBQzAzRUZGQzQxNkEwNDhENkE4MkNGOEEwNjY3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXAVYjGEE62WElqMymTs2SeUV 9KESWy1lGyrY5wbb1esub1RF6kJvUBLD2Oq+oNa0NLElnUXhTq1esM0vokZ/Eb8H ogp60cFvfWelOiOK6WnCCB/iArX0AE0KU5Y/FU6UHzSalMX6p9QBAVemeW2hq7V2 c0qr71n7zZZ3AyPFA5p5VTe6kuf7l6sbumll8XUNYQczTUHBJBNifGt0W2TsInUx Y/6UubxvyXPzENVYfAvc7+3HimM4c1E1chQkdCl2ZhSGIrfnsCVGQg23FYh492ZU Tuszm0adAe7kUQAgskgn8/gF9wh1B4ot1DkzG1VDQuslMhn+T8Tm3oCORrZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUALwNSeysA+/8QWoEjWqCz4oGZ9IwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoDOs19tmwFr0Nur9VkBcgJyRRWF7pF+Qaw hMhvsp9KNjHR6qVS7lIo9yQjqJbr/zl/JHPto88lf0ox+ffR9si/7LDg1wBEdGXf enKWPtDrm6yvt+GteGNnI7tIInMbMdkt3z1UW4n0ffhA3XNW4EwIRZzOzprzD28F HrceHlfJBlOH+3V/mmGNK+54q/Ecf0N5qmEKIgdBcDBsOdkyh5S9QzvJxNWs2b3Q NMAUjrobXytu5CZTyfQlVHSlSr3LXL+nNXDVXK0izfFQbh0qKCGmCCOAn804nZCY 9oqx6deDu2UGxIk+4IT1oi1PAF75cjaEEWELDgf2E3binGkZheE= -----END CERTIFICATE-----Generated at Sun Jul 20 22:32:18 2025 by rpki-client