$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: a+6MnoiRwNshktTkJ5a9YelHsuPBYzEm5KviYH6/dAo= Subject key identifier: D4:45:86:7E:2B:06:44:BC:28:50:34:B3:2D:13:E9:84:CA:67:5C:5E Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 6577201F734289B65AAB61420FFB0DF37E17B18E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 0238 Signing time: Fri 05 Sep 2025 17:00:59 +0000 Manifest this update: Fri 05 Sep 2025 16:55:59 +0000 Manifest next update: Mon 08 Sep 2025 17:53:59 +0000 Files and hashes: 1: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=) 2: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=) 3: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=) 4: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=) 5: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=) 6: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=) 7: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: JkyQyrZkpjkaMw/KS+hBjjRsdnqWuIh7Va1DSvNdfPs=) 8: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:77:20:1f:73:42:89:b6:5a:ab:61:42:0f:fb:0d:f3:7e:17:b1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Sep 5 16:55:59 2025 GMT Not After : Sep 8 17:53:59 2025 GMT Subject: CN=D445867E2B0644BC285034B32D13E984CA675C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:e6:ae:fc:40:74:9b:5d:ab:d7:37:0d:3d: 09:1f:a5:3a:be:bd:70:64:bb:34:c0:16:69:23:1b: ee:bf:ff:55:45:7c:cb:cf:48:e2:89:c1:19:aa:eb: ac:7f:64:1e:4b:89:fd:0b:08:5c:36:3f:9e:55:75: a5:fc:69:c6:8f:af:3d:b5:85:2f:d9:d0:19:53:5f: 6d:8e:87:da:be:29:a2:10:3d:fe:ac:61:f9:6a:43: 6e:3e:43:8b:4c:bb:4d:33:80:13:65:b3:9e:7e:74: 51:7f:49:22:ab:19:f4:88:e7:01:c6:37:ec:58:cc: c8:06:4f:56:92:3f:65:27:b6:de:68:97:43:0b:96: dc:df:81:ff:6a:d7:64:6c:3c:84:44:3c:53:44:e3: 2f:05:0c:ab:43:a9:25:3f:e9:dd:b8:60:ff:d8:c0: a0:73:89:99:9c:9e:9f:f8:44:98:f3:d2:23:db:52: 01:d5:d1:b1:2f:6f:0c:1e:78:0c:1b:3d:34:ab:18: 66:c3:11:8a:8e:95:6f:1e:18:d9:be:6c:b6:80:9c: 1c:5e:48:aa:05:6f:a5:db:22:8c:cc:dd:2d:d8:e1: 65:6a:8f:1f:89:9f:7e:34:47:54:94:7f:7f:3c:7c: eb:a8:e3:7b:ad:4b:8b:14:f3:f0:3a:c3:36:eb:0d: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:45:86:7E:2B:06:44:BC:28:50:34:B3:2D:13:E9:84:CA:67:5C:5E X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e3:2b:db:f4:bd:6f:c6:08:5c:16:06:30:b2:36:2e:0c:c2: 58:60:e6:6e:8f:31:d5:5e:0d:a3:9d:2c:9a:73:30:5b:a3:cf: 6c:b9:7e:be:e3:e4:9c:2b:c9:85:e3:51:7b:29:80:21:b8:37: 7e:47:de:79:36:96:31:29:16:56:3b:1c:4b:ae:51:24:bd:dd: 5e:52:c3:39:1c:50:e0:f4:d0:04:8d:16:c6:e6:d8:57:e8:a7: 76:ec:98:c0:a3:a0:23:14:96:6d:88:f0:38:da:6b:3a:a2:88: d0:e4:ee:bf:97:87:9c:9e:6c:2a:ea:63:d6:be:30:41:34:ec: 9b:b2:20:12:14:e3:72:17:15:73:21:5d:cd:bf:47:a2:05:84: 1f:bf:a1:82:de:3c:15:b1:51:23:8e:0c:0d:fa:df:f4:50:78: 86:74:01:40:d9:e2:9d:88:88:7e:54:da:9c:92:51:cc:a0:42: e7:74:61:1f:a3:b3:d3:c0:c6:b5:c0:81:85:8d:b0:36:a5:36: 5c:db:04:4a:24:35:cd:12:24:66:cb:55:f8:52:47:3f:b3:e6: 7a:5d:61:bd:aa:b5:cd:90:89:3c:5c:1e:1d:42:ec:45:a8:63: d4:e2:fa:eb:6c:fb:dc:68:d6:be:fd:6c:ab:8e:d6:53:37:0f: 5f:8d:3c:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXcgH3NCibZaq2FCD/sN834XsY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTA5MDUxNjU1NTlaFw0yNTA5MDgxNzUzNTlaMDMxMTAvBgNV BAMTKEQ0NDU4NjdFMkIwNjQ0QkMyODUwMzRCMzJEMTNFOTg0Q0E2NzVDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETeau/EB0m12r1zcNPQkfpTq+ vXBkuzTAFmkjG+6//1VFfMvPSOKJwRmq66x/ZB5Lif0LCFw2P55VdaX8acaPrz21 hS/Z0BlTX22Oh9q+KaIQPf6sYflqQ24+Q4tMu00zgBNls55+dFF/SSKrGfSI5wHG N+xYzMgGT1aSP2Untt5ol0MLltzfgf9q12RsPIREPFNE4y8FDKtDqSU/6d24YP/Y wKBziZmcnp/4RJjz0iPbUgHV0bEvbwweeAwbPTSrGGbDEYqOlW8eGNm+bLaAnBxe SKoFb6XbIozM3S3Y4WVqjx+Jn340R1SUf388fOuo43utS4sU8/A6wzbrDbenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1EWGfisGRLwoUDSzLRPphMpnXF4wHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnjK9v0vW/GCFwWBjCyNi4Mwlhg5m6PMdVe DaOdLJpzMFujz2y5fr7j5JwryYXjUXspgCG4N35H3nk2ljEpFlY7HEuuUSS93V5S wzkcUOD00ASNFsbm2Ffop3bsmMCjoCMUlm2I8DjaazqiiNDk7r+Xh5yebCrqY9a+ MEE07JuyIBIU43IXFXMhXc2/R6IFhB+/oYLePBWxUSOODA363/RQeIZ0AUDZ4p2I iH5U2pySUcygQud0YR+js9PAxrXAgYWNsDalNlzbBEokNc0SJGbLVfhSRz+z5npd Yb2qtc2QiTxcHh1C7EWoY9Ti+uts+9xo1r79bKuO1lM3D1+NPJU= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:47 2025 by rpki-client