$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: X3CHOuplrd8Sym/9zD1CZ2VaLcKIocPcopptpAjRkWA= Subject key identifier: DE:BA:8C:EB:B4:A0:55:C6:A8:39:B0:1B:3E:7E:DE:63:F4:38:A5:1F Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 3843A741B1AAFFBA10DE5FACA54B08F9CAED6CD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 020B Signing time: Sun 01 Jun 2025 16:20:58 +0000 Manifest this update: Sun 01 Jun 2025 16:15:58 +0000 Manifest next update: Wed 04 Jun 2025 23:29:58 +0000 Files and hashes: 1: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: 8Je+xX4OhkhcFmkj4DJ5iXWZb7uFw9i8VQpecJKYDBg=) 2: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: jzAqzS+UM0D1OlBXnCUhpQdP3zDL5sXG1VXuhoHVU1Y=) 3: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: to8Mghx8SjANkLNg9sqdQL62e7GUGvJB7Oj3zo1cw3Q=) 4: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: sh5TYY+kSsxR1pmF4DA1+vUfc+JlTOxylxIbw3b89Eo=) 5: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: MqPsWsjfl+dvyk5ktsSY4CI6tIF3C/cx5WnXAN8LB/s=) 6: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: 2GRWO9/Q0MpgVDiM1R341bc3uq7zSgQtLGeuDYAy19g=) 7: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=) 8: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: +gGFIbmz6MNLj5Vm2IvAwgGsv19fCAUik3uGncQgwzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 23:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:43:a7:41:b1:aa:ff:ba:10:de:5f:ac:a5:4b:08:f9:ca:ed:6c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Jun 1 16:15:58 2025 GMT Not After : Jun 4 23:29:58 2025 GMT Subject: CN=DEBA8CEBB4A055C6A839B01B3E7EDE63F438A51F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:65:2c:3e:a7:30:db:d5:f7:88:35:3f:9e: f6:59:3a:02:f5:01:e0:a4:8e:66:9c:97:a4:db:27: 51:e0:07:0b:8e:ab:93:1d:2a:f2:f4:b1:3c:63:29: 83:5a:b2:08:31:54:33:b6:6a:63:5d:89:80:b9:15: 21:5c:66:40:80:79:20:90:32:db:dd:95:b7:0a:72: 16:d1:4b:dd:8c:24:87:ce:d7:5e:2e:ba:e8:f3:16: b7:c8:a2:05:c9:b9:f0:07:d0:93:b0:72:ae:ab:9b: 63:42:4d:dc:01:b5:91:d7:53:7f:9e:62:1c:74:66: 79:fd:f7:0f:5e:0a:40:0e:74:18:36:9b:4d:c7:38: f7:5c:50:6d:e8:8f:7c:1f:cb:dd:69:cd:dd:e2:8c: 2b:31:f5:58:6d:f9:f1:22:d5:00:1f:ef:8f:c1:b3: b3:5d:46:39:23:38:93:02:61:b6:a4:b4:88:45:d8: 87:8a:4f:76:4b:53:7d:da:7a:bf:f6:d3:7c:fa:67: 9b:b9:3f:d8:ee:23:7e:95:af:05:91:e7:53:e4:46: ff:00:54:7b:5e:c1:ee:38:d3:6d:82:b0:83:92:70: 74:d7:78:98:4b:02:b2:dd:1f:12:d4:41:a3:fb:c8: cd:86:3e:ba:49:17:77:24:06:dc:86:3d:33:7d:d8: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BA:8C:EB:B4:A0:55:C6:A8:39:B0:1B:3E:7E:DE:63:F4:38:A5:1F X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:65:87:75:39:79:ee:e2:0c:03:93:04:ec:4e:eb:11:ed:bb: bd:a9:d3:98:53:36:b5:d7:5b:77:5f:45:d5:10:72:1f:9f:b1: d7:02:97:cb:c5:bd:77:02:66:7e:e9:7c:27:d6:55:db:f4:05: b7:6a:b6:b7:6e:94:38:82:6a:3b:c8:3d:5a:1c:55:50:e6:68: 71:35:22:f4:51:b5:7a:5e:84:94:97:16:4a:d6:c4:27:81:7d: 69:74:b8:ca:df:21:13:9e:97:4e:27:70:24:44:90:ec:46:e9: 60:28:8f:e1:23:45:a0:ae:f4:d7:99:b0:26:ed:fb:fc:48:39: ed:11:ae:41:5d:12:cb:08:a3:6b:99:6e:85:af:5d:91:60:f3: ac:7f:4f:51:95:50:4a:03:6c:27:ad:2d:0f:32:48:98:18:f3: 7a:61:7a:48:95:a7:29:44:0d:37:ec:74:aa:f9:36:48:ae:b6: 10:46:6f:23:73:5e:52:76:44:53:ed:56:20:d5:42:d8:31:f9: 02:17:7e:c2:98:e7:59:fe:55:f8:77:05:f7:3f:bb:61:cc:cb: 80:f7:20:12:e2:42:89:27:56:0e:16:5e:9b:cc:b5:53:e9:e3: a9:e9:34:41:61:7d:73:fb:ea:33:b4:c5:3f:8f:af:1b:d3:ab: 99:ee:3d:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEOnQbGq/7oQ3l+spUsI+crtbNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTA2MDExNjE1NThaFw0yNTA2MDQyMzI5NThaMDMxMTAvBgNV BAMTKERFQkE4Q0VCQjRBMDU1QzZBODM5QjAxQjNFN0VERTYzRjQzOEE1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVWUsPqcw29X3iDU/nvZZOgL1 AeCkjmacl6TbJ1HgBwuOq5MdKvL0sTxjKYNasggxVDO2amNdiYC5FSFcZkCAeSCQ MtvdlbcKchbRS92MJIfO114uuujzFrfIogXJufAH0JOwcq6rm2NCTdwBtZHXU3+e Yhx0Znn99w9eCkAOdBg2m03HOPdcUG3oj3wfy91pzd3ijCsx9Vht+fEi1QAf74/B s7NdRjkjOJMCYbaktIhF2IeKT3ZLU33aer/203z6Z5u5P9juI36VrwWR51PkRv8A VHtewe44022CsIOScHTXeJhLArLdHxLUQaP7yM2GPrpJF3ckBtyGPTN92JpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rqM67SgVcaoObAbPn7eY/Q4pR8wHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZlh3U5ee7iDAOTBOxO6xHtu72p05hTNrXX W3dfRdUQch+fsdcCl8vFvXcCZn7pfCfWVdv0BbdqtrdulDiCajvIPVocVVDmaHE1 IvRRtXpehJSXFkrWxCeBfWl0uMrfIROel04ncCREkOxG6WAoj+EjRaCu9NeZsCbt +/xIOe0RrkFdEssIo2uZboWvXZFg86x/T1GVUEoDbCetLQ8ySJgY83phekiVpylE DTfsdKr5NkiuthBGbyNzXlJ2RFPtViDVQtgx+QIXfsKY51n+Vfh3Bfc/u2HMy4D3 IBLiQoknVg4WXpvMtVPp46npNEFhfXP76jO0xT+PrxvTq5nuPdk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:39 2025 by rpki-client