$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: MhlcjH1jyQbDVsQB1e7I+dr99WRmbov5p+Xw3pzoXjQ= Subject key identifier: 0F:06:9F:78:DD:F9:39:86:9D:1C:C1:81:6F:3E:C8:71:38:6A:53:EC Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 6D4C711ED5E76B9C0D98FA6B3E0514511B57BAF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 0231 Signing time: Thu 21 Aug 2025 10:21:00 +0000 Manifest this update: Thu 21 Aug 2025 10:16:00 +0000 Manifest next update: Sun 24 Aug 2025 19:52:00 +0000 Files and hashes: 1: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=) 2: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=) 3: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=) 4: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=) 5: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=) 6: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=) 7: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: ZfAqrpPY1P6Qvgs4fKev3C9a32ZEHXSbgy5tqH0aVcg=) 8: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4c:71:1e:d5:e7:6b:9c:0d:98:fa:6b:3e:05:14:51:1b:57:ba:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Aug 21 10:16:00 2025 GMT Not After : Aug 24 19:52:00 2025 GMT Subject: CN=0F069F78DDF939869D1CC1816F3EC871386A53EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:84:48:d1:59:4d:5e:49:9b:2d:d3:99:d3: 8a:3b:cc:13:7d:19:5c:1a:02:59:91:bc:31:25:cb: 50:2e:50:4c:58:4c:36:85:0f:73:dc:6d:22:58:86: c9:db:3a:0c:39:ff:83:bc:cd:37:dc:1c:d7:b6:f0: 0f:6d:69:29:59:13:21:93:4b:92:59:1b:51:d3:84: 5c:30:d1:f4:37:f1:d9:40:74:ca:73:90:eb:20:2e: 24:b4:32:d0:1b:38:c8:b0:ab:8e:e9:c4:4b:74:2b: 84:bc:a8:18:a1:06:d1:be:ed:5d:4f:39:dd:7e:ec: 57:42:71:88:e5:d7:7b:cf:24:f1:f3:b7:db:a0:e9: 03:8b:d6:35:bd:34:85:5b:5a:e6:b4:cd:c7:58:ab: db:28:8d:0f:dd:f0:54:80:b4:9e:82:2b:23:09:a5: fb:37:a9:2c:f8:be:d4:ec:09:82:33:83:05:cc:65: 32:15:bf:16:e3:bd:3a:0f:7f:a5:4c:55:ee:f0:98: c2:76:3a:4a:e2:7a:f0:f0:86:29:47:92:9c:e2:03: 57:53:b9:6b:9e:f8:6e:73:a0:ed:c2:6e:74:a5:37: 28:62:1c:48:2d:49:bb:f2:54:7e:9c:cf:24:c7:c5: d9:09:ef:45:93:a9:3c:97:18:aa:f5:12:fb:53:b6: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:06:9F:78:DD:F9:39:86:9D:1C:C1:81:6F:3E:C8:71:38:6A:53:EC X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:44:bb:33:3a:34:4d:e2:da:32:80:71:c1:67:06:b5:c7:46: b6:e8:8a:83:17:a3:19:0b:57:fa:67:03:9e:c1:a7:37:c2:a8: 3a:bb:95:4d:27:dc:fa:f3:d0:99:db:9b:bc:16:15:1a:2d:f4: 8b:22:2b:e0:ee:6c:85:a9:0a:83:60:83:d1:7b:8d:a5:4e:68: 99:92:62:72:83:8a:68:97:4d:1b:3b:64:4e:e4:07:0d:d0:9a: df:93:0a:75:96:22:ab:d9:bd:28:87:78:2f:68:4e:5f:dd:b5: 48:88:03:a7:19:75:97:d2:f6:0a:aa:ba:65:cd:30:30:9e:6b: 1f:f1:15:e5:34:7e:68:0e:d7:ba:37:dd:86:8c:e0:f8:bf:05: 56:9b:53:e8:fa:da:fc:26:58:e8:f4:90:5d:4f:b7:63:4e:72: 18:17:18:4f:9d:82:0a:94:e3:3b:df:03:fb:0b:e3:92:22:4a: b2:43:9b:5a:fb:0a:8d:46:cc:89:d5:b0:cd:33:2f:26:b2:85: 2c:ca:bf:fd:a8:1c:2f:20:f5:fd:78:5d:e5:50:d8:4c:67:05: f6:bc:c6:b3:49:32:84:d0:1d:90:28:c5:3a:15:c1:72:f2:84: 7b:29:7a:04:76:7c:b0:51:0e:68:66:0a:26:c5:b1:69:b1:34: 2c:c2:f9:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUxxHtXna5wNmPprPgUUURtXuvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTA4MjExMDE2MDBaFw0yNTA4MjQxOTUyMDBaMDMxMTAvBgNV BAMTKDBGMDY5Rjc4RERGOTM5ODY5RDFDQzE4MTZGM0VDODcxMzg2QTUzRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEj4RI0VlNXkmbLdOZ04o7zBN9 GVwaAlmRvDEly1AuUExYTDaFD3PcbSJYhsnbOgw5/4O8zTfcHNe28A9taSlZEyGT S5JZG1HThFww0fQ38dlAdMpzkOsgLiS0MtAbOMiwq47pxEt0K4S8qBihBtG+7V1P Od1+7FdCcYjl13vPJPHzt9ug6QOL1jW9NIVbWua0zcdYq9sojQ/d8FSAtJ6CKyMJ pfs3qSz4vtTsCYIzgwXMZTIVvxbjvToPf6VMVe7wmMJ2OkrievDwhilHkpziA1dT uWue+G5zoO3CbnSlNyhiHEgtSbvyVH6czyTHxdkJ70WTqTyXGKr1EvtTtmDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDwafeN35OYadHMGBbz7IcThqU+wwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClEuzM6NE3i2jKAccFnBrXHRrboioMXoxkL V/pnA57BpzfCqDq7lU0n3Prz0Jnbm7wWFRot9IsiK+DubIWpCoNgg9F7jaVOaJmS YnKDimiXTRs7ZE7kBw3Qmt+TCnWWIqvZvSiHeC9oTl/dtUiIA6cZdZfS9gqqumXN MDCeax/xFeU0fmgO17o33YaM4Pi/BVabU+j62vwmWOj0kF1Pt2NOchgXGE+dggqU 4zvfA/sL45IiSrJDm1r7Co1GzInVsM0zLyayhSzKv/2oHC8g9f14XeVQ2ExnBfa8 xrNJMoTQHZAoxToVwXLyhHspegR2fLBRDmhmCibFsWmxNCzC+ac= -----END CERTIFICATE-----Generated at Sat Aug 23 21:04:18 2025 by rpki-client