$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: cryVZTnKXlkzn/vbYebq5zLAekjtol+E0AKfocNEam0= Subject key identifier: 13:56:88:41:E7:79:6E:CA:E9:D7:A0:D6:5E:E0:3C:88:5F:98:DB:D7 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 61D08080D545237C45A87A3E540E9343095456DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 0292 Signing time: Tue 24 Mar 2026 17:11:07 +0000 Manifest this update: Tue 24 Mar 2026 17:06:07 +0000 Manifest next update: Sat 28 Mar 2026 05:01:07 +0000 Files and hashes: 1: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=) 2: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: Ep+Rl2kgM8leXZvrsbCM5KkGcaLrPINm+VMnxlWCfz4=) 3: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=) 4: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=) 5: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=) 6: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=) 7: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: JsI09r/ZNnEPFeCt6WLBPTMEkxJRdrp4JE3T6ebsTQM=) 8: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d0:80:80:d5:45:23:7c:45:a8:7a:3e:54:0e:93:43:09:54:56:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Mar 24 17:06:07 2026 GMT Not After : Mar 28 05:01:07 2026 GMT Subject: CN=13568841E7796ECAE9D7A0D65EE03C885F98DBD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:09:dc:39:51:97:03:1d:49:e0:c8:de:71: 20:a8:54:1f:18:36:2a:79:53:55:86:64:02:5e:e6: 50:35:7b:9f:92:07:5b:b9:46:33:ca:a3:5e:af:b8: 26:f9:15:6c:8d:91:0a:a3:94:bb:68:c2:b1:bd:1c: 84:ca:c5:ba:0d:30:aa:15:a9:28:eb:91:82:f5:b7: 4a:a8:58:b3:ad:21:1d:44:72:ad:0b:0c:7a:02:c0: 18:e1:ba:61:5e:e5:25:c2:26:0d:be:9f:29:8d:82: 29:03:eb:56:17:25:8e:1e:31:50:3c:8e:7a:f2:75: fc:a0:4e:53:cd:48:61:68:51:d1:6d:22:25:1c:01: 6f:3e:06:26:3e:1f:13:f0:9d:22:7d:fa:1f:d0:f2: 84:64:d6:d7:2a:0b:3e:48:fd:da:51:12:c5:c2:77: 6e:40:57:8a:cd:22:c3:ff:02:ec:0c:2c:ec:25:ea: ae:5d:02:24:77:63:ea:24:ba:84:58:f3:05:70:11: f5:39:6d:da:32:e8:94:7a:f8:f4:a5:77:32:b7:e5: c3:5e:da:db:a8:95:79:37:74:e5:e4:46:63:54:7e: e5:20:a6:ba:0e:09:49:c3:f9:50:a9:8d:c8:4c:37: 10:5e:2d:cb:7e:e5:a5:79:b7:e7:0f:54:d6:16:c6: 9d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:56:88:41:E7:79:6E:CA:E9:D7:A0:D6:5E:E0:3C:88:5F:98:DB:D7 X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f1:1e:22:8e:91:55:0d:33:31:f1:e6:ff:53:be:95:fd:6d: 85:1a:83:4e:11:5a:57:d2:7b:ea:ba:15:f5:01:74:8f:9a:c0: 09:fa:39:37:fc:dc:a7:9a:8c:6b:b5:1f:34:1e:5e:5f:02:42: a3:fb:0c:fa:4e:d6:fd:d9:d8:08:6b:02:a9:09:87:0c:a3:35: 56:4e:3e:a0:39:d6:b7:ce:1e:ed:77:b2:6c:97:54:45:37:58: 35:af:03:8d:fa:cb:6f:70:60:5d:5c:33:00:ce:e7:42:7b:d3: cd:99:76:27:85:68:d7:26:76:8e:df:d5:db:9f:db:6b:cb:a2: aa:0c:69:1b:c3:bc:08:01:b8:7a:a3:dd:5f:24:cd:d0:c5:c2: 00:7b:f2:4d:da:34:8f:b8:b4:8f:28:58:e2:b4:1d:ab:09:83: ad:2d:40:51:ed:72:de:37:41:c5:9a:45:79:b2:7f:c3:12:7f: ae:e2:00:65:a6:57:94:98:90:dc:77:17:bc:81:b0:aa:c7:ac: 39:14:89:ef:9b:9a:64:4d:26:e4:9e:bf:11:35:d9:4e:57:5c: 60:a8:bf:03:f9:2d:f4:8d:03:d6:34:12:7d:64:cb:9b:5f:4e: a3:21:1d:4a:94:e6:00:b4:db:4f:57:da:f9:87:34:fa:df:dc: 6a:ff:4c:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdCAgNVFI3xFqHo+VA6TQwlUVtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNjAzMjQxNzA2MDdaFw0yNjAzMjgwNTAxMDdaMDMxMTAvBgNV BAMTKDEzNTY4ODQxRTc3OTZFQ0FFOUQ3QTBENjVFRTAzQzg4NUY5OERCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeagncOVGXAx1J4MjecSCoVB8Y Nip5U1WGZAJe5lA1e5+SB1u5RjPKo16vuCb5FWyNkQqjlLtowrG9HITKxboNMKoV qSjrkYL1t0qoWLOtIR1Ecq0LDHoCwBjhumFe5SXCJg2+nymNgikD61YXJY4eMVA8 jnrydfygTlPNSGFoUdFtIiUcAW8+BiY+HxPwnSJ9+h/Q8oRk1tcqCz5I/dpREsXC d25AV4rNIsP/AuwMLOwl6q5dAiR3Y+okuoRY8wVwEfU5bdoy6JR6+PSldzK35cNe 2tuolXk3dOXkRmNUfuUgproOCUnD+VCpjchMNxBeLct+5aV5t+cPVNYWxp1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE1aIQed5bsrp16DWXuA8iF+Y29cwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbxHiKOkVUNMzHx5v9TvpX9bYUag04RWlfS e+q6FfUBdI+awAn6OTf83KeajGu1HzQeXl8CQqP7DPpO1v3Z2AhrAqkJhwyjNVZO PqA51rfOHu13smyXVEU3WDWvA436y29wYF1cMwDO50J7082ZdieFaNcmdo7f1duf 22vLoqoMaRvDvAgBuHqj3V8kzdDFwgB78k3aNI+4tI8oWOK0HasJg60tQFHtct43 QcWaRXmyf8MSf67iAGWmV5SYkNx3F7yBsKrHrDkUie+bmmRNJuSevxE12U5XXGCo vwP5LfSNA9Y0En1ky5tfTqMhHUqU5gC0209X2vmHNPrf3Gr/TIY= -----END CERTIFICATE-----Generated at Fri Mar 27 02:41:22 2026 by rpki-client