$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: mo1agvENSt6nTsigXD+5TxgVhXTarHxVNE9vlnRaT1E= Subject key identifier: 4B:49:55:11:6A:41:E7:A7:0A:DA:82:95:EE:E7:98:23:3D:25:84:A5 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 13315CFD54FAA7D1ABBD6A36C73D0607C96AC666 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 0218 Signing time: Mon 30 Jun 2025 06:10:58 +0000 Manifest this update: Mon 30 Jun 2025 06:05:58 +0000 Manifest next update: Thu 03 Jul 2025 11:35:58 +0000 Files and hashes: 1: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: RrQgn+jn7mLn41/y1GdfxvPjHWc5T4R4Ub77wlVz/L4=) 2: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=) 3: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: sh5TYY+kSsxR1pmF4DA1+vUfc+JlTOxylxIbw3b89Eo=) 4: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: jzAqzS+UM0D1OlBXnCUhpQdP3zDL5sXG1VXuhoHVU1Y=) 5: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: to8Mghx8SjANkLNg9sqdQL62e7GUGvJB7Oj3zo1cw3Q=) 6: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: MqPsWsjfl+dvyk5ktsSY4CI6tIF3C/cx5WnXAN8LB/s=) 7: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: 2GRWO9/Q0MpgVDiM1R341bc3uq7zSgQtLGeuDYAy19g=) 8: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: +gGFIbmz6MNLj5Vm2IvAwgGsv19fCAUik3uGncQgwzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:31:5c:fd:54:fa:a7:d1:ab:bd:6a:36:c7:3d:06:07:c9:6a:c6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Jun 30 06:05:58 2025 GMT Not After : Jul 3 11:35:58 2025 GMT Subject: CN=4B4955116A41E7A70ADA8295EEE798233D2584A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:5d:55:63:fd:a0:99:d0:7a:24:12:04:94: f7:73:22:c0:d3:d7:85:71:0c:4e:9c:93:06:82:4d: 9f:56:56:70:68:5a:42:07:8a:1c:fa:81:dc:1d:01: 8a:54:ad:e1:9c:72:8c:23:0b:c0:84:bc:6e:ae:a5: 81:57:3d:d3:b2:c3:ad:f5:6c:b2:ee:b5:78:f8:ba: 81:3a:fa:d7:86:0f:d2:59:d7:09:61:96:1a:eb:47: b7:f3:d6:e2:f6:c9:d3:b0:51:9b:09:da:5a:ed:4e: e9:64:19:d2:c5:9a:be:8c:07:e4:5b:87:ed:64:2d: 46:d1:31:71:13:eb:45:d9:2b:f4:09:67:02:fa:c0: af:68:57:5e:da:ec:71:2c:19:5c:e1:52:34:fd:1b: 59:44:48:45:fe:0c:91:a5:0a:a3:19:8a:cd:78:9d: cc:6f:6a:1f:f5:8a:b9:f8:5d:b3:d1:eb:5d:ba:55: 4e:a1:59:e5:5b:08:c1:9c:88:1b:2b:70:2e:37:e9: be:9b:5d:8e:4e:e1:bb:61:70:12:3c:e6:51:93:1f: c7:37:53:5d:9e:15:f3:c2:c5:33:01:cd:f4:56:1b: 37:0e:f1:9a:7c:0c:5e:ea:c0:84:1d:35:75:53:75: 78:23:0a:71:de:3b:97:00:0e:c8:13:33:dd:db:d2: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:49:55:11:6A:41:E7:A7:0A:DA:82:95:EE:E7:98:23:3D:25:84:A5 X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:21:7d:c1:72:2b:30:46:a3:18:f8:cc:1c:93:c3:e8:59:10: 45:28:63:15:0c:ea:44:cb:7a:08:26:d5:d1:e4:9c:0f:39:3a: 9b:70:98:74:01:1a:f4:17:2c:e3:56:5f:5b:e0:1c:7e:a5:c8: 72:84:9e:58:3f:6e:d8:2e:a8:bb:fa:d9:86:d1:80:ab:41:92: fe:7e:22:88:d7:6d:9b:a4:96:85:da:44:7d:17:0e:23:8c:d5: 30:f8:b8:67:6c:ff:1c:5c:c5:64:35:6e:68:5c:91:bb:b3:96: fc:57:40:8f:1b:a0:0c:4d:d4:c4:74:57:c6:fe:8b:c3:a2:1c: 2a:d4:bf:d3:59:6f:e5:5f:3b:e4:aa:86:11:47:6d:5f:2e:6a: 27:aa:a6:c4:ec:ff:87:c5:cc:7a:6c:0d:ad:6f:41:6a:3d:2a: 9b:d6:f2:a3:94:8b:db:97:c1:4e:e8:96:d6:c8:67:3c:e2:24: d3:9b:d7:0a:ff:47:e5:14:67:3f:f4:36:34:96:1c:a6:9c:36: 31:17:0e:ca:65:62:4e:a8:96:fb:89:ca:c9:a2:3e:17:cd:56: 83:a6:eb:f0:39:3f:5c:6a:d3:bd:04:df:2e:32:96:75:ad:30: 39:1f:92:59:73:b5:b6:af:a2:f9:d4:c9:f4:0a:a3:02:11:5e: a2:3f:b2:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzFc/VT6p9GrvWo2xz0GB8lqxmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTA2MzAwNjA1NThaFw0yNTA3MDMxMTM1NThaMDMxMTAvBgNV BAMTKDRCNDk1NTExNkE0MUU3QTcwQURBODI5NUVFRTc5ODIzM0QyNTg0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbN11VY/2gmdB6JBIElPdzIsDT 14VxDE6ckwaCTZ9WVnBoWkIHihz6gdwdAYpUreGccowjC8CEvG6upYFXPdOyw631 bLLutXj4uoE6+teGD9JZ1wlhlhrrR7fz1uL2ydOwUZsJ2lrtTulkGdLFmr6MB+Rb h+1kLUbRMXET60XZK/QJZwL6wK9oV17a7HEsGVzhUjT9G1lESEX+DJGlCqMZis14 ncxvah/1irn4XbPR6126VU6hWeVbCMGciBsrcC436b6bXY5O4bthcBI85lGTH8c3 U12eFfPCxTMBzfRWGzcO8Zp8DF7qwIQdNXVTdXgjCnHeO5cADsgTM93b0uTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0lVEWpB56cK2oKV7ueYIz0lhKUwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYhfcFyKzBGoxj4zByTw+hZEEUoYxUM6kTL eggm1dHknA85OptwmHQBGvQXLONWX1vgHH6lyHKEnlg/btguqLv62YbRgKtBkv5+ IojXbZukloXaRH0XDiOM1TD4uGds/xxcxWQ1bmhckbuzlvxXQI8boAxN1MR0V8b+ i8OiHCrUv9NZb+VfO+SqhhFHbV8uaieqpsTs/4fFzHpsDa1vQWo9KpvW8qOUi9uX wU7oltbIZzziJNOb1wr/R+UUZz/0NjSWHKacNjEXDsplYk6olvuJysmiPhfNVoOm 6/A5P1xq070E3y4ylnWtMDkfkllztbavovnUyfQKowIRXqI/soo= -----END CERTIFICATE-----Generated at Wed Jul 2 00:45:15 2025 by rpki-client