$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: oVP7yjeH7KuXV4om6BLMoDoCNSdQ/y39KCByq5G5WR4= Subject key identifier: C0:38:A6:11:7B:69:DB:85:3D:69:96:9F:5D:CF:5D:C6:E6:FD:3C:F5 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 46C824B0F38EE1A30FDB1BDFCFBEABE29D9CF354 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 0288 Signing time: Sun 01 Mar 2026 20:31:07 +0000 Manifest this update: Sun 01 Mar 2026 20:26:07 +0000 Manifest next update: Thu 05 Mar 2026 05:18:07 +0000 Files and hashes: 1: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=) 2: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=) 3: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=) 4: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: Tb+17toke2v3zTHrN+U6pozktQcl855HPCcMqlOF/tE=) 5: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: JsI09r/ZNnEPFeCt6WLBPTMEkxJRdrp4JE3T6ebsTQM=) 6: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=) 7: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=) 8: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c8:24:b0:f3:8e:e1:a3:0f:db:1b:df:cf:be:ab:e2:9d:9c:f3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Mar 1 20:26:07 2026 GMT Not After : Mar 5 05:18:07 2026 GMT Subject: CN=C038A6117B69DB853D69969F5DCF5DC6E6FD3CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:fd:cf:85:1f:3d:f3:44:d4:70:41:cb:49: 3b:04:3a:12:20:86:25:9e:54:5a:57:9c:d9:5f:d1: b3:bf:1a:71:a0:04:fb:50:fe:5b:c4:d5:c3:d6:6e: 5d:0e:d4:cd:ea:01:19:0c:f8:d9:98:a5:92:e4:cd: ce:7a:0e:c6:de:df:32:64:d2:1a:b7:83:d0:7d:aa: 41:80:1b:11:68:9b:51:9c:e3:92:36:db:07:94:e1: 3d:81:1a:39:6a:3c:9f:b1:cc:81:60:45:3c:e0:89: db:ec:48:c5:94:03:7a:c0:a6:76:05:1d:6e:14:cc: f8:24:5c:32:4c:7c:3c:e6:d3:b6:60:cd:4b:33:da: 02:9d:4e:64:9e:ce:72:29:71:b7:8a:47:cc:32:df: ec:69:e4:79:2e:bf:12:b7:55:80:79:84:b6:7d:28: d5:55:aa:54:31:93:c3:05:86:00:7b:71:4e:cd:d4: 2d:7a:8c:a9:9b:f1:8b:16:b2:3c:4c:20:79:d7:a9: 26:89:4f:31:71:79:35:4d:fc:4c:77:be:2a:59:da: 3a:28:39:03:61:bb:ae:9a:bc:dd:6b:f3:2e:9e:27: e5:5f:02:d1:3d:16:22:f5:9a:c4:05:6b:66:de:5a: 9b:72:a5:9e:79:61:3e:b2:6f:5f:01:2b:3f:4e:e7: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:38:A6:11:7B:69:DB:85:3D:69:96:9F:5D:CF:5D:C6:E6:FD:3C:F5 X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a1:e1:e6:21:86:78:5e:22:4b:88:07:6a:91:55:ba:f6:fd: 5e:5d:4e:cc:7e:99:ee:ba:0d:bb:42:7a:cd:a1:5e:3d:0a:1f: 59:54:4a:f3:93:aa:cc:6e:94:6b:32:4f:c2:d8:a4:ab:c2:dc: 6f:d8:41:59:70:0b:80:38:52:19:41:ec:e8:fb:d4:d0:52:79: 02:96:48:81:70:84:ef:ee:62:79:ed:c5:0a:f9:a4:d1:72:1a: 3d:ab:4c:7d:3b:31:97:35:ad:c9:fa:b1:97:e8:6a:5e:42:1c: 26:df:66:f4:66:f9:3f:17:1f:f6:f1:18:c5:ff:06:98:3d:d2: b5:5e:09:25:db:0d:74:18:47:91:3b:05:b2:11:a9:59:9f:eb: 04:b1:b8:46:0c:76:ab:08:82:c7:89:78:95:13:74:25:ca:fc: 6f:85:c9:04:e7:13:29:c3:74:dc:16:b2:99:e6:62:36:be:d0: a9:66:a9:56:21:25:1c:8b:05:98:c2:c7:c0:29:a3:5f:b0:de: 55:10:97:5d:a3:18:c4:4f:23:bc:da:13:ee:30:88:06:a1:66: ef:c9:e8:96:a7:d1:61:ba:c1:7f:68:2a:97:26:40:37:87:ab: ad:5e:15:70:d0:c9:e3:7d:10:fe:6e:14:7c:0d:31:c5:a5:ff: dd:34:ea:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsgksPOO4aMP2xvfz76r4p2c81QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNjAzMDEyMDI2MDdaFw0yNjAzMDUwNTE4MDdaMDMxMTAvBgNV BAMTKEMwMzhBNjExN0I2OURCODUzRDY5OTY5RjVEQ0Y1REM2RTZGRDNDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeC/3PhR8980TUcEHLSTsEOhIg hiWeVFpXnNlf0bO/GnGgBPtQ/lvE1cPWbl0O1M3qARkM+NmYpZLkzc56Dsbe3zJk 0hq3g9B9qkGAGxFom1Gc45I22weU4T2BGjlqPJ+xzIFgRTzgidvsSMWUA3rApnYF HW4UzPgkXDJMfDzm07ZgzUsz2gKdTmSeznIpcbeKR8wy3+xp5HkuvxK3VYB5hLZ9 KNVVqlQxk8MFhgB7cU7N1C16jKmb8YsWsjxMIHnXqSaJTzFxeTVN/Ex3vipZ2joo OQNhu66avN1r8y6eJ+VfAtE9FiL1msQFa2beWptypZ55YT6yb18BKz9O57EjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwDimEXtp24U9aZafXc9dxub9PPUwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOh4eYhhnheIkuIB2qRVbr2/V5dTsx+me66 DbtCes2hXj0KH1lUSvOTqsxulGsyT8LYpKvC3G/YQVlwC4A4UhlB7Oj71NBSeQKW SIFwhO/uYnntxQr5pNFyGj2rTH07MZc1rcn6sZfoal5CHCbfZvRm+T8XH/bxGMX/ Bpg90rVeCSXbDXQYR5E7BbIRqVmf6wSxuEYMdqsIgseJeJUTdCXK/G+FyQTnEynD dNwWspnmYja+0KlmqVYhJRyLBZjCx8Apo1+w3lUQl12jGMRPI7zaE+4wiAahZu/J 6Jan0WG6wX9oKpcmQDeHq61eFXDQyeN9EP5uFHwNMcWl/9006to= -----END CERTIFICATE-----Generated at Mon Mar 2 15:39:00 2026 by rpki-client