$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: 8PRt31mfXQHfr4+q7rAXxDkMKDXc5qNng+rlOYr7ohE= Subject key identifier: B8:A0:54:AE:9F:17:C8:1A:60:C6:E1:DC:57:AF:99:10:0A:BB:F6:80 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 1AE853064342BB657BA61496418136E0C70C8D61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 0252 Signing time: Sun 02 Nov 2025 09:41:00 +0000 Manifest this update: Sun 02 Nov 2025 09:36:00 +0000 Manifest next update: Wed 05 Nov 2025 18:52:00 +0000 Files and hashes: 1: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=) 2: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=) 3: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=) 4: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: 7EJ94EhnioAMKM/qg3pvdb5ukVLPAbS7J8M8axN1vNs=) 5: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=) 6: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=) 7: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=) 8: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e8:53:06:43:42:bb:65:7b:a6:14:96:41:81:36:e0:c7:0c:8d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Nov 2 09:36:00 2025 GMT Not After : Nov 5 18:52:00 2025 GMT Subject: CN=B8A054AE9F17C81A60C6E1DC57AF99100ABBF680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:47:4d:1e:e2:52:9d:03:9b:11:f5:0c:ec: 4d:f0:7e:3d:a4:3a:1a:8b:47:e8:b2:18:c2:c2:f1: 32:2b:ea:2f:7e:74:a4:5c:59:c8:88:ed:cb:51:30: 11:35:43:78:3c:27:77:3b:45:62:78:6c:00:3b:24: c0:e1:a8:90:75:a2:3f:51:cf:44:40:14:6f:03:de: d4:9b:28:45:8c:52:2f:32:b6:f3:e8:eb:31:3e:75: b3:a5:37:55:3b:6d:8d:48:e9:81:b7:0a:c7:7e:1a: ae:8e:09:51:8f:50:ae:5a:bf:7e:d2:ee:12:5e:b1: 0d:c5:db:95:dd:f4:9f:8e:13:d0:52:1e:61:69:83: 34:52:6e:92:c1:5d:e8:7a:c9:37:32:da:2f:ef:a7: fb:8e:fe:ec:0a:d9:ac:b2:94:48:31:a3:f7:59:01: 6b:01:c3:64:0a:ad:78:00:48:a9:7e:e1:34:60:69: f4:1f:63:a3:22:af:d4:0a:6a:4c:56:d2:f9:b4:37: 4a:85:b0:cf:aa:27:f0:50:81:71:3c:bb:01:21:21: bb:65:1b:17:7a:c8:a1:36:2e:86:b1:b2:3e:61:68: 96:61:15:c9:e6:f6:13:89:4b:05:7e:0c:f0:b2:f8: f1:4a:02:fe:d6:f7:12:54:63:49:15:2e:b6:7b:95: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A0:54:AE:9F:17:C8:1A:60:C6:E1:DC:57:AF:99:10:0A:BB:F6:80 X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:90:ec:ef:79:84:bd:1c:ed:77:e6:29:69:1e:da:0d:7e:71: e1:7d:2d:f2:aa:5e:72:70:75:dd:2b:dc:9e:d5:38:ba:77:60: f4:f1:34:5e:26:d1:a0:1b:ca:aa:ca:80:e5:bf:29:61:95:04: 37:c7:91:fb:1b:b8:54:9c:ce:40:2e:06:d5:cf:87:50:f3:fa: 78:50:1c:86:df:ac:95:57:ba:f5:31:2e:be:e0:f8:02:44:a9: 06:c2:14:60:37:13:dd:ed:8f:89:87:ff:f5:fc:d6:47:40:66: e7:c7:32:c5:c9:7d:59:3e:43:95:5a:38:a8:27:11:75:5f:a0: ec:28:98:1e:4a:af:59:ef:a2:a6:c2:1b:77:67:ba:3b:3b:87: d4:9e:60:69:7c:3e:62:03:ea:ff:14:1e:9e:bd:24:3e:45:6d: 65:8b:a2:7f:13:65:f3:35:48:11:a4:83:7d:09:23:a0:58:b8: cb:e2:ec:57:bc:38:e9:bd:fd:5f:89:4e:ae:0b:16:16:87:83: 65:e9:54:f4:35:90:61:15:55:15:e0:5d:e1:2d:2e:cd:81:c3: d0:8d:64:18:f1:8c:70:46:d6:b4:b7:33:4f:7a:4d:01:3e:40: fd:28:65:71:aa:4b:a8:ec:69:cc:78:b1:7f:61:67:d7:30:6a: a4:00:a6:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuhTBkNCu2V7phSWQYE24McMjWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTExMDIwOTM2MDBaFw0yNTExMDUxODUyMDBaMDMxMTAvBgNV BAMTKEI4QTA1NEFFOUYxN0M4MUE2MEM2RTFEQzU3QUY5OTEwMEFCQkY2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComEdNHuJSnQObEfUM7E3wfj2k OhqLR+iyGMLC8TIr6i9+dKRcWciI7ctRMBE1Q3g8J3c7RWJ4bAA7JMDhqJB1oj9R z0RAFG8D3tSbKEWMUi8ytvPo6zE+dbOlN1U7bY1I6YG3Csd+Gq6OCVGPUK5av37S 7hJesQ3F25Xd9J+OE9BSHmFpgzRSbpLBXeh6yTcy2i/vp/uO/uwK2ayylEgxo/dZ AWsBw2QKrXgASKl+4TRgafQfY6Mir9QKakxW0vm0N0qFsM+qJ/BQgXE8uwEhIbtl Gxd6yKE2Loaxsj5haJZhFcnm9hOJSwV+DPCy+PFKAv7W9xJUY0kVLrZ7lTLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuKBUrp8XyBpgxuHcV6+ZEAq79oAwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6Q7O95hL0c7XfmKWke2g1+ceF9LfKqXnJw dd0r3J7VOLp3YPTxNF4m0aAbyqrKgOW/KWGVBDfHkfsbuFSczkAuBtXPh1Dz+nhQ HIbfrJVXuvUxLr7g+AJEqQbCFGA3E93tj4mH//X81kdAZufHMsXJfVk+Q5VaOKgn EXVfoOwomB5Kr1nvoqbCG3dnujs7h9SeYGl8PmID6v8UHp69JD5FbWWLon8TZfM1 SBGkg30JI6BYuMvi7Fe8OOm9/V+JTq4LFhaHg2XpVPQ1kGEVVRXgXeEtLs2Bw9CN ZBjxjHBG1rS3M096TQE+QP0oZXGqS6jsacx4sX9hZ9cwaqQAph8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:47:52 2025 by rpki-client