$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: LpJT+NizVZUyHyGKd10ugyu6m/ZRL+cxbSqhl0y12Hg= Subject key identifier: 97:83:AF:6E:CA:5A:54:53:7B:F9:B4:BD:7E:2C:38:2D:79:AE:6F:68 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 7A580EED27D9DA284558D3EA138DD290B97A8947 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 022A Signing time: Wed 06 Aug 2025 06:41:00 +0000 Manifest this update: Wed 06 Aug 2025 06:36:00 +0000 Manifest next update: Sat 09 Aug 2025 09:58:00 +0000 Files and hashes: 1: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: 3DW7Km1SyhYcUuxgYBHMowOC0T+T4j5C7MaruczWT1g=) 2: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=) 3: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=) 4: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=) 5: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=) 6: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=) 7: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=) 8: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:58:0e:ed:27:d9:da:28:45:58:d3:ea:13:8d:d2:90:b9:7a:89:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Aug 6 06:36:00 2025 GMT Not After : Aug 9 09:58:00 2025 GMT Subject: CN=9783AF6ECA5A54537BF9B4BD7E2C382D79AE6F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:53:bd:0e:ff:53:8a:b9:dd:b8:8e:df:47: 9f:06:44:c8:5f:6e:4f:78:c4:3b:ae:2d:ad:f9:54: 2c:f9:d0:fd:11:f9:9d:d1:7f:3e:0b:a3:55:d8:5e: 3c:12:0d:60:03:d9:d3:2a:f2:d2:cc:0f:29:2d:0a: 5f:62:cb:71:19:7a:be:77:a9:8c:fa:65:fa:f5:4c: 9f:0b:1f:99:f4:36:42:7c:ea:32:2a:99:5c:2f:7f: 65:ac:3b:7b:18:6e:c4:52:26:db:c3:5f:57:7b:f1: 8a:24:b6:c8:3f:d1:86:7c:54:aa:09:c9:9d:6a:2d: 82:0d:01:74:d2:4e:90:73:26:73:6d:fc:64:6c:bf: 9a:75:36:1e:ec:a0:d4:fb:38:f8:7c:28:7f:0f:d4: 5f:a4:f3:d4:b6:48:0d:ac:4c:8d:9d:a4:4d:1c:d7: 79:55:6b:28:4d:02:eb:9c:b2:27:9f:f4:5d:19:08: 11:a7:5e:30:dd:f6:a5:8b:0b:93:10:71:29:14:e1: 47:49:78:10:eb:30:41:8c:7e:92:88:45:c9:84:f4: 10:01:51:6a:b2:d2:c9:58:d0:53:b9:8e:c5:66:96: 9f:41:d8:c4:2f:56:c5:09:b5:1f:32:ad:5c:36:d7: bb:de:1b:bb:ac:44:0f:50:f9:04:d2:7c:e4:0e:fd: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:83:AF:6E:CA:5A:54:53:7B:F9:B4:BD:7E:2C:38:2D:79:AE:6F:68 X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:19:03:bb:e6:d1:71:d7:8e:ba:42:70:f9:91:47:96:6b:d5: f6:c9:06:ca:5a:83:4d:44:7a:a6:6d:85:81:13:5e:8d:84:72: 9e:4c:b7:fc:88:d3:e0:b8:a3:bf:47:60:d2:f1:71:aa:1e:ca: 84:af:db:ab:da:0f:f8:3a:62:0f:8d:cc:11:b5:33:c5:73:e1: 87:dc:20:bc:5a:d1:bc:a0:61:56:18:e8:48:78:22:24:e3:10: ba:8b:7b:46:39:ec:46:5e:36:60:dc:1d:93:a0:63:9a:c1:22: 1e:eb:a2:9e:dc:dd:31:ea:ee:dd:20:b0:ff:e1:69:63:bd:a1: da:27:ef:1a:0a:61:b6:72:95:c0:2e:1b:05:0d:a1:bd:0a:d8: 25:ff:fc:b3:42:ad:7d:e6:a5:d0:e6:88:6e:0b:f0:cc:5f:d1: 01:f4:3c:32:16:7b:4b:cd:5d:81:2a:86:b4:78:c4:8f:cb:f5: e3:f1:b5:d1:13:e9:93:92:2d:1b:0a:28:bd:0f:35:37:0b:bb: 51:39:5a:c6:dc:29:e0:25:d2:2d:1a:41:92:a7:52:17:b4:41: 3c:05:17:54:70:e0:ff:20:f0:07:48:67:a9:68:2c:ed:e3:5b: 57:5d:11:02:76:52:08:26:4a:80:56:91:07:e6:62:39:d3:c0: 5d:d5:d1:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUelgO7SfZ2ihFWNPqE43SkLl6iUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTA4MDYwNjM2MDBaFw0yNTA4MDkwOTU4MDBaMDMxMTAvBgNV BAMTKDk3ODNBRjZFQ0E1QTU0NTM3QkY5QjRCRDdFMkMzODJENzlBRTZGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRlO9Dv9TirnduI7fR58GRMhf bk94xDuuLa35VCz50P0R+Z3Rfz4Lo1XYXjwSDWAD2dMq8tLMDyktCl9iy3EZer53 qYz6Zfr1TJ8LH5n0NkJ86jIqmVwvf2WsO3sYbsRSJtvDX1d78Yoktsg/0YZ8VKoJ yZ1qLYINAXTSTpBzJnNt/GRsv5p1Nh7soNT7OPh8KH8P1F+k89S2SA2sTI2dpE0c 13lVayhNAuucsief9F0ZCBGnXjDd9qWLC5MQcSkU4UdJeBDrMEGMfpKIRcmE9BAB UWqy0slY0FO5jsVmlp9B2MQvVsUJtR8yrVw217veG7usRA9Q+QTSfOQO/X+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl4OvbspaVFN7+bS9fiw4LXmub2gwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsZA7vm0XHXjrpCcPmRR5Zr1fbJBspag01E eqZthYETXo2Ecp5Mt/yI0+C4o79HYNLxcaoeyoSv26vaD/g6Yg+NzBG1M8Vz4Yfc ILxa0bygYVYY6Eh4IiTjELqLe0Y57EZeNmDcHZOgY5rBIh7rop7c3THq7t0gsP/h aWO9odon7xoKYbZylcAuGwUNob0K2CX//LNCrX3mpdDmiG4L8Mxf0QH0PDIWe0vN XYEqhrR4xI/L9ePxtdET6ZOSLRsKKL0PNTcLu1E5WsbcKeAl0i0aQZKnUhe0QTwF F1Rw4P8g8AdIZ6loLO3jW1ddEQJ2UggmSoBWkQfmYjnTwF3V0bU= -----END CERTIFICATE-----Generated at Thu Aug 7 04:31:19 2025 by rpki-client