$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: AmwuR0lbFi2vZ+MTonsKqbEzjVhs+80foWwuSNEmY9c= Subject key identifier: 56:6A:2D:34:8D:9E:86:2F:7E:FC:05:BE:A4:EA:02:45:9F:EE:B3:2A Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 52B7F414DAFCC469016DA797433AD7AF4F52488A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 0212 Signing time: Tue 17 Jun 2025 01:41:00 +0000 Manifest this update: Tue 17 Jun 2025 01:36:00 +0000 Manifest next update: Fri 20 Jun 2025 06:52:00 +0000 Files and hashes: 1: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: jzAqzS+UM0D1OlBXnCUhpQdP3zDL5sXG1VXuhoHVU1Y=) 2: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=) 3: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: LFVDYKFuIaGyfn97HiWEFIs+l+cDBXTG3ML+8O8tS64=) 4: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: sh5TYY+kSsxR1pmF4DA1+vUfc+JlTOxylxIbw3b89Eo=) 5: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: MqPsWsjfl+dvyk5ktsSY4CI6tIF3C/cx5WnXAN8LB/s=) 6: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: 2GRWO9/Q0MpgVDiM1R341bc3uq7zSgQtLGeuDYAy19g=) 7: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: to8Mghx8SjANkLNg9sqdQL62e7GUGvJB7Oj3zo1cw3Q=) 8: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: +gGFIbmz6MNLj5Vm2IvAwgGsv19fCAUik3uGncQgwzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b7:f4:14:da:fc:c4:69:01:6d:a7:97:43:3a:d7:af:4f:52:48:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Jun 17 01:36:00 2025 GMT Not After : Jun 20 06:52:00 2025 GMT Subject: CN=566A2D348D9E862F7EFC05BEA4EA02459FEEB32A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:9b:5a:6d:90:a1:dd:c6:2f:09:e8:f7:01: 81:5a:3a:65:64:cc:f1:f0:89:07:c2:69:34:23:36: 37:00:1f:a1:36:60:b0:35:bc:5f:28:46:f3:37:38: 92:00:30:7d:df:dd:37:99:b2:d3:7b:30:cb:36:b0: 01:ce:7f:f2:36:1a:58:f9:4e:73:6e:c9:66:e1:47: be:24:80:d9:c0:cf:bf:bd:1b:37:ac:88:45:99:fb: 92:05:bb:a4:49:11:a4:cf:32:1b:a0:dd:26:32:5e: f6:06:df:8a:a3:ce:e5:bc:17:03:9e:55:7f:5c:b9: f9:d3:2b:98:67:f3:b8:28:3c:31:f3:83:3a:9e:9a: 50:46:33:f2:00:88:9e:cc:62:b6:13:b1:4a:98:d6: 9f:ef:f4:54:a5:df:3e:b8:ce:2c:5c:8f:3a:a9:df: cf:d2:80:c5:28:1b:a9:13:57:01:47:ae:c2:62:84: 00:dd:47:d7:ee:75:63:ce:bf:85:a7:f7:ec:8a:98: 47:45:c2:3e:82:3d:e5:0f:4b:cb:6f:82:9e:07:6e: 90:75:1e:21:1a:ae:02:b0:2c:07:ed:f6:bd:8f:11: 28:92:6a:ce:cc:08:ca:78:a5:f1:8e:bd:d6:d2:ff: 65:cb:08:f4:0b:c5:2a:60:c0:07:fe:b4:57:4b:da: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6A:2D:34:8D:9E:86:2F:7E:FC:05:BE:A4:EA:02:45:9F:EE:B3:2A X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c2:99:02:c7:69:82:80:d5:27:84:7a:47:fb:77:0f:a2:3e: ba:a3:bc:52:84:1a:62:34:e0:03:ab:a4:0c:ce:41:34:c8:92: 2d:dc:c6:b1:d0:73:20:0f:9b:15:00:94:10:47:38:8c:14:cf: 06:67:b4:a7:0a:37:8b:f4:e3:e1:2f:b3:1f:77:20:8f:5e:0d: 3e:09:c6:a4:36:52:2c:e5:66:bd:68:8a:29:3b:3d:82:dd:00: 9a:dd:c5:11:dd:27:33:dc:99:c1:f0:5d:78:fb:5b:07:43:91: 0c:9b:d7:bc:11:00:9b:fe:62:b5:62:30:8d:3d:46:45:1b:bf: d4:bd:d5:c7:4a:e3:cc:b7:a1:55:21:cc:e6:d5:1f:d1:c4:68: 07:17:30:40:b4:d4:85:41:e8:8e:fa:15:c6:04:ec:93:91:d0: 49:8f:0d:4b:ec:86:15:d7:84:bb:e2:d6:b1:94:3f:ec:a2:9f: bc:90:56:ab:b3:04:3e:fe:be:55:40:11:a5:93:65:ce:73:9e: 2c:49:fd:06:d1:85:fd:3b:91:88:24:58:23:9c:e8:56:14:19: f0:54:7a:2e:e9:04:d6:17:94:ff:d1:9a:43:0e:fc:bb:42:45: 82:12:14:a8:9a:e6:ff:11:db:82:2a:f5:04:77:8d:7c:bf:bb: 82:fa:41:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrf0FNr8xGkBbaeXQzrXr09SSIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTA2MTcwMTM2MDBaFw0yNTA2MjAwNjUyMDBaMDMxMTAvBgNV BAMTKDU2NkEyRDM0OEQ5RTg2MkY3RUZDMDVCRUE0RUEwMjQ1OUZFRUIzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDptabZCh3cYvCej3AYFaOmVk zPHwiQfCaTQjNjcAH6E2YLA1vF8oRvM3OJIAMH3f3TeZstN7MMs2sAHOf/I2Glj5 TnNuyWbhR74kgNnAz7+9GzesiEWZ+5IFu6RJEaTPMhug3SYyXvYG34qjzuW8FwOe VX9cufnTK5hn87goPDHzgzqemlBGM/IAiJ7MYrYTsUqY1p/v9FSl3z64zixcjzqp 38/SgMUoG6kTVwFHrsJihADdR9fudWPOv4Wn9+yKmEdFwj6CPeUPS8tvgp4HbpB1 HiEargKwLAft9r2PESiSas7MCMp4pfGOvdbS/2XLCPQLxSpgwAf+tFdL2pELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVmotNI2ehi9+/AW+pOoCRZ/usyowHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPCmQLHaYKA1SeEekf7dw+iPrqjvFKEGmI0 4AOrpAzOQTTIki3cxrHQcyAPmxUAlBBHOIwUzwZntKcKN4v04+Evsx93II9eDT4J xqQ2UizlZr1oiik7PYLdAJrdxRHdJzPcmcHwXXj7WwdDkQyb17wRAJv+YrViMI09 RkUbv9S91cdK48y3oVUhzObVH9HEaAcXMEC01IVB6I76FcYE7JOR0EmPDUvshhXX hLvi1rGUP+yin7yQVquzBD7+vlVAEaWTZc5znixJ/QbRhf07kYgkWCOc6FYUGfBU ei7pBNYXlP/RmkMO/LtCRYISFKia5v8R24Iq9QR3jXy/u4L6QRs= -----END CERTIFICATE-----Generated at Tue Jun 17 14:41:55 2025 by rpki-client