$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json) Hash identifier: 6kk2wndUHx7wQ3OCiORrNtUloeHaq8GbDKQ1DxBDSeg= Subject key identifier: D5:99:49:19:AF:A9:90:46:BE:47:64:23:BC:6F:F6:48:C5:BF:77:71 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 079DAF025B463973E92E9F1E8870FBF95C9D703A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft Manifest number: 029C Signing time: Thu 16 Apr 2026 02:51:09 +0000 Manifest this update: Thu 16 Apr 2026 02:46:09 +0000 Manifest next update: Sun 19 Apr 2026 11:57:09 +0000 Files and hashes: 1: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: JsI09r/ZNnEPFeCt6WLBPTMEkxJRdrp4JE3T6ebsTQM=) 2: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=) 3: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=) 4: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=) 5: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=) 6: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=) 7: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: vsJMDMbHuk4BQVXUYATxUkzxc4/M16ByyMmh1/2RI/w=) 8: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9d:af:02:5b:46:39:73:e9:2e:9f:1e:88:70:fb:f9:5c:9d:70:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Apr 16 02:46:09 2026 GMT Not After : Apr 19 11:57:09 2026 GMT Subject: CN=D5994919AFA99046BE476423BC6FF648C5BF7771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:35:8c:7c:0f:5d:93:b9:b2:03:7e:34:02: b0:20:6a:1b:fd:03:c6:6c:80:46:05:0e:d3:c6:0b: 10:07:1e:e2:1e:22:99:8b:a9:10:93:46:36:3d:4a: 1b:2a:84:f8:19:3a:f7:4f:e0:a7:c6:93:a0:e6:53: 67:1c:c5:51:fe:68:f3:e4:d8:6b:66:7c:e3:8e:52: ba:f1:ad:fb:48:1d:af:fc:e6:5b:0b:02:3e:10:52: a6:52:90:74:24:d6:ec:f9:45:cc:ca:1d:b4:cd:e4: 13:bf:34:37:57:de:37:96:f3:a7:c6:cc:c3:be:17: 1d:b4:79:75:2f:8b:a1:ca:4d:95:02:5a:ea:26:96: a5:13:24:2d:13:31:96:c1:bc:f7:0b:8e:2f:b7:f7: a4:7a:e8:f4:d0:98:e5:08:6e:81:54:0c:2e:09:15: 17:f2:40:e0:73:29:a9:3e:c1:62:02:03:5d:83:4d: b7:dd:8d:c6:07:ce:46:6d:7a:03:5e:b0:27:6a:09: 25:37:af:db:b8:fc:0b:86:ed:10:5f:6e:b6:7d:45: 87:1e:60:4f:ad:ed:2e:73:41:3c:2f:42:7b:3a:73: 97:9e:5b:88:54:a4:d8:38:ea:7f:17:d3:75:1f:fd: 9b:79:b7:f1:9f:4e:f4:1e:c0:ad:f5:3e:d3:2e:61: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:99:49:19:AF:A9:90:46:BE:47:64:23:BC:6F:F6:48:C5:BF:77:71 X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:53:ec:37:7e:20:4a:df:7b:33:31:a3:1c:b0:4b:fb:cd:5a: 31:af:18:30:5d:31:4c:74:c3:e5:57:b1:dd:b3:11:9b:25:a6: e4:af:7a:9d:c3:e2:dc:61:3f:07:41:f6:4c:c6:05:35:c6:1b: d0:73:eb:10:ef:90:eb:60:32:1d:03:60:44:72:ad:d3:da:0f: 26:42:bb:82:b6:13:0a:1c:eb:30:7e:71:8d:20:a9:7c:e6:44: e7:9f:c8:b3:04:24:32:e7:38:8d:90:c7:c7:a5:63:76:ed:09: 31:a8:f2:ed:6b:bc:f6:05:0e:34:12:04:b5:af:b1:35:0d:66: 57:83:56:43:47:9d:61:f1:db:ef:c3:6b:16:b2:31:32:ee:a8: 96:c3:1f:f5:f9:0c:06:0d:6c:7e:02:fd:cb:37:50:4a:22:4f: e9:5a:9f:fc:7b:46:b3:82:e0:6f:9d:00:bc:d1:7e:ac:4f:47: 9a:f7:1f:65:9b:fa:8d:21:84:49:2d:72:e8:54:18:ac:be:f2: bb:32:d1:a3:66:f7:38:29:6f:98:77:d3:c5:5d:08:34:53:0d: 83:da:3c:7b:65:b2:fe:cb:8c:67:6b:ed:d6:63:44:56:f2:82: a0:f5:4c:32:1b:0a:f6:f8:37:c7:f7:84:26:77:30:e8:e3:31: 90:c9:5b:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB52vAltGOXPpLp8eiHD7+VydcDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNjA0MTYwMjQ2MDlaFw0yNjA0MTkxMTU3MDlaMDMxMTAvBgNV BAMTKEQ1OTk0OTE5QUZBOTkwNDZCRTQ3NjQyM0JDNkZGNjQ4QzVCRjc3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZZDWMfA9dk7myA340ArAgahv9 A8ZsgEYFDtPGCxAHHuIeIpmLqRCTRjY9ShsqhPgZOvdP4KfGk6DmU2ccxVH+aPPk 2GtmfOOOUrrxrftIHa/85lsLAj4QUqZSkHQk1uz5RczKHbTN5BO/NDdX3jeW86fG zMO+Fx20eXUvi6HKTZUCWuomlqUTJC0TMZbBvPcLji+396R66PTQmOUIboFUDC4J FRfyQOBzKak+wWICA12DTbfdjcYHzkZtegNesCdqCSU3r9u4/AuG7RBfbrZ9RYce YE+t7S5zQTwvQns6c5eeW4hUpNg46n8X03Uf/Zt5t/GfTvQewK31PtMuYajDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ZlJGa+pkEa+R2QjvG/2SMW/d3EwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdT7Dd+IErfezMxoxywS/vNWjGvGDBdMUx0 w+VXsd2zEZslpuSvep3D4txhPwdB9kzGBTXGG9Bz6xDvkOtgMh0DYERyrdPaDyZC u4K2Ewoc6zB+cY0gqXzmROefyLMEJDLnOI2Qx8elY3btCTGo8u1rvPYFDjQSBLWv sTUNZleDVkNHnWHx2+/DaxayMTLuqJbDH/X5DAYNbH4C/cs3UEoiT+lan/x7RrOC 4G+dALzRfqxPR5r3H2Wb+o0hhEktcuhUGKy+8rsy0aNm9zgpb5h308VdCDRTDYPa PHtlsv7LjGdr7dZjRFbygqD1TDIbCvb4N8f3hCZ3MOjjMZDJW68= -----END CERTIFICATE-----Generated at Fri Apr 17 22:19:42 2026 by rpki-client