$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft File: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json) Hash identifier: VC8DtYghV6T09DVJXS31Ttf10vohVUp1TaVptfqUwyc= Subject key identifier: AF:46:FC:41:23:F5:28:56:D2:49:5F:DC:F5:1F:4B:25:25:C3:84:7A Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA Certificate issuer: /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Certificate serial: 5019B709C01F84CAE43C00E441DB020E7F16AF61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:49:59 +0000 Manifest this update: Tue 22 Sep 2026 06:44:59 +0000 Manifest next update: Wed 23 Sep 2026 07:54:59 +0000 Files and hashes: 1: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: XYGrp9ML9iv69m+O1gyVQIppawI60QCHXJVffGx1dOE=) 2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=) 3: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:19:b7:09:c0:1f:84:ca:e4:3c:00:e4:41:db:02:0e:7f:16:af:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Validity Not Before: Sep 22 06:44:59 2026 GMT Not After : Sep 23 07:54:59 2026 GMT Subject: CN=AF46FC4123F52856D2495FDCF51F4B2525C3847A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:32:12:76:44:c9:b0:38:d0:71:25:25:d6: f2:a9:7a:2b:be:86:b0:e9:c4:31:8f:80:fe:2a:2d: 42:38:a7:33:c0:8c:a0:db:3c:51:ab:99:21:03:46: af:8d:98:c1:76:d7:86:da:49:a6:5a:57:3e:4e:1e: a7:fb:5e:0c:96:11:f3:4f:aa:ef:71:35:d8:60:da: c4:c2:7d:4d:a7:bd:2a:16:54:af:d7:1f:1c:30:15: 79:18:06:fa:47:f1:73:fb:9d:14:63:bd:95:8f:b6: 1c:56:e2:65:1c:93:ec:85:03:af:73:ea:eb:29:eb: 2c:8a:25:cd:ca:30:c4:0a:00:f4:4c:4b:c8:6f:ee: 9c:f6:31:3c:6e:c4:a7:e3:2d:84:1a:05:c8:d1:8e: 1e:5c:64:78:bf:9e:ff:3f:e3:98:89:81:ae:e7:79: f4:fc:f9:9f:63:9a:24:eb:00:8d:5f:54:07:4a:d9: c0:9a:9f:ac:16:d0:94:00:78:29:81:5f:ab:48:46: cd:a1:9e:7a:02:37:25:c2:23:ad:c8:44:de:6b:06: 07:2a:3e:fe:ba:03:f2:8e:2d:eb:96:19:40:8a:d2: f3:e5:f0:64:c7:52:f6:99:a2:3d:0b:2c:b6:6e:d8: c6:9a:96:cf:ef:aa:42:15:91:8a:a2:db:1c:e7:5c: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:FC:41:23:F5:28:56:D2:49:5F:DC:F5:1F:4B:25:25:C3:84:7A X509v3 Authority Key Identifier: keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:33:50:6c:3b:02:a8:97:3f:e3:e5:af:92:34:a0:12:29:45: 10:02:23:aa:00:32:f6:ec:f2:49:d0:22:56:6c:68:8f:8e:34: f0:1b:88:0b:62:a5:ec:cc:d0:2f:d2:42:f7:87:0f:ea:0e:78: e7:f2:8d:93:04:8c:c0:8d:e9:72:4e:c8:4a:fe:17:cd:5f:50: d1:fa:08:aa:fd:52:9c:43:26:10:5a:31:d7:19:bd:06:13:26: e5:9b:d1:a8:1e:c8:d2:8c:9d:98:b5:b7:2d:91:1f:b5:a3:72: 72:92:c3:e9:cd:3b:66:9d:71:77:7a:76:31:c0:7a:4d:b4:bc: a5:2d:a5:26:a3:84:cd:0c:2f:fb:43:76:45:e3:cc:0d:3a:d6: 42:38:6e:a0:06:77:f6:29:92:e3:73:da:56:df:fa:eb:c9:6d: 49:65:d8:18:33:0f:a2:25:3e:09:67:dc:89:c5:97:62:18:56: 50:75:3c:1c:ab:0a:7b:fb:b7:a9:08:20:c0:1c:4a:3d:05:f1: 6c:a0:43:a1:b6:fd:d3:78:17:c1:71:54:3b:de:61:60:cb:98: 49:70:6b:b6:0b:b0:9f:03:be:ed:a8:7d:d6:5c:dd:54:2f:ac: e1:c9:5b:2d:59:47:6a:ef:9e:93:bc:18:da:d3:ab:a2:ee:b3: 51:b9:24:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBm3CcAfhMrkPADkQdsCDn8Wr2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3 Njk4MjhDQTAeFw0yNjA5MjIwNjQ0NTlaFw0yNjA5MjMwNzU0NTlaMDMxMTAvBgNV BAMTKEFGNDZGQzQxMjNGNTI4NTZEMjQ5NUZEQ0Y1MUY0QjI1MjVDMzg0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAzISdkTJsDjQcSUl1vKpeiu+ hrDpxDGPgP4qLUI4pzPAjKDbPFGrmSEDRq+NmMF214baSaZaVz5OHqf7XgyWEfNP qu9xNdhg2sTCfU2nvSoWVK/XHxwwFXkYBvpH8XP7nRRjvZWPthxW4mUck+yFA69z 6usp6yyKJc3KMMQKAPRMS8hv7pz2MTxuxKfjLYQaBcjRjh5cZHi/nv8/45iJga7n efT8+Z9jmiTrAI1fVAdK2cCan6wW0JQAeCmBX6tIRs2hnnoCNyXCI63IRN5rBgcq Pv66A/KOLeuWGUCK0vPl8GTHUvaZoj0LLLZu2Maals/vqkIVkYqi2xznXFMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr0b8QSP1KFbSSV/c9R9LJSXDhHowHwYDVR0j BBgwFoAUwkuo16upoK64HSDmtVEhXnaYKMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3MDgzYWItMjcwYS00YjBhLThlNTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdB QkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3Njk4MjhDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjRCQThEN0FCQTlBMEFFQjgxRDIwRTZCNTUxMjE1RTc2OTgy OENBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIx NUU3Njk4MjhDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkzUGw7AqiXP+Plr5I0oBIpRRACI6oAMvbs 8knQIlZsaI+ONPAbiAtipezM0C/SQveHD+oOeOfyjZMEjMCN6XJOyEr+F81fUNH6 CKr9UpxDJhBaMdcZvQYTJuWb0ageyNKMnZi1ty2RH7WjcnKSw+nNO2adcXd6djHA ek20vKUtpSajhM0ML/tDdkXjzA061kI4bqAGd/YpkuNz2lbf+uvJbUll2BgzD6Il Pgln3InFl2IYVlB1PByrCnv7t6kIIMAcSj0F8WygQ6G2/dN4F8FxVDveYWDLmElw a7YLsJ8Dvu2ofdZc3VQvrOHJWy1ZR2rvnpO8GNrTq6Lus1G5JGI= -----END CERTIFICATE-----Generated at Tue Sep 22 10:30:04 2026 by rpki-client