$ rpki-client -vvvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft File: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft (raw, json) Hash identifier: JRomCWCTrK77AKEe2D6NozHqx9I111q6YI8Dm5tBPO4= Subject key identifier: B8:10:3F:59:8E:1A:90:CA:04:E6:C3:E8:23:41:7B:D5:69:72:8E:4B Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 Certificate issuer: /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Certificate serial: 7E9D100FF1F45F34457E7619ED5C37C10AB1FA2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:16:28 +0000 Manifest this update: Mon 21 Sep 2026 12:11:28 +0000 Manifest next update: Tue 22 Sep 2026 15:15:28 +0000 Files and hashes: 1: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl (hash: piLv9qlcCJr+WAjwgQKJnVSNAknF5nnON2472ilGxH8=) 2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: 8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9d:10:0f:f1:f4:5f:34:45:7e:76:19:ed:5c:37:c1:0a:b1:fa:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Validity Not Before: Sep 21 12:11:28 2026 GMT Not After : Sep 22 15:15:28 2026 GMT Subject: CN=B8103F598E1A90CA04E6C3E823417BD569728E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:2d:86:ab:93:66:94:48:4d:34:f8:c4:e4: 02:e7:41:9f:32:10:27:f5:f4:c3:c5:6b:fa:41:79: e0:a8:4f:d5:37:41:92:fb:3f:dc:4d:ba:f7:c8:7e: 1e:75:d0:a2:06:2b:6f:18:9f:32:db:ec:57:1e:33: ae:68:bc:af:22:e0:35:f7:c7:b5:45:ff:f8:3a:6a: ef:ff:fe:7a:a8:5a:c5:b9:24:f0:0a:85:2b:99:47: 01:30:a2:4b:a2:e8:e4:6b:65:af:86:36:82:43:ab: 8b:46:f5:b7:66:d0:42:ec:84:ad:50:f8:3b:ab:68: a8:fb:d6:ae:28:2a:49:5b:8d:84:56:df:93:9b:d8: 8d:ac:52:81:46:37:8f:d8:74:6a:d4:a6:37:77:be: 7f:d8:35:0c:71:5f:4b:06:54:eb:4a:4c:86:8f:75: 0c:8c:95:c1:14:7c:57:d1:f3:b7:26:44:0a:d8:6c: f9:ce:f2:fe:ef:e4:81:bb:7e:ec:12:48:a3:b4:fc: ba:73:42:ce:6d:46:0a:58:cf:82:ab:d1:45:32:e8: 68:3d:59:0d:a0:a3:e9:e7:a0:1c:b6:b0:43:03:7a: ea:d2:aa:7e:37:ca:05:da:4b:19:0c:d6:6a:34:e0: 73:62:c0:17:a8:9e:86:ed:f0:5c:d6:06:12:dd:35: 99:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:10:3F:59:8E:1A:90:CA:04:E6:C3:E8:23:41:7B:D5:69:72:8E:4B X509v3 Authority Key Identifier: keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:15:bc:62:c7:27:6e:01:78:b0:7e:07:7f:8c:4b:27:4d:e0: cd:12:6f:6c:60:9f:13:31:42:0a:10:05:3c:1d:d2:a2:32:26: 6b:29:64:ba:7b:f8:f2:58:62:18:10:81:c3:33:0b:4e:4b:07: ba:e7:fb:9f:7f:3d:36:62:09:f6:30:04:9f:ad:d8:09:00:60: 97:44:a8:79:16:4f:4d:b2:d9:70:96:85:7d:87:d9:de:93:9f: c0:d6:32:1a:5e:85:61:0c:91:60:0c:04:78:cd:76:c3:b2:b6: 23:2c:63:4b:3a:10:22:13:0e:f9:16:65:11:ab:40:a4:aa:0a: a1:96:bd:13:19:7f:c3:c3:cf:21:8f:63:d2:9b:4d:bb:3a:c6: 06:77:4e:98:e9:43:64:0e:6e:92:5d:e0:fe:3b:4d:db:0f:ff: 74:8c:2e:f6:a2:f4:5c:11:73:ae:75:f6:5d:74:23:ed:4b:8f: c6:7f:62:e0:87:e7:df:4a:85:a1:73:53:fb:ab:db:c5:64:b2: 52:af:e3:39:c4:d8:a9:90:22:b0:86:ec:16:44:e8:4e:06:23: a6:ba:71:69:1a:6b:9a:af:68:4f:eb:07:d3:0e:a6:b6:5a:04: fc:06:20:10:2a:1f:6f:ed:76:25:92:e4:34:68:a4:67:18:c4: dd:a9:8a:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfp0QD/H0XzRFfnYZ7Vw3wQqx+iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3 M0QwODFDMzAeFw0yNjA5MjExMjExMjhaFw0yNjA5MjIxNTE1MjhaMDMxMTAvBgNV BAMTKEI4MTAzRjU5OEUxQTkwQ0EwNEU2QzNFODIzNDE3QkQ1Njk3MjhFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQC2Gq5NmlEhNNPjE5ALnQZ8y ECf19MPFa/pBeeCoT9U3QZL7P9xNuvfIfh510KIGK28YnzLb7FceM65ovK8i4DX3 x7VF//g6au///nqoWsW5JPAKhSuZRwEwokui6ORrZa+GNoJDq4tG9bdm0ELshK1Q +DuraKj71q4oKklbjYRW35Ob2I2sUoFGN4/YdGrUpjd3vn/YNQxxX0sGVOtKTIaP dQyMlcEUfFfR87cmRArYbPnO8v7v5IG7fuwSSKO0/LpzQs5tRgpYz4Kr0UUy6Gg9 WQ2go+nnoBy2sEMDeurSqn43ygXaSxkM1mo04HNiwBeonobt8FzWBhLdNZn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBA/WY4akMoE5sPoI0F71WlyjkswHwYDVR0j BBgwFoAUDSTooLhfdqIivL+N5OsfW3PQgcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTc0ZGM1ZTEtMWQ1NS00OWQyLTkzZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBC ODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3M0QwODFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI0RThBMEI4NUY3NkEyMjJCQ0JGOERFNEVCMUY1QjczRDA4 MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFG NUI3M0QwODFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkVvGLHJ24BeLB+B3+MSydN4M0Sb2xgnxMx QgoQBTwd0qIyJmspZLp7+PJYYhgQgcMzC05LB7rn+59/PTZiCfYwBJ+t2AkAYJdE qHkWT02y2XCWhX2H2d6Tn8DWMhpehWEMkWAMBHjNdsOytiMsY0s6ECITDvkWZRGr QKSqCqGWvRMZf8PDzyGPY9KbTbs6xgZ3TpjpQ2QObpJd4P47TdsP/3SMLvai9FwR c6519l10I+1Lj8Z/YuCH599KhaFzU/ur28VkslKv4znE2KmQIrCG7BZE6E4GI6a6 cWkaa5qvaE/rB9MOprZaBPwGIBAqH2/tdiWS5DRopGcYxN2piio= -----END CERTIFICATE-----Generated at Tue Sep 22 08:53:57 2026 by rpki-client