$ rpki-client -vvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft File: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft (raw, json) Hash identifier: bc+Qyi4685AFUFrgMD3DXoC7Ee0WBYYa2fQR8peYAZw= Subject key identifier: 54:5C:EF:13:81:2F:6C:85:1B:61:7D:99:BE:30:A6:46:1E:93:77:70 Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 Certificate issuer: /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Certificate serial: 63074BB4EF515DBC20110CF45A6D6C9FD10CD0E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:47:15 +0000 Manifest this update: Wed 17 Jun 2026 07:42:15 +0000 Manifest next update: Thu 18 Jun 2026 08:59:15 +0000 Files and hashes: 1: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl (hash: zL1GLoaorEmrXMkYVUl/cTWF1RGRmXdfB2qACWj4FI4=) 2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: 8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:07:4b:b4:ef:51:5d:bc:20:11:0c:f4:5a:6d:6c:9f:d1:0c:d0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Validity Not Before: Jun 17 07:42:15 2026 GMT Not After : Jun 18 08:59:15 2026 GMT Subject: CN=545CEF13812F6C851B617D99BE30A6461E937770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:1f:15:3b:85:42:29:0a:97:02:3e:6b:3a: 8a:ac:5d:f0:e1:70:de:aa:c3:74:ce:e7:7b:2a:c3: bd:14:83:92:1a:39:c4:e2:69:b2:2c:db:61:2d:08: 73:d3:19:45:88:5c:68:6e:af:35:6d:09:ef:8a:0d: f0:8e:4e:6b:68:93:c2:0d:06:8b:0c:2a:b8:4a:13: 72:bb:55:a3:fc:40:2b:9e:b9:a8:71:cc:6b:43:c3: d3:0c:24:b6:d0:f2:e6:54:ca:1a:ce:1b:7b:fc:f5: cf:1e:84:c1:59:e3:a8:95:6c:a9:d0:ca:32:f4:54: a8:ec:ba:cf:e4:73:32:e5:c1:5d:ef:29:22:76:c6: 6b:5d:7b:47:41:14:69:10:a7:84:f9:74:5e:e2:ad: 02:20:4c:51:2c:73:f3:a8:b4:2f:ee:74:26:c4:82: 1e:3d:f1:1b:9e:d1:0f:c5:f5:da:88:bc:6b:49:29: b0:a6:1a:a4:ad:67:ed:32:d1:c6:a2:73:bb:6a:96: c9:9c:61:4c:38:42:93:97:e8:d1:4b:90:7d:5f:cd: 82:d1:57:07:42:7e:02:a3:82:95:19:40:f5:ad:af: 51:dd:c3:10:3a:42:68:89:42:1f:c8:2e:1d:5c:eb: 1c:2a:00:29:b1:76:5c:77:02:0a:39:2c:5d:48:ae: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5C:EF:13:81:2F:6C:85:1B:61:7D:99:BE:30:A6:46:1E:93:77:70 X509v3 Authority Key Identifier: keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:08:93:79:2f:95:ab:6c:15:5c:f6:ca:68:be:a2:62:61:9d: 2f:8b:20:25:58:fe:c9:48:0c:4e:4b:ca:79:d3:a5:ca:4b:42: 4c:e1:c4:53:f3:fc:bb:77:e0:ba:c9:96:a4:06:7c:25:a6:09: 2d:0f:f4:a6:85:eb:61:8e:e1:08:19:ff:57:67:39:9f:ca:d9: ba:b2:e8:44:36:83:d0:88:f9:09:4e:0a:fb:e6:b0:fd:a5:44: e4:79:7f:cf:4a:bd:6c:5e:52:ec:91:f7:bd:0f:bb:2e:05:96: 3b:ec:05:bb:7a:b8:ab:91:0f:05:1c:ff:cd:81:75:fb:9b:10: 95:80:f2:42:14:53:35:ac:a0:01:7e:6e:87:df:ab:de:69:ac: b6:61:d6:cd:18:e8:c7:e1:e9:9a:a1:8d:06:b1:42:98:f7:6e: e2:a7:e9:5f:2b:08:5e:a9:2e:0e:7b:63:9b:ab:58:f6:07:97: cd:94:d1:c3:1c:74:2f:af:9a:9c:80:06:0c:de:89:63:f9:25: ab:e5:bd:fc:0d:cc:4e:ce:38:3c:34:ca:8e:e8:b6:8c:59:78: fa:3e:d8:4b:d4:2a:b2:fe:28:cf:7f:20:bc:c6:d9:15:29:fe: 8d:e4:07:3f:74:49:8d:53:0a:b4:af:f3:a1:b0:27:38:01:51: 20:a5:45:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYwdLtO9RXbwgEQz0Wm1sn9EM0OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3 M0QwODFDMzAeFw0yNjA2MTcwNzQyMTVaFw0yNjA2MTgwODU5MTVaMDMxMTAvBgNV BAMTKDU0NUNFRjEzODEyRjZDODUxQjYxN0Q5OUJFMzBBNjQ2MUU5Mzc3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCB8VO4VCKQqXAj5rOoqsXfDh cN6qw3TO53sqw70Ug5IaOcTiabIs22EtCHPTGUWIXGhurzVtCe+KDfCOTmtok8IN BosMKrhKE3K7VaP8QCueuahxzGtDw9MMJLbQ8uZUyhrOG3v89c8ehMFZ46iVbKnQ yjL0VKjsus/kczLlwV3vKSJ2xmtde0dBFGkQp4T5dF7irQIgTFEsc/OotC/udCbE gh498Rue0Q/F9dqIvGtJKbCmGqStZ+0y0caic7tqlsmcYUw4QpOX6NFLkH1fzYLR VwdCfgKjgpUZQPWtr1HdwxA6QmiJQh/ILh1c6xwqACmxdlx3Ago5LF1Irtb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVFzvE4EvbIUbYX2ZvjCmRh6Td3AwHwYDVR0j BBgwFoAUDSTooLhfdqIivL+N5OsfW3PQgcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTc0ZGM1ZTEtMWQ1NS00OWQyLTkzZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBC ODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3M0QwODFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI0RThBMEI4NUY3NkEyMjJCQ0JGOERFNEVCMUY1QjczRDA4 MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFG NUI3M0QwODFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMIk3kvlatsFVz2ymi+omJhnS+LICVY/slI DE5LynnTpcpLQkzhxFPz/Lt34LrJlqQGfCWmCS0P9KaF62GO4QgZ/1dnOZ/K2bqy 6EQ2g9CI+QlOCvvmsP2lROR5f89KvWxeUuyR970Puy4FljvsBbt6uKuRDwUc/82B dfubEJWA8kIUUzWsoAF+boffq95prLZh1s0Y6Mfh6ZqhjQaxQpj3buKn6V8rCF6p Lg57Y5urWPYHl82U0cMcdC+vmpyABgzeiWP5JavlvfwNzE7OODw0yo7otoxZePo+ 2EvUKrL+KM9/ILzG2RUp/o3kBz90SY1TCrSv86GwJzgBUSClRQE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:56 2026 by rpki-client