$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft File: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft (raw, json) Hash identifier: 7dxh9sSiXlHE4TBJj4sZhAtNMUXEpW4WXPncNsLgKGQ= Subject key identifier: 2F:F0:FC:52:77:6B:9A:30:95:CE:66:4C:51:36:75:42:0F:D5:40:FE Authority key identifier: 24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 Certificate issuer: /CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Certificate serial: 1A9E78A2479ED7A6041CBCD920C367A50089DE0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft Manifest number: C5 Signing time: Thu 24 Sep 2026 09:01:54 +0000 Manifest this update: Thu 24 Sep 2026 08:56:54 +0000 Manifest next update: Fri 25 Sep 2026 10:26:54 +0000 Files and hashes: 1: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl (hash: GFvdWuwiSe3Wv41oDj85C/bBlZxujY4ccvEQ5fcfvYk=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: fCOFQpy4x/crI+WC5jvfSD6t0+AQC6KYZU58O4qsuz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9e:78:a2:47:9e:d7:a6:04:1c:bc:d9:20:c3:67:a5:00:89:de:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Validity Not Before: Sep 24 08:56:54 2026 GMT Not After : Sep 25 10:26:54 2026 GMT Subject: CN=2FF0FC52776B9A3095CE664C513675420FD540FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:a2:0b:d9:61:9e:4d:41:e8:60:7c:bc:71: 81:6d:6f:e7:ba:3f:ad:16:49:77:fa:ae:a1:97:ec: 6a:ba:ea:8a:1d:eb:36:f8:26:7e:08:4e:33:75:5a: d0:4d:a1:36:49:c8:02:04:b2:cc:65:9e:d8:79:a6: 56:80:a8:91:6a:03:b5:99:62:81:ea:3f:6d:a2:be: b4:a6:ec:87:47:ad:33:85:d0:0f:2f:d8:52:a7:14: cf:7e:49:83:a2:15:f9:16:f4:66:ba:94:3f:52:df: cc:7a:34:4c:72:a0:48:59:bb:83:52:5d:9d:aa:ac: 55:3c:45:31:ed:55:1c:39:56:47:ff:71:5d:29:02: 9f:29:04:82:7b:4b:4c:4f:b5:32:1b:24:01:51:37: b7:51:75:72:ed:bd:6a:c4:b7:3d:f9:e2:63:a3:ca: 22:d3:77:59:4f:48:52:91:0f:99:8e:5d:bf:0a:3d: 7d:e8:90:30:27:64:50:54:74:e5:e7:d7:c3:2d:c2: f1:f5:5e:0c:1a:52:02:74:c3:40:55:9b:8d:6c:b7: c2:ed:82:95:1a:7d:3f:27:53:6a:5e:d7:f1:74:e9: a5:35:4c:64:ed:9a:21:c3:c3:c5:f8:87:d6:b1:09: ee:aa:9b:1b:fc:51:03:13:f7:e3:00:5f:01:c8:fb: 7d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F0:FC:52:77:6B:9A:30:95:CE:66:4C:51:36:75:42:0F:D5:40:FE X509v3 Authority Key Identifier: keyid:24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e2:4c:fa:0d:c1:55:4f:ee:24:d6:68:c9:31:fa:19:70:d3: d1:7c:98:2e:ad:28:48:b2:a5:25:be:b0:5c:42:f8:0f:7f:9c: de:77:b9:2f:6f:db:88:ba:78:66:71:97:11:5b:7f:83:33:43: 6e:11:22:18:f5:2d:be:a8:a3:36:14:7d:72:8b:0a:0b:f1:26: d8:93:b2:86:6e:09:35:3e:fe:82:58:c1:30:9f:2a:da:4f:63: 5e:5d:b4:c7:af:ca:b0:92:e7:b0:e4:d6:c2:43:3f:42:d3:1a: 60:55:dc:14:20:77:be:69:26:2a:c7:3c:b1:05:92:81:8f:f4: aa:ea:1d:9a:46:e5:5f:85:43:50:ab:8d:09:46:2d:21:82:60: 87:88:b7:d2:4c:5f:09:7e:c2:fb:aa:a4:6b:3c:8d:b8:db:74: 2d:5a:65:1d:41:1f:5f:c8:23:85:38:70:7b:47:34:a7:16:4a: 74:04:76:f5:3d:94:71:d5:4a:92:2d:53:95:81:7a:65:6e:94: 1c:d2:92:1f:ff:45:da:11:32:f7:de:d1:a3:5a:34:1d:ec:a3: 9b:3a:4e:21:6e:49:2d:1b:d8:79:ec:c2:8b:16:8c:6c:f3:8d: 63:ba:c6:ee:bf:c6:36:48:6e:97:37:21:b4:43:25:8a:69:43: b6:f8:0b:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGp54okee16YEHLzZIMNnpQCJ3gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2 M0JDNkI0ODAeFw0yNjA5MjQwODU2NTRaFw0yNjA5MjUxMDI2NTRaMDMxMTAvBgNV BAMTKDJGRjBGQzUyNzc2QjlBMzA5NUNFNjY0QzUxMzY3NTQyMEZENTQwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmKIL2WGeTUHoYHy8cYFtb+e6 P60WSXf6rqGX7Gq66ood6zb4Jn4ITjN1WtBNoTZJyAIEssxlnth5plaAqJFqA7WZ YoHqP22ivrSm7IdHrTOF0A8v2FKnFM9+SYOiFfkW9Ga6lD9S38x6NExyoEhZu4NS XZ2qrFU8RTHtVRw5Vkf/cV0pAp8pBIJ7S0xPtTIbJAFRN7dRdXLtvWrEtz354mOj yiLTd1lPSFKRD5mOXb8KPX3okDAnZFBUdOXn18MtwvH1XgwaUgJ0w0BVm41st8Lt gpUafT8nU2pe1/F06aU1TGTtmiHDw8X4h9axCe6qmxv8UQMT9+MAXwHI+303AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL/D8UndrmjCVzmZMUTZ1Qg/VQP4wHwYDVR0j BBgwFoAUJNdUmLSFqllirYw6AFSOymO8a0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MTFiMDUtYzU4YS00MjA2LWI3YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThC NDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2M0JDNkI0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNEQ3NTQ5OEI0ODVBQTU5NjJBRDhDM0EwMDU0OEVDQTYzQkM2 QjQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhF Q0E2M0JDNkI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbiTPoNwVVP7iTWaMkx+hlw09F8mC6tKEiy pSW+sFxC+A9/nN53uS9v24i6eGZxlxFbf4MzQ24RIhj1Lb6oozYUfXKLCgvxJtiT soZuCTU+/oJYwTCfKtpPY15dtMevyrCS57Dk1sJDP0LTGmBV3BQgd75pJirHPLEF koGP9KrqHZpG5V+FQ1CrjQlGLSGCYIeIt9JMXwl+wvuqpGs8jbjbdC1aZR1BH1/I I4U4cHtHNKcWSnQEdvU9lHHVSpItU5WBemVulBzSkh//RdoRMvfe0aNaNB3so5s6 TiFuSS0b2HnswosWjGzzjWO6xu6/xjZIbpc3IbRDJYppQ7b4Cy0= -----END CERTIFICATE-----Generated at Fri Sep 25 00:17:29 2026 by rpki-client