$ rpki-client -vvvf rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft File: 24707B538B36DD7E0788B2B83162969B177EE4B9.mft (raw, json) Hash identifier: qEZCfa1m+7Xd0HPk6SvxdOMtWMhTcXU2il/wasVgooU= Subject key identifier: 83:0E:C5:4C:D5:00:79:65:8A:C0:43:F3:F9:03:E3:7E:09:06:5C:81 Authority key identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9 Certificate issuer: /CN=24707B538B36DD7E0788B2B83162969B177EE4B9 Certificate serial: 4D38A7F08284E1EAA94B185A32A62E6442ED0715 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft Manifest number: BD Signing time: Sun 20 Sep 2026 16:52:44 +0000 Manifest this update: Sun 20 Sep 2026 16:47:44 +0000 Manifest next update: Mon 21 Sep 2026 18:28:44 +0000 Files and hashes: 1: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: a2G2EWwhE4yFuhZ5jYn9ulCDBjyOhc2EYKslZtlGFac=) 2: 24707B538B36DD7E0788B2B83162969B177EE4B9.crl (hash: CZPY/DeqSG6NKbWHl7R7p7MD+yd6njAHwhyDiY7zcXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:38:a7:f0:82:84:e1:ea:a9:4b:18:5a:32:a6:2e:64:42:ed:07:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24707B538B36DD7E0788B2B83162969B177EE4B9 Validity Not Before: Sep 20 16:47:44 2026 GMT Not After : Sep 21 18:28:44 2026 GMT Subject: CN=830EC54CD50079658AC043F3F903E37E09065C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:2d:2e:b5:70:26:b4:12:90:69:e4:a3:f7: 3a:54:7f:1e:82:ea:09:7e:f8:e3:c0:6c:2e:32:ab: 93:39:10:d3:bb:80:b8:eb:e9:b4:5b:f8:98:29:85: 83:18:eb:de:50:88:2b:21:3e:d8:c6:9c:8e:71:c1: 2e:a2:52:9b:ad:43:cb:5b:81:39:8b:6d:09:18:c2: b2:be:46:70:70:63:43:b4:5c:0d:89:a8:6a:69:a7: cf:5a:df:1d:67:97:87:b2:d1:c3:d9:56:94:dd:c4: cf:7a:60:f8:2a:32:01:b8:ec:7f:03:f7:1d:a2:e6: 91:e1:08:a8:18:54:62:60:4d:10:da:46:cf:73:6f: 59:8c:99:1b:20:f9:2a:64:ce:1f:0e:8b:cf:21:bf: 11:97:8c:b9:d4:00:90:e7:43:4a:2e:8e:6f:40:07: 8e:83:c0:bf:38:f4:a4:2f:e6:86:59:28:5f:bf:bd: 10:c7:d5:af:7e:0b:17:ea:65:a7:ba:71:10:c8:ee: e4:d4:05:8f:8d:bf:b0:e8:90:86:57:51:d5:f7:12: 8c:07:aa:aa:12:83:f4:87:bc:c5:f9:b4:f4:40:75: 51:d5:71:f2:50:80:1b:5d:4e:a3:68:c6:d1:79:41: 92:94:95:d1:e0:60:88:83:c3:ff:c2:bb:96:d7:6a: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0E:C5:4C:D5:00:79:65:8A:C0:43:F3:F9:03:E3:7E:09:06:5C:81 X509v3 Authority Key Identifier: keyid:24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6b:b6:7d:7f:69:92:91:3e:66:5e:3d:49:1f:6e:5b:92:38: ef:c4:a5:39:43:76:2d:7f:eb:b5:8f:ff:68:a4:aa:0e:07:3f: b9:cf:b9:e1:ed:d7:db:1e:91:22:02:0f:c5:1c:5a:81:0c:2f: a8:a6:78:88:3a:97:3f:93:5e:08:19:84:23:f9:94:20:45:3b: ca:93:d5:a2:67:8a:80:07:81:33:0e:02:73:06:99:fe:72:d2: 0f:e5:29:00:c6:4f:50:2f:3a:3c:f8:42:64:81:eb:0e:46:e6: 64:35:5a:58:88:61:d6:eb:d1:4e:7d:86:65:f9:a5:7f:28:86: 4f:ac:c4:f2:53:9e:b8:dd:b1:e2:be:d4:52:ba:cb:c9:97:be: 9b:8f:5d:f1:9b:9b:06:46:92:f5:ad:2f:8d:4a:82:c7:1a:b6: b4:12:92:ab:14:f7:a8:17:50:04:c2:46:46:5e:67:57:05:0d: 10:db:b2:ff:b1:f7:0f:e4:50:2b:95:19:d6:5c:72:85:10:27: 49:79:65:11:ec:b0:24:c4:c6:97:f6:dc:eb:7a:47:b7:6d:7e: 1c:ec:32:f5:0e:6c:3e:f0:17:2b:13:b3:e1:b0:4f:35:bd:29: 64:65:e0:d0:0b:98:f6:09:67:42:6d:1a:d6:f0:93:52:d0:bd: 89:5a:2d:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTin8IKE4eqpSxhaMqYuZELtBxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3MDdCNTM4QjM2REQ3RTA3ODhCMkI4MzE2Mjk2OUIx NzdFRTRCOTAeFw0yNjA5MjAxNjQ3NDRaFw0yNjA5MjExODI4NDRaMDMxMTAvBgNV BAMTKDgzMEVDNTRDRDUwMDc5NjU4QUMwNDNGM0Y5MDNFMzdFMDkwNjVDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqi0utXAmtBKQaeSj9zpUfx6C 6gl++OPAbC4yq5M5ENO7gLjr6bRb+JgphYMY695QiCshPtjGnI5xwS6iUputQ8tb gTmLbQkYwrK+RnBwY0O0XA2JqGppp89a3x1nl4ey0cPZVpTdxM96YPgqMgG47H8D 9x2i5pHhCKgYVGJgTRDaRs9zb1mMmRsg+Spkzh8Oi88hvxGXjLnUAJDnQ0oujm9A B46DwL849KQv5oZZKF+/vRDH1a9+CxfqZae6cRDI7uTUBY+Nv7DokIZXUdX3EowH qqoSg/SHvMX5tPRAdVHVcfJQgBtdTqNoxtF5QZKUldHgYIiDw//Cu5bXamGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgw7FTNUAeWWKwEPz+QPjfgkGXIEwHwYDVR0j BBgwFoAUJHB7U4s23X4HiLK4MWKWmxd+5LkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY2MjQ3ZjktMWVlYy00OTAxLWJhNDItOWRmMjY0MjRmNWI4LzAvMjQ3MDdCNTM4 QjM2REQ3RTA3ODhCMkI4MzE2Mjk2OUIxNzdFRTRCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDcwN0I1MzhCMzZERDdFMDc4OEIyQjgzMTYyOTY5QjE3N0VF NEI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY2MjQ3ZjktMWVlYy00OTAxLWJh NDItOWRmMjY0MjRmNWI4LzAvMjQ3MDdCNTM4QjM2REQ3RTA3ODhCMkI4MzE2Mjk2 OUIxNzdFRTRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdrtn1/aZKRPmZePUkfbluSOO/EpTlDdi1/ 67WP/2ikqg4HP7nPueHt19sekSICD8UcWoEML6imeIg6lz+TXggZhCP5lCBFO8qT 1aJnioAHgTMOAnMGmf5y0g/lKQDGT1AvOjz4QmSB6w5G5mQ1WliIYdbr0U59hmX5 pX8ohk+sxPJTnrjdseK+1FK6y8mXvpuPXfGbmwZGkvWtL41KgscatrQSkqsU96gX UATCRkZeZ1cFDRDbsv+x9w/kUCuVGdZccoUQJ0l5ZRHssCTExpf23Ot6R7dtfhzs MvUObD7wFysTs+GwTzW9KWRl4NALmPYJZ0JtGtbwk1LQvYlaLdY= -----END CERTIFICATE-----Generated at Sun Sep 20 21:13:38 2026 by rpki-client