$ rpki-client -vvf rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft File: F24F92FEE32EF3FD89B142D403B664674EC45F20.mft (raw, json) Hash identifier: jHkSnt8als6dBCXHZhSnlH5mFmJIToUsGuhDeLAt17U= Subject key identifier: B9:73:66:56:6D:6B:30:55:79:4D:93:B2:1D:39:B1:65:68:3E:C0:8F Authority key identifier: F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 Certificate issuer: /CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Certificate serial: 6CDF41A359E35B7BB5DBA187405BDCEC11681F60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:18:59 +0000 Manifest this update: Tue 16 Jun 2026 16:13:59 +0000 Manifest next update: Wed 17 Jun 2026 17:19:59 +0000 Files and hashes: 1: F24F92FEE32EF3FD89B142D403B664674EC45F20.crl (hash: b6zEw6XToBpiPFtV4ZgkE2sBaYVnlH1QHIkfAsl/D5w=) 2: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: bxuJHdBQ29ujm6ZiEr/payUgkQDlp15FaGJqOvION0Y=) 3: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: Fngj46n5ns0XL17tIcObVP8YgC9Tz2lNna69VH4sqhk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:df:41:a3:59:e3:5b:7b:b5:db:a1:87:40:5b:dc:ec:11:68:1f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Validity Not Before: Jun 16 16:13:59 2026 GMT Not After : Jun 17 17:19:59 2026 GMT Subject: CN=B97366566D6B3055794D93B21D39B165683EC08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:80:63:68:93:6b:22:7d:bf:d4:5f:31:85: 73:38:ea:11:97:7d:08:56:3c:e9:ae:ca:0c:d9:d6: 34:53:e7:2e:71:b1:20:30:52:43:05:0a:8c:38:43: 82:c0:cf:5f:eb:44:c3:9b:9b:be:64:d9:19:9c:9f: c9:9a:62:d7:41:b2:aa:b6:5d:44:a7:71:37:22:df: 1e:d3:8e:d1:8c:7d:f8:4b:c4:21:7c:c7:c4:48:42: cd:9d:cf:67:f1:79:af:35:2e:bb:50:2e:7c:09:50: a6:18:f9:a4:ba:fa:e4:23:84:a0:ca:fc:fd:fa:3b: 1f:e3:86:e4:62:47:b5:3f:bb:3e:e6:43:03:19:87: e7:98:f5:0c:ce:6c:41:60:a0:f3:e8:8b:68:27:4e: b6:05:44:00:22:fe:c7:61:28:cf:4b:cc:25:8e:88: b9:e4:7c:64:02:30:ee:a4:e6:3b:14:90:3e:a8:ec: 6f:df:b0:e7:8c:89:48:ad:b8:27:49:d7:d4:1c:89: 95:3e:05:b7:3d:44:77:8e:6d:56:26:60:42:41:ae: e5:42:2c:61:c9:69:57:5d:5b:cd:6c:4f:fe:9b:b9: 09:74:c5:45:53:7b:ec:3a:63:6c:09:18:ab:66:84: d0:d7:5d:c2:2e:9c:23:8e:be:e0:9c:82:01:c1:e9: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:66:56:6D:6B:30:55:79:4D:93:B2:1D:39:B1:65:68:3E:C0:8F X509v3 Authority Key Identifier: keyid:F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e3:b0:41:98:d7:a2:b0:d4:7f:3b:59:6b:09:47:f2:b0:22: 5b:df:a1:02:ff:bb:ac:4a:f1:7e:1e:b5:60:a2:e3:64:83:92: f5:fb:4b:40:b8:53:19:3a:ff:0e:ba:7c:be:48:33:c6:50:04: b6:95:c0:94:58:8e:56:a1:63:73:ca:25:be:c6:e2:d4:5f:d3: b3:83:f8:62:40:b6:00:8e:4c:fb:4a:25:03:64:fd:80:41:42: aa:4a:30:e5:e8:38:ba:18:aa:f6:35:30:3d:d3:94:1e:9b:8f: 8d:ae:67:5b:65:09:a5:74:b0:df:ac:80:01:4b:05:43:ce:16: a3:cd:dd:8e:8e:ca:fe:dd:37:5a:95:0f:d5:33:14:ff:48:8c: 69:ab:32:9a:6c:eb:2d:82:aa:c1:a9:ba:88:fc:6c:d0:2e:e7: 5d:2b:30:48:11:27:48:9a:1b:c3:06:9d:f6:6c:0b:be:83:21: 30:6c:16:c3:58:03:3d:55:f5:74:47:aa:06:f1:c9:63:88:1f: 44:f4:fb:95:6d:69:da:e7:cf:c5:6b:d2:f5:55:4b:7d:96:b3: 50:8e:a4:e0:dd:b3:2c:f1:6e:f9:a5:42:17:93:2e:57:4d:ac: d6:ec:4a:00:ce:27:a8:3d:3e:78:98:72:ed:da:13:20:c9:61: e8:8f:55:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbN9Bo1njW3u126GHQFvc7BFoH2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0 RUM0NUYyMDAeFw0yNjA2MTYxNjEzNTlaFw0yNjA2MTcxNzE5NTlaMDMxMTAvBgNV BAMTKEI5NzM2NjU2NkQ2QjMwNTU3OTREOTNCMjFEMzlCMTY1NjgzRUMwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifYBjaJNrIn2/1F8xhXM46hGX fQhWPOmuygzZ1jRT5y5xsSAwUkMFCow4Q4LAz1/rRMObm75k2Rmcn8maYtdBsqq2 XUSncTci3x7TjtGMffhLxCF8x8RIQs2dz2fxea81LrtQLnwJUKYY+aS6+uQjhKDK /P36Ox/jhuRiR7U/uz7mQwMZh+eY9QzObEFgoPPoi2gnTrYFRAAi/sdhKM9LzCWO iLnkfGQCMO6k5jsUkD6o7G/fsOeMiUituCdJ19QciZU+Bbc9RHeObVYmYEJBruVC LGHJaVddW81sT/6buQl0xUVTe+w6Y2wJGKtmhNDXXcIunCOOvuCcggHB6ZDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuXNmVm1rMFV5TZOyHTmxZWg+wI8wHwYDVR0j BBgwFoAU8k+S/uMu8/2JsULUA7ZkZ07EXyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg3ODhhOGItNTQxYi00Y2JmLWJhYjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVF MzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0RUM0NUYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjRGOTJGRUUzMkVGM0ZEODlCMTQyRDQwM0I2NjQ2NzRFQzQ1 RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0 Njc0RUM0NUYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjjsEGY16Kw1H87WWsJR/KwIlvfoQL/u6xK 8X4etWCi42SDkvX7S0C4Uxk6/w66fL5IM8ZQBLaVwJRYjlahY3PKJb7G4tRf07OD +GJAtgCOTPtKJQNk/YBBQqpKMOXoOLoYqvY1MD3TlB6bj42uZ1tlCaV0sN+sgAFL BUPOFqPN3Y6Oyv7dN1qVD9UzFP9IjGmrMpps6y2CqsGpuoj8bNAu510rMEgRJ0ia G8MGnfZsC76DITBsFsNYAz1V9XRHqgbxyWOIH0T0+5Vtadrnz8Vr0vVVS32Ws1CO pODdsyzxbvmlQheTLldNrNbsSgDOJ6g9PniYcu3aEyDJYeiPVTE= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:57 2026 by rpki-client