$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: 3VmVxEKRXkCZoXcius2bMvjpLROd1Jit/6NqSswxPcA= Subject key identifier: D3:65:F3:18:57:B4:00:39:8B:97:D5:64:2C:08:B5:93:22:BB:71:66 Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 33CA5B11063633B83D9AB45B4FCE660E287B00B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 07:12:45 +0000 Manifest this update: Sat 13 Jun 2026 07:07:45 +0000 Manifest next update: Sun 14 Jun 2026 09:39:45 +0000 Files and hashes: 1: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 2: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 3: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 4: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: 2qyxe6hbLGJJQn6waRrAcqa3yoj2w8IN/3HX6WZGW1g=) 5: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 6: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 7: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ca:5b:11:06:36:33:b8:3d:9a:b4:5b:4f:ce:66:0e:28:7b:00:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Jun 13 07:07:45 2026 GMT Not After : Jun 14 09:39:45 2026 GMT Subject: CN=D365F31857B400398B97D5642C08B59322BB7166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:1f:27:9c:a0:85:53:34:b5:1b:21:da:ed: e1:39:1f:ed:54:14:05:ed:69:a3:3b:c7:34:77:bf: ef:9c:24:15:b8:7c:1d:87:f8:5c:c4:9e:b1:83:a3: 2f:dc:3f:45:bc:94:c5:b5:da:e3:91:3c:f4:cc:c1: 51:0f:2e:53:72:c3:e7:a6:fd:f6:9c:9f:31:04:d6: 44:99:72:53:ec:23:4b:67:50:0d:5f:c9:41:84:3a: d2:76:eb:f0:1d:53:a0:7e:eb:17:76:5f:cf:e9:1d: ef:1b:ef:c6:87:32:67:bb:8a:31:36:93:f0:6c:39: ef:de:3f:ee:18:40:c0:74:9a:b6:cb:16:3c:4a:11: 09:f8:63:dd:53:83:79:d5:5c:69:0b:a9:90:f8:80: 6b:75:54:8a:b8:98:6b:12:84:09:39:08:ee:15:f8: 72:44:c4:1f:56:8e:e8:d6:61:b3:55:cc:dd:7a:30: b6:b7:a1:e2:c8:8c:b3:42:20:49:67:50:be:9d:a4: c5:a9:bb:bf:26:33:38:27:ce:91:09:e5:39:54:e8: 34:50:bd:ae:60:ad:2f:c1:f0:a4:c9:d1:6b:96:7c: 70:40:ec:ad:41:e6:7d:fa:35:8b:45:09:fc:d2:bf: 74:89:42:5c:4a:ad:f7:2e:af:d1:92:8f:59:73:b2: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:65:F3:18:57:B4:00:39:8B:97:D5:64:2C:08:B5:93:22:BB:71:66 X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d1:f0:ff:ea:ab:33:13:5b:2e:07:ba:d0:bb:82:92:fc:7a: da:af:a6:d4:ba:b5:79:e5:31:6f:65:83:99:fe:1d:58:19:59: 73:8e:84:65:03:b2:3e:9f:e5:3e:f7:a1:14:06:45:73:32:a0: 9c:52:14:65:aa:b9:ae:8b:af:c7:28:ed:74:5d:fe:92:31:d7: 9f:7b:7f:47:6c:8f:59:3f:96:06:e0:b0:6a:9c:eb:22:35:6f: bd:92:5b:fb:4f:a8:3e:27:af:d9:f3:d4:4c:1c:29:e4:36:f5: 50:6e:14:1b:18:0b:9b:82:53:53:cb:d8:4d:e8:16:3f:e9:5b: 68:7d:ac:31:cc:ee:20:ee:49:5c:c1:33:42:2d:79:50:2c:93: 09:6d:86:3d:28:cf:38:53:8e:0f:c8:16:41:9a:05:d2:f1:3e: cf:5e:07:f9:cc:16:57:33:d0:c4:45:7c:73:25:e2:08:03:59: 5f:78:13:df:50:14:c2:8a:1c:62:f3:12:35:d8:8f:70:a6:01: 3d:07:fd:c6:d9:cd:3a:97:01:6b:e9:69:22:88:5f:11:56:2d: 43:bc:1e:22:85:d2:dd:70:35:16:94:27:e0:18:c5:17:c1:ed: 01:23:76:91:2a:c4:51:3d:c8:35:38:f8:fb:d1:04:16:2c:04: e4:8a:b7:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8pbEQY2M7g9mrRbT85mDih7ALcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA2MTMwNzA3NDVaFw0yNjA2MTQwOTM5NDVaMDMxMTAvBgNV BAMTKEQzNjVGMzE4NTdCNDAwMzk4Qjk3RDU2NDJDMDhCNTkzMjJCQjcxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dB8nnKCFUzS1GyHa7eE5H+1U FAXtaaM7xzR3v++cJBW4fB2H+FzEnrGDoy/cP0W8lMW12uORPPTMwVEPLlNyw+em /facnzEE1kSZclPsI0tnUA1fyUGEOtJ26/AdU6B+6xd2X8/pHe8b78aHMme7ijE2 k/BsOe/eP+4YQMB0mrbLFjxKEQn4Y91Tg3nVXGkLqZD4gGt1VIq4mGsShAk5CO4V +HJExB9WjujWYbNVzN16MLa3oeLIjLNCIElnUL6dpMWpu78mMzgnzpEJ5TlU6DRQ va5grS/B8KTJ0WuWfHBA7K1B5n36NYtFCfzSv3SJQlxKrfcur9GSj1lzsiiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU02XzGFe0ADmLl9VkLAi1kyK7cWYwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrR8P/qqzMTWy4HutC7gpL8etqvptS6tXnl MW9lg5n+HVgZWXOOhGUDsj6f5T73oRQGRXMyoJxSFGWqua6Lr8co7XRd/pIx1597 f0dsj1k/lgbgsGqc6yI1b72SW/tPqD4nr9nz1EwcKeQ29VBuFBsYC5uCU1PL2E3o Fj/pW2h9rDHM7iDuSVzBM0IteVAskwlthj0ozzhTjg/IFkGaBdLxPs9eB/nMFlcz 0MRFfHMl4ggDWV94E99QFMKKHGLzEjXYj3CmAT0H/cbZzTqXAWvpaSKIXxFWLUO8 HiKF0t1wNRaUJ+AYxRfB7QEjdpEqxFE9yDU4+PvRBBYsBOSKt7w= -----END CERTIFICATE-----Generated at Sat Jun 13 14:19:25 2026 by rpki-client