$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: SyAAcKlQVBuG3qDXJideyTcRTihflw9JWEEMTnCx+78= Subject key identifier: 34:02:2D:D3:38:94:A3:32:F9:27:17:F1:09:99:C1:DC:9C:1A:22:26 Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 0128B58E683027E3998C8CC5BA03BC65FFD9D7F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:38:29 +0000 Manifest this update: Tue 28 Jul 2026 17:33:29 +0000 Manifest next update: Wed 29 Jul 2026 21:21:29 +0000 Files and hashes: 1: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 2: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 3: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 4: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 5: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) 6: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 7: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: 0qKk0h0hFZtuQDOcMnKuQXCXxBbNN6afgFHDDclCv7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:28:b5:8e:68:30:27:e3:99:8c:8c:c5:ba:03:bc:65:ff:d9:d7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Jul 28 17:33:29 2026 GMT Not After : Jul 29 21:21:29 2026 GMT Subject: CN=34022DD33894A332F92717F10999C1DC9C1A2226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:05:be:66:c0:01:75:d8:bb:7c:4f:d8:99: 51:cd:49:27:ac:b7:87:87:d9:37:fd:28:22:c8:b5: e6:6d:3e:75:77:1e:a7:de:fd:f3:d7:20:2b:47:06: c5:77:eb:41:28:58:51:f0:14:17:c5:05:47:e8:a9: f7:63:e5:69:f4:12:b6:09:91:16:bb:99:a6:74:19: 21:c4:b4:9e:11:97:90:3a:0a:12:76:f4:a4:96:d9: 99:9a:9a:e0:76:e6:a7:34:9b:4e:f9:70:6d:12:3e: 2d:d9:45:b2:37:d7:70:0a:d4:e0:d7:5c:33:1d:0a: fe:0e:2d:29:24:ee:6c:6c:df:78:f5:13:c0:92:1b: 27:2c:0b:01:57:ea:6a:ee:a3:95:de:45:94:87:5e: 20:76:bd:f8:8e:1c:f1:5a:30:9d:1d:eb:19:b7:f7: ea:28:e3:c4:5f:a9:47:fd:2f:61:20:ce:81:ae:49: 86:bb:f8:d7:e6:39:8a:e4:0d:85:3c:86:40:3f:09: fb:bf:59:73:7f:2a:c0:73:46:38:dc:69:47:94:6e: 78:a4:36:1d:e7:0b:b7:7f:32:9b:91:b2:5e:33:47: 16:32:a5:79:67:f8:b3:75:41:83:27:4a:b9:fe:5b: 5d:ac:8e:56:ab:12:72:a2:01:a8:57:f2:55:f8:f2: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:02:2D:D3:38:94:A3:32:F9:27:17:F1:09:99:C1:DC:9C:1A:22:26 X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:7c:0f:45:80:ee:e7:aa:4b:42:5f:e9:8b:02:9b:7d:9a:c9: f8:b8:66:23:e9:50:39:7c:68:55:9b:8a:2d:00:90:31:bf:1c: e1:95:be:dd:eb:e3:05:be:36:53:e1:2f:35:05:53:60:09:53: 4d:4a:e2:c1:7d:00:f2:61:17:c9:c2:6c:7f:85:7f:20:af:38: 05:98:a0:99:0a:77:6e:f8:68:9a:8b:c1:52:44:d7:03:fe:90: c2:cf:cb:10:42:22:c7:3d:34:13:77:96:32:9d:6f:08:6f:27: 65:76:24:ed:1d:db:32:05:86:05:21:d3:00:52:e3:0d:92:b7: a2:08:65:53:61:32:8c:19:b7:58:a1:6d:78:30:0a:2b:e4:8f: 80:95:28:f6:9e:7a:f3:15:db:4a:50:d6:39:f5:41:a0:5b:92: 9a:af:1c:04:d0:d0:4a:ce:1b:95:5e:68:6a:ee:93:3b:33:5f: 13:96:49:dd:56:c5:ad:4d:64:c0:1b:21:98:1b:8f:30:aa:f5: 88:28:d7:f0:e3:4a:d3:86:74:ea:12:15:d5:08:61:77:e5:63: a4:f6:3a:8a:44:35:22:ed:de:a7:70:d3:e9:bf:2f:46:cb:70: 31:d0:78:6b:8a:4f:35:f2:d9:22:92:dd:34:88:9f:07:56:0d: 8e:5a:08:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASi1jmgwJ+OZjIzFugO8Zf/Z1/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA3MjgxNzMzMjlaFw0yNjA3MjkyMTIxMjlaMDMxMTAvBgNV BAMTKDM0MDIyREQzMzg5NEEzMzJGOTI3MTdGMTA5OTlDMURDOUMxQTIyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfwW+ZsABddi7fE/YmVHNSSes t4eH2Tf9KCLIteZtPnV3Hqfe/fPXICtHBsV360EoWFHwFBfFBUfoqfdj5Wn0ErYJ kRa7maZ0GSHEtJ4Rl5A6ChJ29KSW2ZmamuB25qc0m075cG0SPi3ZRbI313AK1ODX XDMdCv4OLSkk7mxs33j1E8CSGycsCwFX6mruo5XeRZSHXiB2vfiOHPFaMJ0d6xm3 9+oo48RfqUf9L2EgzoGuSYa7+NfmOYrkDYU8hkA/Cfu/WXN/KsBzRjjcaUeUbnik Nh3nC7d/MpuRsl4zRxYypXln+LN1QYMnSrn+W12sjlarEnKiAahX8lX48ttDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNAIt0ziUozL5JxfxCZnB3JwaIiYwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALR8D0WA7ueqS0Jf6YsCm32ayfi4ZiPpUDl8 aFWbii0AkDG/HOGVvt3r4wW+NlPhLzUFU2AJU01K4sF9APJhF8nCbH+FfyCvOAWY oJkKd274aJqLwVJE1wP+kMLPyxBCIsc9NBN3ljKdbwhvJ2V2JO0d2zIFhgUh0wBS 4w2St6IIZVNhMowZt1ihbXgwCivkj4CVKPaeevMV20pQ1jn1QaBbkpqvHATQ0ErO G5VeaGrukzszXxOWSd1Wxa1NZMAbIZgbjzCq9Ygo1/DjStOGdOoSFdUIYXflY6T2 OopENSLt3qdw0+m/L0bLcDHQeGuKTzXy2SKS3TSInwdWDY5aCHg= -----END CERTIFICATE-----Generated at Wed Jul 29 03:51:18 2026 by rpki-client