$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: hA1Ve/O53vitK7l85YltBgV55+u51WPIHahbje0j9ts= Subject key identifier: B3:77:C5:31:2D:6A:F7:F0:37:70:63:A2:87:2B:6D:4B:E7:E0:45:75 Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 3B5E5D94565A3E3C0511EC5811D2186900DBF035 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: BF Signing time: Tue 22 Sep 2026 08:37:11 +0000 Manifest this update: Tue 22 Sep 2026 08:32:11 +0000 Manifest next update: Wed 23 Sep 2026 11:40:11 +0000 Files and hashes: 1: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 2: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: pjrfTbgIQqguZzViKKHcU7q0PCuSsTteG6fwIxXdbw4=) 3: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 4: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 5: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 6: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 7: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5e:5d:94:56:5a:3e:3c:05:11:ec:58:11:d2:18:69:00:db:f0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Sep 22 08:32:11 2026 GMT Not After : Sep 23 11:40:11 2026 GMT Subject: CN=B377C5312D6AF7F0377063A2872B6D4BE7E04575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:5a:c7:59:45:dc:9a:99:1f:5b:2a:f4:16: 19:6f:0a:3a:f2:25:b2:a0:ca:3b:21:33:57:f9:69: 54:ed:18:a5:74:33:e3:f9:f1:2a:0e:9a:8f:69:4a: 7d:2b:7e:9c:8b:23:19:98:07:97:c8:ef:6b:ec:99: b0:f5:4b:f1:b3:35:d0:d6:4b:2d:1f:ef:9d:ab:34: d7:21:c9:4d:c6:b1:ab:4d:88:0c:12:48:a1:14:bd: cb:d0:1e:d8:15:85:88:43:e5:ca:8f:b7:9e:6d:f9: ac:01:38:66:43:a3:af:b3:b9:c6:c9:a6:30:cb:e9: 8e:9a:c7:29:a1:ed:ec:3d:d2:ed:33:87:29:74:2c: 9e:4b:2f:ab:49:4a:ef:2d:e1:ac:e3:1a:3d:d0:5e: f5:4e:bd:c4:45:24:53:79:3a:c0:c3:f8:13:59:75: 43:f2:03:0b:ec:87:00:a1:03:07:f3:76:4d:77:e0: c8:3e:7c:db:34:9f:e1:66:9f:2c:b7:48:31:d7:20: c0:bf:4c:50:4e:d4:4f:48:6a:c5:a2:49:4a:84:ef: 21:e5:fd:88:27:db:d4:73:b2:5b:15:31:90:25:a2: fb:69:51:d6:8f:8f:55:a1:6f:37:60:f9:4b:87:3e: 0a:9e:15:0f:99:e6:cb:4d:90:7b:16:9c:6a:ee:26: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:77:C5:31:2D:6A:F7:F0:37:70:63:A2:87:2B:6D:4B:E7:E0:45:75 X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:01:87:0a:7c:26:16:f8:38:59:c7:06:06:36:71:b3:aa:54: 27:c4:2c:cc:59:1c:47:b7:87:65:25:58:8a:eb:6e:62:a1:9f: cb:27:44:b3:15:bd:c9:ba:65:d9:ae:33:05:3a:c7:fb:06:9a: 99:8c:95:c6:72:8d:1b:b2:8e:52:ef:e8:51:ee:28:8c:26:c6: e9:af:fc:8b:fb:f4:07:fe:6c:84:2e:48:4a:c1:ee:4a:07:e3: 83:00:9a:c5:e2:72:37:d1:e8:4d:a0:90:85:af:6c:9f:b8:82: 92:84:e8:37:81:2b:41:aa:67:ae:63:be:cf:7d:e6:1d:57:53: 96:c2:5b:c7:bd:c3:50:4a:e1:28:ed:79:89:56:c1:3b:3d:c2: ac:e7:c7:0f:f9:fa:2e:5a:bb:cf:16:56:0c:f2:31:ae:cf:80: 6c:b0:88:d3:75:5b:40:06:f6:30:b7:5a:28:03:88:71:c3:06: 82:d9:64:43:9d:0c:8c:f8:40:06:c1:08:13:4b:b2:5c:d7:7a: 7c:39:43:13:00:cd:f5:8a:c4:79:40:2d:69:1c:33:cc:09:ab: ae:47:ed:25:32:26:81:b1:69:21:20:d7:80:37:c3:cd:f8:00: 74:d2:e1:db:22:35:89:51:cf:a0:67:0e:16:be:31:3d:c4:ca: f1:02:42:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO15dlFZaPjwFEexYEdIYaQDb8DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA5MjIwODMyMTFaFw0yNjA5MjMxMTQwMTFaMDMxMTAvBgNV BAMTKEIzNzdDNTMxMkQ2QUY3RjAzNzcwNjNBMjg3MkI2RDRCRTdFMDQ1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAa1rHWUXcmpkfWyr0FhlvCjry JbKgyjshM1f5aVTtGKV0M+P58SoOmo9pSn0rfpyLIxmYB5fI72vsmbD1S/GzNdDW Sy0f752rNNchyU3GsatNiAwSSKEUvcvQHtgVhYhD5cqPt55t+awBOGZDo6+zucbJ pjDL6Y6axymh7ew90u0zhyl0LJ5LL6tJSu8t4azjGj3QXvVOvcRFJFN5OsDD+BNZ dUPyAwvshwChAwfzdk134Mg+fNs0n+Fmnyy3SDHXIMC/TFBO1E9IasWiSUqE7yHl /Ygn29RzslsVMZAlovtpUdaPj1Whbzdg+UuHPgqeFQ+Z5stNkHsWnGruJocdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs3fFMS1q9/A3cGOihyttS+fgRXUwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwBhwp8Jhb4OFnHBgY2cbOqVCfELMxZHEe3 h2UlWIrrbmKhn8snRLMVvcm6ZdmuMwU6x/sGmpmMlcZyjRuyjlLv6FHuKIwmxumv /Iv79Af+bIQuSErB7koH44MAmsXicjfR6E2gkIWvbJ+4gpKE6DeBK0GqZ65jvs99 5h1XU5bCW8e9w1BK4SjteYlWwTs9wqznxw/5+i5au88WVgzyMa7PgGywiNN1W0AG 9jC3WigDiHHDBoLZZEOdDIz4QAbBCBNLslzXenw5QxMAzfWKxHlALWkcM8wJq65H 7SUyJoGxaSEg14A3w834AHTS4dsiNYlRz6BnDha+MT3EyvECQtY= -----END CERTIFICATE-----Generated at Tue Sep 22 19:03:22 2026 by rpki-client