$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: Jc9YXs2v1YmNBZRbLajeVOOeBK+EQ9WaiX7NUWscJr8= Subject key identifier: D7:F4:76:C6:51:2D:14:84:F7:D8:83:53:36:5E:C8:C4:29:9B:DF:ED Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 6705AD2B14FC0FBE363EEAD18C7CA23CB97BC5A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:28:18 +0000 Manifest this update: Mon 21 Sep 2026 01:23:18 +0000 Manifest next update: Tue 22 Sep 2026 03:06:18 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) 2: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) 3: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) 4: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: 6PufU8MNVRd99yS1kBZ+ZdXBUccsY8M1+7CIAwvKFIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:05:ad:2b:14:fc:0f:be:36:3e:ea:d1:8c:7c:a2:3c:b9:7b:c5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: Sep 21 01:23:18 2026 GMT Not After : Sep 22 03:06:18 2026 GMT Subject: CN=D7F476C6512D1484F7D88353365EC8C4299BDFED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0d:5c:b3:32:9f:37:d1:d9:6e:44:94:8c:50: 0f:ce:80:7d:90:84:21:cd:40:6f:4e:53:51:04:d4: a8:d3:82:35:28:de:94:dd:29:da:ea:44:6b:bf:15: 5a:d2:fb:83:bd:2e:bd:40:c8:ab:89:40:ec:c3:80: a8:90:ff:a1:c9:78:9b:9d:b9:3b:7a:44:de:a5:1d: 9c:fd:6c:a2:fe:ab:d0:38:86:01:ca:c9:be:69:66: dc:30:3e:3b:f9:25:00:41:b5:2a:87:b2:56:f3:d4: 80:29:a2:9a:db:22:5c:34:f7:00:1c:77:8c:02:6b: c6:6a:d2:f3:5c:ba:5b:4a:08:a4:9e:77:69:7f:2e: ff:66:8a:6a:34:73:4b:ee:12:f4:29:71:42:53:e8: 82:03:22:de:8d:e7:0f:2c:fa:70:5e:a0:d2:1a:3f: 4b:ac:ad:e7:f9:fc:13:62:2f:f3:ee:6e:e3:af:69: af:66:00:1f:94:90:46:6b:1f:90:14:20:99:7e:ec: e1:aa:9c:a4:88:17:d6:06:cd:2b:df:79:b6:91:c9: ac:80:d4:ad:9d:1b:28:37:8e:81:d3:b0:d4:cb:92: a0:0b:fe:8f:01:bd:7a:fb:d8:69:5f:5a:be:e5:c1: a8:74:53:53:60:ca:a3:dc:db:2a:dc:b8:58:55:53: 86:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F4:76:C6:51:2D:14:84:F7:D8:83:53:36:5E:C8:C4:29:9B:DF:ED X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a6:ac:85:ca:61:9a:a9:f8:1c:cf:7d:f7:3c:0b:b0:c0:a4: 5f:58:37:e1:d4:b8:70:ef:2c:38:f6:d1:ed:fd:72:e0:7f:7b: 1e:66:fc:4e:b6:1e:49:0b:a8:ee:65:e7:c7:78:48:9d:b1:d9: 66:c7:34:9c:1e:ae:9a:70:ef:63:8d:a7:d7:c9:d0:f3:7e:04: ba:57:80:5c:1f:e8:8f:67:de:13:a7:d7:fd:06:1d:24:30:c9: 7b:81:38:13:f3:df:03:17:6c:ee:2f:5d:5b:75:6c:76:22:dd: 07:4a:75:39:e9:b6:4b:83:1e:3c:4f:50:01:6f:15:6b:55:e9: f7:3c:7f:2c:f4:da:43:86:f7:14:b3:ed:dd:53:17:5e:47:ae: 2b:70:97:8f:51:e3:99:b1:9c:cb:4c:08:7c:51:d0:b9:b7:89: 51:b0:71:f3:88:d1:8f:b1:a0:b7:05:8d:fe:dd:20:de:5b:f4: f7:e7:e5:20:b0:c0:90:89:41:ef:31:e9:82:6e:aa:49:93:d6: e4:d0:b8:f3:a5:82:e0:c7:8b:0a:17:cc:8e:99:dc:5c:15:ec: cb:e3:97:eb:88:28:2f:70:90:9f:90:b3:85:53:f3:78:08:82: 28:fb:e9:3c:a0:c3:ee:6d:7d:61:ac:86:56:8d:05:19:70:eb: 0d:ea:7c:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwWtKxT8D742PurRjHyiPLl7xacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjA5MjEwMTIzMThaFw0yNjA5MjIwMzA2MThaMDMxMTAvBgNV BAMTKEQ3RjQ3NkM2NTEyRDE0ODRGN0Q4ODM1MzM2NUVDOEM0Mjk5QkRGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDVyzMp830dluRJSMUA/OgH2Q hCHNQG9OU1EE1KjTgjUo3pTdKdrqRGu/FVrS+4O9Lr1AyKuJQOzDgKiQ/6HJeJud uTt6RN6lHZz9bKL+q9A4hgHKyb5pZtwwPjv5JQBBtSqHslbz1IApoprbIlw09wAc d4wCa8Zq0vNcultKCKSed2l/Lv9mimo0c0vuEvQpcUJT6IIDIt6N5w8s+nBeoNIa P0usref5/BNiL/PubuOvaa9mAB+UkEZrH5AUIJl+7OGqnKSIF9YGzSvfebaRyayA 1K2dGyg3joHTsNTLkqAL/o8BvXr72GlfWr7lwah0U1NgyqPc2yrcuFhVU4bPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1/R2xlEtFIT32INTNl7IxCmb3+0wHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOmrIXKYZqp+BzPffc8C7DApF9YN+HUuHDv LDj20e39cuB/ex5m/E62HkkLqO5l58d4SJ2x2WbHNJwerppw72ONp9fJ0PN+BLpX gFwf6I9n3hOn1/0GHSQwyXuBOBPz3wMXbO4vXVt1bHYi3QdKdTnptkuDHjxPUAFv FWtV6fc8fyz02kOG9xSz7d1TF15Hritwl49R45mxnMtMCHxR0Lm3iVGwcfOI0Y+x oLcFjf7dIN5b9Pfn5SCwwJCJQe8x6YJuqkmT1uTQuPOlguDHiwoXzI6Z3FwV7Mvj l+uIKC9wkJ+Qs4VT83gIgij76Tygw+5tfWGshlaNBRlw6w3qfFo= -----END CERTIFICATE-----Generated at Mon Sep 21 09:35:35 2026 by rpki-client