$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: yjYz+gIiSf2nn4F1gLkHZGWt11kZj3UkYBrKZ6LcdRM= Subject key identifier: 2B:77:38:69:4D:4A:33:BD:22:68:D5:B3:4C:48:83:E1:DB:C4:61:06 Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 7BAF1A8F4F81CB20D31E73FDC10AB03F15724C58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:27:56 +0000 Manifest this update: Tue 16 Jun 2026 15:22:56 +0000 Manifest next update: Wed 17 Jun 2026 18:32:56 +0000 Files and hashes: 1: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: Wvcd7rxgnDnpePTpsqdeOsHy4RoPOxcd80PrpqwmF64=) 2: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) 3: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) 4: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:af:1a:8f:4f:81:cb:20:d3:1e:73:fd:c1:0a:b0:3f:15:72:4c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: Jun 16 15:22:56 2026 GMT Not After : Jun 17 18:32:56 2026 GMT Subject: CN=2B7738694D4A33BD2268D5B34C4883E1DBC46106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:0c:40:d8:8a:fe:4e:9d:55:08:da:84:50: d9:70:d2:9d:dd:93:4d:0b:31:5f:34:82:10:11:e7: 48:5f:14:58:33:f7:e7:fa:4a:b1:12:af:11:3b:c1: 83:5c:71:d7:fe:fb:0f:0d:7f:4f:cd:d5:fe:6d:09: 54:17:a6:a0:0b:37:3c:d9:8c:71:2a:f2:43:5d:9a: 32:a7:34:c6:73:e1:0e:04:eb:26:e7:e9:0e:6e:1a: 22:74:aa:32:59:60:4f:67:91:c4:9f:80:dc:cd:24: 89:b5:10:b9:a0:17:e9:66:d1:33:13:62:90:12:03: 30:f2:57:ac:99:1f:96:31:3f:44:46:64:a3:96:4b: bf:cc:50:42:b2:85:3c:1b:a1:8c:a9:d6:97:f5:16: d4:41:1d:2a:29:d0:29:fe:d2:23:40:04:6c:2f:7b: 66:21:79:bb:6e:c9:8b:10:ce:04:25:80:b2:0e:40: 54:45:15:74:72:75:c1:0c:9e:e7:c1:36:3c:5a:05: df:64:e9:99:68:61:ea:72:f9:51:8c:4b:97:56:cc: cc:70:b9:0b:0a:c4:a5:83:53:2a:8f:67:5a:6b:76: 5c:c8:34:fd:67:af:c8:91:bd:5e:bd:31:fe:df:32: 3c:0e:bf:8f:94:3c:e4:15:2b:70:2c:7a:a6:6e:a4: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:77:38:69:4D:4A:33:BD:22:68:D5:B3:4C:48:83:E1:DB:C4:61:06 X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d1:b1:38:50:5f:f5:fb:50:fb:ac:53:4e:77:2b:cd:8c:2b: 31:77:ae:7e:e5:ea:39:83:04:e5:bd:fa:1b:3e:22:e4:60:53: 71:94:cc:dc:b8:f3:f5:75:41:bf:97:ac:c7:0c:a2:ed:47:d3: d0:cf:d6:a4:6a:f0:cc:a3:49:f0:de:24:68:44:61:c3:bf:0d: 56:83:f7:44:3b:89:12:ed:70:91:c2:84:67:42:de:e3:ab:81: 07:b1:97:5a:1f:7c:90:85:00:6c:56:fa:36:a5:d7:a5:60:22: 5e:7c:50:dc:92:52:98:67:34:6d:ae:b5:8b:21:c8:43:cd:f5: a4:47:c5:3f:bc:ac:88:d5:51:6a:10:e0:17:b2:d9:d8:0e:ae: 5f:ed:26:ff:f4:ed:0f:17:39:3c:68:f1:fe:fc:70:90:98:fc: 3c:1a:eb:b7:10:db:82:19:48:10:e1:d4:6b:b7:66:f5:68:25: a6:fa:6a:3b:8c:ab:75:74:50:75:79:cb:7d:4d:3a:74:e8:d4: 38:48:96:f7:70:07:3e:2c:83:39:4a:25:80:01:86:25:ce:45: 57:54:d6:34:55:a6:84:7f:b3:81:dd:b4:84:ae:6b:8b:ef:ba: 1d:73:79:a8:7b:8f:6f:90:23:a8:0d:a3:30:e0:76:b5:f7:26: 79:4c:2f:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe68aj0+ByyDTHnP9wQqwPxVyTFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjA2MTYxNTIyNTZaFw0yNjA2MTcxODMyNTZaMDMxMTAvBgNV BAMTKDJCNzczODY5NEQ0QTMzQkQyMjY4RDVCMzRDNDg4M0UxREJDNDYxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TQxA2Ir+Tp1VCNqEUNlw0p3d k00LMV80ghAR50hfFFgz9+f6SrESrxE7wYNccdf++w8Nf0/N1f5tCVQXpqALNzzZ jHEq8kNdmjKnNMZz4Q4E6ybn6Q5uGiJ0qjJZYE9nkcSfgNzNJIm1ELmgF+lm0TMT YpASAzDyV6yZH5YxP0RGZKOWS7/MUEKyhTwboYyp1pf1FtRBHSop0Cn+0iNABGwv e2YhebtuyYsQzgQlgLIOQFRFFXRydcEMnufBNjxaBd9k6ZloYepy+VGMS5dWzMxw uQsKxKWDUyqPZ1prdlzINP1nr8iRvV69Mf7fMjwOv4+UPOQVK3AseqZupFRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK3c4aU1KM70iaNWzTEiD4dvEYQYwHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrRsThQX/X7UPusU053K82MKzF3rn7l6jmD BOW9+hs+IuRgU3GUzNy48/V1Qb+XrMcMou1H09DP1qRq8MyjSfDeJGhEYcO/DVaD 90Q7iRLtcJHChGdC3uOrgQexl1offJCFAGxW+jal16VgIl58UNySUphnNG2utYsh yEPN9aRHxT+8rIjVUWoQ4Bey2dgOrl/tJv/07Q8XOTxo8f78cJCY/Dwa67cQ24IZ SBDh1Gu3ZvVoJab6ajuMq3V0UHV5y31NOnTo1DhIlvdwBz4sgzlKJYABhiXORVdU 1jRVpoR/s4HdtISua4vvuh1zeah7j2+QI6gNozDgdrX3JnlML48= -----END CERTIFICATE-----Generated at Wed Jun 17 08:54:29 2026 by rpki-client