$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft File: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json) Hash identifier: I85HcjIsqGd/AVHuv7aXJEZV7VCHkYc/ae9iNdGzfjE= Subject key identifier: 5D:AC:D6:AE:BE:68:70:F6:6C:C6:9D:FF:5E:80:F2:71:13:FB:95:F4 Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA Certificate issuer: /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Certificate serial: 2C7D3A4B38128C4D68C595BEBDC1CF6E85385B4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:53:11 +0000 Manifest this update: Thu 24 Sep 2026 13:48:11 +0000 Manifest next update: Fri 25 Sep 2026 17:05:11 +0000 Files and hashes: 1: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=) 2: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: Mrui62jE8r0XWSwPO+l9o4MIoF7bEOsx664xpn/Uri4=) 3: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7d:3a:4b:38:12:8c:4d:68:c5:95:be:bd:c1:cf:6e:85:38:5b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Validity Not Before: Sep 24 13:48:11 2026 GMT Not After : Sep 25 17:05:11 2026 GMT Subject: CN=5DACD6AEBE6870F66CC69DFF5E80F27113FB95F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:05:96:e1:62:a3:5c:39:e9:f0:76:51:8e: 70:a2:4a:89:33:36:54:ff:c3:dc:88:fd:b5:db:1c: 74:ad:65:0e:82:69:a3:6b:f6:36:24:3b:f0:1b:ab: 09:b5:31:ff:81:93:ad:8a:74:eb:da:ce:8e:c2:d3: f5:b0:b0:bb:c3:5e:b4:ea:56:c6:97:41:5f:5b:48: f8:2f:de:cf:e2:33:c5:80:58:dd:ed:85:d5:63:74: 9e:e9:15:ec:c2:70:5c:b6:43:aa:b4:75:5f:e8:1d: 29:e4:20:b6:d9:a4:2b:ff:88:e1:7d:8f:4f:41:80: 26:04:1d:b0:fb:8d:55:e7:29:06:90:91:28:34:62: 98:aa:82:4c:79:af:fe:c9:46:c0:20:63:b7:1f:23: ed:b1:55:84:39:5b:8a:5d:aa:a6:88:fc:a7:64:b1: c5:0c:86:1f:9c:ac:15:23:bb:cd:a0:8d:a4:bd:c5: 6e:b2:f0:3f:ae:e6:66:a7:46:10:2e:55:14:9d:ed: 62:3f:fe:5f:ad:30:dd:d0:b5:d9:62:6b:91:78:94: d8:e3:1a:07:a6:d4:41:b2:6b:18:33:08:55:12:5c: 43:02:d6:2c:01:82:2c:61:0b:e2:23:59:32:de:0d: 26:76:e3:c1:64:58:c7:64:1a:6a:64:74:6d:37:e1: cd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AC:D6:AE:BE:68:70:F6:6C:C6:9D:FF:5E:80:F2:71:13:FB:95:F4 X509v3 Authority Key Identifier: keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b2:7c:bc:0e:fa:f7:82:ed:ed:c6:f9:2c:66:58:6d:a9:d2: 19:8d:b9:36:bc:3e:0c:60:39:4b:48:ff:e7:75:01:28:2a:8f: b5:2a:6d:7e:97:fc:03:a6:12:11:e4:bb:54:11:b3:06:e2:2d: e3:b7:a7:54:03:10:cc:35:7c:9e:16:39:39:c9:90:3b:44:2c: a1:f7:8b:8e:a4:21:a9:0a:3b:2d:8e:f1:4c:f7:04:8e:50:ca: 6f:58:d8:f9:67:54:45:3c:2c:13:cb:da:ec:e1:3a:e4:ed:20: a4:68:64:c0:fb:c0:d6:03:a9:59:1b:b0:d6:82:69:58:f5:4b: 61:9c:26:00:90:df:95:50:0b:9a:fe:c3:07:bd:bd:d3:b9:1b: 24:db:e8:c3:9b:d4:42:25:83:a2:44:7d:77:ee:da:73:db:0b: a5:3c:2d:b9:04:be:f4:cb:ed:23:42:0a:dc:00:10:d0:c1:09: b1:9d:10:77:ab:42:a9:9b:9f:14:46:0d:e7:9f:22:aa:9e:fa: 54:d6:88:6d:b3:7b:e3:61:20:48:2f:1d:73:af:4a:5a:9a:a8: ab:b2:fa:bd:8c:5d:33:00:2e:35:75:67:82:92:fe:bc:b2:19: 94:74:95:bb:26:81:de:2b:37:df:43:2c:4f:c8:fd:4a:cf:da: 8e:e4:91:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULH06SzgSjE1oxZW+vcHPboU4W0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3 Njk4MjhDQTAeFw0yNjA5MjQxMzQ4MTFaFw0yNjA5MjUxNzA1MTFaMDMxMTAvBgNV BAMTKDVEQUNENkFFQkU2ODcwRjY2Q0M2OURGRjVFODBGMjcxMTNGQjk1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKNgWW4WKjXDnp8HZRjnCiSokz NlT/w9yI/bXbHHStZQ6CaaNr9jYkO/Abqwm1Mf+Bk62KdOvazo7C0/WwsLvDXrTq VsaXQV9bSPgv3s/iM8WAWN3thdVjdJ7pFezCcFy2Q6q0dV/oHSnkILbZpCv/iOF9 j09BgCYEHbD7jVXnKQaQkSg0Ypiqgkx5r/7JRsAgY7cfI+2xVYQ5W4pdqqaI/Kdk scUMhh+crBUju82gjaS9xW6y8D+u5manRhAuVRSd7WI//l+tMN3Qtdlia5F4lNjj Ggem1EGyaxgzCFUSXEMC1iwBgixhC+IjWTLeDSZ248FkWMdkGmpkdG034c3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXazWrr5ocPZsxp3/XoDycRP7lfQwHwYDVR0j BBgwFoAUwkuo16upoK64HSDmtVEhXnaYKMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3MDgzYWItMjcwYS00YjBhLThlNTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdB QkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3Njk4MjhDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjRCQThEN0FCQTlBMEFFQjgxRDIwRTZCNTUxMjE1RTc2OTgy OENBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIx NUU3Njk4MjhDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCyfLwO+veC7e3G+SxmWG2p0hmNuTa8Pgxg OUtI/+d1ASgqj7UqbX6X/AOmEhHku1QRswbiLeO3p1QDEMw1fJ4WOTnJkDtELKH3 i46kIakKOy2O8Uz3BI5Qym9Y2PlnVEU8LBPL2uzhOuTtIKRoZMD7wNYDqVkbsNaC aVj1S2GcJgCQ35VQC5r+wwe9vdO5GyTb6MOb1EIlg6JEfXfu2nPbC6U8LbkEvvTL 7SNCCtwAENDBCbGdEHerQqmbnxRGDeefIqqe+lTWiG2ze+NhIEgvHXOvSlqaqKuy +r2MXTMALjV1Z4KS/ryyGZR0lbsmgd4rN99DLE/I/UrP2o7kkb0= -----END CERTIFICATE-----Generated at Fri Sep 25 00:40:29 2026 by rpki-client