$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft File: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json) Hash identifier: ToHC2MiGE5dGvR64FxfxgIOdgpBVDTvd4FE+n8DDXig= Subject key identifier: D4:BA:C6:53:E6:DF:7D:C7:BB:E9:7F:48:DB:88:AD:77:8A:28:FF:E3 Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA Certificate issuer: /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Certificate serial: 282C15C82B71CB26D2CCB8B954C0E1496B5AED57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:20:57 +0000 Manifest this update: Tue 12 May 2026 16:15:57 +0000 Manifest next update: Wed 13 May 2026 18:33:57 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=) 2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=) 3: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: PfiGncGy5x3BneemLa4vwnK3c5ppqqNU7R0ByiTOVQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2c:15:c8:2b:71:cb:26:d2:cc:b8:b9:54:c0:e1:49:6b:5a:ed:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Validity Not Before: May 12 16:15:57 2026 GMT Not After : May 13 18:33:57 2026 GMT Subject: CN=D4BAC653E6DF7DC7BBE97F48DB88AD778A28FFE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:02:38:9a:93:54:11:06:70:d6:42:4a:42: 5e:fd:02:b2:3f:b6:6c:45:40:a0:62:50:da:53:2d: ab:a8:73:51:05:53:0c:c3:cf:42:91:50:f6:eb:e9: 50:db:a0:0e:bc:90:a7:fd:cf:38:88:b4:99:d1:5d: c0:bb:0a:df:34:25:10:95:78:6b:15:a6:26:65:49: 69:3e:8a:31:b7:72:6b:35:3f:7d:c0:81:75:24:8f: ca:48:ea:13:c9:1d:99:7a:da:64:b2:df:88:01:a4: ae:2a:36:98:19:0d:f3:4c:06:1a:b7:fb:57:83:b7: ab:19:3b:eb:54:f7:72:55:dd:35:95:7e:81:3b:58: d1:fd:b8:cc:b9:30:0a:21:7e:87:5c:47:29:2f:a0: 5e:2a:14:96:7a:da:05:05:97:cb:49:2c:a4:e6:cd: 0f:9f:e9:24:06:57:7f:55:7e:05:1a:5f:2c:3c:d0: 7c:fd:90:30:d5:42:1b:b2:df:93:e2:00:b2:06:1d: fd:35:56:24:91:68:75:56:fe:24:16:d4:4a:64:2a: 3a:3d:9d:a5:fe:99:a5:fe:c5:d4:a8:74:e0:88:3b: ad:d2:ac:f5:8e:18:98:6e:1d:f7:d0:20:82:61:92: 7d:15:87:36:eb:93:a0:27:4c:cc:64:ba:26:cf:d9: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BA:C6:53:E6:DF:7D:C7:BB:E9:7F:48:DB:88:AD:77:8A:28:FF:E3 X509v3 Authority Key Identifier: keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bb:35:dc:28:18:11:38:d2:63:18:e4:32:a7:9d:96:79:52: 5f:d0:d6:ba:ba:4e:fc:70:6a:99:dd:8a:96:dc:71:12:22:aa: c2:1e:c2:ad:3d:3e:0f:a6:5e:d5:48:c5:f4:58:1b:d1:3f:09: fb:8a:3f:c0:2d:42:c2:e8:61:62:d7:f4:7d:1d:5f:90:7f:01: 20:34:d8:f4:2c:29:a2:9b:d9:34:2c:e0:82:5c:4b:17:93:46: 39:c9:6c:84:70:4e:59:e8:90:d8:77:6d:8e:c2:1a:ab:8d:da: b6:43:63:f1:7b:87:1f:a5:1c:17:f2:30:dd:13:e0:68:cd:1d: ec:0a:03:f3:50:4c:9d:b1:cb:86:f9:b4:22:61:64:1f:12:e3: 21:7c:a0:03:ad:1d:82:71:b6:0c:32:b4:4a:d4:1d:98:96:87: 9a:f4:3d:78:e5:78:10:4a:7b:fa:14:98:39:97:0d:70:99:c2: e3:a3:4d:65:29:e2:0b:0d:ac:6c:2f:22:f3:7f:cc:1f:ef:54: 44:26:07:9c:2a:5f:16:53:c9:52:b2:cf:12:73:74:4b:83:26: 32:b6:03:b8:2a:36:28:32:49:35:56:ce:18:7a:91:b4:e0:7d: ee:b6:78:3d:bc:78:34:8a:81:4f:9b:48:db:d3:69:9f:9e:54: ff:4f:ed:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCwVyCtxyybSzLi5VMDhSWta7VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3 Njk4MjhDQTAeFw0yNjA1MTIxNjE1NTdaFw0yNjA1MTMxODMzNTdaMDMxMTAvBgNV BAMTKEQ0QkFDNjUzRTZERjdEQzdCQkU5N0Y0OERCODhBRDc3OEEyOEZGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU9QI4mpNUEQZw1kJKQl79ArI/ tmxFQKBiUNpTLauoc1EFUwzDz0KRUPbr6VDboA68kKf9zziItJnRXcC7Ct80JRCV eGsVpiZlSWk+ijG3cms1P33AgXUkj8pI6hPJHZl62mSy34gBpK4qNpgZDfNMBhq3 +1eDt6sZO+tU93JV3TWVfoE7WNH9uMy5MAohfodcRykvoF4qFJZ62gUFl8tJLKTm zQ+f6SQGV39VfgUaXyw80Hz9kDDVQhuy35PiALIGHf01ViSRaHVW/iQW1EpkKjo9 naX+maX+xdSodOCIO63SrPWOGJhuHffQIIJhkn0Vhzbrk6AnTMxkuibP2TlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1LrGU+bffce76X9I24itd4oo/+MwHwYDVR0j BBgwFoAUwkuo16upoK64HSDmtVEhXnaYKMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3MDgzYWItMjcwYS00YjBhLThlNTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdB QkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3Njk4MjhDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjRCQThEN0FCQTlBMEFFQjgxRDIwRTZCNTUxMjE1RTc2OTgy OENBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIx NUU3Njk4MjhDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGO7NdwoGBE40mMY5DKnnZZ5Ul/Q1rq6Tvxw apndipbccRIiqsIewq09Pg+mXtVIxfRYG9E/CfuKP8AtQsLoYWLX9H0dX5B/ASA0 2PQsKaKb2TQs4IJcSxeTRjnJbIRwTlnokNh3bY7CGquN2rZDY/F7hx+lHBfyMN0T 4GjNHewKA/NQTJ2xy4b5tCJhZB8S4yF8oAOtHYJxtgwytErUHZiWh5r0PXjleBBK e/oUmDmXDXCZwuOjTWUp4gsNrGwvIvN/zB/vVEQmB5wqXxZTyVKyzxJzdEuDJjK2 A7gqNigySTVWzhh6kbTgfe62eD28eDSKgU+bSNvTaZ+eVP9P7eo= -----END CERTIFICATE-----Generated at Wed May 13 03:55:39 2026 by rpki-client