$ rpki-client -vvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft File: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft (raw, json) Hash identifier: ov+JM4l5pSkrPgU7FIl2yfy1xhzS5xSG4qdaEjm7riY= Subject key identifier: 4A:67:2C:E9:4F:52:D2:BC:9A:9B:F7:A2:EA:94:AC:C2:48:6E:DA:AE Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 Certificate issuer: /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Certificate serial: 3F08EA5D3F899A30082314A82DC6421265603CFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:54:17 +0000 Manifest this update: Tue 12 May 2026 07:49:17 +0000 Manifest next update: Wed 13 May 2026 09:39:17 +0000 Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: 8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=) 2: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl (hash: FkETxUko57UdkStlu34RQi34vVPBUvtDW8WlQW/wlJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:08:ea:5d:3f:89:9a:30:08:23:14:a8:2d:c6:42:12:65:60:3c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Validity Not Before: May 12 07:49:17 2026 GMT Not After : May 13 09:39:17 2026 GMT Subject: CN=4A672CE94F52D2BC9A9BF7A2EA94ACC2486EDAAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:51:bd:5b:a0:46:c2:f7:0c:30:c4:e8:30: 1d:59:e6:26:ad:1e:96:78:f0:83:f3:19:23:3d:49: 15:b0:c2:ff:44:b3:93:41:a5:0b:bd:d3:95:b7:ac: 83:02:e8:6d:c0:46:5f:54:78:98:61:72:e4:09:bc: c1:93:6f:82:40:fb:d6:cd:18:e0:dc:90:a6:5e:75: 17:dd:d3:81:04:c6:e5:0f:01:be:47:1b:d1:b1:29: af:97:b1:e1:01:3d:0a:71:bb:f1:cf:63:b6:5e:85: 72:c4:aa:9a:41:17:7a:eb:e6:c2:1e:03:92:b5:6f: 88:bb:a9:fa:86:3f:b1:1e:cc:37:61:95:53:63:2e: af:de:56:11:c1:fa:fb:56:f0:60:73:71:01:00:a1: c3:48:80:4b:32:ca:51:21:8a:07:a3:cd:e8:27:08: ea:79:12:34:4c:dc:8a:e1:96:07:8e:fd:30:b7:c9: de:a7:b5:16:77:ae:07:73:a5:43:35:54:ba:04:b8: e4:3f:6e:8b:97:65:90:34:e9:ed:49:ee:3d:85:6e: 86:3b:25:35:4d:9f:06:4c:87:29:23:28:b8:24:2b: cc:be:c6:46:de:0e:27:be:1d:df:8b:6a:3f:74:b4: 25:7c:9c:91:66:48:21:78:32:2f:2a:1b:60:d8:2b: 71:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:67:2C:E9:4F:52:D2:BC:9A:9B:F7:A2:EA:94:AC:C2:48:6E:DA:AE X509v3 Authority Key Identifier: keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c0:41:db:da:9e:81:8c:16:39:04:8d:7d:8f:28:5d:3e:02: 08:23:bf:31:fb:2c:ed:67:cd:22:ce:eb:3b:ff:6a:82:d7:b8: 8c:15:95:17:f0:f9:36:d5:59:bb:0e:78:e5:ef:a0:bf:db:ca: ea:de:dc:5e:76:1d:d0:cb:69:d2:36:f2:bd:bc:7a:6c:64:5a: c9:e7:8e:54:a7:07:16:37:2a:59:e4:29:7a:68:01:c0:7b:a6: b3:48:36:35:53:0b:33:93:16:2f:b9:10:5e:b3:af:0c:76:76: 51:ee:17:35:d4:d3:9e:6a:ef:d4:af:62:18:d3:4f:68:08:27: df:3e:d9:34:ed:08:76:af:65:a5:e1:eb:e1:55:d1:9d:54:65: d9:07:49:d6:01:48:1e:b0:06:84:d5:37:77:ca:28:21:61:0b: a6:be:13:a5:21:04:89:a0:f6:89:12:0d:b0:ac:e0:71:0a:dc: 8d:a1:30:2e:db:b8:e7:b9:5b:f9:b1:cb:c4:c9:68:26:68:ce: 7b:3d:33:f0:d0:6c:6a:90:31:52:ff:cc:2c:f9:49:a8:c8:40: 92:c5:55:96:46:e1:da:ca:f5:cf:a3:b1:4c:ea:a4:2b:c2:51: 53:14:0d:e4:d8:a9:16:97:a3:d7:5d:59:20:7f:92:a8:ab:48: 9b:b9:75:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwjqXT+JmjAIIxSoLcZCEmVgPP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3 M0QwODFDMzAeFw0yNjA1MTIwNzQ5MTdaFw0yNjA1MTMwOTM5MTdaMDMxMTAvBgNV BAMTKDRBNjcyQ0U5NEY1MkQyQkM5QTlCRjdBMkVBOTRBQ0MyNDg2RURBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj21G9W6BGwvcMMMToMB1Z5iat HpZ48IPzGSM9SRWwwv9Es5NBpQu905W3rIMC6G3ARl9UeJhhcuQJvMGTb4JA+9bN GODckKZedRfd04EExuUPAb5HG9GxKa+XseEBPQpxu/HPY7ZehXLEqppBF3rr5sIe A5K1b4i7qfqGP7EezDdhlVNjLq/eVhHB+vtW8GBzcQEAocNIgEsyylEhigejzegn COp5EjRM3IrhlgeO/TC3yd6ntRZ3rgdzpUM1VLoEuOQ/bouXZZA06e1J7j2FboY7 JTVNnwZMhykjKLgkK8y+xkbeDie+Hd+Laj90tCV8nJFmSCF4Mi8qG2DYK3FBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSmcs6U9S0ryam/ei6pSswkhu2q4wHwYDVR0j BBgwFoAUDSTooLhfdqIivL+N5OsfW3PQgcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTc0ZGM1ZTEtMWQ1NS00OWQyLTkzZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBC ODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3M0QwODFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI0RThBMEI4NUY3NkEyMjJCQ0JGOERFNEVCMUY1QjczRDA4 MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFG NUI3M0QwODFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7AQdvanoGMFjkEjX2PKF0+AggjvzH7LO1n zSLO6zv/aoLXuIwVlRfw+TbVWbsOeOXvoL/byure3F52HdDLadI28r28emxkWsnn jlSnBxY3KlnkKXpoAcB7prNINjVTCzOTFi+5EF6zrwx2dlHuFzXU055q79SvYhjT T2gIJ98+2TTtCHavZaXh6+FV0Z1UZdkHSdYBSB6wBoTVN3fKKCFhC6a+E6UhBImg 9okSDbCs4HEK3I2hMC7buOe5W/mxy8TJaCZozns9M/DQbGqQMVL/zCz5SajIQJLF VZZG4drK9c+jsUzqpCvCUVMUDeTYqRaXo9ddWSB/kqirSJu5deY= -----END CERTIFICATE-----Generated at Wed May 13 02:50:24 2026 by rpki-client