$ rpki-client -vvvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft File: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft (raw, json) Hash identifier: +BKc4IasC9WwVHZb6IDdIMV7HqPOtQrIAmcnQw3s8nM= Subject key identifier: 0D:B2:D7:4A:FF:30:4E:4A:FA:19:50:C4:8D:56:99:62:E6:33:54:15 Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 Certificate issuer: /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Certificate serial: 52A356A6E63AA0822BFAF2B3EFD0F2FA8AD5C5B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:55:23 +0000 Manifest this update: Thu 24 Sep 2026 11:50:23 +0000 Manifest next update: Fri 25 Sep 2026 14:23:23 +0000 Files and hashes: 1: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl (hash: FIwGRkEOaInwvpz2Ce9n9uPWDvIpPO2qYsgSJH40dmg=) 2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: 8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a3:56:a6:e6:3a:a0:82:2b:fa:f2:b3:ef:d0:f2:fa:8a:d5:c5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Validity Not Before: Sep 24 11:50:23 2026 GMT Not After : Sep 25 14:23:23 2026 GMT Subject: CN=0DB2D74AFF304E4AFA1950C48D569962E6335415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:26:db:a6:a0:94:14:39:0b:e7:d3:0b:1e:15: d3:3e:59:12:8a:43:9d:18:1a:61:ca:93:7b:cf:60: 82:00:b8:23:cc:51:c1:9a:ab:26:0c:30:57:60:c4: c9:4d:af:07:6d:09:3f:69:27:c6:9c:9b:a8:3b:7c: 24:51:91:c9:83:81:74:4f:28:b2:b0:2f:81:fb:32: a2:2b:ef:31:87:51:cd:19:38:e7:cc:cd:b3:71:85: 43:97:f8:97:d9:3e:4b:82:69:75:2a:80:41:36:c0: 71:ed:ff:e9:da:f1:ce:4b:b1:c2:7b:e7:2b:4a:d3: 3a:46:a3:f7:3f:15:b5:84:bc:74:8b:24:7c:ac:dc: 92:e3:6d:ed:c0:fe:e5:f8:03:d8:f9:ae:ad:a9:51: 3a:f1:a6:b0:de:99:55:5b:9e:5f:ad:fd:7e:e2:25: 38:14:3e:3a:fb:b6:7f:ad:2d:bb:fd:ca:5e:8f:57: 89:0e:c5:c7:ec:27:b6:04:06:01:86:ea:26:11:e7: 4e:dd:07:2e:eb:07:eb:cb:f3:45:13:ad:ba:30:8a: eb:dc:5d:7b:45:ba:f1:b6:21:3d:aa:72:97:e6:b1: b9:c5:d9:a0:62:f4:ea:e1:d7:c5:42:2a:29:5f:6d: e6:cb:74:ff:e9:48:e5:a2:2b:45:bd:71:6e:e5:00: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B2:D7:4A:FF:30:4E:4A:FA:19:50:C4:8D:56:99:62:E6:33:54:15 X509v3 Authority Key Identifier: keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f3:e5:7b:76:27:97:be:dd:25:d6:4c:b0:b3:4a:14:dd:c8: b9:45:59:2d:53:37:bb:3d:aa:b5:7f:91:7c:90:4e:a7:d0:b9: 7f:7e:d4:8d:85:a7:ae:40:dc:8e:6c:79:c0:4b:fc:62:a4:ef: 76:90:e7:3f:04:fb:d3:6a:8e:b5:2f:9c:bf:bd:bf:ea:54:a6: c1:63:91:bd:94:c2:71:0b:2a:fc:7c:52:ac:6d:a4:4a:a0:25: ee:c3:af:b2:4f:fe:a9:3b:f5:f9:ee:a8:00:bc:03:e8:28:e1: e3:be:8b:d7:35:bc:8c:c2:39:89:5a:d8:74:2d:85:0e:2c:45: 2e:b3:35:06:25:8a:8b:cd:04:83:42:f0:26:ee:05:6b:8e:07: 27:2c:d4:fb:71:ff:12:75:6b:37:4f:2b:7a:94:01:c0:65:7f: 5e:54:c3:7b:14:73:25:c4:87:d6:22:1c:61:c2:81:c4:da:94: d0:2e:66:d7:73:21:f6:92:79:07:6f:c4:74:35:c5:43:4a:4c: 2c:a1:8f:9b:d4:06:dc:b1:38:69:7c:b1:9d:63:e9:30:c0:7b: 0a:7c:c4:86:1a:29:71:83:2a:b6:4d:d5:d2:4e:d0:41:3d:4c: 0e:dc:67:a7:68:49:9f:86:47:e8:64:07:a6:66:f2:40:a2:c3: 77:98:64:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqNWpuY6oIIr+vKz79Dy+orVxbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3 M0QwODFDMzAeFw0yNjA5MjQxMTUwMjNaFw0yNjA5MjUxNDIzMjNaMDMxMTAvBgNV BAMTKDBEQjJENzRBRkYzMDRFNEFGQTE5NTBDNDhENTY5OTYyRTYzMzU0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJtumoJQUOQvn0wseFdM+WRKK Q50YGmHKk3vPYIIAuCPMUcGaqyYMMFdgxMlNrwdtCT9pJ8acm6g7fCRRkcmDgXRP KLKwL4H7MqIr7zGHUc0ZOOfMzbNxhUOX+JfZPkuCaXUqgEE2wHHt/+na8c5LscJ7 5ytK0zpGo/c/FbWEvHSLJHys3JLjbe3A/uX4A9j5rq2pUTrxprDemVVbnl+t/X7i JTgUPjr7tn+tLbv9yl6PV4kOxcfsJ7YEBgGG6iYR507dBy7rB+vL80UTrbowiuvc XXtFuvG2IT2qcpfmsbnF2aBi9Orh18VCKilfbebLdP/pSOWiK0W9cW7lAP9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDbLXSv8wTkr6GVDEjVaZYuYzVBUwHwYDVR0j BBgwFoAUDSTooLhfdqIivL+N5OsfW3PQgcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTc0ZGM1ZTEtMWQ1NS00OWQyLTkzZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBC ODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3M0QwODFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI0RThBMEI4NUY3NkEyMjJCQ0JGOERFNEVCMUY1QjczRDA4 MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFG NUI3M0QwODFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnz5Xt2J5e+3SXWTLCzShTdyLlFWS1TN7s9 qrV/kXyQTqfQuX9+1I2Fp65A3I5secBL/GKk73aQ5z8E+9NqjrUvnL+9v+pUpsFj kb2UwnELKvx8UqxtpEqgJe7Dr7JP/qk79fnuqAC8A+go4eO+i9c1vIzCOYla2HQt hQ4sRS6zNQYliovNBINC8CbuBWuOBycs1Ptx/xJ1azdPK3qUAcBlf15Uw3sUcyXE h9YiHGHCgcTalNAuZtdzIfaSeQdvxHQ1xUNKTCyhj5vUBtyxOGl8sZ1j6TDAewp8 xIYaKXGDKrZN1dJO0EE9TA7cZ6doSZ+GR+hkB6Zm8kCiw3eYZKI= -----END CERTIFICATE-----Generated at Fri Sep 25 03:44:04 2026 by rpki-client