$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft File: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft (raw, json) Hash identifier: wX/4gOJPjU6g66J+PxfdDK03FqldMnDiRJbov7JYj4M= Subject key identifier: 43:03:07:C5:B6:9A:37:7E:B8:B5:29:1D:61:13:09:F1:12:46:3C:BA Authority key identifier: 24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 Certificate issuer: /CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Certificate serial: 69FF40A4A72285E7E586BE2E44A637FAB3755128 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 17:57:00 +0000 Manifest this update: Thu 23 Jul 2026 17:52:00 +0000 Manifest next update: Fri 24 Jul 2026 18:17:00 +0000 Files and hashes: 1: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl (hash: jHOLGpNF8+KTtwJMXocfMPV7N4m0b+RKT+s0nZP16vw=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: fCOFQpy4x/crI+WC5jvfSD6t0+AQC6KYZU58O4qsuz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ff:40:a4:a7:22:85:e7:e5:86:be:2e:44:a6:37:fa:b3:75:51:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Validity Not Before: Jul 23 17:52:00 2026 GMT Not After : Jul 24 18:17:00 2026 GMT Subject: CN=430307C5B69A377EB8B5291D611309F112463CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:fc:ce:04:50:cd:3a:0c:15:e6:f4:c0:5c: 08:f8:91:8c:44:2b:f3:7d:e4:88:ae:8f:f1:e2:68: 47:e7:16:df:01:99:48:64:50:00:6b:f6:07:e7:19: 78:4d:98:e6:e1:3b:f5:4e:d2:4e:d0:63:e1:bf:e9: d6:1d:c0:45:e9:2d:6e:c6:ae:3d:58:e6:6c:80:57: 02:21:20:f6:bb:95:97:b1:3a:17:05:8d:e9:77:b8: fc:31:44:77:f9:61:c7:43:b1:87:95:7a:39:fd:5b: bd:c0:f3:6f:f3:40:71:d0:c2:8d:df:c6:57:1d:99: 4a:7d:27:a0:58:3c:4a:15:be:f9:4c:1b:56:c7:c9: dd:b9:9c:05:b5:bc:94:9b:b9:d9:80:42:95:26:b6: a8:83:3b:41:01:43:ff:7c:c5:62:16:cb:29:31:70: c1:a0:c0:c7:62:00:72:cd:a5:7e:59:e3:73:37:71: e6:08:87:36:d3:ee:b0:b5:3a:39:d8:6b:02:da:a2: 48:1f:0b:56:5e:91:74:a3:e2:43:ee:14:13:a2:fd: a8:31:70:ae:2c:0f:33:7a:8e:9d:a8:af:7e:12:43: 51:04:62:00:b2:d6:95:50:ae:18:0e:cf:f5:72:a8: 47:a1:e0:90:6f:99:10:d1:32:b3:dc:79:1c:8d:37: df:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:07:C5:B6:9A:37:7E:B8:B5:29:1D:61:13:09:F1:12:46:3C:BA X509v3 Authority Key Identifier: keyid:24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d0:0b:ff:bc:48:b1:15:2a:19:59:a3:cc:62:79:0b:29:26: c0:be:c9:17:d6:81:52:04:a2:a6:cd:ca:bf:96:bb:58:62:26: c2:16:aa:b6:47:4d:b4:fd:84:f4:fa:56:69:2c:6f:19:a5:bb: a9:b3:76:99:e4:3b:ca:c1:36:a3:4e:72:fe:16:df:32:df:53: 0b:e0:e8:62:f2:06:a9:ce:4d:76:0d:9c:9a:28:f4:a7:be:3f: 8d:50:04:8b:e5:ba:c7:ca:9f:fe:2e:cd:6d:cc:ef:60:bd:74: 03:85:8f:8f:8c:11:4a:65:8a:74:62:1a:09:fc:80:c8:59:e6: 4c:13:c3:9e:8a:86:6c:70:84:76:c8:72:03:b8:33:13:96:ef: 0a:b8:6a:61:35:3e:38:22:e6:96:61:d1:27:93:b4:0a:19:30: 36:d1:94:ee:d8:9c:88:88:38:6b:c3:9e:78:c4:0a:8b:64:f8: 7f:65:1e:5c:76:1c:52:ff:57:47:e8:a9:19:b2:cc:f3:70:f4: a6:9f:33:69:d3:30:e4:f8:51:20:5d:b6:31:a1:4e:32:98:fe: c5:1d:8b:4a:18:ee:af:eb:02:b4:4a:03:0d:30:67:a5:e6:2b: 1f:04:46:ab:9a:fe:8c:7c:5d:9e:77:ff:e8:f8:b9:69:28:01: 79:ca:85:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaf9ApKciheflhr4uRKY3+rN1USgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2 M0JDNkI0ODAeFw0yNjA3MjMxNzUyMDBaFw0yNjA3MjQxODE3MDBaMDMxMTAvBgNV BAMTKDQzMDMwN0M1QjY5QTM3N0VCOEI1MjkxRDYxMTMwOUYxMTI0NjNDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHa/zOBFDNOgwV5vTAXAj4kYxE K/N95Iiuj/HiaEfnFt8BmUhkUABr9gfnGXhNmObhO/VO0k7QY+G/6dYdwEXpLW7G rj1Y5myAVwIhIPa7lZexOhcFjel3uPwxRHf5YcdDsYeVejn9W73A82/zQHHQwo3f xlcdmUp9J6BYPEoVvvlMG1bHyd25nAW1vJSbudmAQpUmtqiDO0EBQ/98xWIWyykx cMGgwMdiAHLNpX5Z43M3ceYIhzbT7rC1OjnYawLaokgfC1ZekXSj4kPuFBOi/agx cK4sDzN6jp2or34SQ1EEYgCy1pVQrhgOz/VyqEeh4JBvmRDRMrPceRyNN98fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQwMHxbaaN364tSkdYRMJ8RJGPLowHwYDVR0j BBgwFoAUJNdUmLSFqllirYw6AFSOymO8a0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MTFiMDUtYzU4YS00MjA2LWI3YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThC NDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2M0JDNkI0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNEQ3NTQ5OEI0ODVBQTU5NjJBRDhDM0EwMDU0OEVDQTYzQkM2 QjQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhF Q0E2M0JDNkI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzQC/+8SLEVKhlZo8xieQspJsC+yRfWgVIE oqbNyr+Wu1hiJsIWqrZHTbT9hPT6Vmksbxmlu6mzdpnkO8rBNqNOcv4W3zLfUwvg 6GLyBqnOTXYNnJoo9Ke+P41QBIvlusfKn/4uzW3M72C9dAOFj4+MEUplinRiGgn8 gMhZ5kwTw56KhmxwhHbIcgO4MxOW7wq4amE1Pjgi5pZh0SeTtAoZMDbRlO7YnIiI OGvDnnjECotk+H9lHlx2HFL/V0foqRmyzPNw9KafM2nTMOT4USBdtjGhTjKY/sUd i0oY7q/rArRKAw0wZ6XmKx8ERqua/ox8XZ53/+j4uWkoAXnKhbY= -----END CERTIFICATE-----Generated at Fri Jul 24 08:56:18 2026 by rpki-client