$ rpki-client -vvvf rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft File: 24707B538B36DD7E0788B2B83162969B177EE4B9.mft (raw, json) Hash identifier: 0Ao9enQog6GYczAYrX9Wbjaybjkw495ylv5QtHhcYUA= Subject key identifier: 7E:83:FA:26:E2:9B:CC:22:75:8E:9B:7D:BA:41:D6:C7:90:62:96:2F Authority key identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9 Certificate issuer: /CN=24707B538B36DD7E0788B2B83162969B177EE4B9 Certificate serial: 33E137F80F8B6FF61FEA6EC5D66E29732C0AA747 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 01:32:04 +0000 Manifest this update: Fri 25 Sep 2026 01:27:04 +0000 Manifest next update: Sat 26 Sep 2026 03:48:04 +0000 Files and hashes: 1: 24707B538B36DD7E0788B2B83162969B177EE4B9.crl (hash: MykpnyLimc6xvzv75Pz0Xb7sA6UHinfjLXUrZjaAxYk=) 2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: a2G2EWwhE4yFuhZ5jYn9ulCDBjyOhc2EYKslZtlGFac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e1:37:f8:0f:8b:6f:f6:1f:ea:6e:c5:d6:6e:29:73:2c:0a:a7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24707B538B36DD7E0788B2B83162969B177EE4B9 Validity Not Before: Sep 25 01:27:04 2026 GMT Not After : Sep 26 03:48:04 2026 GMT Subject: CN=7E83FA26E29BCC22758E9B7DBA41D6C79062962F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:57:09:4e:63:6d:a8:18:ae:97:7a:87:aa: 11:80:70:05:65:30:86:25:64:81:96:dd:19:6d:1d: 0b:8e:63:d9:30:3f:7e:d3:d1:c5:34:23:ea:bc:c8: 93:a7:10:25:ee:32:12:44:ff:a9:b5:29:56:f9:a5: 5d:79:22:d1:80:a2:56:a4:d7:30:c0:c2:76:77:52: e2:e7:b8:1e:b4:cd:8f:a9:dd:eb:7a:65:5c:97:9a: 56:ba:12:3f:28:46:dd:b3:fb:9f:0c:f2:46:c0:ac: 5a:5c:a3:f6:b9:1b:72:5e:6a:d7:5e:d3:7f:94:0c: 43:03:d3:ca:b0:06:ab:04:e1:38:21:d2:57:49:87: 1e:a9:1b:d8:76:3e:82:d8:d5:0d:c9:49:e4:ea:b9: 42:87:c3:e1:f8:65:c3:c4:72:89:3f:62:8e:ad:d7: e9:d6:af:57:09:fd:63:eb:43:19:a2:3f:f6:c1:37: 6b:28:83:fa:6f:f8:8a:57:22:5c:e0:39:b5:6e:19: c7:eb:c0:6f:d7:fe:4d:6a:20:57:15:5c:4c:0b:d3: 9c:c4:0c:c0:ad:4c:3f:0f:29:c5:ed:1d:8c:42:ec: db:00:0a:fb:b8:cc:61:3c:02:ec:04:17:18:b3:d8: 55:99:0c:79:bb:d2:b4:3e:e2:21:de:7e:ae:9d:9b: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:83:FA:26:E2:9B:CC:22:75:8E:9B:7D:BA:41:D6:C7:90:62:96:2F X509v3 Authority Key Identifier: keyid:24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f1:9b:f3:4a:4f:db:34:05:9e:28:5a:74:59:80:f0:80:b2: 37:6d:c1:cb:d5:0a:47:b5:ab:9c:22:d1:1d:44:34:9d:ed:63: fb:f1:73:cf:cd:86:c7:2c:2b:6d:8b:c3:d1:44:51:d9:25:9d: a5:ea:51:4d:84:e1:9d:ec:26:8f:53:f8:cf:ad:0d:32:fb:55: 26:66:81:70:c8:e3:b8:2e:d4:af:0a:07:d9:a4:ac:e1:65:f2: 36:fc:3f:6a:fc:d4:ce:0e:d7:54:f6:22:0d:02:7f:38:e5:59: d3:fb:a6:8d:1b:45:9d:a6:cc:a4:b6:2a:53:49:82:f5:a0:aa: f0:e5:6d:a6:10:e3:d2:bc:e4:b5:b8:71:21:54:4f:9f:64:3d: 79:03:ed:be:99:93:38:cc:30:40:67:56:90:76:8e:93:65:ab: d6:1c:b8:9a:27:98:4f:66:d7:db:93:df:8e:02:73:ce:e0:83: 33:cb:e0:c4:27:7b:67:aa:11:28:60:18:84:7f:9d:28:1f:e4: ca:5a:d9:77:a5:40:82:ef:62:23:d2:1d:e2:d7:cb:5a:83:7f: b0:a0:bc:1b:bb:55:f8:13:e9:b5:d4:e1:76:eb:05:00:0e:84: 67:dd:84:ce:ec:6f:67:26:f9:ed:9c:0c:22:0b:7c:b1:63:0d: f1:12:7f:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+E3+A+Lb/Yf6m7F1m4pcywKp0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3MDdCNTM4QjM2REQ3RTA3ODhCMkI4MzE2Mjk2OUIx NzdFRTRCOTAeFw0yNjA5MjUwMTI3MDRaFw0yNjA5MjYwMzQ4MDRaMDMxMTAvBgNV BAMTKDdFODNGQTI2RTI5QkNDMjI3NThFOUI3REJBNDFENkM3OTA2Mjk2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDamlcJTmNtqBiul3qHqhGAcAVl MIYlZIGW3RltHQuOY9kwP37T0cU0I+q8yJOnECXuMhJE/6m1KVb5pV15ItGAolak 1zDAwnZ3UuLnuB60zY+p3et6ZVyXmla6Ej8oRt2z+58M8kbArFpco/a5G3Jeatde 03+UDEMD08qwBqsE4Tgh0ldJhx6pG9h2PoLY1Q3JSeTquUKHw+H4ZcPEcok/Yo6t 1+nWr1cJ/WPrQxmiP/bBN2sog/pv+IpXIlzgObVuGcfrwG/X/k1qIFcVXEwL05zE DMCtTD8PKcXtHYxC7NsACvu4zGE8AuwEFxiz2FWZDHm70rQ+4iHefq6dm7gzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfoP6JuKbzCJ1jpt9ukHWx5Bili8wHwYDVR0j BBgwFoAUJHB7U4s23X4HiLK4MWKWmxd+5LkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY2MjQ3ZjktMWVlYy00OTAxLWJhNDItOWRmMjY0MjRmNWI4LzAvMjQ3MDdCNTM4 QjM2REQ3RTA3ODhCMkI4MzE2Mjk2OUIxNzdFRTRCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDcwN0I1MzhCMzZERDdFMDc4OEIyQjgzMTYyOTY5QjE3N0VF NEI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY2MjQ3ZjktMWVlYy00OTAxLWJh NDItOWRmMjY0MjRmNWI4LzAvMjQ3MDdCNTM4QjM2REQ3RTA3ODhCMkI4MzE2Mjk2 OUIxNzdFRTRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLxm/NKT9s0BZ4oWnRZgPCAsjdtwcvVCke1 q5wi0R1ENJ3tY/vxc8/NhscsK22Lw9FEUdklnaXqUU2E4Z3sJo9T+M+tDTL7VSZm gXDI47gu1K8KB9mkrOFl8jb8P2r81M4O11T2Ig0CfzjlWdP7po0bRZ2mzKS2KlNJ gvWgqvDlbaYQ49K85LW4cSFUT59kPXkD7b6ZkzjMMEBnVpB2jpNlq9YcuJonmE9m 19uT344Cc87ggzPL4MQne2eqEShgGIR/nSgf5Mpa2XelQILvYiPSHeLXy1qDf7Cg vBu7VfgT6bXU4XbrBQAOhGfdhM7sb2cm+e2cDCILfLFjDfESf7I= -----END CERTIFICATE-----Generated at Fri Sep 25 21:49:34 2026 by rpki-client