$ rpki-client -vvf rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft File: F24F92FEE32EF3FD89B142D403B664674EC45F20.mft (raw, json) Hash identifier: LLhWqxwnrXWY/9/df3IaKMnUffYt/ZEHmzM9lMCFGWs= Subject key identifier: 83:99:DB:F6:9B:DF:A7:92:A4:1C:C7:19:4A:1A:84:B7:98:5A:6C:C0 Authority key identifier: F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 Certificate issuer: /CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Certificate serial: 58750700B95E29FA0FFF6B45B07757BE64AA8F7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:49:20 +0000 Manifest this update: Tue 12 May 2026 18:44:20 +0000 Manifest next update: Wed 13 May 2026 18:54:20 +0000 Files and hashes: 1: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: bxuJHdBQ29ujm6ZiEr/payUgkQDlp15FaGJqOvION0Y=) 2: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: Fngj46n5ns0XL17tIcObVP8YgC9Tz2lNna69VH4sqhk=) 3: F24F92FEE32EF3FD89B142D403B664674EC45F20.crl (hash: Nwlw8+/Du1bo77Upl9JkrtVhNRIjks78zfDHAM6s554=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:75:07:00:b9:5e:29:fa:0f:ff:6b:45:b0:77:57:be:64:aa:8f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Validity Not Before: May 12 18:44:20 2026 GMT Not After : May 13 18:54:20 2026 GMT Subject: CN=8399DBF69BDFA792A41CC7194A1A84B7985A6CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:96:c7:0a:c5:d0:94:c1:a7:c4:a4:c7:3e: 9c:06:cd:d0:11:9f:df:97:a5:f4:bb:82:fe:c8:e3: f0:e5:99:fd:95:b3:1d:b8:4c:1b:00:a3:4e:b6:49: 02:16:1c:4f:9b:f8:8c:30:c3:01:3b:be:e6:bd:71: bb:7a:15:2f:07:dc:43:23:8a:52:24:e8:bb:9d:2a: d9:a1:86:b8:50:3a:5f:cd:be:8b:75:a2:c3:f9:df: d6:b7:64:ef:41:1a:2c:97:4b:cc:24:6b:26:44:65: 11:84:04:44:9b:b6:61:0c:cb:24:9d:38:d8:6d:67: 14:1f:02:9c:c9:22:c7:08:7e:fd:e5:3a:bf:14:94: df:76:77:6e:4e:86:27:44:a4:82:2d:cd:b2:22:52: 0b:9d:b8:a7:dc:ec:7f:e5:97:68:f2:1f:8e:7d:e9: e9:53:f1:00:8e:1a:f4:f6:ad:05:cf:7a:d0:2f:7b: 98:89:cc:52:1e:86:02:60:59:71:cd:ea:a4:70:c2: b7:17:44:ea:03:f4:86:80:25:f7:56:31:b9:93:05: 4b:28:9d:8a:ca:85:c4:6e:90:cc:cb:c9:eb:05:74: a3:10:b0:1f:7b:d4:39:42:60:f8:bd:3c:18:fa:b2: 9e:80:fe:67:db:e2:e6:18:50:ab:37:1f:c1:7c:1e: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:DB:F6:9B:DF:A7:92:A4:1C:C7:19:4A:1A:84:B7:98:5A:6C:C0 X509v3 Authority Key Identifier: keyid:F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:bb:3b:e4:a8:17:c4:54:3d:06:c1:39:37:e4:d4:6e:3e:bf: f7:1b:e4:b3:9d:1d:a7:a7:00:bf:3b:47:18:11:e0:a5:25:ff: 5c:f1:79:b2:e0:1f:b4:d8:76:7d:22:fa:45:ad:01:fd:1a:32: 26:6f:6e:d3:e8:43:fd:aa:d6:2d:db:f0:34:ef:d0:82:69:95: ce:9a:18:6b:aa:71:ee:7d:1d:dd:ac:62:e8:b9:22:08:e3:d1: b5:ea:22:2f:a8:4a:a2:0a:6f:6d:c8:04:11:91:f0:34:3b:bb: 84:ae:a1:6d:21:1f:0d:3a:17:79:e6:53:58:38:b2:10:96:9e: 9c:83:69:00:5a:33:73:35:fd:44:23:89:b9:ca:45:d8:83:8f: 8d:40:2c:ad:5b:81:85:8b:2c:86:2b:d6:84:4c:5a:1d:dd:8b: ad:43:f7:36:91:74:cf:9b:05:8c:bc:25:88:22:1b:c6:98:32: c9:09:55:57:71:fd:ca:10:7a:2a:e9:3b:c0:5c:a6:8c:92:cc: 19:29:59:62:aa:fe:28:a3:2b:43:4d:30:b1:f9:a1:b6:b2:5f: 99:f9:d4:ce:44:60:ec:00:a3:8f:cb:48:69:83:90:6f:9d:6a: 25:7f:be:fe:04:27:20:f0:11:f3:f2:31:58:f3:c6:e1:04:de: 92:de:01:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHUHALleKfoP/2tFsHdXvmSqj34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0 RUM0NUYyMDAeFw0yNjA1MTIxODQ0MjBaFw0yNjA1MTMxODU0MjBaMDMxMTAvBgNV BAMTKDgzOTlEQkY2OUJERkE3OTJBNDFDQzcxOTRBMUE4NEI3OTg1QTZDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH5bHCsXQlMGnxKTHPpwGzdAR n9+XpfS7gv7I4/Dlmf2Vsx24TBsAo062SQIWHE+b+IwwwwE7vua9cbt6FS8H3EMj ilIk6LudKtmhhrhQOl/Nvot1osP539a3ZO9BGiyXS8wkayZEZRGEBESbtmEMyySd ONhtZxQfApzJIscIfv3lOr8UlN92d25OhidEpIItzbIiUguduKfc7H/ll2jyH459 6elT8QCOGvT2rQXPetAve5iJzFIehgJgWXHN6qRwwrcXROoD9IaAJfdWMbmTBUso nYrKhcRukMzLyesFdKMQsB971DlCYPi9PBj6sp6A/mfb4uYYUKs3H8F8HlzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg5nb9pvfp5KkHMcZShqEt5habMAwHwYDVR0j BBgwFoAU8k+S/uMu8/2JsULUA7ZkZ07EXyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg3ODhhOGItNTQxYi00Y2JmLWJhYjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVF MzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0RUM0NUYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjRGOTJGRUUzMkVGM0ZEODlCMTQyRDQwM0I2NjQ2NzRFQzQ1 RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0 Njc0RUM0NUYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm7O+SoF8RUPQbBOTfk1G4+v/cb5LOdHaen AL87RxgR4KUl/1zxebLgH7TYdn0i+kWtAf0aMiZvbtPoQ/2q1i3b8DTv0IJplc6a GGuqce59Hd2sYui5Igjj0bXqIi+oSqIKb23IBBGR8DQ7u4SuoW0hHw06F3nmU1g4 shCWnpyDaQBaM3M1/UQjibnKRdiDj41ALK1bgYWLLIYr1oRMWh3di61D9zaRdM+b BYy8JYgiG8aYMskJVVdx/coQeirpO8BcpoySzBkpWWKq/iijK0NNMLH5obayX5n5 1M5EYOwAo4/LSGmDkG+daiV/vv4EJyDwEfPyMVjzxuEE3pLeARQ= -----END CERTIFICATE-----Generated at Tue May 12 22:46:59 2026 by rpki-client