$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: 9kAruEExg+CZ08fNqZ/f3Pv0HVnlg0bY0lsWrtayico= Subject key identifier: 6C:8A:4F:E8:72:E7:EA:1D:C8:CA:F6:74:1A:F4:AE:C0:52:68:DD:B0 Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 7181B93F434359EEDBBCE937A605965781BA5FD1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:14:49 +0000 Manifest this update: Wed 23 Sep 2026 23:09:49 +0000 Manifest next update: Fri 25 Sep 2026 00:18:49 +0000 Files and hashes: 1: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 2: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) 3: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 4: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: yB/HwfqVrC9Ol2Hm9fIU1SJG3/HtpB2coTeyS1fS2l8=) 5: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 6: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 7: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:81:b9:3f:43:43:59:ee:db:bc:e9:37:a6:05:96:57:81:ba:5f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Sep 23 23:09:49 2026 GMT Not After : Sep 25 00:18:49 2026 GMT Subject: CN=6C8A4FE872E7EA1DC8CAF6741AF4AEC05268DDB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:30:7d:f3:02:d8:16:21:ab:92:13:c6:b1: 92:f3:b0:5f:e9:33:ad:75:cd:d6:2a:dd:bd:00:0f: 82:4a:0b:36:f3:81:72:62:7f:82:19:6d:ef:40:33: 8b:9e:c6:dc:f6:ff:36:9a:20:3c:54:f1:2c:da:50: 06:01:c4:b1:15:4a:45:36:0c:6e:e1:9c:d9:b9:c9: 60:40:c5:3a:55:05:1f:94:7c:a3:08:49:d3:e4:7e: 5f:19:21:78:2f:a4:a6:88:c9:d7:98:e8:2c:f6:3c: a5:cc:28:02:af:d4:79:fe:2f:c3:a9:8e:a0:61:32: f9:b5:7b:7c:be:2a:1c:93:d4:4b:eb:ab:7f:4c:93: d0:7f:7b:39:31:6b:76:c1:f8:4e:07:04:04:54:7c: 5d:01:3c:b5:e0:c3:cf:ef:16:60:34:8a:46:b6:e0: 10:3e:4d:11:83:9d:22:2b:de:14:68:ba:5f:44:d2: f4:47:7e:b1:4e:d8:28:ad:88:4d:a9:25:22:d5:a7: 44:25:fe:b6:79:30:32:11:ac:8c:a3:e0:cd:06:50: 4f:30:51:c8:d5:a2:fa:36:ee:bd:9a:1a:37:a0:c8: 69:ad:f0:75:45:8f:ed:6b:14:0f:f3:67:a0:17:47: f7:05:93:d3:fb:71:77:31:5f:7c:13:6f:ba:c1:1e: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8A:4F:E8:72:E7:EA:1D:C8:CA:F6:74:1A:F4:AE:C0:52:68:DD:B0 X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:11:cb:ce:75:28:5a:41:5c:09:74:1e:8a:9a:8f:40:73: a8:4b:f0:ff:af:6e:a9:ed:7a:9a:78:a5:3f:8b:72:ab:79:7b: 78:b7:0f:ce:6c:4b:a7:8e:23:eb:11:00:a4:31:2e:76:f5:22: a3:11:3e:c2:60:99:55:6b:b8:d9:16:ce:f6:fa:3a:b3:d0:09: eb:4f:ae:40:20:11:9d:db:74:83:3e:88:84:f9:16:90:73:d1: b2:54:b6:e1:76:fd:3e:bc:4d:ff:99:52:ee:42:f2:dc:ac:03: b9:dc:82:4e:ba:05:72:5b:14:dc:1e:21:e4:ae:6f:8c:5f:14: ea:31:5f:04:bb:71:aa:78:92:da:d4:82:1b:8a:7e:f4:b1:9d: 50:a3:0c:2b:09:c4:51:a0:9b:18:17:c9:85:46:f0:76:a2:06: 7b:c5:af:97:c8:ef:90:36:f3:59:6d:a3:12:38:1e:19:ee:61: c3:fa:0b:78:e1:67:e2:3b:27:44:43:14:59:d0:d3:d1:2b:78: 18:8a:1f:df:1c:71:77:43:8e:a3:e9:07:7b:8a:f9:6e:77:73: 2a:83:7f:7d:25:cf:77:1e:84:a4:ef:82:8b:54:ac:21:f3:f9: ca:d3:b4:f9:f9:61:1b:f7:57:11:f9:8d:8c:92:df:f7:a0:2f: a2:ff:35:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcYG5P0NDWe7bvOk3pgWWV4G6X9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA5MjMyMzA5NDlaFw0yNjA5MjUwMDE4NDlaMDMxMTAvBgNV BAMTKDZDOEE0RkU4NzJFN0VBMURDOENBRjY3NDFBRjRBRUMwNTI2OEREQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NjB98wLYFiGrkhPGsZLzsF/p M611zdYq3b0AD4JKCzbzgXJif4IZbe9AM4uextz2/zaaIDxU8SzaUAYBxLEVSkU2 DG7hnNm5yWBAxTpVBR+UfKMISdPkfl8ZIXgvpKaIydeY6Cz2PKXMKAKv1Hn+L8Op jqBhMvm1e3y+KhyT1Evrq39Mk9B/ezkxa3bB+E4HBARUfF0BPLXgw8/vFmA0ika2 4BA+TRGDnSIr3hRoul9E0vRHfrFO2CitiE2pJSLVp0Ql/rZ5MDIRrIyj4M0GUE8w UcjVovo27r2aGjegyGmt8HVFj+1rFA/zZ6AXR/cFk9P7cXcxX3wTb7rBHsj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbIpP6HLn6h3IyvZ0GvSuwFJo3bAwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6KEcvOdShaQVwJdB6Kmo9Ac6hL8P+vbqnt epp4pT+Lcqt5e3i3D85sS6eOI+sRAKQxLnb1IqMRPsJgmVVruNkWzvb6OrPQCetP rkAgEZ3bdIM+iIT5FpBz0bJUtuF2/T68Tf+ZUu5C8tysA7ncgk66BXJbFNweIeSu b4xfFOoxXwS7cap4ktrUghuKfvSxnVCjDCsJxFGgmxgXyYVG8HaiBnvFr5fI75A2 81ltoxI4HhnuYcP6C3jhZ+I7J0RDFFnQ09EreBiKH98ccXdDjqPpB3uK+W53cyqD f30lz3cehKTvgotUrCHz+crTtPn5YRv3VxH5jYyS3/egL6L/NcA= -----END CERTIFICATE-----Generated at Thu Sep 24 06:32:23 2026 by rpki-client