$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: SvErfFOfSNKS0+fck5/010M5uHNAIQ/P04b5p2XKk2Y= Subject key identifier: F4:50:DA:C1:47:96:BD:BB:CB:7B:C9:06:E4:9D:62:DD:C7:D4:51:5E Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 76BAA8E24A62E455FEBB953CA9DD692DA10FBBA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:18:53 +0000 Manifest this update: Thu 23 Jul 2026 11:13:53 +0000 Manifest next update: Fri 24 Jul 2026 14:25:53 +0000 Files and hashes: 1: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: foePrx/AH6voGgF/DkBf2da/Z7avRFd2XCpOo1QPFS4=) 2: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) 3: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 4: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 5: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 6: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 7: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ba:a8:e2:4a:62:e4:55:fe:bb:95:3c:a9:dd:69:2d:a1:0f:bb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Jul 23 11:13:53 2026 GMT Not After : Jul 24 14:25:53 2026 GMT Subject: CN=F450DAC14796BDBBCB7BC906E49D62DDC7D4515E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:d8:23:7f:b6:80:93:f2:d6:35:c0:49:7e: 44:61:63:71:6e:c7:3f:d0:97:3f:fb:67:ac:12:29: 20:a0:e2:f6:e7:08:58:22:d0:55:69:e5:7a:4b:2a: 73:1d:70:4b:d6:af:22:36:06:79:5a:39:3e:9a:79: 15:9c:30:99:8c:19:9e:68:10:04:b2:53:bb:a1:ab: e5:70:5e:9b:e0:73:37:80:4d:65:71:ff:d8:01:c3: 83:af:b7:05:1e:cf:a9:4c:13:28:d7:5f:3e:ab:f5: a6:b7:42:47:00:ff:0d:7f:e1:54:d2:43:69:c0:66: 95:22:ab:65:f3:9e:3a:40:38:71:3f:3e:33:3e:93: 6d:4a:76:3b:a4:e0:c2:0f:ee:54:15:18:5c:e4:6f: 3a:26:d9:f8:1c:12:94:98:c4:1b:2e:6d:07:8b:07: f8:8b:33:61:b0:f8:1e:ab:22:e2:dc:4d:45:48:f4: 34:14:a7:eb:41:18:15:44:2d:ff:b0:ef:3b:cf:a5: 21:bc:b3:38:9d:72:84:7d:ea:a3:66:39:a3:77:45: a7:a5:b0:55:68:66:ba:97:4d:23:c8:6c:f3:bc:9e: a4:bd:21:d6:1d:a6:a8:45:99:f5:ea:c0:6e:a9:66: 02:6a:ff:49:a9:77:89:4b:83:a4:8c:f1:84:d1:b4: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:50:DA:C1:47:96:BD:BB:CB:7B:C9:06:E4:9D:62:DD:C7:D4:51:5E X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:aa:b5:b3:83:38:76:0b:6d:6b:9d:2d:5b:59:77:b3:0a:8c: 5f:bb:13:30:34:bb:b0:2c:fc:32:3e:21:91:09:c9:45:64:d0: f5:28:de:7f:2a:8d:89:fb:ac:d7:ca:e4:b7:50:d8:db:bb:69: 25:8c:6e:44:14:4d:b9:ea:c0:7a:22:0c:e0:7e:62:b4:1b:84: ef:75:ca:00:7e:55:67:01:f1:5b:db:49:73:c8:dc:75:b9:86: a2:c4:f6:23:49:9d:04:96:ef:a4:5c:3d:7d:a4:e8:8d:7b:d5: 9c:63:30:31:c1:75:8a:ef:33:72:d7:12:a9:7e:19:59:f0:4e: 97:61:51:3d:8c:48:71:ec:cf:44:a6:bd:a8:46:f9:38:e8:66: 2c:ec:46:e1:f4:92:ea:c9:40:f0:88:5e:47:23:67:55:c9:88: f0:a9:8b:1a:27:4d:1b:5e:b0:ea:9a:c2:16:49:bf:51:f2:77: 2b:86:dd:9a:6c:b5:fb:7a:0f:18:53:05:f4:d4:ae:df:95:d2: ef:25:39:9c:fb:02:ce:e6:5e:ad:b3:13:c3:51:69:36:05:9e: c6:59:c0:8f:21:ed:23:ed:43:50:e9:1c:8b:b9:73:6f:f1:59: 4c:ab:68:af:fa:97:58:08:7c:de:a9:5e:e5:ec:fc:4d:c5:7c: bd:9a:2f:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrqo4kpi5FX+u5U8qd1pLaEPu6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA3MjMxMTEzNTNaFw0yNjA3MjQxNDI1NTNaMDMxMTAvBgNV BAMTKEY0NTBEQUMxNDc5NkJEQkJDQjdCQzkwNkU0OUQ2MkREQzdENDUxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMNgjf7aAk/LWNcBJfkRhY3Fu xz/Qlz/7Z6wSKSCg4vbnCFgi0FVp5XpLKnMdcEvWryI2BnlaOT6aeRWcMJmMGZ5o EASyU7uhq+VwXpvgczeATWVx/9gBw4OvtwUez6lMEyjXXz6r9aa3QkcA/w1/4VTS Q2nAZpUiq2XznjpAOHE/PjM+k21Kdjuk4MIP7lQVGFzkbzom2fgcEpSYxBsubQeL B/iLM2Gw+B6rIuLcTUVI9DQUp+tBGBVELf+w7zvPpSG8szidcoR96qNmOaN3Rael sFVoZrqXTSPIbPO8nqS9IdYdpqhFmfXqwG6pZgJq/0mpd4lLg6SM8YTRtKG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9FDawUeWvbvLe8kG5J1i3cfUUV4wHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqqtbODOHYLbWudLVtZd7MKjF+7EzA0u7As /DI+IZEJyUVk0PUo3n8qjYn7rNfK5LdQ2Nu7aSWMbkQUTbnqwHoiDOB+YrQbhO91 ygB+VWcB8VvbSXPI3HW5hqLE9iNJnQSW76RcPX2k6I171ZxjMDHBdYrvM3LXEql+ GVnwTpdhUT2MSHHsz0SmvahG+TjoZizsRuH0kurJQPCIXkcjZ1XJiPCpixonTRte sOqawhZJv1HydyuG3Zpstft6DxhTBfTUrt+V0u8lOZz7As7mXq2zE8NRaTYFnsZZ wI8h7SPtQ1DpHIu5c2/xWUyraK/6l1gIfN6pXuXs/E3FfL2aL0M= -----END CERTIFICATE-----Generated at Fri Jul 24 04:23:58 2026 by rpki-client