$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: E0yhaOCeFFpc9tEt+zxLkg3Yhq00wBEbsKDIgZG54bw= Subject key identifier: 91:E9:16:5B:0C:B1:96:6C:A7:59:E6:E8:6F:22:ED:4E:62:EC:1D:8C Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 4D79473E999043B0D6DEAFD3A688E479ABA254A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:31:05 +0000 Manifest this update: Tue 12 May 2026 16:26:05 +0000 Manifest next update: Wed 13 May 2026 20:02:05 +0000 Files and hashes: 1: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 2: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 3: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) 4: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 5: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 6: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: QTL3hJ/VQorOtFHm7hT+A7Ug+XIffwMySHN5jr5HeCo=) 7: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:79:47:3e:99:90:43:b0:d6:de:af:d3:a6:88:e4:79:ab:a2:54:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: May 12 16:26:05 2026 GMT Not After : May 13 20:02:05 2026 GMT Subject: CN=91E9165B0CB1966CA759E6E86F22ED4E62EC1D8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:55:61:b6:6b:ec:d4:3a:7f:62:5d:e6:b2: 92:34:c4:22:4a:c7:3e:75:d0:8a:40:cd:ab:cd:e0: c7:8b:fb:a7:1e:24:57:5b:45:35:2a:5d:5e:8c:e1: d0:54:5b:d7:f8:a4:31:1c:f2:ec:50:f0:3f:22:2d: 5d:4c:bd:2f:86:41:53:37:34:2e:73:2c:e6:4f:d6: 15:f6:8e:e9:95:c4:60:e7:81:17:99:2a:bd:17:c1: 9a:49:d5:98:81:bc:d7:66:62:68:db:5a:2d:58:1d: ce:87:d5:68:d9:74:36:5f:cb:47:35:39:bd:3f:08: 3d:ca:d4:bf:f2:e4:f0:a3:f4:1e:99:f0:29:c9:c7: fd:f7:49:e7:02:b4:46:b8:44:90:7e:6b:06:dd:6b: 87:4b:2c:00:ec:52:c1:a6:4c:82:63:4f:42:24:60: 4d:6d:ee:1e:e5:09:ce:2a:1c:e6:3a:b8:8b:95:e9: 80:56:50:8a:5e:a7:56:3d:a8:61:c5:73:29:49:40: b7:cb:c8:4d:27:db:54:b1:34:7d:5c:c8:5b:61:a2: 0c:d8:8e:b8:3a:bf:d9:5d:cc:ae:33:25:7c:a4:23: 25:73:db:b5:82:f5:0a:08:5e:34:a9:bc:00:42:6c: cf:a0:6d:8c:24:14:b8:5f:e7:a5:af:c6:16:1c:23: c2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E9:16:5B:0C:B1:96:6C:A7:59:E6:E8:6F:22:ED:4E:62:EC:1D:8C X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:65:4e:06:2c:0d:44:ac:c0:8a:ce:75:98:31:fd:b6:5e:2d: 1e:36:95:4d:04:ab:bc:b9:ca:4a:20:73:44:21:b5:0f:76:82: 00:51:22:12:f8:47:09:46:0e:39:97:01:7b:de:44:38:6e:58: f6:db:4f:16:c4:fe:5f:65:d0:62:bc:93:c9:ab:c0:3d:14:9c: 82:da:04:d0:f2:00:57:21:e0:6d:b2:ec:e0:93:ed:6a:9e:37: 08:ae:db:58:d9:1f:66:d4:13:54:9f:88:e0:88:d8:d9:36:d1: a4:c0:f0:83:99:71:87:2b:77:dc:9c:e6:b4:fb:49:06:82:fb: 27:6d:07:d5:d3:ab:d8:2b:4a:69:ba:20:07:07:5e:c6:ff:7e: 2b:8f:fe:82:65:d1:1f:e4:68:ff:05:d2:43:ef:af:ac:1f:52: 46:d3:90:cb:40:d5:b9:dd:e8:71:4f:43:26:27:c3:82:33:81: d3:27:77:30:4e:80:5c:df:16:dd:60:d1:fb:01:df:93:da:e1: aa:32:62:17:61:45:4e:4c:b4:7f:0c:4b:7e:9a:92:97:60:e2: 3c:98:f4:fc:39:85:da:0a:a2:aa:0b:03:84:2b:8f:7d:ea:da: 73:a7:86:af:38:38:1c:5d:61:9b:d3:3f:8c:4e:b1:45:3a:75: 9c:7e:12:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXlHPpmQQ7DW3q/TpojkeauiVKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA1MTIxNjI2MDVaFw0yNjA1MTMyMDAyMDVaMDMxMTAvBgNV BAMTKDkxRTkxNjVCMENCMTk2NkNBNzU5RTZFODZGMjJFRDRFNjJFQzFEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/lVhtmvs1Dp/Yl3mspI0xCJK xz510IpAzavN4MeL+6ceJFdbRTUqXV6M4dBUW9f4pDEc8uxQ8D8iLV1MvS+GQVM3 NC5zLOZP1hX2jumVxGDngReZKr0XwZpJ1ZiBvNdmYmjbWi1YHc6H1WjZdDZfy0c1 Ob0/CD3K1L/y5PCj9B6Z8CnJx/33SecCtEa4RJB+awbda4dLLADsUsGmTIJjT0Ik YE1t7h7lCc4qHOY6uIuV6YBWUIpep1Y9qGHFcylJQLfLyE0n21SxNH1cyFthogzY jrg6v9ldzK4zJXykIyVz27WC9QoIXjSpvABCbM+gbYwkFLhf56WvxhYcI8LRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkekWWwyxlmynWebobyLtTmLsHYwwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZlTgYsDUSswIrOdZgx/bZeLR42lU0Eq7y5 ykogc0QhtQ92ggBRIhL4RwlGDjmXAXveRDhuWPbbTxbE/l9l0GK8k8mrwD0UnILa BNDyAFch4G2y7OCT7WqeNwiu21jZH2bUE1SfiOCI2Nk20aTA8IOZcYcrd9yc5rT7 SQaC+ydtB9XTq9grSmm6IAcHXsb/fiuP/oJl0R/kaP8F0kPvr6wfUkbTkMtA1bnd 6HFPQyYnw4IzgdMndzBOgFzfFt1g0fsB35Pa4aoyYhdhRU5MtH8MS36akpdg4jyY 9Pw5hdoKoqoLA4Qrj33q2nOnhq84OBxdYZvTP4xOsUU6dZx+Eno= -----END CERTIFICATE-----Generated at Wed May 13 04:15:54 2026 by rpki-client