$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: nB1QhThCrzFtAysfUNbs5qby3npUHBJu1CpEWv8qN5c= Subject key identifier: E0:E3:F0:A7:32:B8:47:0E:90:B4:C1:CE:84:7E:4A:B4:83:C1:63:A1 Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 6A64CCC991EBB35B2495B031666FD2EC992F0198 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:43:04 +0000 Manifest this update: Tue 12 May 2026 03:38:04 +0000 Manifest next update: Wed 13 May 2026 06:12:04 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) 2: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) 3: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: 7Ar9Liomar5/1LK0q6/alNqw0B9uATSm++6oQlFXLVg=) 4: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:64:cc:c9:91:eb:b3:5b:24:95:b0:31:66:6f:d2:ec:99:2f:01:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: May 12 03:38:04 2026 GMT Not After : May 13 06:12:04 2026 GMT Subject: CN=E0E3F0A732B8470E90B4C1CE847E4AB483C163A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:30:1c:5f:91:e4:6c:03:57:29:f1:9f:f7:f0: d3:2c:ae:4c:55:31:d6:9e:74:51:bc:46:32:ea:da: 93:b9:35:fe:8a:a0:07:0f:93:db:03:61:9f:20:c1: 2c:84:44:7b:60:b9:71:3e:fe:32:04:44:8c:7d:65: a0:84:58:77:92:71:b5:6b:3a:36:d3:b7:66:7f:33: 3d:59:b6:f3:2b:d2:b9:03:59:94:a6:70:29:3e:f8: 56:ac:2f:1c:11:d6:0c:ef:02:b6:c0:58:ea:9f:4e: b7:d8:0e:fd:02:26:89:b0:68:cf:b6:f9:19:71:d5: ee:05:a8:21:c4:e9:b3:90:21:3b:1f:5f:68:2f:4a: ad:10:c4:b6:f1:2d:8d:a9:bf:6b:6e:6b:83:5a:3c: 45:36:05:9e:2f:e8:df:cd:1b:7a:65:11:28:25:09: c1:0a:c8:bd:e5:63:86:bb:c0:72:b9:66:c2:5c:ad: 8f:16:53:78:c2:e9:7d:0f:99:98:2a:ae:9f:86:34: ee:f6:62:a5:d1:ec:fd:0d:d9:e4:6c:9d:ad:58:a9: c2:0a:49:09:3a:85:be:c5:e0:67:6b:8d:c5:92:ea: a7:2f:45:50:c0:d0:80:86:0f:00:a8:8f:a9:e6:99: fc:d2:bc:22:c7:68:66:db:7a:aa:98:e0:45:b7:b8: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E3:F0:A7:32:B8:47:0E:90:B4:C1:CE:84:7E:4A:B4:83:C1:63:A1 X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8b:8d:db:77:8b:dd:fe:8c:88:57:3f:a5:85:2e:9e:5e:15: f0:9f:fb:a9:3d:4d:c8:dc:26:67:3d:da:22:6e:23:39:83:8c: 67:47:95:04:37:f8:19:2f:22:00:c4:2d:00:15:62:85:e5:d5: 63:01:1c:d0:5f:38:3b:a1:31:30:fc:eb:6e:e5:33:82:00:f8: 5f:b0:3d:50:71:31:bf:15:8e:b9:c5:49:a4:b4:92:bd:20:d7: 2b:2a:87:a3:c4:b2:2b:f0:01:64:9a:f0:77:e7:60:74:5b:85: 95:5e:7d:1d:d6:98:76:e9:28:bf:d6:5d:96:d5:ad:fb:6e:64: 43:32:bc:3b:2a:a1:ab:29:df:70:0f:24:93:4e:c2:0b:e0:61: e4:83:d5:c9:0d:04:bb:c5:33:83:13:53:f0:f3:ca:41:b4:ff: 2b:be:9f:30:53:33:f2:fc:f3:ce:e3:94:ea:f8:1b:99:8c:4e: 41:86:0c:3c:e8:e3:ff:ad:c9:0b:a7:e6:6c:b9:19:ea:e9:76: 2d:75:49:b7:b3:44:5c:0d:27:00:39:34:9d:7d:b4:71:e8:bb: 24:1f:42:bc:95:3c:d1:f8:15:8a:91:81:89:d6:49:ad:cd:9d: 90:58:b7:a0:63:bf:a5:e3:10:f4:c2:22:04:d9:f5:1d:e4:f1: 6c:60:ed:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamTMyZHrs1sklbAxZm/S7JkvAZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjA1MTIwMzM4MDRaFw0yNjA1MTMwNjEyMDRaMDMxMTAvBgNV BAMTKEUwRTNGMEE3MzJCODQ3MEU5MEI0QzFDRTg0N0U0QUI0ODNDMTYzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMBxfkeRsA1cp8Z/38NMsrkxV MdaedFG8RjLq2pO5Nf6KoAcPk9sDYZ8gwSyERHtguXE+/jIERIx9ZaCEWHeScbVr OjbTt2Z/Mz1ZtvMr0rkDWZSmcCk++FasLxwR1gzvArbAWOqfTrfYDv0CJomwaM+2 +Rlx1e4FqCHE6bOQITsfX2gvSq0QxLbxLY2pv2tua4NaPEU2BZ4v6N/NG3plESgl CcEKyL3lY4a7wHK5ZsJcrY8WU3jC6X0PmZgqrp+GNO72YqXR7P0N2eRsna1YqcIK SQk6hb7F4GdrjcWS6qcvRVDA0ICGDwCoj6nmmfzSvCLHaGbbeqqY4EW3uHAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OPwpzK4Rw6QtMHOhH5KtIPBY6EwHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGLjdt3i93+jIhXP6WFLp5eFfCf+6k9Tcjc Jmc92iJuIzmDjGdHlQQ3+BkvIgDELQAVYoXl1WMBHNBfODuhMTD8627lM4IA+F+w PVBxMb8VjrnFSaS0kr0g1ysqh6PEsivwAWSa8HfnYHRbhZVefR3WmHbpKL/WXZbV rftuZEMyvDsqoasp33APJJNOwgvgYeSD1ckNBLvFM4MTU/DzykG0/yu+nzBTM/L8 887jlOr4G5mMTkGGDDzo4/+tyQun5my5Gerpdi11SbezRFwNJwA5NJ19tHHouyQf QryVPNH4FYqRgYnWSa3NnZBYt6Bjv6XjEPTCIgTZ9R3k8Wxg7U4= -----END CERTIFICATE-----Generated at Tue May 12 22:52:48 2026 by rpki-client