$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: 5lFNGOEbH+p2mBOL8qrb020WWhFI46BYrc75/Si/4ek= Subject key identifier: BC:4F:75:54:25:3A:70:0F:B5:64:85:BE:46:C5:BD:05:A3:5B:64:C3 Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 464240940F0E3DF6DFCB17B47958AF47DDE3C874 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 04:29:52 +0000 Manifest this update: Sat 14 Nov 2026 04:24:52 +0000 Manifest next update: Sun 15 Nov 2026 05:42:52 +0000 Files and hashes: 1: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: Ivkqskcrr/NErSgV2ALnfjxNDtrGmjdfHDdViMuWGJE=) 2: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) 3: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) 4: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 05:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:42:40:94:0f:0e:3d:f6:df:cb:17:b4:79:58:af:47:dd:e3:c8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: Nov 14 04:24:52 2026 GMT Not After : Nov 15 05:42:52 2026 GMT Subject: CN=BC4F7554253A700FB56485BE46C5BD05A35B64C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:51:b0:fc:a0:65:f2:56:d2:b1:4b:9f:7f: 32:63:fc:72:73:d4:05:16:8b:a5:5b:43:eb:9d:08: 40:08:e4:89:71:04:d4:c9:b0:85:ae:21:d5:68:37: 91:d8:3a:1b:5e:7d:d0:a9:89:ce:97:ff:18:ac:32: 88:51:7c:5d:4c:2a:8c:a2:33:8c:16:5e:40:fa:20: e0:d2:47:1e:0b:1f:b4:a1:5e:43:c2:6d:d2:7e:ba: 58:4c:12:39:b4:24:ea:f5:ea:de:91:1f:46:46:e2: 65:4f:13:85:ff:6f:d9:e1:9f:1e:c3:39:8f:e2:28: 56:05:72:d1:fc:0d:51:18:37:8a:de:3e:9b:32:d3: 6b:b1:00:06:49:04:49:19:8f:6f:c9:8f:b8:a1:c6: 15:a9:36:06:aa:13:90:f3:2d:45:23:be:61:d2:8b: 42:e6:67:9c:5b:ad:e1:88:f7:2f:61:23:84:9e:82: fc:1f:a2:60:0a:4b:70:39:f7:4f:d0:8d:b8:3b:88: 1e:57:22:01:c5:e7:58:eb:8f:bc:64:62:30:12:d1: 7f:89:41:06:a0:0b:67:ba:97:5b:54:b9:61:45:16: b2:86:79:11:78:c4:25:6e:2c:92:c1:4b:b8:e8:1b: 65:88:6f:e6:42:2b:21:84:fd:ac:04:2a:ec:f4:e0: 90:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4F:75:54:25:3A:70:0F:B5:64:85:BE:46:C5:BD:05:A3:5B:64:C3 X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:52:4d:da:23:5a:bc:3c:cf:2c:90:3f:c5:18:d6:51:7f:66: 34:00:f4:0f:22:df:bf:c6:37:44:37:10:37:d1:25:3b:9d:4c: 35:77:c4:7c:39:d8:5a:81:6e:a6:2e:5b:01:c3:25:63:65:f2: 38:ce:e3:b3:b7:e2:10:bb:f6:67:84:20:24:c9:0c:19:a0:1c: 63:81:e6:cb:03:95:f0:14:72:f0:ae:ae:41:7e:d7:48:66:d0: 45:57:89:24:33:8f:2d:2b:74:fe:a9:90:9c:42:1c:74:69:e9: d9:5d:77:61:70:f9:ee:5d:e9:78:5c:d9:94:e5:68:89:6c:a6: 85:13:77:8d:0c:c2:05:70:1c:c1:a8:e6:54:7f:5f:43:84:30: 50:09:61:3d:45:0b:f7:98:3a:08:35:24:2c:f7:e6:2c:6d:4e: 7a:b4:2b:da:33:c7:4e:f0:2a:76:da:e1:35:8e:c6:cf:b5:55: 81:d8:10:45:36:d8:7f:ee:ec:d2:3d:e9:6e:6f:e3:f5:22:81: 9f:4b:e2:f5:9c:15:4f:4d:a8:e6:7a:d8:1d:11:c2:56:17:c1: 14:c0:7e:b3:c7:a8:97:8c:c2:3e:39:13:4a:55:09:45:f4:b8: 24:9b:52:0e:63:f3:b6:4f:2c:e1:d2:14:9c:95:8a:f3:68:ad: a1:c2:26:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURkJAlA8OPfbfyxe0eVivR93jyHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjExMTQwNDI0NTJaFw0yNjExMTUwNTQyNTJaMDMxMTAvBgNV BAMTKEJDNEY3NTU0MjUzQTcwMEZCNTY0ODVCRTQ2QzVCRDA1QTM1QjY0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+1Gw/KBl8lbSsUuffzJj/HJz 1AUWi6VbQ+udCEAI5IlxBNTJsIWuIdVoN5HYOhtefdCpic6X/xisMohRfF1MKoyi M4wWXkD6IODSRx4LH7ShXkPCbdJ+ulhMEjm0JOr16t6RH0ZG4mVPE4X/b9nhnx7D OY/iKFYFctH8DVEYN4rePpsy02uxAAZJBEkZj2/Jj7ihxhWpNgaqE5DzLUUjvmHS i0LmZ5xbreGI9y9hI4SegvwfomAKS3A590/Qjbg7iB5XIgHF51jrj7xkYjAS0X+J QQagC2e6l1tUuWFFFrKGeRF4xCVuLJLBS7joG2WIb+ZCKyGE/awEKuz04JBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvE91VCU6cA+1ZIW+RsW9BaNbZMMwHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5STdojWrw8zyyQP8UY1lF/ZjQA9A8i37/G N0Q3EDfRJTudTDV3xHw52FqBbqYuWwHDJWNl8jjO47O34hC79meEICTJDBmgHGOB 5ssDlfAUcvCurkF+10hm0EVXiSQzjy0rdP6pkJxCHHRp6dldd2Fw+e5d6Xhc2ZTl aIlspoUTd40MwgVwHMGo5lR/X0OEMFAJYT1FC/eYOgg1JCz35ixtTnq0K9ozx07w Knba4TWOxs+1VYHYEEU22H/u7NI96W5v4/UigZ9L4vWcFU9NqOZ62B0RwlYXwRTA frPHqJeMwj45E0pVCUX0uCSbUg5j87ZPLOHSFJyVivNoraHCJhQ= -----END CERTIFICATE-----Generated at Sat Nov 14 22:25:50 2026 by rpki-client