$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: QiWf8wu5o5NoE8ncKfiyRHbuUj0sWErmzXAyNHqKVuY= Subject key identifier: 41:91:07:D4:87:86:94:8D:70:1D:EC:E4:59:10:A8:8A:D7:95:B7:F0 Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 2B77AFDD1ED39342D8B77B971480D4D2A0E2EF54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:32:57 +0000 Manifest this update: Thu 23 Jul 2026 10:27:57 +0000 Manifest next update: Fri 24 Jul 2026 13:50:57 +0000 Files and hashes: 1: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: j7DW5WchUVsZ+AkAPi8JzKTZ415a9XQAHpMXSR1k2Y8=) 2: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) 3: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) 4: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:77:af:dd:1e:d3:93:42:d8:b7:7b:97:14:80:d4:d2:a0:e2:ef:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: Jul 23 10:27:57 2026 GMT Not After : Jul 24 13:50:57 2026 GMT Subject: CN=419107D48786948D701DECE45910A88AD795B7F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:22:56:ed:ab:5a:cc:c3:d4:6e:76:d5:f8: b1:17:ae:c0:5b:e2:e8:00:df:d4:8c:4f:ad:06:57: 10:b6:c4:43:f2:44:06:e3:25:c2:0f:cb:6c:14:e9: 23:37:9d:ea:9b:88:33:ca:26:79:88:c8:ce:73:dc: 37:cc:85:3e:8b:d1:95:3f:9c:2c:19:1d:67:f3:89: 2b:7c:4c:df:4e:79:b0:9e:16:18:4a:70:1f:71:81: 90:75:c6:f1:54:d5:bf:f0:e1:c3:7a:2c:c3:6c:83: aa:30:81:99:58:b2:9d:65:89:d7:d8:ee:2f:cd:b8: a6:6c:a2:20:72:75:ea:fd:b8:5a:1f:2f:37:07:b2: 25:1b:f3:a0:e7:f0:a3:fa:4e:ec:57:5e:81:47:8f: 0a:aa:d3:27:cb:41:e7:3c:66:0c:06:2f:40:01:fc: ec:c7:f7:db:47:ee:f0:63:4c:5b:88:a7:68:ee:ec: d8:5b:07:27:ec:31:72:6d:70:21:4c:77:9e:ec:99: 6a:fa:75:ab:ee:ee:0c:c3:a8:01:29:66:48:60:4e: 01:a1:25:9a:89:fa:d0:5d:ce:43:14:0f:45:8a:79: 4c:96:89:49:44:35:5a:43:c9:35:7e:ff:65:39:3d: 39:7a:b4:eb:b5:ea:1d:0c:91:47:1d:a3:c5:32:7e: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:91:07:D4:87:86:94:8D:70:1D:EC:E4:59:10:A8:8A:D7:95:B7:F0 X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:96:fe:03:74:b8:4e:27:64:f6:ae:cf:2b:39:77:55:1d:05: 5d:66:ad:1b:e8:5f:42:47:14:ec:31:01:62:f1:83:83:6c:dc: 94:68:9b:09:a9:a0:cf:72:71:f8:a4:27:58:e4:88:10:3a:35: 0d:f2:88:82:11:e4:4b:c5:5c:ad:16:b9:67:7f:18:df:92:b2: 1d:e3:b3:17:35:ef:44:b7:a8:cf:27:23:ea:e3:71:6c:70:00: c4:d6:b7:d7:b0:0c:9e:71:be:b9:f4:f5:f5:57:8f:45:d5:33: 9c:4b:96:70:c9:71:d4:70:04:e7:b1:05:99:ee:85:a2:3a:9b: ac:fc:95:9d:8e:eb:bb:16:40:87:0a:bd:c0:74:44:4f:b9:ad: 2a:67:b7:d1:8c:43:23:ea:f1:d9:30:c6:db:6d:a7:6b:ff:18: 0c:f0:fb:b3:cd:f1:17:30:bc:ba:27:a9:a8:60:67:bc:bd:53: 2b:cd:7c:36:74:2e:83:af:01:ad:c2:2a:62:eb:29:12:6c:08: 39:7b:4d:78:3a:74:2f:e7:25:d9:45:33:92:3a:48:ea:d3:6d: 98:1b:b1:e3:40:f7:0b:a3:95:f4:83:4b:9d:b8:4c:c5:c7:21: e8:d5:b5:2e:ca:17:09:3a:34:e0:b2:75:9d:f0:92:b9:de:1b: 2b:85:32:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3ev3R7Tk0LYt3uXFIDU0qDi71QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjA3MjMxMDI3NTdaFw0yNjA3MjQxMzUwNTdaMDMxMTAvBgNV BAMTKDQxOTEwN0Q0ODc4Njk0OEQ3MDFERUNFNDU5MTBBODhBRDc5NUI3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5yJW7atazMPUbnbV+LEXrsBb 4ugA39SMT60GVxC2xEPyRAbjJcIPy2wU6SM3neqbiDPKJnmIyM5z3DfMhT6L0ZU/ nCwZHWfziSt8TN9OebCeFhhKcB9xgZB1xvFU1b/w4cN6LMNsg6owgZlYsp1lidfY 7i/NuKZsoiByder9uFofLzcHsiUb86Dn8KP6TuxXXoFHjwqq0yfLQec8ZgwGL0AB /OzH99tH7vBjTFuIp2ju7NhbByfsMXJtcCFMd57smWr6davu7gzDqAEpZkhgTgGh JZqJ+tBdzkMUD0WKeUyWiUlENVpDyTV+/2U5PTl6tOu16h0MkUcdo8UyfgYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQZEH1IeGlI1wHezkWRCoiteVt/AwHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSW/gN0uE4nZPauzys5d1UdBV1mrRvoX0JH FOwxAWLxg4Ns3JRomwmpoM9ycfikJ1jkiBA6NQ3yiIIR5EvFXK0WuWd/GN+Ssh3j sxc170S3qM8nI+rjcWxwAMTWt9ewDJ5xvrn09fVXj0XVM5xLlnDJcdRwBOexBZnu haI6m6z8lZ2O67sWQIcKvcB0RE+5rSpnt9GMQyPq8dkwxtttp2v/GAzw+7PN8Rcw vLonqahgZ7y9UyvNfDZ0LoOvAa3CKmLrKRJsCDl7TXg6dC/nJdlFM5I6SOrTbZgb seNA9wujlfSDS524TMXHIejVtS7KFwk6NOCydZ3wkrneGyuFMkc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:46:10 2026 by rpki-client