$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: PoDcFcm4TEMFROVBU5wVKYdRMwMxPyXP44pafUphclQ= Subject key identifier: 94:E1:FE:F8:77:3B:73:F9:BF:C7:96:AB:BD:52:90:12:FE:A7:01:D1 Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 36F1F3E52D70E14CF59080DFC8B369FF24EFE4BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 07:30:26 +0000 Manifest this update: Wed 23 Sep 2026 07:25:26 +0000 Manifest next update: Thu 24 Sep 2026 07:54:26 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) 2: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: xyXGTYyqU4lSPvCgfUlonphq4eDpCskenpE05oJJNEI=) 3: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) 4: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f1:f3:e5:2d:70:e1:4c:f5:90:80:df:c8:b3:69:ff:24:ef:e4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: Sep 23 07:25:26 2026 GMT Not After : Sep 24 07:54:26 2026 GMT Subject: CN=94E1FEF8773B73F9BFC796ABBD529012FEA701D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:a9:e5:78:fd:e8:21:a5:25:6f:8a:83:71: e4:2b:d2:f2:58:af:db:4f:a2:7f:01:65:7a:38:56: 93:04:40:79:91:41:22:9c:6b:e0:cc:57:fb:8a:38: 18:a5:eb:79:a2:84:51:24:2d:68:cf:37:cd:72:02: 8f:49:04:eb:84:d6:c2:86:8d:54:09:f7:45:70:24: 5a:27:f2:1f:7e:b1:7e:a1:ce:fb:3c:f9:ec:d6:42: 13:29:8e:f6:86:bd:cc:da:f5:31:7a:8c:29:69:2b: 9d:db:d0:93:63:43:86:77:a8:09:05:b8:68:f1:d2: f9:73:1c:bf:c4:f0:6d:bf:b1:20:be:14:20:aa:8f: 89:fd:f7:c2:fd:59:3d:92:f5:b4:ab:e0:85:cc:65: f0:70:f3:30:12:83:30:c3:70:35:a8:96:5c:de:e2: 09:b5:a5:a2:df:aa:64:2f:86:d0:a4:66:e3:f2:ca: 4c:38:5f:90:cb:43:5b:0e:60:b7:29:23:a5:5c:9a: e3:65:a2:71:38:9f:08:08:49:b1:c5:92:96:87:ce: 4b:89:f7:45:4d:8b:7f:ea:7d:f4:e7:76:ab:20:cf: 72:c2:cd:fe:3a:c3:dd:3a:23:58:a0:2f:13:53:11: fe:6f:dc:e1:ff:a5:0f:56:2c:10:9d:39:24:bf:c9: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E1:FE:F8:77:3B:73:F9:BF:C7:96:AB:BD:52:90:12:FE:A7:01:D1 X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:68:d2:ee:3d:ac:f2:33:27:29:fc:76:b8:49:a1:6b:77:18: 0c:9d:9a:1a:34:b2:82:a8:8f:11:9b:2c:df:e7:5d:39:0b:71: 2c:28:f0:ea:ec:4d:3f:9b:59:73:0b:21:dc:33:5d:92:a4:8e: 21:74:bd:76:5b:49:58:14:2d:7e:1f:f7:e0:a8:10:9e:1b:51: 48:8c:a5:d5:e6:75:ab:25:8d:0e:22:0b:8f:a8:3c:73:06:68: a3:b6:23:00:74:1a:de:8d:e9:ca:6e:05:3e:07:da:7c:be:53: 19:e7:31:8d:d6:2b:12:68:3b:fd:09:12:72:08:3b:e8:86:a2: d6:f3:95:9d:91:d1:94:fc:86:db:80:87:a7:38:5d:1a:d5:35: bc:54:42:4a:5d:99:72:f9:97:19:c0:91:27:b7:67:8d:70:eb: fe:70:6f:88:3a:9a:00:60:46:67:d7:d3:b9:6a:96:9a:2d:66: c4:57:9e:41:f4:c7:38:a1:2d:7f:af:26:ce:78:d5:dd:ce:d4: ed:74:a8:91:89:fb:17:e4:a1:f7:6b:eb:a9:1b:99:89:42:df: 6c:8f:89:b1:b4:46:0c:42:f3:85:2e:32:34:65:5b:45:eb:ac: f5:62:9c:53:99:70:6d:73:46:6f:c6:17:8a:73:fd:d4:4e:16: 81:67:0e:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvHz5S1w4Uz1kIDfyLNp/yTv5L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjA5MjMwNzI1MjZaFw0yNjA5MjQwNzU0MjZaMDMxMTAvBgNV BAMTKDk0RTFGRUY4NzczQjczRjlCRkM3OTZBQkJENTI5MDEyRkVBNzAxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukanleP3oIaUlb4qDceQr0vJY r9tPon8BZXo4VpMEQHmRQSKca+DMV/uKOBil63mihFEkLWjPN81yAo9JBOuE1sKG jVQJ90VwJFon8h9+sX6hzvs8+ezWQhMpjvaGvcza9TF6jClpK53b0JNjQ4Z3qAkF uGjx0vlzHL/E8G2/sSC+FCCqj4n998L9WT2S9bSr4IXMZfBw8zASgzDDcDWollze 4gm1paLfqmQvhtCkZuPyykw4X5DLQ1sOYLcpI6VcmuNlonE4nwgISbHFkpaHzkuJ 90VNi3/qffTndqsgz3LCzf46w906I1igLxNTEf5v3OH/pQ9WLBCdOSS/yRNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlOH++Hc7c/m/x5arvVKQEv6nAdEwHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5o0u49rPIzJyn8drhJoWt3GAydmho0soKo jxGbLN/nXTkLcSwo8OrsTT+bWXMLIdwzXZKkjiF0vXZbSVgULX4f9+CoEJ4bUUiM pdXmdasljQ4iC4+oPHMGaKO2IwB0Gt6N6cpuBT4H2ny+UxnnMY3WKxJoO/0JEnII O+iGotbzlZ2R0ZT8htuAh6c4XRrVNbxUQkpdmXL5lxnAkSe3Z41w6/5wb4g6mgBg RmfX07lqlpotZsRXnkH0xzihLX+vJs541d3O1O10qJGJ+xfkofdr66kbmYlC32yP ibG0RgxC84UuMjRlW0XrrPVinFOZcG1zRm/GF4pz/dROFoFnDpQ= -----END CERTIFICATE-----Generated at Wed Sep 23 13:09:38 2026 by rpki-client