$ rpki-client -vvf repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.mft File: 24D5D46277BE98F80EC6AF901FD4322AA2FAB208.mft (raw, json) Hash identifier: xsM176It46bZAjetOAwTH7XFb1YjJZKmJRQJYpf1BB0= Subject key identifier: C7:A2:35:A5:37:FE:FA:EA:CA:2C:70:DA:7E:35:C0:C7:95:DE:62:35 Authority key identifier: 24:D5:D4:62:77:BE:98:F8:0E:C6:AF:90:1F:D4:32:2A:A2:FA:B2:08 Certificate issuer: /CN=24D5D46277BE98F80EC6AF901FD4322AA2FAB208 Certificate serial: 6E1E856DCCB603D9D356AA7BB34DFA0A445D959E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.mft Manifest number: 1C Signing time: Sat 04 Apr 2026 21:31:43 +0000 Manifest this update: Sat 04 Apr 2026 21:26:43 +0000 Manifest next update: Tue 07 Apr 2026 23:34:43 +0000 Files and hashes: 1: 24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl (hash: oyVGjIkjgwFxciedqJZmUuFJbvGjarLLIREoNTAIs5o=) 2: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: XFhFebLIPZULajE3nvQRfK4ZgyC1cbWqHGjSgE8qiuc=) 3: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: l2sRWuDj9NuoGun/QwVKlUMfqQ/mBD+QWaXv9jkfzHs=) 4: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: b3du5SkGrit+NpSd21sUl+osf6ePmLbD1q8TLf83bBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1e:85:6d:cc:b6:03:d9:d3:56:aa:7b:b3:4d:fa:0a:44:5d:95:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D5D46277BE98F80EC6AF901FD4322AA2FAB208 Validity Not Before: Apr 4 21:26:43 2026 GMT Not After : Apr 7 23:34:43 2026 GMT Subject: CN=C7A235A537FEFAEACA2C70DA7E35C0C795DE6235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:6d:4e:0b:0c:3c:80:51:bd:98:7b:0a:ab: c2:e9:06:ec:5b:7c:cf:ad:76:3c:f2:e0:df:71:3c: 53:13:f7:93:0a:5c:59:c1:d7:6e:ba:e8:88:cf:27: eb:45:09:c2:e3:0e:a2:27:4e:6c:e8:8c:9c:0b:24: 88:17:92:5a:86:48:2c:1b:cb:eb:b6:22:f1:8b:1c: d0:54:d9:e3:13:ac:8f:f6:27:f3:6a:91:8f:ed:2c: 97:79:20:fa:9d:f5:58:da:2f:2d:a9:63:f4:a3:b2: 0f:71:f3:2b:91:b5:e9:2b:72:3d:89:14:e3:84:f3: dd:05:49:92:04:4f:de:d9:81:9d:0f:70:23:7e:66: 63:20:ef:74:4a:fe:6c:5a:f3:82:97:7c:89:aa:20: 0f:8b:b3:7f:db:62:7f:c8:94:a8:97:70:81:4b:42: a8:e5:20:5a:37:c1:d8:b2:1b:43:07:87:13:98:34: ad:6d:12:84:66:8d:dd:f4:c4:79:55:4f:d7:17:06: 6b:0d:58:50:ec:a0:5d:ae:db:a1:de:31:6c:5d:b3: 73:7b:69:e3:85:11:fd:f6:57:77:18:d3:7c:1a:3c: 13:30:73:4f:be:55:74:5a:ea:bc:59:34:e5:56:d5: 80:63:cc:5b:4c:73:5c:54:44:c0:2a:38:74:c4:9d: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:35:A5:37:FE:FA:EA:CA:2C:70:DA:7E:35:C0:C7:95:DE:62:35 X509v3 Authority Key Identifier: keyid:24:D5:D4:62:77:BE:98:F8:0E:C6:AF:90:1F:D4:32:2A:A2:FA:B2:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ce:e9:d7:eb:3a:f9:42:81:24:ca:4f:18:8b:f7:2f:4a:e3: cb:2c:76:9a:5d:7b:90:a5:5e:ee:51:d1:ce:d7:90:a6:08:cf: 94:93:de:1e:02:ef:29:f3:c7:3a:6f:aa:5c:ab:62:82:f8:ec: e3:e2:0a:79:62:fe:28:fe:38:b3:89:e7:47:63:49:f8:9f:f5: 35:49:c1:c4:bf:f1:99:07:c4:a4:69:70:f5:67:e2:b1:16:df: 46:11:18:5b:a4:31:1e:6a:7c:df:fa:8b:41:ea:02:de:92:7a: 77:81:85:a7:c7:1a:df:5a:32:bf:2f:70:c3:06:25:e6:a6:4e: a2:e3:a3:f9:c1:ee:29:0a:70:38:37:b2:18:4b:cd:5f:03:a9: 0e:a6:13:82:5a:a5:60:f0:ad:17:15:9c:69:e4:09:b9:f2:df: 39:37:ec:2c:13:c5:b8:6a:49:78:b1:3f:14:a4:e3:83:7c:ff: 7f:96:73:c7:a7:4c:78:11:0b:ce:bd:ec:6e:62:86:1f:94:f5: ab:65:12:c6:75:d1:a5:39:f4:cf:33:14:81:92:d7:bb:94:85: 5f:0b:6e:a7:ad:96:0d:67:ac:3e:29:fe:a5:dd:5b:4e:13:9e: 1f:ca:eb:b7:69:f1:db:e5:52:62:04:72:53:9c:30:a8:b5:6d: 1d:e8:f5:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbh6Fbcy2A9nTVqp7s036CkRdlZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENUQ0NjI3N0JFOThGODBFQzZBRjkwMUZENDMyMkFB MkZBQjIwODAeFw0yNjA0MDQyMTI2NDNaFw0yNjA0MDcyMzM0NDNaMDMxMTAvBgNV BAMTKEM3QTIzNUE1MzdGRUZBRUFDQTJDNzBEQTdFMzVDMEM3OTVERTYyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9G1OCww8gFG9mHsKq8LpBuxb fM+tdjzy4N9xPFMT95MKXFnB12666IjPJ+tFCcLjDqInTmzojJwLJIgXklqGSCwb y+u2IvGLHNBU2eMTrI/2J/NqkY/tLJd5IPqd9VjaLy2pY/Sjsg9x8yuRtekrcj2J FOOE890FSZIET97ZgZ0PcCN+ZmMg73RK/mxa84KXfImqIA+Ls3/bYn/IlKiXcIFL QqjlIFo3wdiyG0MHhxOYNK1tEoRmjd30xHlVT9cXBmsNWFDsoF2u26HeMWxds3N7 aeOFEf32V3cY03waPBMwc0++VXRa6rxZNOVW1YBjzFtMc1xURMAqOHTEnbA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6I1pTf++urKLHDafjXAx5XeYjUwHwYDVR0j BBgwFoAUJNXUYne+mPgOxq+QH9QyKqL6sggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWYxNmYzMS02MGNlLTQ3YTctYWU4ZC01YTI4YzUxMWM5NDcvMS8yNEQ1RDQ2Mjc3 QkU5OEY4MEVDNkFGOTAxRkQ0MzIyQUEyRkFCMjA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvMjRENUQ0NjI3N0JFOThGODBFQzZBRjkwMUZENDMyMkFBMkZB QjIwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvMjRENUQ0NjI3N0JFOThGODBFQzZBRjkwMUZENDMy MkFBMkZBQjIwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXO6dfrOvlCgSTKTxiL9y9K48ssdppde5Cl Xu5R0c7XkKYIz5ST3h4C7ynzxzpvqlyrYoL47OPiCnli/ij+OLOJ50djSfif9TVJ wcS/8ZkHxKRpcPVn4rEW30YRGFukMR5qfN/6i0HqAt6SeneBhafHGt9aMr8vcMMG JeamTqLjo/nB7ikKcDg3shhLzV8DqQ6mE4JapWDwrRcVnGnkCbny3zk37CwTxbhq SXixPxSk44N8/3+Wc8enTHgRC8697G5ihh+U9atlEsZ10aU59M8zFIGS17uUhV8L bqetlg1nrD4p/qXdW04Tnh/K67dp8dvlUmIEclOcMKi1bR3o9Tg= -----END CERTIFICATE-----Generated at Mon Apr 6 01:45:51 2026 by rpki-client