$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft File: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json) Hash identifier: tqZs+TnLxCo1B+7oRJ1VHhAtadDvwJz8pCbK4O44j3A= Subject key identifier: 6D:78:EF:87:41:5F:66:5B:77:BA:A4:AA:69:AB:3D:47:BC:9F:71:4F Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA Certificate issuer: /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Certificate serial: 1789D15DB69A372F77B10E813FB52CD53FE863D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:02:05 +0000 Manifest this update: Tue 21 Jul 2026 00:57:05 +0000 Manifest next update: Wed 22 Jul 2026 03:56:05 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=) 2: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: m0aBHjQOuzp8tIs8VOhrBdMnW84Psm1FHuL4OOI+LbU=) 3: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:89:d1:5d:b6:9a:37:2f:77:b1:0e:81:3f:b5:2c:d5:3f:e8:63:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Validity Not Before: Jul 21 00:57:05 2026 GMT Not After : Jul 22 03:56:05 2026 GMT Subject: CN=6D78EF87415F665B77BAA4AA69AB3D47BC9F714F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:78:e5:16:26:f0:3f:cc:e5:96:e6:03:c1: fc:38:6f:e4:96:31:cc:db:16:be:21:38:78:d9:fe: d4:96:30:6f:2e:0f:31:84:36:b7:d5:fd:03:74:e7: 89:3d:bf:ed:6b:49:a4:c2:4c:3a:9a:0f:e2:3e:70: 11:e2:a6:c7:d4:68:ec:66:ca:f7:94:f7:66:f9:1c: 9e:3b:25:ff:ee:84:10:dc:f3:b0:21:d6:78:9f:25: 13:66:27:69:86:0a:c1:b1:57:27:64:79:cd:b6:15: 32:ea:55:3c:33:1b:0b:d9:fc:0f:44:ab:e7:99:b4: d4:79:4d:ae:8f:00:f3:a1:a8:a3:ec:b9:2b:cb:d6: f6:27:1b:dd:a7:03:8e:3e:19:ce:61:9d:91:86:c4: cd:46:30:d8:94:1b:85:24:30:2d:26:42:e4:f7:81: c8:9f:e0:0e:c8:7b:a6:fa:8f:96:f7:98:70:cc:13: 68:3e:28:13:9c:8e:de:c7:80:c7:c9:14:11:ff:87: 2d:ad:3f:44:81:67:25:b4:ce:b9:e0:ed:fe:fb:11: b6:45:9a:08:3d:0b:69:42:fe:2d:50:48:a1:63:08: f7:23:54:b5:1c:96:36:85:ab:cc:23:58:ea:e0:06: 67:84:4a:c9:fb:77:1f:8d:3c:3e:e7:3f:0d:6a:a5: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:78:EF:87:41:5F:66:5B:77:BA:A4:AA:69:AB:3D:47:BC:9F:71:4F X509v3 Authority Key Identifier: keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:87:06:54:fe:62:f4:ec:74:64:1c:70:c6:88:e2:bc:8e:15: 82:6e:32:89:c7:0e:f3:1d:95:e9:06:10:41:33:35:57:70:a5: 0a:84:da:cf:b7:67:0e:cf:2c:0b:75:d9:41:ad:58:38:a9:bd: aa:95:37:61:e3:3e:c1:a6:80:1c:37:32:4f:40:f4:76:52:69: 17:a2:6b:88:51:af:c8:6b:b2:a9:8e:2f:36:f5:4d:c6:72:49: f7:5b:e8:59:39:45:c3:34:4e:73:74:26:64:a1:e9:bd:09:f3: 2a:f7:d5:18:32:53:c7:46:00:c7:d4:00:c6:64:33:1a:b2:45: 62:32:c5:42:cc:2f:3d:88:db:95:04:89:17:01:c1:48:76:ec: 67:1c:47:18:7d:61:c0:3e:b2:7d:26:a5:b9:7f:57:a1:c9:fb: 6a:59:85:c7:95:07:77:a4:91:59:e1:ec:00:71:9b:80:bc:29: 45:70:e7:cb:03:47:19:57:b4:9a:f9:e5:69:3a:cc:cb:58:d4: f3:fe:3e:fd:56:bd:8e:5b:eb:cf:0e:52:13:81:33:d5:60:cc: 1b:75:fc:5e:4c:37:b9:5a:dc:bb:89:74:9b:99:30:4e:99:c5: e9:d8:d4:9f:f5:4f:3b:83:8c:10:c1:da:4a:96:f0:e1:6a:01: 20:48:26:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4nRXbaaNy93sQ6BP7Us1T/oY9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3 Njk4MjhDQTAeFw0yNjA3MjEwMDU3MDVaFw0yNjA3MjIwMzU2MDVaMDMxMTAvBgNV BAMTKDZENzhFRjg3NDE1RjY2NUI3N0JBQTRBQTY5QUIzRDQ3QkM5RjcxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtaXjlFibwP8zlluYDwfw4b+SW MczbFr4hOHjZ/tSWMG8uDzGENrfV/QN054k9v+1rSaTCTDqaD+I+cBHipsfUaOxm yveU92b5HJ47Jf/uhBDc87Ah1nifJRNmJ2mGCsGxVydkec22FTLqVTwzGwvZ/A9E q+eZtNR5Ta6PAPOhqKPsuSvL1vYnG92nA44+Gc5hnZGGxM1GMNiUG4UkMC0mQuT3 gcif4A7Ie6b6j5b3mHDME2g+KBOcjt7HgMfJFBH/hy2tP0SBZyW0zrng7f77EbZF mgg9C2lC/i1QSKFjCPcjVLUcljaFq8wjWOrgBmeESsn7dx+NPD7nPw1qpQHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbXjvh0FfZlt3uqSqaas9R7yfcU8wHwYDVR0j BBgwFoAUwkuo16upoK64HSDmtVEhXnaYKMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3MDgzYWItMjcwYS00YjBhLThlNTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdB QkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3Njk4MjhDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjRCQThEN0FCQTlBMEFFQjgxRDIwRTZCNTUxMjE1RTc2OTgy OENBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIx NUU3Njk4MjhDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSHBlT+YvTsdGQccMaI4ryOFYJuMonHDvMd lekGEEEzNVdwpQqE2s+3Zw7PLAt12UGtWDipvaqVN2HjPsGmgBw3Mk9A9HZSaRei a4hRr8hrsqmOLzb1TcZySfdb6Fk5RcM0TnN0JmSh6b0J8yr31RgyU8dGAMfUAMZk MxqyRWIyxULMLz2I25UEiRcBwUh27GccRxh9YcA+sn0mpbl/V6HJ+2pZhceVB3ek kVnh7ABxm4C8KUVw58sDRxlXtJr55Wk6zMtY1PP+Pv1WvY5b688OUhOBM9VgzBt1 /F5MN7la3LuJdJuZME6ZxenY1J/1TzuDjBDB2kqW8OFqASBIJoI= -----END CERTIFICATE-----Generated at Tue Jul 21 08:14:15 2026 by rpki-client