$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft File: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json) Hash identifier: tFoy/G7BCLrKBQK5kHGfp1X62ca/h8LuM6DA1phEdf0= Subject key identifier: AF:6D:B3:51:AD:78:8F:F3:96:8A:D0:EA:D0:AF:C9:87:26:83:17:B5 Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA Certificate issuer: /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Certificate serial: 2C32E953FCAD5EA55E7D0C9A074892FB6379363C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:01:00 +0000 Manifest this update: Wed 03 Jun 2026 00:56:00 +0000 Manifest next update: Thu 04 Jun 2026 04:23:00 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=) 2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=) 3: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: 2LQPkO05KiIDHg5KzUWnENeAvteIThtggBUi8xA8+OI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:32:e9:53:fc:ad:5e:a5:5e:7d:0c:9a:07:48:92:fb:63:79:36:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Validity Not Before: Jun 3 00:56:00 2026 GMT Not After : Jun 4 04:23:00 2026 GMT Subject: CN=AF6DB351AD788FF3968AD0EAD0AFC987268317B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2e:f0:9e:41:a0:0a:3d:0e:45:30:e1:9e:c6: 16:c3:5d:94:20:13:ed:66:fe:e7:65:82:2e:af:98: 83:48:6c:10:c0:2a:b5:7f:c0:26:f8:d5:28:ce:24: 18:74:bc:27:ba:fa:44:27:2b:c2:2d:37:a1:a7:a0: 68:19:2c:58:29:e4:22:31:e7:c3:5c:70:56:82:cf: 7c:bb:18:79:c7:bc:40:f7:41:50:d4:34:b9:2a:54: b7:19:5f:b4:39:bf:11:d3:39:37:fb:88:24:ae:bd: 9c:c9:dd:5d:b1:16:55:6a:00:91:91:ec:46:cb:c2: f1:63:7b:ab:13:24:89:76:7f:e2:49:08:3c:33:cb: 6a:21:cb:e7:7c:68:37:9b:3a:7f:57:b5:22:68:a3: 3e:64:aa:26:37:51:74:22:c4:8c:eb:87:ed:0a:b8: 30:37:f9:75:75:45:f3:9a:6d:b8:c0:0d:18:31:da: c0:f9:dc:c1:03:ac:66:56:b7:22:49:6c:1f:f9:b6: 26:c7:72:19:87:55:06:9c:01:9b:e0:83:29:ac:b6: 35:01:bd:ba:11:93:09:b4:c7:15:7d:16:ce:c8:9e: 80:a2:9a:21:7f:ad:2f:0b:36:a8:3a:96:5f:78:85: b0:00:d4:64:6d:c5:8e:8d:fa:a9:d9:82:af:f8:e5: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6D:B3:51:AD:78:8F:F3:96:8A:D0:EA:D0:AF:C9:87:26:83:17:B5 X509v3 Authority Key Identifier: keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fc:2c:3a:c0:72:76:60:8b:ed:0c:4a:72:c8:13:15:63:ca: 7f:a7:de:83:e1:9c:5c:7e:3f:d5:96:c6:63:fd:0e:e5:16:a9: b3:60:ff:60:2e:0d:e3:fe:30:ec:6a:18:c2:2e:89:8c:fd:bd: bb:63:6b:5a:21:22:e2:16:8b:21:80:83:b6:1a:5a:09:7a:07: fa:fa:5d:e0:7c:19:d8:d9:4d:16:3e:dd:e0:ba:cd:02:1b:d2: 7c:c3:c0:da:4e:47:c5:9f:3a:0c:ac:80:c4:a0:e3:b7:e4:1e: 69:5f:af:11:20:0c:01:d0:ed:74:c5:d5:15:b8:d6:b2:81:09: 2d:c1:a1:85:b3:92:5f:a9:b3:9e:d1:0e:14:54:89:09:9a:ad: 5e:5b:90:48:1a:29:f8:00:59:d6:a7:63:f6:e0:27:e0:ba:cb: 30:e0:e9:7e:00:f0:b0:17:cf:ad:27:b3:dd:ce:49:5e:24:1a: 69:1b:06:09:d2:89:0c:f1:5f:94:cc:8e:47:4a:94:a0:28:8f: 7c:92:86:f6:d7:f4:cf:75:11:61:d4:dd:fd:a7:ae:07:04:f6: 23:52:51:85:83:d2:8d:f7:b2:ad:ba:d0:07:5d:00:8e:22:eb: 85:ae:d3:0d:52:00:b9:6e:d3:0b:9c:f1:b0:67:0d:0a:ce:e8: b0:86:cd:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDLpU/ytXqVefQyaB0iS+2N5NjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3 Njk4MjhDQTAeFw0yNjA2MDMwMDU2MDBaFw0yNjA2MDQwNDIzMDBaMDMxMTAvBgNV BAMTKEFGNkRCMzUxQUQ3ODhGRjM5NjhBRDBFQUQwQUZDOTg3MjY4MzE3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrLvCeQaAKPQ5FMOGexhbDXZQg E+1m/udlgi6vmINIbBDAKrV/wCb41SjOJBh0vCe6+kQnK8ItN6GnoGgZLFgp5CIx 58NccFaCz3y7GHnHvED3QVDUNLkqVLcZX7Q5vxHTOTf7iCSuvZzJ3V2xFlVqAJGR 7EbLwvFje6sTJIl2f+JJCDwzy2ohy+d8aDebOn9XtSJooz5kqiY3UXQixIzrh+0K uDA3+XV1RfOabbjADRgx2sD53MEDrGZWtyJJbB/5tibHchmHVQacAZvggymstjUB vboRkwm0xxV9Fs7InoCimiF/rS8LNqg6ll94hbAA1GRtxY6N+qnZgq/45UKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr22zUa14j/OWitDq0K/JhyaDF7UwHwYDVR0j BBgwFoAUwkuo16upoK64HSDmtVEhXnaYKMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3MDgzYWItMjcwYS00YjBhLThlNTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdB QkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3Njk4MjhDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjRCQThEN0FCQTlBMEFFQjgxRDIwRTZCNTUxMjE1RTc2OTgy OENBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIx NUU3Njk4MjhDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP8LDrAcnZgi+0MSnLIExVjyn+n3oPhnFx+ P9WWxmP9DuUWqbNg/2AuDeP+MOxqGMIuiYz9vbtja1ohIuIWiyGAg7YaWgl6B/r6 XeB8GdjZTRY+3eC6zQIb0nzDwNpOR8WfOgysgMSg47fkHmlfrxEgDAHQ7XTF1RW4 1rKBCS3BoYWzkl+ps57RDhRUiQmarV5bkEgaKfgAWdanY/bgJ+C6yzDg6X4A8LAX z60ns93OSV4kGmkbBgnSiQzxX5TMjkdKlKAoj3yShvbX9M91EWHU3f2nrgcE9iNS UYWD0o33sq260AddAI4i64Wu0w1SALlu0wuc8bBnDQrO6LCGzTA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:05 2026 by rpki-client