$ rpki-client -vvvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft File: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft (raw, json) Hash identifier: rDfVkCPatwnmAXICxYrDy/iLuFCMd/nmFOuQpTLdnfE= Subject key identifier: 3F:0E:9C:76:03:92:05:9F:3D:32:CE:15:B1:AF:B1:26:8B:E3:66:EB Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 Certificate issuer: /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Certificate serial: 470A2533258D6A467737695672A3193D8A37B4E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 17:34:12 +0000 Manifest this update: Wed 02 Sep 2026 17:29:12 +0000 Manifest next update: Thu 03 Sep 2026 20:56:12 +0000 Files and hashes: 1: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl (hash: WppKJt8dfotsW/s4Afmmm43NDWnwnjeIMwvDs2iLZbc=) 2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: 8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0a:25:33:25:8d:6a:46:77:37:69:56:72:a3:19:3d:8a:37:b4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Validity Not Before: Sep 2 17:29:12 2026 GMT Not After : Sep 3 20:56:12 2026 GMT Subject: CN=3F0E9C760392059F3D32CE15B1AFB1268BE366EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:d0:32:ab:9c:45:93:22:64:6a:99:45:e5: 1f:79:b1:8e:1c:db:44:6c:1c:09:d2:04:b9:8a:9b: 0a:42:a5:02:79:d4:6d:f8:6e:ec:2c:cd:5a:db:92: c3:d4:72:44:e4:19:00:44:06:c2:43:30:f4:7f:00: 11:5e:b5:c5:2b:7d:33:22:b7:48:60:75:93:ad:fe: 33:0f:93:d7:d0:bf:5f:9e:ff:92:83:58:f3:f2:85: 54:70:17:5c:59:43:f9:9e:a7:05:21:1a:34:cd:44: 56:63:76:fb:57:aa:27:d4:1f:f5:74:84:3e:9d:d4: f2:95:9f:1c:e2:c7:ff:90:80:8b:6b:ac:a8:cb:2e: 17:7f:68:1f:bd:b8:c8:b7:66:5c:da:db:8d:d8:6c: 9c:68:bc:3b:bb:28:f2:74:1e:46:99:66:d9:4a:32: f2:c3:cf:79:b5:57:28:e1:88:18:0a:bd:db:db:a7: 36:16:7c:73:b0:1c:55:6c:dd:17:52:5e:80:12:aa: 99:8f:9b:3d:a2:27:d1:b6:e3:ac:03:6b:92:0f:17: 00:7a:0b:fa:af:46:46:1e:ec:06:a1:bd:e3:3b:dd: 8c:f7:40:26:96:7d:df:b2:85:ed:8d:26:6e:a6:b4: b1:5f:6d:1b:ff:5d:2f:20:f6:87:39:71:c7:d8:b1: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0E:9C:76:03:92:05:9F:3D:32:CE:15:B1:AF:B1:26:8B:E3:66:EB X509v3 Authority Key Identifier: keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:b3:3e:ac:97:d3:ea:18:01:97:94:00:b1:39:d6:6a:3a:4e: da:42:f3:16:15:06:b4:70:12:b8:bb:ac:9a:ef:19:f5:dc:70: f5:c1:9d:ba:80:9c:18:ea:e7:b4:f0:c7:3a:2e:c1:2f:dc:6b: c6:2a:ab:14:42:bf:e6:13:08:a1:6a:c0:9d:35:75:64:b2:ed: 66:f7:44:c7:b4:6e:92:4c:18:10:71:50:1f:14:11:87:38:1c: ab:bc:1d:93:14:0a:2f:eb:ac:aa:95:22:c7:04:5a:23:78:23: 54:6a:f6:95:d4:38:bd:51:50:e7:8f:04:29:eb:03:77:92:f6: d7:2f:01:8e:ba:1b:65:9d:81:a9:5b:e0:a6:3f:c0:c0:6c:2c: 8b:ea:66:37:5a:ef:bb:6f:4d:58:8b:36:31:56:0a:b0:f1:e8: 40:19:8e:ab:83:8e:b5:1d:5d:b0:66:c0:60:fe:b3:00:e6:01: 51:2a:fc:b3:38:ec:f6:a1:82:f9:59:21:a8:80:f5:dd:d5:9b: 72:b3:de:5b:7d:e8:ea:35:05:56:12:b7:4f:51:46:9c:9c:c6: a6:04:9c:d5:1b:a2:03:26:25:9f:27:10:81:14:c7:f4:62:f0: 41:c7:65:65:6d:de:f9:93:fc:56:87:3d:cc:50:5f:81:8b:24: 87:cc:4c:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwolMyWNakZ3N2lWcqMZPYo3tOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3 M0QwODFDMzAeFw0yNjA5MDIxNzI5MTJaFw0yNjA5MDMyMDU2MTJaMDMxMTAvBgNV BAMTKDNGMEU5Qzc2MDM5MjA1OUYzRDMyQ0UxNUIxQUZCMTI2OEJFMzY2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdNAyq5xFkyJkaplF5R95sY4c 20RsHAnSBLmKmwpCpQJ51G34buwszVrbksPUckTkGQBEBsJDMPR/ABFetcUrfTMi t0hgdZOt/jMPk9fQv1+e/5KDWPPyhVRwF1xZQ/mepwUhGjTNRFZjdvtXqifUH/V0 hD6d1PKVnxzix/+QgItrrKjLLhd/aB+9uMi3Zlza243YbJxovDu7KPJ0HkaZZtlK MvLDz3m1VyjhiBgKvdvbpzYWfHOwHFVs3RdSXoASqpmPmz2iJ9G246wDa5IPFwB6 C/qvRkYe7AahveM73Yz3QCaWfd+yhe2NJm6mtLFfbRv/XS8g9oc5ccfYsQ61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPw6cdgOSBZ89Ms4Vsa+xJovjZuswHwYDVR0j BBgwFoAUDSTooLhfdqIivL+N5OsfW3PQgcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTc0ZGM1ZTEtMWQ1NS00OWQyLTkzZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBC ODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3M0QwODFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI0RThBMEI4NUY3NkEyMjJCQ0JGOERFNEVCMUY1QjczRDA4 MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFG NUI3M0QwODFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqzPqyX0+oYAZeUALE51mo6TtpC8xYVBrRw Eri7rJrvGfXccPXBnbqAnBjq57TwxzouwS/ca8YqqxRCv+YTCKFqwJ01dWSy7Wb3 RMe0bpJMGBBxUB8UEYc4HKu8HZMUCi/rrKqVIscEWiN4I1Rq9pXUOL1RUOePBCnr A3eS9tcvAY66G2Wdgalb4KY/wMBsLIvqZjda77tvTViLNjFWCrDx6EAZjquDjrUd XbBmwGD+swDmAVEq/LM47PahgvlZIaiA9d3Vm3Kz3lt96Oo1BVYSt09RRpycxqYE nNUbogMmJZ8nEIEUx/Ri8EHHZWVt3vmT/FaHPcxQX4GLJIfMTLc= -----END CERTIFICATE-----Generated at Thu Sep 3 08:19:49 2026 by rpki-client