$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft File: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft (raw, json) Hash identifier: 61Q9FzFta+rcGz0h6pRZAhdtXdWQZo4xAO1GWB3XA28= Subject key identifier: 09:4A:40:CD:A8:90:78:A4:06:FF:C6:82:31:9A:53:A2:AC:F8:91:CA Authority key identifier: 24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 Certificate issuer: /CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Certificate serial: 2014EF9A3B21F2DA26329DCEF356801088638BE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft Manifest number: FC Signing time: Wed 04 Nov 2026 16:34:18 +0000 Manifest this update: Wed 04 Nov 2026 16:29:18 +0000 Manifest next update: Thu 05 Nov 2026 18:26:18 +0000 Files and hashes: 1: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl (hash: iYwnZi5BbVj9zAZjQAeSEJDV/sjxna7YD2g9jarHgKk=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: fCOFQpy4x/crI+WC5jvfSD6t0+AQC6KYZU58O4qsuz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:14:ef:9a:3b:21:f2:da:26:32:9d:ce:f3:56:80:10:88:63:8b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Validity Not Before: Nov 4 16:29:18 2026 GMT Not After : Nov 5 18:26:18 2026 GMT Subject: CN=094A40CDA89078A406FFC682319A53A2ACF891CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:53:a9:5e:d0:c4:f1:5e:2f:cd:91:5f:62:23: e2:39:00:79:c6:a8:8c:46:18:a6:cc:f0:1e:9f:04: 02:83:65:76:bf:b6:65:1d:da:1c:81:85:1f:08:28: 48:a5:f9:08:8f:94:b6:c8:4f:c0:fb:3e:73:86:85: 9e:f4:62:a2:86:b9:15:c1:8c:14:a7:05:16:25:e7: ee:52:3a:a1:91:5e:6d:1b:b5:ca:78:ea:c6:13:ee: c4:cc:de:e2:d2:2f:9c:75:e3:f1:4e:1f:2f:3a:aa: af:5b:c8:35:e5:78:e1:aa:37:ea:aa:4e:17:51:5e: e5:fa:9b:a7:41:f9:ba:e5:44:9c:b1:4f:59:33:b4: 1b:4b:92:7b:7b:41:bb:5c:4b:12:76:1c:ad:19:0c: 14:bd:c4:4a:cf:c6:c6:e9:9f:54:3c:ca:2c:09:5f: 5b:7d:f4:b3:ac:ca:8e:7f:6e:2c:55:e5:ec:41:af: 01:ad:bd:34:06:81:65:a5:6e:9a:15:cb:f6:bb:0a: ec:3a:77:b4:74:74:3b:f1:fb:94:cb:e0:9b:c9:c6: 91:6c:ea:b8:d3:cc:41:e0:f6:fc:49:b0:a6:ad:db: 12:48:3c:c3:53:c2:fd:ed:c6:e9:9e:25:fc:ee:6a: 79:31:51:c1:9d:cb:e5:bc:f2:be:28:57:c5:9d:9c: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4A:40:CD:A8:90:78:A4:06:FF:C6:82:31:9A:53:A2:AC:F8:91:CA X509v3 Authority Key Identifier: keyid:24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:47:cf:c1:39:0f:3f:a7:7c:36:94:b9:a9:58:96:b8:08:b4: e2:58:bb:43:5b:3d:79:56:f5:3b:c6:83:be:93:0b:09:23:7d: d0:25:ae:4b:72:6c:8d:35:10:cd:67:80:7e:a1:58:55:cb:d9: 6e:20:57:67:d5:25:16:71:e6:09:17:97:48:63:7c:c0:ba:81: 79:d7:c6:d5:92:89:5d:4d:69:d9:57:b1:6c:91:80:97:86:1e: 26:33:af:3d:50:b2:45:77:27:fd:d8:1e:d7:69:fe:85:b1:35: 0d:bd:c5:96:3d:05:44:af:43:84:8b:24:92:c1:46:05:14:49: 33:dc:0e:0b:5b:14:19:0f:cb:50:31:5c:91:cd:41:06:99:1f: 83:b6:1b:ff:d0:75:99:0b:d2:ec:b5:c3:4c:a5:c1:30:48:0b: 80:35:6b:70:5d:c7:a1:bd:d5:6f:c7:8d:92:89:c2:35:29:a3: 12:e9:26:26:91:69:1d:c4:0a:2d:64:a5:3f:a4:81:c4:ee:cd: 91:cd:5f:a0:bb:43:bd:aa:8d:a5:d0:c9:01:5e:09:70:bc:bb: c9:a7:0b:24:80:fb:97:48:63:5b:ca:37:52:6f:0c:0a:81:16: a3:cb:9f:be:b5:be:9f:c8:e7:69:ec:67:11:c9:51:62:0b:bf: 3a:61:62:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBTvmjsh8tomMp3O81aAEIhji+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2 M0JDNkI0ODAeFw0yNjExMDQxNjI5MThaFw0yNjExMDUxODI2MThaMDMxMTAvBgNV BAMTKDA5NEE0MENEQTg5MDc4QTQwNkZGQzY4MjMxOUE1M0EyQUNGODkxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmU6le0MTxXi/NkV9iI+I5AHnG qIxGGKbM8B6fBAKDZXa/tmUd2hyBhR8IKEil+QiPlLbIT8D7PnOGhZ70YqKGuRXB jBSnBRYl5+5SOqGRXm0btcp46sYT7sTM3uLSL5x14/FOHy86qq9byDXleOGqN+qq ThdRXuX6m6dB+brlRJyxT1kztBtLknt7QbtcSxJ2HK0ZDBS9xErPxsbpn1Q8yiwJ X1t99LOsyo5/bixV5exBrwGtvTQGgWWlbpoVy/a7Cuw6d7R0dDvx+5TL4JvJxpFs 6rjTzEHg9vxJsKat2xJIPMNTwv3txumeJfzuankxUcGdy+W88r4oV8WdnPuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUpAzaiQeKQG/8aCMZpToqz4kcowHwYDVR0j BBgwFoAUJNdUmLSFqllirYw6AFSOymO8a0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MTFiMDUtYzU4YS00MjA2LWI3YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThC NDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2M0JDNkI0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNEQ3NTQ5OEI0ODVBQTU5NjJBRDhDM0EwMDU0OEVDQTYzQkM2 QjQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhF Q0E2M0JDNkI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFHz8E5Dz+nfDaUualYlrgItOJYu0NbPXlW 9TvGg76TCwkjfdAlrktybI01EM1ngH6hWFXL2W4gV2fVJRZx5gkXl0hjfMC6gXnX xtWSiV1NadlXsWyRgJeGHiYzrz1QskV3J/3YHtdp/oWxNQ29xZY9BUSvQ4SLJJLB RgUUSTPcDgtbFBkPy1AxXJHNQQaZH4O2G//QdZkL0uy1w0ylwTBIC4A1a3Bdx6G9 1W/HjZKJwjUpoxLpJiaRaR3ECi1kpT+kgcTuzZHNX6C7Q72qjaXQyQFeCXC8u8mn CySA+5dIY1vKN1JvDAqBFqPLn761vp/I52nsZxHJUWILvzphYg0= -----END CERTIFICATE-----Generated at Wed Nov 4 23:49:30 2026 by rpki-client