$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: kWIcSJ5bAczL5QT0m25IUhp116nKTynI7ExCHIUIgOQ= Subject key identifier: 1A:59:9F:65:DD:52:3F:A3:F4:7C:60:7F:24:18:84:F3:05:7B:56:28 Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 39C51D627C7AE2028DB16B12CABE520445DFDFC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: 14 Signing time: Sat 16 May 2026 09:25:23 +0000 Manifest this update: Sat 16 May 2026 09:20:23 +0000 Manifest next update: Sun 17 May 2026 09:55:23 +0000 Files and hashes: 1: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 2: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 3: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: a3fuo6QBFy1ev644rHop+SG8Ahcxyw4yqob5Q5MW3NY=) 4: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 5: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 6: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 7: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c5:1d:62:7c:7a:e2:02:8d:b1:6b:12:ca:be:52:04:45:df:df:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: May 16 09:20:23 2026 GMT Not After : May 17 09:55:23 2026 GMT Subject: CN=1A599F65DD523FA3F47C607F241884F3057B5628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6c:54:ef:69:db:46:94:5e:8d:c4:a8:9f:ea: a8:ea:82:e4:f1:3e:03:e8:5d:b5:3d:21:41:db:86: c7:40:ae:e4:ae:28:7d:30:3a:11:c7:29:ee:6d:b4: 87:00:9c:d7:c5:6f:20:4a:1f:d1:da:04:81:66:cb: c1:a6:3d:da:21:43:6c:a2:c8:27:87:74:68:9c:2f: 58:7d:28:c3:f1:19:36:68:a5:3c:a4:54:54:ee:a3: f6:09:54:e3:18:1d:b4:96:92:31:7c:f9:13:77:21: f9:4e:11:44:16:98:5b:1f:39:ef:f4:00:18:3a:d8: cb:13:a0:e2:49:7e:05:1b:a0:f0:2b:35:8b:3d:62: e9:a4:39:2f:72:00:cc:48:71:f0:2a:eb:1c:eb:a2: f3:75:27:86:9a:a4:43:a6:89:eb:52:8c:08:79:1a: 02:4b:88:dd:7a:a4:05:5f:2d:c1:59:33:d3:6e:82: dc:03:17:c6:4e:9a:dc:cd:52:2e:28:8f:5d:64:e3: 50:7a:1f:c0:3e:30:a2:d6:49:a4:24:de:5f:64:a8: 11:b6:27:d9:af:3f:7f:94:4a:ba:08:9a:a1:10:0d: ca:1d:e2:47:35:1a:9a:66:33:0d:fa:55:b2:b9:63: d3:cc:d4:6d:cd:e6:da:ac:6d:b2:91:3a:50:8a:62: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:9F:65:DD:52:3F:A3:F4:7C:60:7F:24:18:84:F3:05:7B:56:28 X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:05:a5:ba:d9:95:c4:2d:34:3c:96:28:60:6a:69:16:29:0e: 08:2c:99:b7:8e:f0:72:f7:b6:77:67:93:e1:fb:48:1d:b7:2c: fb:33:09:b7:62:28:3a:54:ab:f0:5d:1e:a6:fa:15:63:f5:ff: 5b:f1:09:36:b0:e1:91:4f:83:90:d6:d0:8f:52:5e:63:6a:c3: ff:85:dd:00:c9:01:da:fb:75:c9:9e:82:18:6f:7b:b8:8b:80: 07:6e:14:a1:39:af:9d:65:b6:09:9e:d8:b7:34:7a:b9:5b:1a: 86:d3:ed:17:3c:32:d5:5b:78:73:be:1c:31:b5:6f:dc:af:2c: 54:73:00:61:6c:eb:3a:90:3f:c4:d2:23:1c:01:7d:85:7b:d0: 55:c7:ad:15:16:3a:d3:3e:5c:b9:60:33:70:f0:29:f8:24:30: bb:65:57:86:41:2d:4e:41:e5:61:e5:04:c9:07:6d:32:0d:23: 85:80:7e:df:36:a5:6f:82:80:db:5b:36:e7:b8:86:79:64:0f: 5b:5e:44:06:cb:70:67:3c:bf:64:af:cf:10:f4:93:b9:e0:08: ad:00:03:57:3d:ac:50:5b:d7:6e:1b:0f:a7:c2:1a:8f:86:05: 3d:79:52:b5:4e:67:4e:0f:66:60:26:c2:8b:03:62:7b:b8:08: 32:af:46:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcUdYnx64gKNsWsSyr5SBEXf38YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA1MTYwOTIwMjNaFw0yNjA1MTcwOTU1MjNaMDMxMTAvBgNV BAMTKDFBNTk5RjY1REQ1MjNGQTNGNDdDNjA3RjI0MTg4NEYzMDU3QjU2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzbFTvadtGlF6NxKif6qjqguTx PgPoXbU9IUHbhsdAruSuKH0wOhHHKe5ttIcAnNfFbyBKH9HaBIFmy8GmPdohQ2yi yCeHdGicL1h9KMPxGTZopTykVFTuo/YJVOMYHbSWkjF8+RN3IflOEUQWmFsfOe/0 ABg62MsToOJJfgUboPArNYs9YumkOS9yAMxIcfAq6xzrovN1J4aapEOmietSjAh5 GgJLiN16pAVfLcFZM9NugtwDF8ZOmtzNUi4oj11k41B6H8A+MKLWSaQk3l9kqBG2 J9mvP3+USroImqEQDcod4kc1GppmMw36VbK5Y9PM1G3N5tqsbbKROlCKYkg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGlmfZd1SP6P0fGB/JBiE8wV7VigwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkFpbrZlcQtNDyWKGBqaRYpDggsmbeO8HL3 tndnk+H7SB23LPszCbdiKDpUq/BdHqb6FWP1/1vxCTaw4ZFPg5DW0I9SXmNqw/+F 3QDJAdr7dcmeghhve7iLgAduFKE5r51ltgme2Lc0erlbGobT7Rc8MtVbeHO+HDG1 b9yvLFRzAGFs6zqQP8TSIxwBfYV70FXHrRUWOtM+XLlgM3DwKfgkMLtlV4ZBLU5B 5WHlBMkHbTINI4WAft82pW+CgNtbNue4hnlkD1teRAbLcGc8v2SvzxD0k7ngCK0A A1c9rFBb124bD6fCGo+GBT15UrVOZ04PZmAmwosDYnu4CDKvRrM= -----END CERTIFICATE-----Generated at Sat May 16 15:35:08 2026 by rpki-client