$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: LlNUKjB/+HQz7Yv/54llAHDIHnv77awh0NUgFnRWEyU= Subject key identifier: D2:0A:0D:05:FD:31:36:D1:3A:1B:9F:11:63:1F:F7:47:7F:D3:27:2D Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 18CC06DDB3D226CDEEAC0947029E941587C96D8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 16:58:30 +0000 Manifest this update: Wed 02 Sep 2026 16:53:30 +0000 Manifest next update: Thu 03 Sep 2026 17:47:30 +0000 Files and hashes: 1: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 2: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 3: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) 4: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 5: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: wqBEaafSAHcKMlMZN352CL9um4XDzJR4gGm5EBGUuXs=) 6: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 7: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 17:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cc:06:dd:b3:d2:26:cd:ee:ac:09:47:02:9e:94:15:87:c9:6d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Sep 2 16:53:30 2026 GMT Not After : Sep 3 17:47:30 2026 GMT Subject: CN=D20A0D05FD3136D13A1B9F11631FF7477FD3272D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:a9:6b:9a:a6:7e:49:35:52:29:2b:d2:9d: 76:5f:5b:9c:21:f5:4e:e6:fc:d5:30:13:87:d8:ac: 5d:41:c3:7c:bb:7f:63:54:fe:7d:26:19:08:c7:10: bc:7f:be:0d:66:28:3a:bd:77:de:03:e7:bb:88:51: 31:41:27:f2:ac:e1:6e:63:01:42:ec:35:c1:75:ef: 00:1f:52:16:a9:e8:02:af:2f:1e:b6:10:40:74:04: e5:ba:2f:72:4c:74:4d:cd:15:3c:ee:c8:bf:2a:7a: 34:6f:75:fd:7a:d4:8f:b2:88:bd:72:44:d3:1b:e6: 6f:62:9a:27:42:7e:b6:43:7b:9d:3a:8d:60:19:9d: 9c:8d:e6:75:5a:b0:bd:0a:c1:e2:2b:fd:e3:bb:e8: 23:0a:6a:2f:98:a6:f4:f2:a5:a0:bc:82:d4:36:2e: d4:98:bd:28:3d:80:4d:f7:32:8f:02:92:95:e7:d3: a1:4f:2a:91:47:97:32:7e:5e:5b:2a:a8:58:64:df: 6e:0a:29:c4:e8:be:10:b4:00:a7:54:b7:91:8a:8d: 1d:07:a3:a1:81:57:81:74:7d:1a:8c:f6:b3:3f:14: 37:cd:b8:fa:81:30:02:dd:e1:24:9c:5d:31:43:a5: b3:b1:bd:dd:cd:d3:50:95:be:5c:52:38:18:2b:ea: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0A:0D:05:FD:31:36:D1:3A:1B:9F:11:63:1F:F7:47:7F:D3:27:2D X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:11:d2:c1:b1:54:c4:b8:f6:7f:c0:87:76:16:ad:4f:25:1b: 33:38:3b:15:b8:e7:cc:9a:b6:e3:5d:63:ee:e9:47:07:24:a1: 43:f4:19:25:df:4a:59:dc:95:f2:40:47:6f:fa:fa:6b:91:b8: e2:ad:d7:f0:5f:6e:fb:1f:2c:0b:a4:ab:fc:03:fa:52:c8:bb: e7:61:3d:21:f2:64:90:4d:0a:68:2b:fe:5c:1c:a8:36:7a:eb: 12:9a:51:45:d0:dd:d0:16:3c:e7:09:40:fe:ab:39:cd:1e:bf: c6:4a:4a:00:37:9f:e3:32:07:cd:af:d4:a4:87:1e:d6:87:4d: d8:af:77:fa:15:aa:19:cb:0d:3d:aa:7f:9f:1d:f9:a6:66:8d: bb:d1:b4:e6:0f:08:f6:1a:8b:73:5b:fe:0b:31:da:56:f9:0e: 27:16:04:e5:87:2e:7e:8f:4a:7e:1d:51:ad:f5:4b:6d:05:e5: fd:5a:43:64:07:74:a2:26:27:bc:0f:fb:76:3c:d5:f0:07:26: 53:9f:04:94:84:d4:8a:30:dd:c9:2d:1b:5f:0e:02:78:aa:46: 61:2b:f0:e2:f4:8a:13:05:ee:dd:ed:7a:c5:d1:06:f1:d8:0d: d1:94:32:00:e7:d1:de:9a:f0:bb:b9:2b:01:31:f7:74:01:ce: 4e:fc:3a:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMwG3bPSJs3urAlHAp6UFYfJbYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA5MDIxNjUzMzBaFw0yNjA5MDMxNzQ3MzBaMDMxMTAvBgNV BAMTKEQyMEEwRDA1RkQzMTM2RDEzQTFCOUYxMTYzMUZGNzQ3N0ZEMzI3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNqlrmqZ+STVSKSvSnXZfW5wh 9U7m/NUwE4fYrF1Bw3y7f2NU/n0mGQjHELx/vg1mKDq9d94D57uIUTFBJ/Ks4W5j AULsNcF17wAfUhap6AKvLx62EEB0BOW6L3JMdE3NFTzuyL8qejRvdf161I+yiL1y RNMb5m9imidCfrZDe506jWAZnZyN5nVasL0KweIr/eO76CMKai+YpvTypaC8gtQ2 LtSYvSg9gE33Mo8CkpXn06FPKpFHlzJ+XlsqqFhk324KKcTovhC0AKdUt5GKjR0H o6GBV4F0fRqM9rM/FDfNuPqBMALd4SScXTFDpbOxvd3N01CVvlxSOBgr6lr/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0goNBf0xNtE6G58RYx/3R3/TJy0wHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8R0sGxVMS49n/Ah3YWrU8lGzM4OxW458ya tuNdY+7pRwckoUP0GSXfSlnclfJAR2/6+muRuOKt1/BfbvsfLAukq/wD+lLIu+dh PSHyZJBNCmgr/lwcqDZ66xKaUUXQ3dAWPOcJQP6rOc0ev8ZKSgA3n+MyB82v1KSH HtaHTdivd/oVqhnLDT2qf58d+aZmjbvRtOYPCPYai3Nb/gsx2lb5DicWBOWHLn6P Sn4dUa31S20F5f1aQ2QHdKImJ7wP+3Y81fAHJlOfBJSE1Iow3cktG18OAniqRmEr 8OL0ihMF7t3tesXRBvHYDdGUMgDn0d6a8Lu5KwEx93QBzk78Oks= -----END CERTIFICATE-----Generated at Thu Sep 3 05:14:08 2026 by rpki-client