$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: OCwKzwbBtSYTpsA+0Mtpc9hJPN4X/9+5SNR5aRDuz0s= Subject key identifier: 9A:FF:94:70:A6:48:40:53:63:15:8B:45:03:DC:CD:D5:14:EB:29:51 Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 6085D2F1ECA9A4E37805C3701BD7CA171A3F7C5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 07:21:39 +0000 Manifest this update: Mon 02 Nov 2026 07:16:39 +0000 Manifest next update: Tue 03 Nov 2026 09:40:39 +0000 Files and hashes: 1: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) 2: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) 3: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: rYPqC/32nB7DMp2QscWkctaBUfV3/32rgAtRFafBBwY=) 4: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:85:d2:f1:ec:a9:a4:e3:78:05:c3:70:1b:d7:ca:17:1a:3f:7c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: Nov 2 07:16:39 2026 GMT Not After : Nov 3 09:40:39 2026 GMT Subject: CN=9AFF9470A648405363158B4503DCCDD514EB2951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:2a:bc:65:fc:52:d8:88:1b:54:b3:7a:b8: f2:7e:45:5f:a7:9a:50:05:ae:50:81:85:84:06:4e: 87:16:ec:0c:0b:11:d4:d2:b7:6e:cd:09:81:a7:81: ba:ef:cf:4b:0f:83:75:a6:8b:f4:6b:02:f3:09:6b: 13:a2:7c:05:b6:b2:95:45:42:ba:f2:18:5b:be:8b: 7a:09:8d:a5:6c:46:31:0e:ae:58:82:c9:ae:71:9b: 71:77:03:42:14:b7:c9:06:1b:74:2b:a9:ae:2b:80: 9b:4c:69:a3:58:e8:42:63:44:d4:31:39:0e:8f:20: d5:76:f6:fc:8e:f2:bf:b1:d1:06:c5:23:18:83:a4: c7:5c:47:2f:40:e1:60:40:6e:a4:0b:0c:67:d6:15: 9b:0f:1a:04:24:38:c7:c9:a5:10:71:b0:c7:c0:f7: a5:48:56:78:ab:83:db:e3:f7:bf:1a:aa:97:02:e1: 08:90:15:5b:d8:ee:5c:10:55:21:b6:d8:d7:79:05: 26:43:fe:1f:c2:a2:93:f5:01:77:4b:60:1a:7e:38: f1:20:85:6a:18:ca:57:78:29:27:c1:cc:3a:96:07: 1e:68:9b:78:02:53:f4:ae:70:87:cd:0b:d4:c0:20: 31:97:67:74:9a:87:ca:c6:2f:e8:4f:a9:f0:79:0d: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FF:94:70:A6:48:40:53:63:15:8B:45:03:DC:CD:D5:14:EB:29:51 X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:80:c7:42:0a:40:f4:ea:95:4a:4c:c0:b5:8e:dc:6f:cd:05: b6:7f:70:b3:14:d2:e4:96:ee:6a:2d:fd:08:80:66:e3:6c:fe: da:98:73:55:fb:65:04:77:c0:68:de:d8:06:bf:f0:9b:aa:f0: 4c:86:9f:77:57:ec:7d:69:d8:a5:c1:b9:71:9b:c9:ca:71:e1: fb:e7:60:3a:df:13:80:69:12:66:e2:15:0f:fe:e2:50:c0:89: 1b:ec:d4:0f:42:72:15:95:ec:f4:df:63:0d:13:8b:d6:de:7a: 70:13:3a:ce:85:a5:4b:3a:9f:d9:ac:4b:40:64:2c:38:f2:70: 10:2c:ca:7a:07:24:cb:45:b4:7a:11:1f:d9:b6:94:58:6b:36: 8c:f5:d5:0b:8c:29:24:7d:dd:e9:2b:46:53:de:05:55:84:96: a7:7e:bd:f7:53:8d:e7:cc:fe:51:ca:32:9a:11:79:43:9e:ed: de:29:40:2e:f0:c0:77:48:7f:1c:ca:81:97:2d:4c:40:e1:6d: e3:66:3c:f7:8b:d6:f3:a6:df:43:1a:98:a4:d8:fa:08:2c:92: 09:3e:97:a4:d3:af:d0:db:36:5a:22:81:53:91:d2:45:1f:52: d0:7e:05:a4:7a:ff:0f:7e:0e:6e:2c:a8:14:be:81:3c:db:c7: a8:f0:70:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIXS8eyppON4BcNwG9fKFxo/fF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjExMDIwNzE2MzlaFw0yNjExMDMwOTQwMzlaMDMxMTAvBgNV BAMTKDlBRkY5NDcwQTY0ODQwNTM2MzE1OEI0NTAzRENDREQ1MTRFQjI5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhSq8ZfxS2IgbVLN6uPJ+RV+n mlAFrlCBhYQGTocW7AwLEdTSt27NCYGngbrvz0sPg3Wmi/RrAvMJaxOifAW2spVF QrryGFu+i3oJjaVsRjEOrliCya5xm3F3A0IUt8kGG3Qrqa4rgJtMaaNY6EJjRNQx OQ6PINV29vyO8r+x0QbFIxiDpMdcRy9A4WBAbqQLDGfWFZsPGgQkOMfJpRBxsMfA 96VIVnirg9vj978aqpcC4QiQFVvY7lwQVSG22Nd5BSZD/h/CopP1AXdLYBp+OPEg hWoYyld4KSfBzDqWBx5om3gCU/SucIfNC9TAIDGXZ3Sah8rGL+hPqfB5DUqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmv+UcKZIQFNjFYtFA9zN1RTrKVEwHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2Ax0IKQPTqlUpMwLWO3G/NBbZ/cLMU0uSW 7mot/QiAZuNs/tqYc1X7ZQR3wGje2Aa/8Juq8EyGn3dX7H1p2KXBuXGbycpx4fvn YDrfE4BpEmbiFQ/+4lDAiRvs1A9CchWV7PTfYw0Ti9beenATOs6FpUs6n9msS0Bk LDjycBAsynoHJMtFtHoRH9m2lFhrNoz11QuMKSR93ekrRlPeBVWElqd+vfdTjefM /lHKMpoReUOe7d4pQC7wwHdIfxzKgZctTEDhbeNmPPeL1vOm30MamKTY+ggskgk+ l6TTr9DbNloigVOR0kUfUtB+BaR6/w9+Dm4sqBS+gTzbx6jwcPc= -----END CERTIFICATE-----Generated at Mon Nov 2 13:53:20 2026 by rpki-client