$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft File: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json) Hash identifier: gtV4Nh0EFxq204cLTSN3QNQAT+qSFV+XorWsDPjHbXc= Subject key identifier: 18:03:58:F6:3C:A2:7C:40:02:86:93:38:9D:D7:56:1D:86:7D:39:0D Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA Certificate issuer: /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Certificate serial: 64A2145AD221560A6DBD788249FFA454ECBAFEE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:48:21 +0000 Manifest this update: Wed 16 Sep 2026 23:43:21 +0000 Manifest next update: Fri 18 Sep 2026 00:30:21 +0000 Files and hashes: 1: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: KCDU4uDKW6TNSQsClmBWo9pIXJOVWAvfbcoRpOmnmlI=) 2: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=) 3: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a2:14:5a:d2:21:56:0a:6d:bd:78:82:49:ff:a4:54:ec:ba:fe:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA Validity Not Before: Sep 16 23:43:21 2026 GMT Not After : Sep 18 00:30:21 2026 GMT Subject: CN=180358F63CA27C40028693389DD7561D867D390D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:83:26:c5:52:b3:bc:47:7f:65:3b:48:bb: bb:d3:06:f0:19:78:31:c4:8e:4c:c6:0b:2b:59:e7: b1:22:2c:44:33:2a:15:77:62:45:ea:28:00:42:40: 93:54:0a:7f:85:b5:87:53:30:5f:1e:4d:3d:4d:1f: 0d:cb:14:a4:5c:53:eb:df:0a:d4:c3:66:f9:ab:31: 56:44:c5:74:a7:9f:b4:16:0e:4d:d5:55:c0:b5:38: f3:a7:e6:b7:81:c0:29:d8:c5:9e:fd:64:90:ec:34: 96:a2:65:ae:02:82:c5:ac:19:16:e9:b5:53:d0:93: bc:42:84:6e:c8:bb:03:1c:fd:31:d6:45:3d:43:a8: 1b:c9:cd:ed:6e:0b:b3:1c:26:65:90:10:e6:42:a4: 25:f3:8a:a2:c0:ad:e8:7e:5e:d4:5c:c4:20:d3:60: 13:6a:2b:87:77:c3:84:ab:c3:f8:1b:f2:9a:2d:4d: 89:af:b6:f0:f6:4b:3a:f4:6c:c2:83:d3:0a:e4:62: 30:c3:19:03:99:2c:9e:4e:6a:1b:19:9d:c0:65:a0: ad:74:54:b9:c9:2d:43:0a:7c:9b:9a:b2:43:5e:d0: 9a:eb:56:ad:0c:1c:9d:41:76:4f:67:2e:73:f2:d6: 68:8a:30:47:9b:eb:8a:bf:f3:c6:bd:d3:05:38:77: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:03:58:F6:3C:A2:7C:40:02:86:93:38:9D:D7:56:1D:86:7D:39:0D X509v3 Authority Key Identifier: keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:18:c8:6c:90:98:4b:90:e7:81:6c:94:5f:d2:60:f1:c3:08: ba:9e:49:7f:e2:0e:0c:76:f9:45:c1:8f:cb:0f:6e:f1:e5:95: 15:7c:bc:fe:29:79:3a:9d:11:08:ac:84:8e:ba:9d:b3:22:38: 25:c6:c1:c3:4e:3f:68:7f:db:a1:ab:6d:dd:38:b9:10:31:87: dc:00:36:62:94:94:61:d8:1c:36:49:d0:24:d9:56:85:10:76: cd:b1:0f:19:8b:b8:72:e8:d2:40:ec:6b:d4:1c:4f:fa:64:58: b9:db:c6:01:3e:82:8f:94:79:44:cc:48:14:8f:60:8d:98:64: b1:e6:17:90:26:99:c1:f4:4d:36:fb:4a:01:0e:0e:ab:7e:ca: 20:09:cf:73:52:60:61:2e:7f:7f:8b:e1:97:20:84:25:0d:5d: 55:33:dc:42:f3:57:d7:69:a8:2d:3a:98:d2:eb:11:23:60:b5: cb:cd:ec:0b:87:b2:c6:a9:d7:db:9a:4a:8c:f9:f0:47:9c:45: b2:d2:71:64:71:ce:9d:2e:c0:bb:86:4f:4d:a9:0e:cc:82:29: 7c:3c:85:24:d3:ca:eb:43:fd:f2:45:f9:5b:7b:d3:2b:48:f9: cc:08:45:6a:2d:7f:fa:93:36:7c:51:49:82:a6:b8:06:43:f1: 93:7d:80:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKIUWtIhVgptvXiCSf+kVOy6/ukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3 Njk4MjhDQTAeFw0yNjA5MTYyMzQzMjFaFw0yNjA5MTgwMDMwMjFaMDMxMTAvBgNV BAMTKDE4MDM1OEY2M0NBMjdDNDAwMjg2OTMzODlERDc1NjFEODY3RDM5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPIMmxVKzvEd/ZTtIu7vTBvAZ eDHEjkzGCytZ57EiLEQzKhV3YkXqKABCQJNUCn+FtYdTMF8eTT1NHw3LFKRcU+vf CtTDZvmrMVZExXSnn7QWDk3VVcC1OPOn5reBwCnYxZ79ZJDsNJaiZa4CgsWsGRbp tVPQk7xChG7IuwMc/THWRT1DqBvJze1uC7McJmWQEOZCpCXziqLAreh+XtRcxCDT YBNqK4d3w4Srw/gb8potTYmvtvD2Szr0bMKD0wrkYjDDGQOZLJ5OahsZncBloK10 VLnJLUMKfJuaskNe0JrrVq0MHJ1Bdk9nLnPy1miKMEeb64q/88a90wU4d5njAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGANY9jyifEAChpM4nddWHYZ9OQ0wHwYDVR0j BBgwFoAUwkuo16upoK64HSDmtVEhXnaYKMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3MDgzYWItMjcwYS00YjBhLThlNTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdB QkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3Njk4MjhDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjRCQThEN0FCQTlBMEFFQjgxRDIwRTZCNTUxMjE1RTc2OTgy OENBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIx NUU3Njk4MjhDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgYyGyQmEuQ54FslF/SYPHDCLqeSX/iDgx2 +UXBj8sPbvHllRV8vP4peTqdEQishI66nbMiOCXGwcNOP2h/26Grbd04uRAxh9wA NmKUlGHYHDZJ0CTZVoUQds2xDxmLuHLo0kDsa9QcT/pkWLnbxgE+go+UeUTMSBSP YI2YZLHmF5AmmcH0TTb7SgEODqt+yiAJz3NSYGEuf3+L4ZcghCUNXVUz3ELzV9dp qC06mNLrESNgtcvN7AuHssap19uaSoz58EecRbLScWRxzp0uwLuGT02pDsyCKXw8 hSTTyutD/fJF+Vt70ytI+cwIRWotf/qTNnxRSYKmuAZD8ZN9gJQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:36 2026 by rpki-client