$ rpki-client -vvvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft File: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft (raw, json) Hash identifier: JtwG1XG+L8yj49YRtUTaDnzMHNCuu3+WkVU+B7bKylI= Subject key identifier: 03:97:9F:29:0F:A2:96:E6:64:15:87:D9:58:B6:1C:52:D1:50:7F:F9 Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 Certificate issuer: /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Certificate serial: 5B50E1CE4B3DED056AA1D915811B5FCBD01A725A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft Manifest number: EA Signing time: Sat 24 Oct 2026 23:23:22 +0000 Manifest this update: Sat 24 Oct 2026 23:18:22 +0000 Manifest next update: Mon 26 Oct 2026 02:58:22 +0000 Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: 8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=) 2: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl (hash: Agu3KaMLYIdjHypPQxkiJoYHR1X5UyL3AZmChNANwi8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 02:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:50:e1:ce:4b:3d:ed:05:6a:a1:d9:15:81:1b:5f:cb:d0:1a:72:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Validity Not Before: Oct 24 23:18:22 2026 GMT Not After : Oct 26 02:58:22 2026 GMT Subject: CN=03979F290FA296E6641587D958B61C52D1507FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:29:d4:eb:ec:46:f2:43:0b:f6:5b:66:04:4a: 08:d6:8c:6d:18:85:45:da:d4:6b:d6:34:94:f4:5f: bf:b1:84:ec:b1:87:6f:b5:95:31:27:52:2d:76:e7: 4f:d4:05:e2:f7:41:d9:91:e4:a2:86:14:7f:f9:64: b3:34:f3:7b:99:1e:c7:ac:c6:b5:fe:f4:20:8b:fd: 20:97:07:18:ba:cc:40:43:97:a4:76:95:c8:ca:63: e6:00:91:16:79:43:30:4a:3f:5e:07:af:37:da:cb: 36:89:d5:a4:71:0f:a4:92:b0:c0:c6:07:b3:1f:46: 56:02:19:ff:01:d5:eb:9f:d2:5d:d8:ac:f9:2f:09: be:c0:19:b3:fe:56:3a:d5:30:75:00:d5:c2:70:cc: f2:67:38:81:24:31:42:aa:19:6e:f4:4a:99:ac:f2: a7:f4:74:2e:b3:70:d1:7f:e3:a1:93:82:4a:93:f7: db:b2:56:2e:d8:29:0f:24:d6:dc:38:43:fb:93:b0: 6a:14:b2:be:b7:81:60:15:f7:b4:77:e7:33:b9:61: 6b:e7:12:69:93:82:16:74:ec:c0:ea:a8:dc:ed:9c: 94:4a:25:0d:ac:e8:f8:6e:f3:69:ff:f6:4d:d2:53: 54:76:82:3f:93:72:c1:ef:13:25:3c:9e:bb:30:5d: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:97:9F:29:0F:A2:96:E6:64:15:87:D9:58:B6:1C:52:D1:50:7F:F9 X509v3 Authority Key Identifier: keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b1:a6:f8:ee:a8:f7:8a:19:14:dc:14:6c:a2:83:d5:c9:12: 02:db:f4:55:1d:1f:51:5c:08:70:2d:f7:72:75:8c:83:8b:b5: eb:f0:6d:63:fc:e9:c3:a8:a9:76:a9:d5:16:2a:49:1a:33:4b: b4:0e:b3:ba:c3:ff:b3:87:48:bd:96:7c:ee:02:ed:e1:b5:b2: 70:87:29:ba:f9:18:c9:c2:f5:76:88:5a:94:9b:96:c2:51:cc: f2:73:70:a1:c1:42:08:97:10:32:4b:bf:d6:62:a2:13:7d:fb: 1a:f1:b2:9c:c5:e3:dd:dd:fe:c0:10:04:31:61:fb:df:29:6f: 26:df:94:d7:07:5c:f9:f5:17:93:9c:03:c2:41:e4:59:03:c8: 35:fb:d5:86:55:b2:08:0e:f2:37:46:ab:8c:ae:44:9d:e3:5c: 76:0d:b0:cd:31:25:b6:c7:91:5a:b9:3a:23:81:80:52:67:c9: 12:a5:3f:3c:54:1c:39:62:3c:fd:ce:e0:f7:e5:9a:8f:01:40: 8f:c5:a3:27:01:d8:61:91:db:f0:f3:53:1e:37:13:e7:92:9f: 35:0b:70:72:6b:71:c2:ed:c3:17:5d:84:79:10:1c:bf:ec:5d: ff:72:6f:28:ea:07:bc:cf:89:1e:72:20:98:26:09:b2:8e:10: 74:fb:03:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1Dhzks97QVqodkVgRtfy9AaclowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3 M0QwODFDMzAeFw0yNjEwMjQyMzE4MjJaFw0yNjEwMjYwMjU4MjJaMDMxMTAvBgNV BAMTKDAzOTc5RjI5MEZBMjk2RTY2NDE1ODdEOTU4QjYxQzUyRDE1MDdGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsKdTr7EbyQwv2W2YESgjWjG0Y hUXa1GvWNJT0X7+xhOyxh2+1lTEnUi1250/UBeL3QdmR5KKGFH/5ZLM083uZHses xrX+9CCL/SCXBxi6zEBDl6R2lcjKY+YAkRZ5QzBKP14HrzfayzaJ1aRxD6SSsMDG B7MfRlYCGf8B1euf0l3YrPkvCb7AGbP+VjrVMHUA1cJwzPJnOIEkMUKqGW70Spms 8qf0dC6zcNF/46GTgkqT99uyVi7YKQ8k1tw4Q/uTsGoUsr63gWAV97R35zO5YWvn EmmTghZ07MDqqNztnJRKJQ2s6Phu82n/9k3SU1R2gj+TcsHvEyU8nrswXXk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA5efKQ+iluZkFYfZWLYcUtFQf/kwHwYDVR0j BBgwFoAUDSTooLhfdqIivL+N5OsfW3PQgcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTc0ZGM1ZTEtMWQ1NS00OWQyLTkzZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBC ODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3M0QwODFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI0RThBMEI4NUY3NkEyMjJCQ0JGOERFNEVCMUY1QjczRDA4 MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFG NUI3M0QwODFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOxpvjuqPeKGRTcFGyig9XJEgLb9FUdH1Fc CHAt93J1jIOLtevwbWP86cOoqXap1RYqSRozS7QOs7rD/7OHSL2WfO4C7eG1snCH Kbr5GMnC9XaIWpSblsJRzPJzcKHBQgiXEDJLv9ZiohN9+xrxspzF493d/sAQBDFh +98pbybflNcHXPn1F5OcA8JB5FkDyDX71YZVsggO8jdGq4yuRJ3jXHYNsM0xJbbH kVq5OiOBgFJnyRKlPzxUHDliPP3O4Pflmo8BQI/FoycB2GGR2/DzUx43E+eSnzUL cHJrccLtwxddhHkQHL/sXf9ybyjqB7zPiR5yIJgmCbKOEHT7A9g= -----END CERTIFICATE-----Generated at Sun Oct 25 19:50:09 2026 by rpki-client