$ rpki-client -vvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft File: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft (raw, json) Hash identifier: CnP+JzHwiGJ2M7OxFNQppblzZOPsoMIZUKlZb83v980= Subject key identifier: 2D:EC:D0:E7:EE:93:7F:31:A0:D4:B3:38:A4:9E:AF:E3:5E:59:24:3B Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 Certificate issuer: /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Certificate serial: 423EBC9021D0305F5F6332AEEE113081537FB271 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 06:37:43 +0000 Manifest this update: Sat 20 Jun 2026 06:32:43 +0000 Manifest next update: Sun 21 Jun 2026 07:06:43 +0000 Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: 8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=) 2: 0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl (hash: JnLe7g8HBHBL0j1lfqgjyZSVDAiPE8DuB+mtnLgqUOg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3e:bc:90:21:d0:30:5f:5f:63:32:ae:ee:11:30:81:53:7f:b2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3 Validity Not Before: Jun 20 06:32:43 2026 GMT Not After : Jun 21 07:06:43 2026 GMT Subject: CN=2DECD0E7EE937F31A0D4B338A49EAFE35E59243B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f2:1e:70:a6:00:e5:8e:a5:61:c9:07:6d:f3: c6:c5:ed:d5:ab:cd:32:81:8a:43:3e:ef:32:d5:16: ba:de:ae:79:98:c6:54:c5:04:45:8e:f3:29:fa:ec: a0:1f:be:92:94:53:9c:42:29:d8:b6:d1:58:cc:7b: 17:ad:9a:e7:2a:01:94:f1:f4:75:07:ac:f7:33:b8: 2a:53:e9:67:4c:52:8d:fd:33:6d:c4:1a:9f:38:54: 34:4a:22:52:49:7b:8d:4e:b5:d7:47:bb:00:2a:a4: a1:d0:3b:d1:28:33:0a:6f:d2:a2:a8:f3:4c:b7:3e: 4d:70:56:b2:b2:91:d9:79:49:4f:ff:27:85:bd:7d: e5:c3:90:f8:36:d6:20:26:b1:81:b5:14:56:20:68: 6c:d5:92:6b:9e:c9:1c:c7:39:30:32:4c:0c:2a:54: 34:67:15:10:d3:2b:28:25:ac:50:d2:21:a5:fe:b1: 25:4d:0c:8a:65:38:d0:81:39:ed:76:ab:93:33:ac: 5c:7a:f1:24:3b:40:c8:1d:84:7f:86:bf:44:fd:81: fd:0b:b8:70:ce:62:31:fe:09:e5:19:01:bf:10:f5: f4:93:57:7c:3e:7b:68:b8:a0:1e:33:66:6f:99:d1: e9:c1:ed:ef:85:0d:d9:e7:6f:b2:96:14:2a:e7:0f: f9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EC:D0:E7:EE:93:7F:31:A0:D4:B3:38:A4:9E:AF:E3:5E:59:24:3B X509v3 Authority Key Identifier: keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8b:dd:b9:f4:1d:7f:fd:26:88:57:e7:03:2f:35:f7:94:47: 04:b7:e2:f9:e4:7a:e9:29:8c:ae:ca:4e:cc:b7:d8:5e:51:ad: 16:a5:cd:7d:50:fb:5b:f4:9d:df:b6:81:b1:75:a1:50:54:6e: 97:24:1b:a9:68:21:8d:0d:78:b7:b5:f2:67:09:8d:a2:eb:75: e1:f9:d1:30:90:42:e2:27:a9:38:1f:0e:76:06:83:9e:94:29: 3c:76:f4:84:4c:e9:d4:de:cd:c6:51:af:48:56:9c:0a:d1:4c: 5e:2c:b5:b2:9d:4e:7b:b0:cd:93:2e:b6:83:6c:50:4c:f2:5c: 2a:c1:18:f6:4c:d1:75:d4:38:5b:f5:52:5a:5d:7b:7f:3f:e6: 31:0d:a1:4f:03:e4:85:92:ef:2f:19:80:fe:17:42:29:ca:2f: 6f:71:2a:da:b1:3f:1c:7c:84:c0:7a:4e:f4:a4:e5:2f:80:95: 98:d8:bb:5a:9f:e1:ce:80:b6:de:24:34:8f:5e:55:63:3a:18: fe:28:1a:16:6d:03:82:3d:ae:a7:23:03:2f:7f:63:01:08:d9: 78:b8:fd:28:f9:01:fd:45:d1:6d:5c:da:29:48:ca:9a:3a:57: c6:50:6a:01:5a:17:a6:15:8b:8e:af:0f:ce:23:d3:f0:38:1a: 3c:5e:31:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQj68kCHQMF9fYzKu7hEwgVN/snEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3 M0QwODFDMzAeFw0yNjA2MjAwNjMyNDNaFw0yNjA2MjEwNzA2NDNaMDMxMTAvBgNV BAMTKDJERUNEMEU3RUU5MzdGMzFBMEQ0QjMzOEE0OUVBRkUzNUU1OTI0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt8h5wpgDljqVhyQdt88bF7dWr zTKBikM+7zLVFrrernmYxlTFBEWO8yn67KAfvpKUU5xCKdi20VjMexetmucqAZTx 9HUHrPczuCpT6WdMUo39M23EGp84VDRKIlJJe41OtddHuwAqpKHQO9EoMwpv0qKo 80y3Pk1wVrKykdl5SU//J4W9feXDkPg21iAmsYG1FFYgaGzVkmueyRzHOTAyTAwq VDRnFRDTKyglrFDSIaX+sSVNDIplONCBOe12q5MzrFx68SQ7QMgdhH+Gv0T9gf0L uHDOYjH+CeUZAb8Q9fSTV3w+e2i4oB4zZm+Z0enB7e+FDdnnb7KWFCrnD/npAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULezQ5+6TfzGg1LM4pJ6v415ZJDswHwYDVR0j BBgwFoAUDSTooLhfdqIivL+N5OsfW3PQgcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTc0ZGM1ZTEtMWQ1NS00OWQyLTkzZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBC ODVGNzZBMjIyQkNCRjhERTRFQjFGNUI3M0QwODFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI0RThBMEI4NUY3NkEyMjJCQ0JGOERFNEVCMUY1QjczRDA4 MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMEQyNEU4QTBCODVGNzZBMjIyQkNCRjhERTRFQjFG NUI3M0QwODFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqL3bn0HX/9JohX5wMvNfeURwS34vnkeukp jK7KTsy32F5RrRalzX1Q+1v0nd+2gbF1oVBUbpckG6loIY0NeLe18mcJjaLrdeH5 0TCQQuInqTgfDnYGg56UKTx29IRM6dTezcZRr0hWnArRTF4stbKdTnuwzZMutoNs UEzyXCrBGPZM0XXUOFv1Ulpde38/5jENoU8D5IWS7y8ZgP4XQinKL29xKtqxPxx8 hMB6TvSk5S+AlZjYu1qf4c6Att4kNI9eVWM6GP4oGhZtA4I9rqcjAy9/YwEI2Xi4 /Sj5Af1F0W1c2ilIypo6V8ZQagFaF6YVi46vD84j0/A4GjxeMSA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:57 2026 by rpki-client