$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft File: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft (raw, json) Hash identifier: 0HMxK8uES5ONT+3TGfz3qM+v2Zv3neSFK2yMhY12LDI= Subject key identifier: 9C:98:6A:9C:EB:F4:AF:45:55:FC:30:43:B2:35:87:7F:E2:89:62:63 Authority key identifier: 24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 Certificate issuer: /CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Certificate serial: 5D38C5DE8C520389F5E05405D37BC67FF1D11714 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft Manifest number: BB Signing time: Wed 16 Sep 2026 22:52:11 +0000 Manifest this update: Wed 16 Sep 2026 22:47:11 +0000 Manifest next update: Thu 17 Sep 2026 22:53:11 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: fCOFQpy4x/crI+WC5jvfSD6t0+AQC6KYZU58O4qsuz0=) 2: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl (hash: MlTeUyYcrNJkrmernQkGfN+qjFJunaIMCCYe7wpTKDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:38:c5:de:8c:52:03:89:f5:e0:54:05:d3:7b:c6:7f:f1:d1:17:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Validity Not Before: Sep 16 22:47:11 2026 GMT Not After : Sep 17 22:53:11 2026 GMT Subject: CN=9C986A9CEBF4AF4555FC3043B235877FE2896263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:be:92:5e:78:dd:e9:6a:4a:1a:db:3e:63: 0a:d5:75:29:0c:9e:29:3f:2e:80:4b:b1:7b:ea:a1: 79:40:7a:72:29:d2:52:86:63:f8:c3:f1:e5:6b:d1: 68:ad:c0:f9:01:52:9b:99:0e:96:2a:90:0d:4b:5e: d3:33:ab:85:9b:83:17:b7:eb:2b:74:ea:75:97:f0: 10:c5:93:3d:ee:10:0a:3a:ef:e8:f5:38:7b:5c:27: 32:5d:4a:09:aa:6f:82:c0:22:30:fe:e8:30:49:2d: 67:4b:61:25:48:1c:67:c4:7e:38:d2:88:e6:a8:8e: bf:aa:07:18:30:23:57:37:a0:15:92:c3:fa:bc:9d: 2a:f0:5d:c9:da:a2:86:a9:52:03:4f:04:16:7a:0a: a8:19:4b:2b:af:59:ec:7e:4a:25:25:0a:ee:72:f9: 07:e8:a1:79:5f:e9:3a:28:2a:f9:6e:d7:48:38:bb: 00:dd:70:4c:bb:4d:e2:b5:3f:a1:67:ab:cf:a3:c5: ef:5b:5f:bd:10:a5:72:56:31:59:65:be:20:09:85: b0:e8:30:08:a8:4a:9f:5a:50:8f:d2:00:14:cc:ef: 6e:92:2a:50:0e:d6:b6:2b:11:46:21:f1:43:92:9e: 4c:57:f7:09:38:21:eb:a9:a2:3b:5e:68:95:35:1a: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:98:6A:9C:EB:F4:AF:45:55:FC:30:43:B2:35:87:7F:E2:89:62:63 X509v3 Authority Key Identifier: keyid:24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b5:cd:53:e7:42:d6:c4:91:8e:b5:ff:8e:57:3f:21:f8:96: a5:c3:46:d0:64:96:8b:4b:80:f1:f0:a7:45:86:58:01:a5:1f: 0f:7b:7a:42:1e:47:8c:d2:18:7a:4e:10:93:90:a6:3c:ca:70: ce:6c:5e:e3:e0:21:98:a5:be:9b:3b:3e:d5:92:55:cb:0c:2b: 31:8f:3a:96:e5:1a:75:32:57:8a:5b:f1:95:eb:52:6c:06:27: 86:a8:44:b6:40:38:9f:63:f6:e6:5b:d9:9f:7b:ac:fd:85:39: 71:b6:e5:9f:bb:f4:7f:97:c7:40:cc:9e:5f:60:36:dd:92:09: a4:0f:7b:d1:b2:30:0e:24:11:75:2c:3e:9f:bd:d7:f4:6d:55: b6:de:3f:90:bb:ae:87:90:ee:ac:40:5e:1c:43:dd:27:a8:64: 43:a7:45:82:80:88:1e:f1:e5:1e:d8:b3:3d:64:12:04:73:76: 92:53:0d:1d:e0:f3:3f:7b:3c:6a:a3:c8:c0:cf:5f:01:c8:64: db:1a:17:31:6f:2f:de:e8:9b:32:cd:fd:87:d7:26:ab:2d:80: 1a:87:01:af:5e:f8:fa:4e:09:d6:40:f0:04:11:22:4e:9b:df: 19:cb:32:6c:d8:80:e6:18:5c:a7:bf:20:5f:3c:a7:7d:36:e7: 58:76:be:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTjF3oxSA4n14FQF03vGf/HRFxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2 M0JDNkI0ODAeFw0yNjA5MTYyMjQ3MTFaFw0yNjA5MTcyMjUzMTFaMDMxMTAvBgNV BAMTKDlDOTg2QTlDRUJGNEFGNDU1NUZDMzA0M0IyMzU4NzdGRTI4OTYyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdv76SXnjd6WpKGts+YwrVdSkM nik/LoBLsXvqoXlAenIp0lKGY/jD8eVr0WitwPkBUpuZDpYqkA1LXtMzq4Wbgxe3 6yt06nWX8BDFkz3uEAo67+j1OHtcJzJdSgmqb4LAIjD+6DBJLWdLYSVIHGfEfjjS iOaojr+qBxgwI1c3oBWSw/q8nSrwXcnaooapUgNPBBZ6CqgZSyuvWex+SiUlCu5y +QfooXlf6TooKvlu10g4uwDdcEy7TeK1P6Fnq8+jxe9bX70QpXJWMVllviAJhbDo MAioSp9aUI/SABTM726SKlAO1rYrEUYh8UOSnkxX9wk4IeupojteaJU1GpehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnJhqnOv0r0VV/DBDsjWHf+KJYmMwHwYDVR0j BBgwFoAUJNdUmLSFqllirYw6AFSOymO8a0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MTFiMDUtYzU4YS00MjA2LWI3YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThC NDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2M0JDNkI0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNEQ3NTQ5OEI0ODVBQTU5NjJBRDhDM0EwMDU0OEVDQTYzQkM2 QjQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhF Q0E2M0JDNkI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALu1zVPnQtbEkY61/45XPyH4lqXDRtBklotL gPHwp0WGWAGlHw97ekIeR4zSGHpOEJOQpjzKcM5sXuPgIZilvps7PtWSVcsMKzGP OpblGnUyV4pb8ZXrUmwGJ4aoRLZAOJ9j9uZb2Z97rP2FOXG25Z+79H+Xx0DMnl9g Nt2SCaQPe9GyMA4kEXUsPp+91/RtVbbeP5C7roeQ7qxAXhxD3SeoZEOnRYKAiB7x 5R7Ysz1kEgRzdpJTDR3g8z97PGqjyMDPXwHIZNsaFzFvL97omzLN/YfXJqstgBqH Aa9e+PpOCdZA8AQRIk6b3xnLMmzYgOYYXKe/IF88p30251h2vkY= -----END CERTIFICATE-----Generated at Thu Sep 17 14:44:01 2026 by rpki-client