$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft File: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft (raw, json) Hash identifier: IW5k3W10/umiAEPRk4AK/G6fwhwKZpCWfwrSCR3XFog= Subject key identifier: 79:80:39:CA:89:75:CD:89:6E:C9:22:E6:5C:78:DA:B1:BE:B1:64:EA Authority key identifier: 24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 Certificate issuer: /CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Certificate serial: 094CE3BBCB8DDB23E76AF22EB6D78F96BA0728B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 05:23:56 +0000 Manifest this update: Sun 02 Aug 2026 05:18:56 +0000 Manifest next update: Mon 03 Aug 2026 05:32:56 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: fCOFQpy4x/crI+WC5jvfSD6t0+AQC6KYZU58O4qsuz0=) 2: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl (hash: fwD1kqiZ/KYxpYIDY0hVJBdwYuSjw3VA8RV2OHPnpCk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4c:e3:bb:cb:8d:db:23:e7:6a:f2:2e:b6:d7:8f:96:ba:07:28:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Validity Not Before: Aug 2 05:18:56 2026 GMT Not After : Aug 3 05:32:56 2026 GMT Subject: CN=798039CA8975CD896EC922E65C78DAB1BEB164EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:27:21:b2:d3:9d:9e:31:6e:27:6e:d3:fc: ed:65:dd:d6:c3:97:14:34:44:e0:e7:2c:01:a4:4b: 42:af:f1:19:08:ab:46:75:86:77:51:55:08:df:7a: c0:ea:ef:ab:91:d8:8a:2c:a5:1b:8c:f4:2b:95:f8: ee:f1:db:86:8c:f6:e4:2c:f4:a1:18:ae:da:ef:42: 5f:8f:83:53:93:62:e7:ce:d7:ed:09:22:9f:5b:61: a2:56:79:31:71:06:0e:85:73:57:ea:82:76:a3:d9: 17:cf:1b:70:9d:44:fc:4d:43:f3:25:8a:58:a5:6e: 95:b5:88:73:4c:f6:0d:2b:8f:7c:32:87:34:6b:ec: 75:0f:12:0b:93:1d:25:52:d5:d0:a0:fa:de:85:07: 76:0d:ee:f8:0a:9f:7f:ce:ca:29:07:d3:85:3a:da: 83:9c:ec:52:b6:08:49:b4:b6:2f:9e:d3:9b:c5:d3: 84:d7:54:fc:51:ef:2a:ac:9f:fc:8f:9c:42:d7:bb: 89:d6:02:82:ea:42:1a:f3:20:96:21:7d:c6:28:36: ff:fe:2a:59:ca:b8:77:67:90:f6:0f:e9:f4:31:2e: ed:32:c8:27:65:39:45:3d:fb:3c:3c:bd:0d:b3:b5: 03:8b:9b:b0:c7:b5:f3:55:5d:e8:00:67:8c:c7:9f: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:80:39:CA:89:75:CD:89:6E:C9:22:E6:5C:78:DA:B1:BE:B1:64:EA X509v3 Authority Key Identifier: keyid:24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1b:69:3e:73:ce:33:54:08:8f:b5:d8:3b:fc:2c:e2:9f:70: 5d:84:5a:26:33:e5:30:63:4e:e5:66:fc:d7:0d:b9:d7:00:08: b0:ff:88:59:3c:b0:f4:f0:b2:c4:f3:26:9e:b4:b6:1e:1b:2d: b5:d2:84:af:7e:3e:a9:96:21:c3:5f:fa:41:f4:96:02:a4:3f: c3:f1:29:e5:ac:03:8f:9b:4a:b9:e4:58:07:44:58:8b:eb:45: 02:a7:e9:89:fa:14:2c:30:03:0f:0a:14:49:49:ba:86:03:06: 0d:ce:5b:56:a2:15:0b:59:dc:a6:f2:fb:6f:70:bc:87:5a:64: 8c:0f:bb:60:86:f6:77:94:35:0a:72:f0:86:59:2d:c1:4e:fe: 33:7d:97:70:b7:14:4f:26:fe:d8:8e:82:26:09:c2:19:3c:3e: 37:c5:1d:bd:29:69:6c:6c:45:dc:17:a6:92:de:04:2e:e9:a6: 22:f6:f4:50:3a:0b:eb:6d:3f:45:8a:5f:10:b7:bc:52:c5:9a: 20:2d:a9:4e:36:26:b1:17:d7:13:fb:72:8c:5e:4f:96:6d:2a: 34:9d:48:c9:75:a9:0d:1b:f9:79:89:05:5b:c3:6f:16:eb:f7: 48:52:a9:a8:f4:4e:22:34:45:77:14:36:65:dd:f4:23:33:e5: 24:f0:36:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUzju8uN2yPnavIuttePlroHKLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2 M0JDNkI0ODAeFw0yNjA4MDIwNTE4NTZaFw0yNjA4MDMwNTMyNTZaMDMxMTAvBgNV BAMTKDc5ODAzOUNBODk3NUNEODk2RUM5MjJFNjVDNzhEQUIxQkVCMTY0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mSchstOdnjFuJ27T/O1l3dbD lxQ0RODnLAGkS0Kv8RkIq0Z1hndRVQjfesDq76uR2IospRuM9CuV+O7x24aM9uQs 9KEYrtrvQl+Pg1OTYufO1+0JIp9bYaJWeTFxBg6Fc1fqgnaj2RfPG3CdRPxNQ/Ml ililbpW1iHNM9g0rj3wyhzRr7HUPEguTHSVS1dCg+t6FB3YN7vgKn3/OyikH04U6 2oOc7FK2CEm0ti+e05vF04TXVPxR7yqsn/yPnELXu4nWAoLqQhrzIJYhfcYoNv/+ KlnKuHdnkPYP6fQxLu0yyCdlOUU9+zw8vQ2ztQOLm7DHtfNVXegAZ4zHnzh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeYA5yol1zYluySLmXHjasb6xZOowHwYDVR0j BBgwFoAUJNdUmLSFqllirYw6AFSOymO8a0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MTFiMDUtYzU4YS00MjA2LWI3YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThC NDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2M0JDNkI0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNEQ3NTQ5OEI0ODVBQTU5NjJBRDhDM0EwMDU0OEVDQTYzQkM2 QjQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhF Q0E2M0JDNkI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkbaT5zzjNUCI+12Dv8LOKfcF2EWiYz5TBj TuVm/NcNudcACLD/iFk8sPTwssTzJp60th4bLbXShK9+PqmWIcNf+kH0lgKkP8Px KeWsA4+bSrnkWAdEWIvrRQKn6Yn6FCwwAw8KFElJuoYDBg3OW1aiFQtZ3Kby+29w vIdaZIwPu2CG9neUNQpy8IZZLcFO/jN9l3C3FE8m/tiOgiYJwhk8PjfFHb0paWxs RdwXppLeBC7ppiL29FA6C+ttP0WKXxC3vFLFmiAtqU42JrEX1xP7coxeT5ZtKjSd SMl1qQ0b+XmJBVvDbxbr90hSqaj0TiI0RXcUNmXd9CMz5STwNgE= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:40 2026 by rpki-client