$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: 8dt903FJmDh26ZODVHD+QfXQApTWcU81DlPnyTdM6b8= Subject key identifier: 9C:1B:B3:14:74:E8:D7:F9:F8:A7:06:B6:7E:7A:3B:01:9B:5F:49:7C Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 7DC51EEDB2499FE6BE38B9DBD2E805B73FF20273 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: EB Signing time: Sun 25 Oct 2026 14:55:14 +0000 Manifest this update: Sun 25 Oct 2026 14:50:14 +0000 Manifest next update: Mon 26 Oct 2026 16:25:14 +0000 Files and hashes: 1: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 2: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 3: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 4: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 5: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 6: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: c3zKnvEWG7zb4DhuoqGla8eLGLOP9qVlG3Tx2mzjsQc=) 7: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c5:1e:ed:b2:49:9f:e6:be:38:b9:db:d2:e8:05:b7:3f:f2:02:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Oct 25 14:50:14 2026 GMT Not After : Oct 26 16:25:14 2026 GMT Subject: CN=9C1BB31474E8D7F9F8A706B67E7A3B019B5F497C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:b9:83:d4:09:6c:ff:79:1c:2e:af:51:ea: 04:cc:9b:e9:15:2b:ed:89:3f:d3:07:ce:ff:19:bf: 8c:ab:9e:e4:46:af:02:b9:7b:a3:e5:1b:d9:19:eb: ea:98:38:d1:20:3e:0f:26:16:32:f3:4b:d4:01:aa: 2e:60:71:25:f3:aa:a2:f7:42:a1:76:6b:a4:1a:61: bb:e3:df:6a:36:be:92:9e:11:93:42:0f:8e:0e:ec: 14:a0:78:6a:2b:74:20:62:13:ae:0b:f6:0e:50:4f: 7e:23:5a:6f:3d:01:0b:02:e6:ae:df:7c:19:1d:8c: d2:f4:8a:6e:b1:02:9d:b1:01:0b:5b:f5:8e:17:bf: e5:cf:73:fc:6d:42:5c:15:95:40:25:1d:07:4e:3b: c4:f1:a4:03:aa:fc:ab:87:13:1a:d4:ec:94:7f:2f: 14:0f:54:34:ab:5d:0d:1b:b2:82:4c:19:28:fe:ab: 97:75:e3:6c:ed:d5:21:6f:25:44:06:79:b5:ec:24: bd:b1:db:8f:46:6b:42:f0:91:df:b6:31:80:44:c6: e6:02:4b:51:9c:6f:25:6b:b9:d9:05:e1:52:a3:1b: 0f:da:5f:47:c2:a4:f1:ca:d5:f8:54:d2:52:6b:17: 54:b6:a8:f0:3d:90:85:69:61:54:6e:09:5e:de:1d: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1B:B3:14:74:E8:D7:F9:F8:A7:06:B6:7E:7A:3B:01:9B:5F:49:7C X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c2:b1:3f:cb:d4:ee:7f:23:68:20:dd:dd:90:3a:56:3e:68: d9:5b:39:f9:6a:e1:10:4d:78:93:7b:f4:64:e5:f2:41:81:8c: ea:3d:5e:d5:32:fb:f3:a0:7f:66:05:b7:47:ec:a7:53:f4:18: 8d:ef:09:92:89:0a:ec:52:22:a5:56:e8:6a:b6:a1:ae:f4:29: c5:6b:45:00:7d:eb:ed:08:46:4c:3f:d7:d1:f5:a1:0d:d8:5d: 11:4c:29:c5:f6:89:83:78:f4:22:bc:5d:92:32:fb:09:3c:83: d2:90:65:a2:96:55:ba:e4:70:63:a3:4e:0b:f7:c2:70:17:87: 91:cf:63:69:84:69:e2:d7:63:16:44:9e:65:fb:0d:69:79:95: 2b:40:ff:d1:de:6d:04:91:e5:27:cc:0c:3f:d5:95:01:f7:14: 32:f6:bf:c2:72:e1:fc:e2:f8:d5:6d:30:a8:bd:3a:8a:ba:4c: 09:6d:03:a1:97:b5:76:7b:3d:3a:80:13:57:af:9d:47:a9:b4: 1a:15:25:f2:7e:cd:33:6b:1a:8a:fa:ab:f2:b6:ed:f1:78:90: f9:d9:c0:05:1a:ef:e9:cb:8f:b6:28:7a:3f:4a:3d:5e:ec:39: b8:f5:8a:de:de:56:d3:98:20:fe:08:c6:8d:e8:e1:50:46:0e: d2:73:a6:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcUe7bJJn+a+OLnb0ugFtz/yAnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjEwMjUxNDUwMTRaFw0yNjEwMjYxNjI1MTRaMDMxMTAvBgNV BAMTKDlDMUJCMzE0NzRFOEQ3RjlGOEE3MDZCNjdFN0EzQjAxOUI1RjQ5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJe7mD1Als/3kcLq9R6gTMm+kV K+2JP9MHzv8Zv4yrnuRGrwK5e6PlG9kZ6+qYONEgPg8mFjLzS9QBqi5gcSXzqqL3 QqF2a6QaYbvj32o2vpKeEZNCD44O7BSgeGordCBiE64L9g5QT34jWm89AQsC5q7f fBkdjNL0im6xAp2xAQtb9Y4Xv+XPc/xtQlwVlUAlHQdOO8TxpAOq/KuHExrU7JR/ LxQPVDSrXQ0bsoJMGSj+q5d142zt1SFvJUQGebXsJL2x249Ga0Lwkd+2MYBExuYC S1GcbyVrudkF4VKjGw/aX0fCpPHK1fhU0lJrF1S2qPA9kIVpYVRuCV7eHaYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBuzFHTo1/n4pwa2fno7AZtfSXwwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzCsT/L1O5/I2gg3d2QOlY+aNlbOflq4RBN eJN79GTl8kGBjOo9XtUy+/Ogf2YFt0fsp1P0GI3vCZKJCuxSIqVW6Gq2oa70KcVr RQB96+0IRkw/19H1oQ3YXRFMKcX2iYN49CK8XZIy+wk8g9KQZaKWVbrkcGOjTgv3 wnAXh5HPY2mEaeLXYxZEnmX7DWl5lStA/9HebQSR5SfMDD/VlQH3FDL2v8Jy4fzi +NVtMKi9Ooq6TAltA6GXtXZ7PTqAE1evnUeptBoVJfJ+zTNrGor6q/K27fF4kPnZ wAUa7+nLj7Yoej9KPV7sObj1it7eVtOYIP4Ixo3o4VBGDtJzpv8= -----END CERTIFICATE-----Generated at Mon Oct 26 02:26:34 2026 by rpki-client