$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: JL9c3PPzy70fh83bs6KYnf2c5/gEj5rHUxM4TXLai+Y= Subject key identifier: EF:D6:8D:E6:A0:E4:C9:E4:C4:A1:29:0B:E6:2A:07:5A:B2:0D:6B:BA Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 156EFDCB9FF3ECC9A9D4400CA6EB0339381F6D1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: 60 Signing time: Sun 12 Jul 2026 19:08:00 +0000 Manifest this update: Sun 12 Jul 2026 19:03:00 +0000 Manifest next update: Mon 13 Jul 2026 19:39:00 +0000 Files and hashes: 1: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 2: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 3: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: zsieE9usbhZh4zuAVEOSKboZUWTi5pTAKEWHidfeXNM=) 4: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 5: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) 6: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) 7: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 19:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6e:fd:cb:9f:f3:ec:c9:a9:d4:40:0c:a6:eb:03:39:38:1f:6d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Jul 12 19:03:00 2026 GMT Not After : Jul 13 19:39:00 2026 GMT Subject: CN=EFD68DE6A0E4C9E4C4A1290BE62A075AB20D6BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f5:d6:8c:de:7d:4c:07:b2:74:a9:62:02:f3: 62:62:8f:d3:57:6a:48:a2:29:6b:ba:64:ab:3b:5d: 03:a6:47:cd:15:08:30:16:9a:3f:2f:5a:81:17:4e: 2e:df:51:36:f9:e0:32:38:d1:bc:c9:da:85:2b:7f: 43:e0:0b:fc:6d:96:af:8c:ef:67:08:b2:d3:b5:34: b1:d0:d5:cb:df:bd:e0:ce:24:1f:1b:2f:ab:d8:3a: ad:6c:c1:85:ec:d4:18:86:f3:aa:58:11:d5:eb:97: 03:fd:b1:d1:78:0e:5c:2f:dd:84:35:80:27:03:01: 66:68:83:8a:23:0d:96:41:0e:78:9b:15:bf:08:6a: 76:50:72:93:10:52:c5:ea:8b:7b:cd:fd:e4:f4:f5: 9f:d0:d7:ad:68:58:d7:d5:07:a8:b8:7c:a0:d9:a2: d1:28:6d:71:00:4f:ce:14:ab:66:53:8f:2e:59:c1: 84:24:38:2b:ae:6e:bc:cf:4d:ed:46:69:84:e6:71: c8:14:db:7b:7b:db:a5:85:99:82:42:a3:30:09:e5: e2:2c:26:96:3b:3a:59:ac:b3:2f:be:ee:5e:ef:08: 89:37:e0:fa:c0:69:d1:a1:9e:6f:91:a7:30:21:93: 04:3a:ad:8c:dd:b0:72:09:84:d1:48:cd:8d:32:b6: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D6:8D:E6:A0:E4:C9:E4:C4:A1:29:0B:E6:2A:07:5A:B2:0D:6B:BA X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0c:d7:35:6b:9c:9f:76:93:38:fe:00:67:5e:24:65:74:c3: e3:ef:80:2d:6e:52:04:27:58:ab:5b:03:ec:56:54:43:a9:8f: aa:a8:72:3d:8b:96:6e:34:58:cd:67:37:2f:44:f1:23:29:d9: 1c:4a:79:e0:0c:a2:c2:d7:1b:76:fb:3c:3f:cd:c9:cf:18:fe: 17:8e:d5:47:db:4e:42:4a:28:ec:8c:64:e8:2b:98:76:44:f0: 2f:e3:71:a9:14:18:0b:0f:25:ff:11:f0:50:22:76:ed:55:d4: a0:ae:9e:b8:80:8e:9a:57:3e:bc:7a:9c:23:5f:c8:db:5b:b2: 3f:3f:25:de:99:1d:5c:d1:91:41:51:6f:65:4d:29:1c:33:93: 67:ba:2c:0f:2e:df:23:cd:7e:5f:07:b3:bc:55:d2:0b:a8:58: fe:58:a5:82:0a:0e:08:5e:76:84:a1:da:50:7e:89:ed:05:c4: 25:61:dd:d6:57:86:11:05:27:b8:76:f5:bc:a4:c9:97:af:96: 52:c8:03:45:e6:d1:e0:e8:07:f1:62:29:66:2c:26:9e:3a:92: a3:7a:5a:88:c8:de:18:05:7c:28:54:96:41:be:92:ea:92:1d: 5c:4c:05:85:13:e8:42:1d:cc:71:6f:91:71:5b:9a:7d:6a:10: f8:2e:b9:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFW79y5/z7Mmp1EAMpusDOTgfbR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA3MTIxOTAzMDBaFw0yNjA3MTMxOTM5MDBaMDMxMTAvBgNV BAMTKEVGRDY4REU2QTBFNEM5RTRDNEExMjkwQkU2MkEwNzVBQjIwRDZCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9daM3n1MB7J0qWIC82Jij9NX akiiKWu6ZKs7XQOmR80VCDAWmj8vWoEXTi7fUTb54DI40bzJ2oUrf0PgC/xtlq+M 72cIstO1NLHQ1cvfveDOJB8bL6vYOq1swYXs1BiG86pYEdXrlwP9sdF4Dlwv3YQ1 gCcDAWZog4ojDZZBDnibFb8IanZQcpMQUsXqi3vN/eT09Z/Q161oWNfVB6i4fKDZ otEobXEAT84Uq2ZTjy5ZwYQkOCuubrzPTe1GaYTmccgU23t726WFmYJCozAJ5eIs JpY7Olmssy++7l7vCIk34PrAadGhnm+RpzAhkwQ6rYzdsHIJhNFIzY0ytp33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79aN5qDkyeTEoSkL5ioHWrINa7owHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMM1zVrnJ92kzj+AGdeJGV0w+PvgC1uUgQn WKtbA+xWVEOpj6qocj2Llm40WM1nNy9E8SMp2RxKeeAMosLXG3b7PD/Nyc8Y/heO 1UfbTkJKKOyMZOgrmHZE8C/jcakUGAsPJf8R8FAidu1V1KCunriAjppXPrx6nCNf yNtbsj8/Jd6ZHVzRkUFRb2VNKRwzk2e6LA8u3yPNfl8Hs7xV0guoWP5YpYIKDghe doSh2lB+ie0FxCVh3dZXhhEFJ7h29bykyZevllLIA0Xm0eDoB/FiKWYsJp46kqN6 WojI3hgFfChUlkG+kuqSHVxMBYUT6EIdzHFvkXFbmn1qEPguuWU= -----END CERTIFICATE-----Generated at Mon Jul 13 09:46:47 2026 by rpki-client