$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft File: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft (raw, json) Hash identifier: VZbVqxxQpPOkgfBWEn4QXk1tJOuROlANXNTIXJzpWmg= Subject key identifier: BA:F1:D1:6D:93:C0:79:8A:CF:EE:4B:B9:BD:A4:A6:D3:BB:67:10:6B Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 6C81F3B6FCC7885A3362C38DD85D69D509418761 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft Manifest number: ED Signing time: Tue 27 Oct 2026 03:14:15 +0000 Manifest this update: Tue 27 Oct 2026 03:09:15 +0000 Manifest next update: Wed 28 Oct 2026 05:17:15 +0000 Files and hashes: 1: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=) 2: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=) 3: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: QhRYWa4o40Fj31iivWLXUVwfrIn/xEIOzWLl7q2EcpQ=) 4: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: WlvOsmtXUZmaJuz2S7/1ST2g+J5f/ew6UvbcNvgCPtw=) 5: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o=) 6: 24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl (hash: xjP+QQngOTcqePg7eziOG2jd6ifWpK2ynN+TUP4ahAI=) 7: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 05:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:81:f3:b6:fc:c7:88:5a:33:62:c3:8d:d8:5d:69:d5:09:41:87:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: Oct 27 03:09:15 2026 GMT Not After : Oct 28 05:17:15 2026 GMT Subject: CN=BAF1D16D93C0798ACFEE4BB9BDA4A6D3BB67106B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:39:d7:d0:77:2c:99:e2:20:90:93:02:7c: 8f:4d:13:29:c0:4a:90:7c:d7:6e:c5:af:b0:8d:56: cf:60:2a:f7:9c:02:3f:6c:66:bc:0f:db:51:45:86: a9:a5:c6:40:da:63:fc:3e:ae:08:85:07:08:e6:5e: e6:d0:d4:82:83:9b:11:20:4e:af:1f:fa:00:d1:31: 3b:19:ed:b0:31:91:e8:2a:da:a3:99:1a:c5:56:ac: bd:8f:fd:d0:3c:5c:bb:de:1a:6d:47:a6:58:c6:25: d2:81:28:47:26:6c:da:fe:af:b4:f2:91:f6:4b:82: f3:bd:dc:9c:f5:3b:f7:14:43:75:d3:a1:72:4b:19: 74:7e:0c:1f:21:de:f5:bf:77:d7:f0:17:0b:22:85: 79:80:a2:5a:f9:aa:1c:ca:9b:d0:db:67:43:75:b3: f1:4e:17:16:54:57:13:9b:da:f2:63:25:82:5c:fb: 24:99:69:a8:7b:f1:49:35:ab:f4:1b:23:0e:55:3b: 8e:14:c0:21:c6:53:95:27:7d:bf:70:2a:0d:74:73: c4:08:c5:40:3f:2a:4c:c7:aa:71:23:b9:57:5c:c2: d2:98:47:40:1b:7e:60:c8:9e:7b:70:d0:7e:9a:82: 23:49:9c:57:f8:84:fd:37:7a:30:ec:b9:24:09:6a: d3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F1:D1:6D:93:C0:79:8A:CF:EE:4B:B9:BD:A4:A6:D3:BB:67:10:6B X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:96:60:3f:4a:9a:5e:8e:07:65:b6:24:f4:81:c4:c3:fb:65: ca:12:c7:2f:3d:87:e1:68:b0:04:43:56:17:ae:f7:4e:f5:d7: 6e:ef:63:c6:e7:cc:da:e8:05:a6:11:da:58:70:44:83:a1:7f: e0:fa:bb:5b:15:89:f8:31:e3:e3:82:73:23:c1:bd:f6:ef:6b: 8d:80:44:49:fa:ec:a3:d9:81:cf:07:3c:4c:f4:c1:48:96:92: 50:9d:3f:94:6d:6e:c3:83:41:8e:5b:bb:f7:31:34:e1:8e:0d: 61:7a:fa:e0:f4:7f:0a:f5:5c:5a:44:d2:5d:ba:f0:48:6c:e6: a3:29:de:91:91:27:33:55:77:93:d2:97:40:69:96:be:f2:62: 28:20:0b:3f:1a:48:d7:4c:d9:83:a2:6b:b1:bf:68:3b:f9:56: de:13:6e:15:ff:94:ed:d6:59:07:20:eb:42:22:07:73:c3:f8: 25:74:21:d8:04:bd:21:74:92:b4:29:21:2a:2e:04:52:f7:39: e6:5f:03:7f:f9:21:af:c0:63:fb:62:fe:d1:46:10:86:52:a2: 9d:bb:50:0a:6e:03:5b:76:12:54:d0:27:d4:a4:b3:2d:f2:91: 39:17:8c:38:66:8d:1f:77:72:65:53:83:36:f8:9d:59:5c:31: 78:25:c1:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIHztvzHiFozYsON2F1p1QlBh2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjEwMjcwMzA5MTVaFw0yNjEwMjgwNTE3MTVaMDMxMTAvBgNV BAMTKEJBRjFEMTZEOTNDMDc5OEFDRkVFNEJCOUJEQTRBNkQzQkI2NzEwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXDnX0HcsmeIgkJMCfI9NEynA SpB8127Fr7CNVs9gKvecAj9sZrwP21FFhqmlxkDaY/w+rgiFBwjmXubQ1IKDmxEg Tq8f+gDRMTsZ7bAxkegq2qOZGsVWrL2P/dA8XLveGm1HpljGJdKBKEcmbNr+r7Ty kfZLgvO93Jz1O/cUQ3XToXJLGXR+DB8h3vW/d9fwFwsihXmAolr5qhzKm9DbZ0N1 s/FOFxZUVxOb2vJjJYJc+ySZaah78Uk1q/QbIw5VO44UwCHGU5Unfb9wKg10c8QI xUA/KkzHqnEjuVdcwtKYR0AbfmDInntw0H6agiNJnFf4hP03ejDsuSQJatNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuvHRbZPAeYrP7ku5vaSm07tnEGswHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZC NjFCMkI1RUFBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmWYD9Kml6OB2W2JPSBxMP7ZcoSxy89h+Fo sARDVheu9071127vY8bnzNroBaYR2lhwRIOhf+D6u1sVifgx4+OCcyPBvfbva42A REn67KPZgc8HPEz0wUiWklCdP5RtbsODQY5bu/cxNOGODWF6+uD0fwr1XFpE0l26 8Ehs5qMp3pGRJzNVd5PSl0Bplr7yYiggCz8aSNdM2YOia7G/aDv5Vt4TbhX/lO3W WQcg60IiB3PD+CV0IdgEvSF0krQpISouBFL3OeZfA3/5Ia/AY/ti/tFGEIZSop27 UApuA1t2ElTQJ9Sksy3ykTkXjDhmjR93cmVTgzb4nVlcMXglwYU= -----END CERTIFICATE-----Generated at Tue Oct 27 18:51:19 2026 by rpki-client