$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: 6cJepLmXwC9hxHzK8UgRjhltH8mitHpe7mshCg7BBYA= Subject key identifier: 76:1A:92:70:60:AE:B5:00:5B:78:61:5F:93:8E:90:5F:30:C6:AF:19 Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 1D90532FFB6E103537D7F2A4F898C7E596B648AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:20:51 +0000 Manifest this update: Thu 18 Jun 2026 03:15:51 +0000 Manifest next update: Fri 19 Jun 2026 07:16:51 +0000 Files and hashes: 1: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: 0O0DgJlKg5zcAIhzmUpWxZU+7ZyAbTcxp3612UV/2qw=) 2: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) 3: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) 4: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 07:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:90:53:2f:fb:6e:10:35:37:d7:f2:a4:f8:98:c7:e5:96:b6:48:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: Jun 18 03:15:51 2026 GMT Not After : Jun 19 07:16:51 2026 GMT Subject: CN=761A927060AEB5005B78615F938E905F30C6AF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:6d:c0:9b:18:3d:e7:95:2c:ab:07:59:7b: 49:39:d7:1e:e0:ef:66:13:02:cc:e7:e1:40:57:a8: a4:41:fc:26:47:a8:2a:35:7b:97:56:9f:19:a5:49: 02:08:e0:fe:ca:8a:6b:74:c2:10:aa:7f:ec:4c:23: e1:c9:33:a8:30:80:a6:00:1a:40:df:92:59:d2:b6: bf:79:81:a5:83:dc:91:4a:d5:7d:8a:bb:bb:01:1f: 89:cd:c8:da:e2:1a:64:a8:84:65:c0:5e:d0:84:ae: 2f:69:35:94:a7:a5:e2:a8:13:ec:46:45:a4:27:e1: b3:ec:64:e5:a8:ee:de:0f:a6:db:d0:ff:39:95:5c: c1:bc:76:5e:a6:fd:77:6d:28:1a:5b:02:eb:d5:c4: 63:16:92:24:c2:c8:32:d7:8d:a6:eb:0b:cd:8b:8c: 18:dd:0d:e0:fa:93:6a:1a:9a:bc:52:bc:f9:f3:76: 95:3c:19:ac:d0:76:99:9e:e6:65:44:62:64:08:2f: 4f:6c:bd:7a:e8:b7:c7:3f:f8:3a:96:0c:a5:87:5f: 5b:6c:1f:75:50:75:86:69:40:28:85:c3:06:b1:e3: b4:d1:29:0b:ed:b7:0e:10:f9:a6:ff:c5:a5:72:21: 64:69:30:ac:e1:ae:13:87:78:79:f1:90:59:10:aa: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1A:92:70:60:AE:B5:00:5B:78:61:5F:93:8E:90:5F:30:C6:AF:19 X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d9:39:d5:7c:8b:81:d1:7b:88:35:d4:8a:54:83:9d:54:7e: ff:3a:dd:ef:96:c9:f7:80:d5:f9:ce:5f:62:81:b4:c9:ad:2e: 5f:33:0c:b1:40:67:4b:77:f9:22:16:ba:0c:3c:c2:b9:de:71: b0:dd:b1:30:42:48:71:81:fe:ad:fd:89:a3:d2:7b:e9:e8:f8: 1c:5f:9b:9f:57:14:c0:e4:f0:8e:a8:9a:0b:50:dd:ab:6f:47: f9:4a:2a:e0:a0:a3:bf:75:bc:b2:5f:d6:10:de:d3:3d:7e:5d: 79:72:18:f7:f8:6d:0a:26:ed:b9:75:ca:e0:b6:13:2f:9b:72: 6e:5a:61:20:6d:1c:02:31:03:40:e2:6d:c0:aa:74:3f:91:80: aa:22:8d:c9:36:65:66:20:90:7c:8c:df:65:03:59:60:35:1f: a1:30:ce:46:28:b7:ed:8a:f7:9d:bf:ef:ae:41:f3:55:e2:61: ed:45:25:83:25:a3:ea:b7:a2:2e:1e:2a:1f:ea:53:2d:a8:55: de:26:2a:2f:8a:b6:17:44:ae:eb:ff:77:0d:f6:b1:94:b5:a5: c9:a1:9b:b5:1f:51:48:dc:e3:e6:db:e7:53:91:36:1f:f4:13: a0:7e:5e:7d:c5:7c:dc:20:82:ab:15:b3:2d:07:2b:24:85:11: fa:af:34:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZBTL/tuEDU31/Kk+JjH5Za2SK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjA2MTgwMzE1NTFaFw0yNjA2MTkwNzE2NTFaMDMxMTAvBgNV BAMTKDc2MUE5MjcwNjBBRUI1MDA1Qjc4NjE1RjkzOEU5MDVGMzBDNkFGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lm3Amxg955UsqwdZe0k51x7g 72YTAszn4UBXqKRB/CZHqCo1e5dWnxmlSQII4P7Kimt0whCqf+xMI+HJM6gwgKYA GkDfklnStr95gaWD3JFK1X2Ku7sBH4nNyNriGmSohGXAXtCEri9pNZSnpeKoE+xG RaQn4bPsZOWo7t4PptvQ/zmVXMG8dl6m/XdtKBpbAuvVxGMWkiTCyDLXjabrC82L jBjdDeD6k2oamrxSvPnzdpU8GazQdpme5mVEYmQIL09svXrot8c/+DqWDKWHX1ts H3VQdYZpQCiFwwax47TRKQvttw4Q+ab/xaVyIWRpMKzhrhOHeHnxkFkQqmmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdhqScGCutQBbeGFfk46QXzDGrxkwHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjZOdV8i4HRe4g11IpUg51Ufv863e+WyfeA 1fnOX2KBtMmtLl8zDLFAZ0t3+SIWugw8wrnecbDdsTBCSHGB/q39iaPSe+no+Bxf m59XFMDk8I6omgtQ3atvR/lKKuCgo791vLJf1hDe0z1+XXlyGPf4bQom7bl1yuC2 Ey+bcm5aYSBtHAIxA0DibcCqdD+RgKoijck2ZWYgkHyM32UDWWA1H6EwzkYot+2K 952/765B81XiYe1FJYMlo+q3oi4eKh/qUy2oVd4mKi+KthdEruv/dw32sZS1pcmh m7UfUUjc4+bb51ORNh/0E6B+Xn3FfNwggqsVsy0HKySFEfqvNDE= -----END CERTIFICATE-----Generated at Thu Jun 18 17:11:18 2026 by rpki-client