$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft File: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json) Hash identifier: kZz2zYck6TachYyiSZ0DksILNwPP/nSS7CORrhsBE40= Subject key identifier: 03:FF:87:4F:48:5D:66:AB:C3:76:DF:2B:DA:FC:33:35:E7:69:80:2A Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C Certificate issuer: /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Certificate serial: 607C57F206B2A83B9EB6D15EF465A6F00C6893F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:59:34 +0000 Manifest this update: Thu 17 Sep 2026 04:54:34 +0000 Manifest next update: Fri 18 Sep 2026 06:31:34 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=) 2: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=) 3: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=) 4: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: RrDeKnxjubzv6WQFTVYsrW6eeH/P5hx+6kOAoEWRoLs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7c:57:f2:06:b2:a8:3b:9e:b6:d1:5e:f4:65:a6:f0:0c:68:93:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C Validity Not Before: Sep 17 04:54:34 2026 GMT Not After : Sep 18 06:31:34 2026 GMT Subject: CN=03FF874F485D66ABC376DF2BDAFC3335E769802A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:cc:ac:a9:b7:2f:0c:66:4e:89:10:85:ad: 15:3e:ce:a4:81:1b:ee:88:2d:01:78:68:24:b3:e1: 40:84:15:5f:8a:ca:ec:3e:46:8d:d7:97:b4:37:c7: c6:13:e8:d6:0f:85:59:6f:f2:d8:69:ae:e8:53:e7: 2b:c5:1c:0d:a8:f6:47:c1:af:8c:c3:82:40:0e:82: 68:3e:1d:ea:44:be:4c:65:08:96:ca:17:a0:b1:69: 3f:a8:ac:bf:65:0f:1d:63:1d:c5:d5:48:f9:d8:fe: ad:dc:aa:14:f1:38:a6:32:c2:6c:69:17:99:9c:21: 07:d8:02:ea:b5:2b:71:02:20:e2:d7:bb:20:37:7a: db:be:7c:9b:68:c1:fc:4f:a2:ca:88:1e:bf:9f:0f: d7:84:a9:dc:03:0e:78:cb:41:e0:a5:ac:f3:aa:1f: 48:31:77:7d:20:ec:75:3e:13:cc:2d:78:bf:0d:88: 99:a1:10:32:bb:d4:a7:60:29:ab:1a:f0:a7:47:c2: ad:ae:07:e0:03:be:2a:b7:c8:a7:75:0e:fc:63:b4: db:98:f8:05:75:7c:2e:e9:bd:b8:e3:fa:ac:6b:85: e7:d0:f1:32:77:b0:a7:ad:9a:1b:08:0d:af:2b:46: 4c:80:2c:21:f8:10:c3:3e:11:3b:48:14:9e:12:2b: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FF:87:4F:48:5D:66:AB:C3:76:DF:2B:DA:FC:33:35:E7:69:80:2A X509v3 Authority Key Identifier: keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:83:ba:70:8f:58:a1:65:37:1d:73:84:73:79:4d:5f:60:94: 13:cf:91:ec:81:1c:e5:e5:e5:d9:f6:bf:11:a3:9b:24:e8:db: 1e:c1:22:56:6a:40:e4:46:05:e4:43:42:aa:51:62:73:92:23: 7c:64:38:fe:68:9e:87:b1:2b:d0:29:45:b9:49:8d:97:f0:9e: c6:70:88:95:4c:68:5b:75:53:ab:9b:59:0a:8c:44:39:d4:f5: d6:b9:bb:24:18:5e:d4:4d:0c:e8:39:67:4c:b3:06:cb:b2:ee: 4b:af:12:8c:52:2d:13:21:65:2d:46:5f:25:52:9c:64:3b:13: bd:6f:da:72:f8:e0:db:c4:b5:1b:7a:93:6e:67:03:c9:7e:f5: 08:42:f9:dd:64:23:b8:34:00:45:df:f0:8c:23:70:2d:35:fb: f7:80:8a:5d:61:9a:00:80:5c:e9:b3:dc:ca:e8:56:dd:74:7c: 6b:f9:85:59:fa:1c:a7:c7:93:ad:fc:81:49:85:6a:f5:98:9a: 1a:58:ef:55:d8:87:10:1f:e3:a7:56:2f:6b:93:c2:67:e2:3d: 82:e5:f6:42:4d:c0:2c:2e:66:3a:40:18:67:f9:97:20:b4:56: 51:15:35:06:ef:38:23:2f:2a:b2:94:3a:33:0e:5b:39:d6:0f: c8:a2:15:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHxX8gayqDuettFe9GWm8Axok/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3 NEY3MUEzQzAeFw0yNjA5MTcwNDU0MzRaFw0yNjA5MTgwNjMxMzRaMDMxMTAvBgNV BAMTKDAzRkY4NzRGNDg1RDY2QUJDMzc2REYyQkRBRkMzMzM1RTc2OTgwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCThsysqbcvDGZOiRCFrRU+zqSB G+6ILQF4aCSz4UCEFV+Kyuw+Ro3Xl7Q3x8YT6NYPhVlv8thpruhT5yvFHA2o9kfB r4zDgkAOgmg+HepEvkxlCJbKF6CxaT+orL9lDx1jHcXVSPnY/q3cqhTxOKYywmxp F5mcIQfYAuq1K3ECIOLXuyA3etu+fJtowfxPosqIHr+fD9eEqdwDDnjLQeClrPOq H0gxd30g7HU+E8wteL8NiJmhEDK71KdgKasa8KdHwq2uB+ADviq3yKd1DvxjtNuY +AV1fC7pvbjj+qxrhefQ8TJ3sKetmhsIDa8rRkyALCH4EMM+ETtIFJ4SK3pvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA/+HT0hdZqvDdt8r2vwzNedpgCowHwYDVR0j BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaDunCPWKFlNx1zhHN5TV9glBPPkeyBHOXl 5dn2vxGjmyTo2x7BIlZqQORGBeRDQqpRYnOSI3xkOP5onoexK9ApRblJjZfwnsZw iJVMaFt1U6ubWQqMRDnU9da5uyQYXtRNDOg5Z0yzBsuy7kuvEoxSLRMhZS1GXyVS nGQ7E71v2nL44NvEtRt6k25nA8l+9QhC+d1kI7g0AEXf8IwjcC01+/eAil1hmgCA XOmz3MroVt10fGv5hVn6HKfHk638gUmFavWYmhpY71XYhxAf46dWL2uTwmfiPYLl 9kJNwCwuZjpAGGf5lyC0VlEVNQbvOCMvKrKUOjMOWznWD8iiFdo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:01:28 2026 by rpki-client