$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json) Hash identifier: gYUCGUjwQy2FdS4Xy4y0vaw3E0jTt9TPlCQa9jMPsKY= Subject key identifier: 28:0A:B5:BD:00:C9:42:34:1A:60:3F:2E:37:07:CE:31:19:DE:96:3A Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Certificate serial: 20BE275B532ECB3D858ACDE809ECA0363D5DF5AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 03:42:19 +0000 Manifest this update: Tue 03 Nov 2026 03:37:19 +0000 Manifest next update: Wed 04 Nov 2026 05:58:19 +0000 Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: Iy06mWReTpg9Ogi86l7VKjbJ8fw4/hpda6T1fOChX+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 05:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:be:27:5b:53:2e:cb:3d:85:8a:cd:e8:09:ec:a0:36:3d:5d:f5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Validity Not Before: Nov 3 03:37:19 2026 GMT Not After : Nov 4 05:58:19 2026 GMT Subject: CN=280AB5BD00C942341A603F2E3707CE3119DE963A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:59:01:08:e8:74:8f:9d:4f:89:d7:cb:8a:e0: dd:62:c0:de:b4:85:4c:94:97:ea:eb:48:d1:f0:e3: d4:cd:0c:2b:fc:0a:c6:12:97:cc:48:9c:23:1f:d9: 16:6f:63:7b:aa:33:f3:05:a1:11:08:1f:49:ef:30: 56:9a:bc:e2:ab:16:64:28:7c:98:15:0e:cd:7c:88: 80:45:79:d8:ae:83:3e:73:46:96:a6:45:82:28:24: fb:2b:c3:f4:1b:a0:93:47:e6:d6:51:9d:52:23:5a: d5:76:f8:fa:ea:ab:d5:74:5e:0d:75:e2:01:36:eb: 26:f6:57:ab:84:01:e8:03:0b:de:b0:86:b8:10:19: d2:86:f7:35:84:a3:02:9f:29:78:85:a0:d9:11:f1: 33:58:2b:40:29:2c:08:20:ab:16:e3:36:81:34:07: 94:5b:ce:17:a3:03:b5:ba:19:a9:6b:21:51:00:e7: 83:2c:81:6a:e2:fc:ff:ea:73:96:35:4c:c5:23:81: 75:2a:03:e4:c2:0a:ec:71:fa:de:33:f1:d6:12:38: 20:f8:55:4c:83:fd:7c:cc:e3:1c:2f:61:ff:ff:f6: b7:1f:80:ab:c1:47:84:f3:bb:33:53:45:90:03:59: 96:47:18:95:4c:c6:ac:94:95:7f:a8:aa:03:5c:03: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0A:B5:BD:00:C9:42:34:1A:60:3F:2E:37:07:CE:31:19:DE:96:3A X509v3 Authority Key Identifier: keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2e:8b:4e:c8:54:9a:34:82:bf:d3:34:5e:bc:aa:aa:21:c4: fd:85:29:f5:b9:85:3c:b8:d5:06:5d:f7:c3:c4:7c:89:e4:2c: 1a:b2:8f:37:2c:e7:9f:ba:d2:31:1c:47:b4:0d:11:3b:ef:51: 9c:09:bb:fa:d8:46:13:80:a9:b2:92:12:58:bf:45:42:50:b9: 9d:a4:a0:00:f0:20:a2:41:23:42:ff:62:95:71:62:83:68:cb: 8f:91:89:3e:07:4c:4a:82:e6:7b:68:f5:6a:d3:e1:c6:7b:b7: 04:1f:44:f0:ab:f4:b5:9a:e2:7b:ff:22:a9:46:92:49:7b:9a: 68:56:84:8a:64:0a:f1:2f:77:29:72:2d:d6:81:1f:d1:a8:c3: 3c:c8:fc:e7:28:2c:cd:10:c7:9f:90:4e:32:06:70:e0:cf:58: 58:aa:b7:f9:4b:85:cc:75:c9:79:6c:27:39:6c:c5:c2:5b:c9: dd:b7:30:33:a9:38:3e:6f:05:19:14:4d:62:01:a9:c5:43:ed: 85:29:1f:5c:cb:92:5f:2c:06:5c:cb:52:e0:cb:67:59:ef:3e: 19:29:45:be:fe:4b:db:8c:b7:32:1d:06:52:b4:c0:2e:18:89: 43:02:26:fb:41:49:a5:e1:31:1c:c3:14:eb:30:ec:08:f8:5e: 11:a3:06:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIL4nW1Muyz2Fis3oCeygNj1d9aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJCOEIw OENBMDY5NjAeFw0yNjExMDMwMzM3MTlaFw0yNjExMDQwNTU4MTlaMDMxMTAvBgNV BAMTKDI4MEFCNUJEMDBDOTQyMzQxQTYwM0YyRTM3MDdDRTMxMTlERTk2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZWQEI6HSPnU+J18uK4N1iwN60 hUyUl+rrSNHw49TNDCv8CsYSl8xInCMf2RZvY3uqM/MFoREIH0nvMFaavOKrFmQo fJgVDs18iIBFediugz5zRpamRYIoJPsrw/QboJNH5tZRnVIjWtV2+Prqq9V0Xg11 4gE26yb2V6uEAegDC96whrgQGdKG9zWEowKfKXiFoNkR8TNYK0ApLAggqxbjNoE0 B5RbzhejA7W6GalrIVEA54MsgWri/P/qc5Y1TMUjgXUqA+TCCuxx+t4z8dYSOCD4 VUyD/XzM4xwvYf//9rcfgKvBR4TzuzNTRZADWZZHGJVMxqyUlX+oqgNcA9WhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAq1vQDJQjQaYD8uNwfOMRneljowHwYDVR0j BBgwFoAUAkrwW2R28CJt7o6H5967iwjKBpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdkNTBmMjctN2U4OC00NzE4LTgzZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2 NDc2RjAyMjZERUU4RTg3RTdERUJCOEIwOENBMDY5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjRBRjA1QjY0NzZGMDIyNkRFRThFODdFN0RFQkI4QjA4Q0Ew Njk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJC OEIwOENBMDY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0ui07IVJo0gr/TNF68qqohxP2FKfW5hTy4 1QZd98PEfInkLBqyjzcs55+60jEcR7QNETvvUZwJu/rYRhOAqbKSEli/RUJQuZ2k oADwIKJBI0L/YpVxYoNoy4+RiT4HTEqC5nto9WrT4cZ7twQfRPCr9LWa4nv/IqlG kkl7mmhWhIpkCvEvdylyLdaBH9GowzzI/OcoLM0Qx5+QTjIGcODPWFiqt/lLhcx1 yXlsJzlsxcJbyd23MDOpOD5vBRkUTWIBqcVD7YUpH1zLkl8sBlzLUuDLZ1nvPhkp Rb7+S9uMtzIdBlK0wC4YiUMCJvtBSaXhMRzDFOsw7Aj4XhGjBoI= -----END CERTIFICATE-----Generated at Tue Nov 3 22:46:15 2026 by rpki-client