$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft File: 024857CCDFA5066CE266529DD14709446E2D5817.mft (raw, json) Hash identifier: 1gJGM6wvDe0lOkJ2B1cID8cComATxv2qUTWCTj11tj4= Subject key identifier: 37:8E:79:06:2C:F8:48:36:C6:4F:09:2F:BD:CB:F3:9D:7D:D8:6A:5D Authority key identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 Certificate issuer: /CN=024857CCDFA5066CE266529DD14709446E2D5817 Certificate serial: 0B99F1759DCBF175FC01EE51C19AFD04FA258493 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:39:10 +0000 Manifest this update: Sat 20 Jun 2026 03:34:10 +0000 Manifest next update: Sun 21 Jun 2026 05:52:10 +0000 Files and hashes: 1: 024857CCDFA5066CE266529DD14709446E2D5817.crl (hash: nexRusSGRbHokgI0iMaa3Gh9fMK1TVf8zixWvP7BRVo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:99:f1:75:9d:cb:f1:75:fc:01:ee:51:c1:9a:fd:04:fa:25:84:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024857CCDFA5066CE266529DD14709446E2D5817 Validity Not Before: Jun 20 03:34:10 2026 GMT Not After : Jun 21 05:52:10 2026 GMT Subject: CN=378E79062CF84836C64F092FBDCBF39D7DD86A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:a5:df:08:43:f8:e1:91:10:a8:ca:d7:e0: 61:a6:31:67:ac:11:7b:41:bc:71:c3:65:61:7d:c5: 37:a9:02:6a:1a:ec:52:bc:25:46:02:2c:78:91:c5: 85:8d:05:5d:84:9c:33:9c:79:8d:2d:bb:73:61:ef: c8:f1:f8:67:b2:86:69:e4:51:1e:aa:20:82:f7:16: df:71:bc:49:c7:7f:c4:87:fc:b6:51:11:bf:dc:99: 56:25:c1:4b:55:5f:63:b5:b6:3f:76:9e:4c:f5:40: 47:e7:4f:c0:e2:b9:70:42:9a:44:97:fb:56:89:97: 92:75:55:87:6f:4c:96:ce:69:fe:1c:94:0f:e7:f4: d3:ec:08:99:b2:73:7a:42:c5:e2:db:ff:6e:d3:0d: ef:b1:19:a4:a4:ef:2b:f8:1c:c6:fb:68:cb:79:af: 32:e1:8c:7b:c4:0d:29:ee:e6:3c:2f:70:fd:1a:ad: 63:2e:80:f1:08:5a:34:a6:76:70:1e:44:84:4f:37: 10:e6:0e:45:4a:c0:67:43:36:ba:50:0e:c6:5b:e8: 1f:7b:2b:c5:11:3a:50:3a:63:ea:ba:60:99:17:24: ed:60:16:b1:07:55:35:23:79:ff:11:c3:d6:c7:cb: ab:cd:aa:c3:a4:af:4d:69:c8:32:c6:d2:a1:8c:ff: 5d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8E:79:06:2C:F8:48:36:C6:4F:09:2F:BD:CB:F3:9D:7D:D8:6A:5D X509v3 Authority Key Identifier: keyid:02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4b:22:56:b7:0e:51:40:7e:90:34:ce:42:6f:b6:40:8c:20: ee:5b:b5:d0:ba:5f:1b:3b:58:1f:1c:ab:fe:c5:06:b7:03:33: 42:7c:10:0f:75:7f:81:43:0f:b3:98:1a:af:e4:9e:07:08:6f: d5:d1:b7:90:fd:84:c7:82:ab:8e:b2:0d:c3:ef:4b:d2:a7:c1: 3a:9d:47:fd:8d:2a:56:d0:2f:b6:b0:1e:9b:fa:c7:a8:11:27: 95:cb:46:35:c6:62:2c:8b:a2:6a:9e:63:63:a1:56:4f:96:1c: 1c:0a:1e:b2:41:af:b0:e2:54:4d:96:19:d5:0d:5b:d1:8c:fb: b0:87:8a:5f:14:86:70:fe:ab:a3:89:71:bb:9d:63:31:30:04: 20:9d:a0:b3:58:7e:fc:86:7f:8a:8c:42:e5:5f:2d:6d:e8:f1: cc:b7:3a:de:30:4d:92:ba:77:69:7a:41:3d:75:30:47:14:04: 3f:f4:bf:f9:d6:ab:43:0a:f3:4b:8b:77:1d:79:e0:95:94:32: 62:3f:13:7a:3d:34:a5:63:bd:87:1e:4d:d5:46:42:94:93:13: f8:a8:a3:28:52:ed:d4:e9:75:d0:c7:e5:9b:72:84:fc:f5:3b: 02:20:61:66:88:c8:05:e6:ca:32:df:a6:61:2d:7e:f4:52:45: 36:0b:3f:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5nxdZ3L8XX8Ae5RwZr9BPolhJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2 RTJENTgxNzAeFw0yNjA2MjAwMzM0MTBaFw0yNjA2MjEwNTUyMTBaMDMxMTAvBgNV BAMTKDM3OEU3OTA2MkNGODQ4MzZDNjRGMDkyRkJEQ0JGMzlEN0REODZBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMqXfCEP44ZEQqMrX4GGmMWes EXtBvHHDZWF9xTepAmoa7FK8JUYCLHiRxYWNBV2EnDOceY0tu3Nh78jx+Geyhmnk UR6qIIL3Ft9xvEnHf8SH/LZREb/cmVYlwUtVX2O1tj92nkz1QEfnT8DiuXBCmkSX +1aJl5J1VYdvTJbOaf4clA/n9NPsCJmyc3pCxeLb/27TDe+xGaSk7yv4HMb7aMt5 rzLhjHvEDSnu5jwvcP0arWMugPEIWjSmdnAeRIRPNxDmDkVKwGdDNrpQDsZb6B97 K8UROlA6Y+q6YJkXJO1gFrEHVTUjef8Rw9bHy6vNqsOkr01pyDLG0qGM/10fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN455Biz4SDbGTwkvvcvznX3Yal0wHwYDVR0j BBgwFoAUAkhXzN+lBmziZlKd0UcJRG4tWBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5MzAyY2UtMTdlOS00MDM5LWIzZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NE RkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2RTJENTgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjQ4NTdDQ0RGQTUwNjZDRTI2NjUyOUREMTQ3MDk0NDZFMkQ1 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5 NDQ2RTJENTgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtLIla3DlFAfpA0zkJvtkCMIO5btdC6Xxs7 WB8cq/7FBrcDM0J8EA91f4FDD7OYGq/kngcIb9XRt5D9hMeCq46yDcPvS9KnwTqd R/2NKlbQL7awHpv6x6gRJ5XLRjXGYiyLomqeY2OhVk+WHBwKHrJBr7DiVE2WGdUN W9GM+7CHil8UhnD+q6OJcbudYzEwBCCdoLNYfvyGf4qMQuVfLW3o8cy3Ot4wTZK6 d2l6QT11MEcUBD/0v/nWq0MK80uLdx154JWUMmI/E3o9NKVjvYceTdVGQpSTE/io oyhS7dTpddDH5ZtyhPz1OwIgYWaIyAXmyjLfpmEtfvRSRTYLPzw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:36 2026 by rpki-client