$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft File: 024857CCDFA5066CE266529DD14709446E2D5817.mft (raw, json) Hash identifier: B+SF3EOT/0lgMf5sCHQ5moc1LERNG8xc1AI80748SIA= Subject key identifier: 9A:D9:4D:32:75:FD:EA:E9:5E:12:94:B5:3B:0E:92:53:78:2E:F6:6A Authority key identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 Certificate issuer: /CN=024857CCDFA5066CE266529DD14709446E2D5817 Certificate serial: 7F4CBFFF622300B63E9E6780057CE039CE6DBF25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 23:17:42 +0000 Manifest this update: Wed 16 Sep 2026 23:12:42 +0000 Manifest next update: Fri 18 Sep 2026 02:47:42 +0000 Files and hashes: 1: 024857CCDFA5066CE266529DD14709446E2D5817.crl (hash: MMXdrD5PBzSJV2U7K9f+7UIi1TOmfjgOTFB+TzeDOMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4c:bf:ff:62:23:00:b6:3e:9e:67:80:05:7c:e0:39:ce:6d:bf:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024857CCDFA5066CE266529DD14709446E2D5817 Validity Not Before: Sep 16 23:12:42 2026 GMT Not After : Sep 18 02:47:42 2026 GMT Subject: CN=9AD94D3275FDEAE95E1294B53B0E9253782EF66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:8c:10:84:70:fa:2c:a4:61:f8:7b:ed:07: b3:77:7d:fd:db:b6:dd:df:3c:57:90:f2:d0:8b:49: c9:3c:9e:77:74:c5:ef:ce:4a:cf:26:cc:8f:dd:85: f4:f4:93:45:30:96:a8:a3:d7:26:be:30:83:d0:1a: 11:65:85:8d:07:ed:9d:f4:0f:f8:bd:a5:a0:90:3c: 13:f4:7a:09:a4:8b:4c:fc:39:aa:7c:39:08:b4:22: b9:6c:91:14:cf:03:0f:c1:9c:1b:1c:df:5a:f8:2d: 16:c4:bf:aa:8e:cf:e4:a0:b4:e2:08:eb:b3:7e:88: 08:14:59:af:64:88:b9:70:13:6a:6a:2c:21:a8:a1: af:3a:59:70:f3:97:4e:d1:80:f6:1a:ae:e4:ab:1c: 13:77:9a:50:2e:8a:38:18:3a:96:d3:f3:dc:a0:23: 16:ad:c4:a0:d8:f8:86:81:87:5c:aa:b9:30:cd:aa: 54:26:85:a5:a3:d7:72:74:bf:ae:14:20:69:db:56: b0:03:13:40:d3:38:49:ab:e2:a5:b3:0d:3a:f6:98: 37:4c:55:ea:6c:a0:9f:10:5c:1e:25:56:23:ae:cc: 6f:3d:ce:fb:99:ef:90:b2:89:09:e2:98:d6:58:84: 52:90:a8:0e:3c:1c:a7:12:f1:2e:b5:a6:5f:d6:23: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D9:4D:32:75:FD:EA:E9:5E:12:94:B5:3B:0E:92:53:78:2E:F6:6A X509v3 Authority Key Identifier: keyid:02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:91:91:11:ab:cf:c7:f9:b2:fc:c0:02:7e:74:8e:2d:3e:8c: c5:ef:e3:71:7e:f7:36:ee:88:a9:00:ad:23:ba:a8:36:82:ba: 4d:bd:54:01:b2:7d:fb:96:db:2e:fb:a2:b6:7c:e0:ca:be:50: 34:80:0b:00:37:d1:41:ba:9e:05:49:e5:a0:ba:51:62:1f:7a: bd:22:e8:90:f7:19:1c:99:bf:18:17:6f:d0:78:98:ca:5e:0a: c6:4a:00:ba:c8:60:dd:f2:72:f2:47:cd:b3:58:38:01:fa:49: 6a:08:5b:fa:85:09:f6:25:a0:1f:f4:24:03:87:76:89:31:90: 39:34:7b:47:49:d7:be:63:a9:ee:46:67:68:7c:80:29:2b:2c: f4:2c:95:83:ab:0a:35:bd:1d:cc:a3:ce:bb:15:66:7d:65:10: cd:ca:96:c6:cf:87:2f:ac:f7:e1:03:b9:49:b4:62:65:2b:e0: 39:ab:f5:3c:3d:20:56:04:7f:d9:3d:13:79:79:f1:06:cb:dd: 1c:0e:d8:bd:93:81:8f:28:53:36:4b:78:d6:05:8c:b9:f9:a8: 81:8a:8f:6e:bd:a6:0e:c5:4a:e0:3f:33:32:dd:fb:99:a6:55: 4e:e4:ff:c4:6b:9c:5a:48:11:c4:34:f3:8b:4b:b3:8c:d1:86: ee:43:6f:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0y//2IjALY+nmeABXzgOc5tvyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2 RTJENTgxNzAeFw0yNjA5MTYyMzEyNDJaFw0yNjA5MTgwMjQ3NDJaMDMxMTAvBgNV BAMTKDlBRDk0RDMyNzVGREVBRTk1RTEyOTRCNTNCMEU5MjUzNzgyRUY2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrl4wQhHD6LKRh+HvtB7N3ff3b tt3fPFeQ8tCLSck8nnd0xe/OSs8mzI/dhfT0k0Uwlqij1ya+MIPQGhFlhY0H7Z30 D/i9paCQPBP0egmki0z8Oap8OQi0IrlskRTPAw/BnBsc31r4LRbEv6qOz+SgtOII 67N+iAgUWa9kiLlwE2pqLCGooa86WXDzl07RgPYaruSrHBN3mlAuijgYOpbT89yg IxatxKDY+IaBh1yquTDNqlQmhaWj13J0v64UIGnbVrADE0DTOEmr4qWzDTr2mDdM VepsoJ8QXB4lViOuzG89zvuZ75CyiQnimNZYhFKQqA48HKcS8S61pl/WI0B9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmtlNMnX96uleEpS1Ow6SU3gu9mowHwYDVR0j BBgwFoAUAkhXzN+lBmziZlKd0UcJRG4tWBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5MzAyY2UtMTdlOS00MDM5LWIzZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NE RkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2RTJENTgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjQ4NTdDQ0RGQTUwNjZDRTI2NjUyOUREMTQ3MDk0NDZFMkQ1 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5 NDQ2RTJENTgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCRkRGrz8f5svzAAn50ji0+jMXv43F+9zbu iKkArSO6qDaCuk29VAGyffuW2y77orZ84Mq+UDSACwA30UG6ngVJ5aC6UWIfer0i 6JD3GRyZvxgXb9B4mMpeCsZKALrIYN3ycvJHzbNYOAH6SWoIW/qFCfYloB/0JAOH dokxkDk0e0dJ175jqe5GZ2h8gCkrLPQslYOrCjW9HcyjzrsVZn1lEM3KlsbPhy+s 9+EDuUm0YmUr4Dmr9Tw9IFYEf9k9E3l58QbL3RwO2L2TgY8oUzZLeNYFjLn5qIGK j269pg7FSuA/MzLd+5mmVU7k/8RrnFpIEcQ084tLs4zRhu5Db/I= -----END CERTIFICATE-----Generated at Thu Sep 17 10:20:29 2026 by rpki-client