$ rpki-client -vvf rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft File: 24B340250EB1D6C83128750AD8B2299EF1300112.mft (raw, json) Hash identifier: 615U5r3diAAVPnT97dLwx6C83H5Zpf4qDtuAAykanoU= Subject key identifier: CA:07:BA:42:DB:F8:2E:81:40:77:25:E3:26:05:E7:94:6D:41:57:1C Authority key identifier: 24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12 Certificate issuer: /CN=24B340250EB1D6C83128750AD8B2299EF1300112 Certificate serial: 7756DF27245708FD43EA15AC68A420B7EE174B23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 01:21:24 +0000 Manifest this update: Sat 20 Jun 2026 01:16:24 +0000 Manifest next update: Sun 21 Jun 2026 03:18:24 +0000 Files and hashes: 1: 24B340250EB1D6C83128750AD8B2299EF1300112.crl (hash: KdSwMTn9duHobtnqkD/6Fvwyrae8WLj4aL5eZfaVP7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:56:df:27:24:57:08:fd:43:ea:15:ac:68:a4:20:b7:ee:17:4b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B340250EB1D6C83128750AD8B2299EF1300112 Validity Not Before: Jun 20 01:16:24 2026 GMT Not After : Jun 21 03:18:24 2026 GMT Subject: CN=CA07BA42DBF82E81407725E32605E7946D41571C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:4d:c0:fc:f3:5a:99:d2:d9:19:3b:38:b5: 5f:ea:fd:db:3d:3e:97:c1:a0:70:c2:da:df:f7:43: 43:75:ac:ac:b4:c6:6d:71:fd:4e:d8:26:39:53:43: 20:c1:1c:6e:e9:07:cb:ce:c5:8d:54:a8:b7:08:12: f7:d6:89:06:1e:3f:63:7b:51:1d:ed:78:0b:80:ec: 21:9b:33:63:9d:58:80:f3:09:cf:bc:b7:49:0e:73: 6b:e9:23:18:fc:e5:28:3c:d1:9b:76:56:18:93:b7: 44:3f:ba:9b:bf:67:97:15:5d:09:be:b3:17:27:e2: 5b:88:7f:7e:cd:ab:6a:da:ee:31:45:62:4c:f5:70: 1c:ff:63:26:5e:78:c7:47:75:89:a7:56:68:8f:56: 4f:1f:46:5b:f2:21:cc:7d:dc:34:e8:5c:51:51:8b: 9b:90:1f:5c:d4:ac:d4:78:61:f3:2a:0b:2e:ba:12: 79:04:3e:ad:d6:35:f6:4b:bd:cf:ce:61:e7:ec:7a: aa:3c:07:fb:01:a6:1d:6b:b2:e0:75:86:00:9c:b2: ff:7b:a1:4d:c7:7c:2c:fa:b3:b1:30:e9:25:d5:17: 19:dd:36:c5:57:f0:69:a9:94:26:9d:c4:d5:f2:28: a5:bd:c1:aa:f0:52:88:64:c4:35:41:9f:1a:47:b7: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:07:BA:42:DB:F8:2E:81:40:77:25:E3:26:05:E7:94:6D:41:57:1C X509v3 Authority Key Identifier: keyid:24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:aa:f0:ba:42:ef:3e:e5:f1:a0:84:f9:a3:18:32:66:09:b0: 95:cd:98:b6:06:84:1a:fc:df:bf:fa:e0:a1:f6:f0:58:f0:82: 12:2a:07:97:fc:35:68:71:9d:3c:1a:d6:8a:81:ad:87:c0:01: 0f:7d:c6:0b:fc:41:dd:2a:bc:6a:df:22:f2:5c:a4:f8:31:1d: 0f:50:34:fd:23:d7:ef:a5:1d:ce:ab:db:61:08:9f:47:2a:9d: ff:28:9e:6d:2b:8e:60:5b:27:a9:2d:a2:56:91:03:f3:66:bb: 94:a2:c8:0b:17:a1:71:74:9e:d6:3d:c1:da:83:ea:57:d3:86: 38:eb:46:90:62:46:77:4a:12:c5:fd:40:6e:ff:0f:2e:06:87: dd:e6:2b:ec:ea:8c:c0:42:3b:26:f6:fd:6b:6a:60:3b:f4:94: 7d:a2:7f:9d:53:39:e4:3a:11:54:42:f1:a3:ce:ad:17:e4:29: cc:5a:aa:ec:f5:05:aa:40:d5:67:90:1c:9d:b2:30:4e:c9:b3: fc:18:77:d4:06:41:bc:8b:39:63:20:f9:be:ab:84:ba:06:b7: dc:ce:0d:41:16:d7:7d:64:d7:79:f1:a2:58:b5:c4:cf:56:87: 8d:55:88:89:43:6e:f1:ce:0e:d8:bb:25:57:fb:be:91:b9:70: a3:a5:d6:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1bfJyRXCP1D6hWsaKQgt+4XSyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQwMjUwRUIxRDZDODMxMjg3NTBBRDhCMjI5OUVG MTMwMDExMjAeFw0yNjA2MjAwMTE2MjRaFw0yNjA2MjEwMzE4MjRaMDMxMTAvBgNV BAMTKENBMDdCQTQyREJGODJFODE0MDc3MjVFMzI2MDVFNzk0NkQ0MTU3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5E3A/PNamdLZGTs4tV/q/ds9 PpfBoHDC2t/3Q0N1rKy0xm1x/U7YJjlTQyDBHG7pB8vOxY1UqLcIEvfWiQYeP2N7 UR3teAuA7CGbM2OdWIDzCc+8t0kOc2vpIxj85Sg80Zt2VhiTt0Q/upu/Z5cVXQm+ sxcn4luIf37Nq2ra7jFFYkz1cBz/YyZeeMdHdYmnVmiPVk8fRlvyIcx93DToXFFR i5uQH1zUrNR4YfMqCy66EnkEPq3WNfZLvc/OYefseqo8B/sBph1rsuB1hgCcsv97 oU3HfCz6s7Ew6SXVFxndNsVX8GmplCadxNXyKKW9warwUohkxDVBnxpHt/bfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyge6Qtv4LoFAdyXjJgXnlG1BVxwwHwYDVR0j BBgwFoAUJLNAJQ6x1sgxKHUK2LIpnvEwARIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJiY2YxZWMtOTIyZC00Y2Q3LThjYTYtNzI3MjRmNjZlNWZiLzAvMjRCMzQwMjUw RUIxRDZDODMxMjg3NTBBRDhCMjI5OUVGMTMwMDExMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNEIzNDAyNTBFQjFENkM4MzEyODc1MEFEOEIyMjk5RUYxMzAw MTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvMjRCMzQwMjUwRUIxRDZDODMxMjg3NTBBRDhCMjI5 OUVGMTMwMDExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmq8LpC7z7l8aCE+aMYMmYJsJXNmLYGhBr8 37/64KH28FjwghIqB5f8NWhxnTwa1oqBrYfAAQ99xgv8Qd0qvGrfIvJcpPgxHQ9Q NP0j1++lHc6r22EIn0cqnf8onm0rjmBbJ6ktolaRA/Nmu5SiyAsXoXF0ntY9wdqD 6lfThjjrRpBiRndKEsX9QG7/Dy4Gh93mK+zqjMBCOyb2/WtqYDv0lH2if51TOeQ6 EVRC8aPOrRfkKcxaquz1BapA1WeQHJ2yME7Js/wYd9QGQbyLOWMg+b6rhLoGt9zO DUEW131k13nxoli1xM9Wh41ViIlDbvHODti7JVf7vpG5cKOl1so= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:26 2026 by rpki-client