$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json) Hash identifier: XFGrFoi1G0ER/cQKMLIyS5gmKUrvwe4jPg0vhFHFLnM= Subject key identifier: 07:BB:B1:7A:15:62:8A:3D:27:FC:16:6C:D5:51:E4:90:65:7F:17:E3 Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Certificate serial: 353740D35702734A0FD7EB62A2BFF3B147015868 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 17:28:26 +0000 Manifest this update: Sun 02 Aug 2026 17:23:26 +0000 Manifest next update: Mon 03 Aug 2026 21:20:26 +0000 Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: PHR2ggaNf+oed0CnkdhUF97lCc1OoDpYhdCUFX+XAKU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:37:40:d3:57:02:73:4a:0f:d7:eb:62:a2:bf:f3:b1:47:01:58:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Validity Not Before: Aug 2 17:23:26 2026 GMT Not After : Aug 3 21:20:26 2026 GMT Subject: CN=07BBB17A15628A3D27FC166CD551E490657F17E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bb:6e:57:fd:84:61:1c:a0:e7:6a:9c:6d:9a: 37:2d:50:d1:e2:a0:2d:bb:bc:7b:cb:32:f4:4f:95: c5:d5:33:01:6f:5f:3e:1d:ca:a4:8c:b5:d8:aa:f8: b1:ae:a9:eb:e9:a1:a7:08:54:b6:d1:30:f1:eb:44: 5d:24:09:66:e5:51:d6:c5:2e:d3:f2:fd:b5:9a:43: b7:80:ed:34:ec:c3:f3:60:08:18:35:77:46:13:32: 45:f5:6a:7a:f3:fa:97:7c:f8:f1:6a:e2:9d:e1:f0: ed:d6:4b:8e:61:4f:d8:2b:08:e9:a8:69:ed:c8:6e: 01:ff:05:a9:e0:67:47:ce:48:78:ac:77:a5:10:99: a3:b5:07:07:9a:6b:b5:bf:3a:2b:c4:37:4b:59:35: fa:44:d5:2c:fb:52:66:81:92:6e:31:9c:64:09:4f: f1:67:26:a9:45:60:3d:3d:58:8f:fc:e1:c3:b6:c6: 67:65:e5:30:7a:84:e6:cc:b6:7f:9c:1c:7a:55:56: ac:7f:4d:d7:75:97:ce:62:18:91:f4:6b:87:55:c9: c8:b4:16:72:22:1c:1a:01:56:a9:ff:01:f6:6b:2e: 86:92:a8:21:43:35:f1:8a:20:62:f1:6c:de:2c:e5: e4:e0:43:45:58:3a:ce:09:15:b3:b3:63:ac:d9:58: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:B1:7A:15:62:8A:3D:27:FC:16:6C:D5:51:E4:90:65:7F:17:E3 X509v3 Authority Key Identifier: keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:19:5b:53:fe:e1:53:ce:8a:61:de:95:49:b8:dc:be:4b:ae: b7:e0:f1:6d:b9:da:90:eb:1c:ac:46:04:a3:ac:64:78:0b:99: b8:b2:fd:58:9a:1c:c4:77:61:25:5a:55:96:5c:a6:85:6d:7b: e6:ad:2b:c7:b2:77:d6:33:e9:70:c0:9c:a7:c1:93:0e:43:63: 47:f8:49:1d:2e:36:dc:fb:7b:48:30:a3:b2:8a:1d:7a:09:99: b9:ec:e4:48:dc:d7:c3:c1:2e:f2:a9:a8:e8:2d:cf:88:e6:b7: b9:a8:c9:6d:9e:73:78:f9:25:63:f4:60:56:cd:75:cd:72:a3: e6:94:b7:1e:a9:ec:17:63:26:27:17:29:20:e2:f0:bc:76:ae: e5:c5:a3:d9:9f:3a:8f:37:d3:08:e1:f8:11:ef:49:c7:e0:1f: f6:29:2f:58:85:cc:69:b8:0a:4a:05:88:b0:88:80:4f:cf:6a: da:52:fb:a3:0a:75:da:1e:74:17:2f:51:78:b4:db:92:14:94: 5a:ca:fd:4f:1d:33:43:de:80:e9:ac:1f:16:ad:e0:ff:13:3b: 6f:25:bd:e8:53:3e:16:e8:7d:01:a0:e0:64:d2:6e:d1:94:2c: 21:b1:0c:c2:17:92:bc:c1:37:c8:4f:88:66:18:ae:3b:32:f2: 40:db:8f:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNTdA01cCc0oP1+tior/zsUcBWGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJCOEIw OENBMDY5NjAeFw0yNjA4MDIxNzIzMjZaFw0yNjA4MDMyMTIwMjZaMDMxMTAvBgNV BAMTKDA3QkJCMTdBMTU2MjhBM0QyN0ZDMTY2Q0Q1NTFFNDkwNjU3RjE3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxu25X/YRhHKDnapxtmjctUNHi oC27vHvLMvRPlcXVMwFvXz4dyqSMtdiq+LGuqevpoacIVLbRMPHrRF0kCWblUdbF LtPy/bWaQ7eA7TTsw/NgCBg1d0YTMkX1anrz+pd8+PFq4p3h8O3WS45hT9grCOmo ae3IbgH/BangZ0fOSHisd6UQmaO1Bweaa7W/OivEN0tZNfpE1Sz7UmaBkm4xnGQJ T/FnJqlFYD09WI/84cO2xmdl5TB6hObMtn+cHHpVVqx/Tdd1l85iGJH0a4dVyci0 FnIiHBoBVqn/AfZrLoaSqCFDNfGKIGLxbN4s5eTgQ0VYOs4JFbOzY6zZWHMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7uxehViij0n/BZs1VHkkGV/F+MwHwYDVR0j BBgwFoAUAkrwW2R28CJt7o6H5967iwjKBpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdkNTBmMjctN2U4OC00NzE4LTgzZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2 NDc2RjAyMjZERUU4RTg3RTdERUJCOEIwOENBMDY5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjRBRjA1QjY0NzZGMDIyNkRFRThFODdFN0RFQkI4QjA4Q0Ew Njk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJC OEIwOENBMDY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgZW1P+4VPOimHelUm43L5Lrrfg8W252pDr HKxGBKOsZHgLmbiy/ViaHMR3YSVaVZZcpoVte+atK8eyd9Yz6XDAnKfBkw5DY0f4 SR0uNtz7e0gwo7KKHXoJmbns5Ejc18PBLvKpqOgtz4jmt7moyW2ec3j5JWP0YFbN dc1yo+aUtx6p7BdjJicXKSDi8Lx2ruXFo9mfOo830wjh+BHvScfgH/YpL1iFzGm4 CkoFiLCIgE/PatpS+6MKddoedBcvUXi025IUlFrK/U8dM0PegOmsHxat4P8TO28l vehTPhbofQGg4GTSbtGULCGxDMIXkrzBN8hPiGYYrjsy8kDbj6A= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:40 2026 by rpki-client