$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json) Hash identifier: uul6/gngLAcpmxtjkICacf59Uf0kGIF3pF62+QJV+bc= Subject key identifier: 64:50:2F:6F:FB:2B:FF:0D:85:E7:23:E7:C5:73:79:6A:71:89:69:5D Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Certificate serial: 5B4B1DA35231D67140E9B8C5AAFC681FA2B41A24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 01:15:07 +0000 Manifest this update: Thu 17 Sep 2026 01:10:07 +0000 Manifest next update: Fri 18 Sep 2026 03:16:07 +0000 Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: UNQociYYl9e6uNnnB88mWgqXKRdYKbmCj/Nb/jQEF8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4b:1d:a3:52:31:d6:71:40:e9:b8:c5:aa:fc:68:1f:a2:b4:1a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Validity Not Before: Sep 17 01:10:07 2026 GMT Not After : Sep 18 03:16:07 2026 GMT Subject: CN=64502F6FFB2BFF0D85E723E7C573796A7189695D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:1f:8c:3b:9d:64:5f:ac:59:8d:8b:4f:75: c8:30:d9:d6:6a:60:d7:d8:4d:13:15:4b:f0:1c:bb: 6e:73:a2:a6:d1:90:18:98:d8:ef:5c:71:e9:89:1f: 4a:a3:ac:95:b9:e4:8c:d6:73:f7:6b:e7:02:1a:ec: 45:8d:b4:62:ad:47:07:e7:ae:15:96:fb:bb:e2:70: 30:62:d6:b7:94:8f:f8:1f:a1:18:b4:9a:db:71:21: 41:53:55:c2:6c:da:86:cd:f9:ca:0c:4a:84:6f:e7: a7:35:67:54:31:5a:56:b5:65:a5:2e:c9:a0:41:23: 66:4c:93:34:a0:ff:f1:68:f9:16:78:5b:07:ef:b8: af:1a:09:01:51:c6:25:d4:1b:63:25:e0:b7:96:ef: 59:35:6c:6b:8d:e5:92:aa:6f:f8:8c:b3:92:5d:7a: dc:5d:a8:fb:9c:35:69:a0:63:3c:3f:3b:8d:75:da: 28:a2:2c:b6:6f:69:04:49:2e:38:b6:6e:00:aa:ec: 2f:2a:2f:73:c5:b9:5f:77:47:ed:51:1f:e5:a0:84: 24:d8:4f:a2:4d:8d:8d:89:0d:ff:54:07:07:7a:bd: e7:58:02:02:4e:c4:18:58:41:76:ac:b1:a3:fb:94: c8:d3:b0:c4:dc:28:ca:87:b9:53:36:a1:ae:ea:2e: 4e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:50:2F:6F:FB:2B:FF:0D:85:E7:23:E7:C5:73:79:6A:71:89:69:5D X509v3 Authority Key Identifier: keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:75:5c:18:6e:6e:55:8c:6e:0e:bc:17:08:4d:4c:d8:a3:1d: c4:81:07:a1:cd:77:a9:a6:65:55:71:f0:d7:e8:e0:88:d1:44: 4d:f9:83:8d:a8:06:1d:5c:49:1f:9e:2b:41:d0:09:cd:ab:06: b3:6f:03:ba:dd:3c:f9:ef:97:e3:6f:25:fb:6b:da:d1:b1:bb: f2:00:84:ed:5f:60:35:a5:2c:c2:34:b0:70:af:e3:32:b2:77: c9:57:47:ca:2e:f6:d4:cd:19:41:6b:a5:2c:20:9c:90:9e:20: 4e:04:2e:8b:da:65:c9:01:d5:5f:d4:6e:d3:6f:a6:80:fe:e9: ad:7e:ed:ae:11:2e:3d:fa:b9:8d:a1:cf:db:4c:33:61:0b:a7: 6b:b0:68:dd:48:5b:98:43:62:20:0b:56:3e:a6:5c:bf:55:59: 1b:56:c8:a5:0f:46:29:e8:72:21:d9:0c:38:5c:fc:c3:66:22: 5b:bf:99:d7:21:8e:f4:50:d5:1c:44:99:92:cc:b3:ac:59:d2: 3e:7d:6d:4a:27:b0:29:23:c4:f8:ea:92:94:05:ed:e6:e0:56: f9:67:48:06:73:26:61:bc:b3:aa:30:3b:cc:42:ad:71:26:10: 47:8d:bf:bb:37:e9:1c:ef:50:59:e5:8f:48:17:9e:28:0d:d8: 95:ab:a3:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0sdo1Ix1nFA6bjFqvxoH6K0GiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJCOEIw OENBMDY5NjAeFw0yNjA5MTcwMTEwMDdaFw0yNjA5MTgwMzE2MDdaMDMxMTAvBgNV BAMTKDY0NTAyRjZGRkIyQkZGMEQ4NUU3MjNFN0M1NzM3OTZBNzE4OTY5NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EB+MO51kX6xZjYtPdcgw2dZq YNfYTRMVS/Acu25zoqbRkBiY2O9ccemJH0qjrJW55IzWc/dr5wIa7EWNtGKtRwfn rhWW+7vicDBi1reUj/gfoRi0mttxIUFTVcJs2obN+coMSoRv56c1Z1QxWla1ZaUu yaBBI2ZMkzSg//Fo+RZ4WwfvuK8aCQFRxiXUG2Ml4LeW71k1bGuN5ZKqb/iMs5Jd etxdqPucNWmgYzw/O4112iiiLLZvaQRJLji2bgCq7C8qL3PFuV93R+1RH+WghCTY T6JNjY2JDf9UBwd6vedYAgJOxBhYQXassaP7lMjTsMTcKMqHuVM2oa7qLk7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZFAvb/sr/w2F5yPnxXN5anGJaV0wHwYDVR0j BBgwFoAUAkrwW2R28CJt7o6H5967iwjKBpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdkNTBmMjctN2U4OC00NzE4LTgzZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2 NDc2RjAyMjZERUU4RTg3RTdERUJCOEIwOENBMDY5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjRBRjA1QjY0NzZGMDIyNkRFRThFODdFN0RFQkI4QjA4Q0Ew Njk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJC OEIwOENBMDY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd1XBhublWMbg68FwhNTNijHcSBB6HNd6mm ZVVx8Nfo4IjRRE35g42oBh1cSR+eK0HQCc2rBrNvA7rdPPnvl+NvJftr2tGxu/IA hO1fYDWlLMI0sHCv4zKyd8lXR8ou9tTNGUFrpSwgnJCeIE4ELovaZckB1V/UbtNv poD+6a1+7a4RLj36uY2hz9tMM2ELp2uwaN1IW5hDYiALVj6mXL9VWRtWyKUPRino ciHZDDhc/MNmIlu/mdchjvRQ1RxEmZLMs6xZ0j59bUonsCkjxPjqkpQF7ebgVvln SAZzJmG8s6owO8xCrXEmEEeNv7s36RzvUFnlj0gXnigN2JWrozg= -----END CERTIFICATE-----Generated at Thu Sep 17 16:47:28 2026 by rpki-client