
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft
File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json)
Hash identifier: Y0WvXKRCJ7TbkGi3FlTAUAuOe3afO+dihdl0ZMqje9k=
Subject key identifier: 90:4A:C2:1D:0E:B9:BD:57:18:65:DA:AB:E2:53:6D:8E:FC:E9:C7:59
Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96
Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696
Certificate serial: 29F2F52452EE1758119E2F41AD560DFE031D10D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft
Manifest number: 3E
Signing time: Thu 18 Jun 2026 04:42:40 +0000
Manifest this update: Thu 18 Jun 2026 04:37:40 +0000
Manifest next update: Fri 19 Jun 2026 07:18:40 +0000
Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: DZd1WJWdSVFyFLxDAN1FdIza/xjbq3VuUW/m5Db/Uio=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl
rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 07:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f2:f5:24:52:ee:17:58:11:9e:2f:41:ad:56:0d:fe:03:1d:10:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696
Validity
Not Before: Jun 18 04:37:40 2026 GMT
Not After : Jun 19 07:18:40 2026 GMT
Subject: CN=904AC21D0EB9BD571865DAABE2536D8EFCE9C759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:15:d6:8e:d1:1e:46:d1:d3:9e:bb:9a:fc:
ab:43:74:b2:79:a1:8e:e5:49:69:62:79:04:e4:6e:
57:3e:30:08:6e:3c:d1:fb:75:3c:49:cc:f7:5e:88:
95:eb:f7:22:12:13:d7:5d:6e:d7:40:54:ba:26:45:
ff:97:a1:9e:2b:95:d9:18:c8:39:c9:9c:aa:c1:7c:
73:03:a1:57:99:8b:23:e5:2b:b2:01:e4:b9:ee:f5:
1e:10:c6:7a:75:21:86:d7:1d:e1:79:7b:47:0d:f0:
9c:87:de:b7:c4:ec:b9:ea:8c:4c:d9:de:e1:3c:dc:
c4:ff:5f:cc:fe:31:17:be:5c:7e:d3:d6:c4:33:9b:
95:c1:23:25:c4:87:de:7d:42:92:fa:2a:81:20:a6:
f7:85:a1:13:8b:fb:ec:13:d9:c5:cf:2d:f9:e0:a9:
ff:d3:a7:f3:84:76:45:a3:0a:31:3c:6f:5b:06:f6:
c0:38:f7:15:b4:c8:66:ae:cd:7a:16:e4:fa:7b:fe:
39:a3:f0:b0:56:61:b2:de:c1:ef:25:a2:30:37:69:
69:48:71:00:a6:a1:96:0b:07:60:6d:9c:0d:0b:11:
cf:e9:0b:3c:9d:72:fb:44:64:90:73:4d:0f:4f:9e:
78:4a:e6:89:70:2a:82:d4:b3:46:33:78:4a:4e:0e:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:C2:1D:0E:B9:BD:57:18:65:DA:AB:E2:53:6D:8E:FC:E9:C7:59
X509v3 Authority Key Identifier:
keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fa:07:8d:a2:4d:ad:57:3d:61:44:fb:31:92:e4:b2:a8:37:
21:d6:3f:dd:0f:23:0b:80:bd:4b:e4:dc:40:46:67:ff:c3:ec:
7c:96:07:76:a0:32:2a:37:04:4c:25:52:78:86:70:eb:ec:26:
92:ed:5f:67:88:ba:0a:14:75:ff:29:e4:47:e8:21:69:27:5d:
e3:f8:33:2d:f9:0d:72:6e:9b:25:1d:b1:32:70:a8:85:04:6f:
42:6b:5c:98:f0:ac:43:a7:78:be:68:c1:a8:2c:56:84:c8:35:
e3:27:42:c5:56:5b:2b:e3:8a:98:eb:94:b1:7b:2a:c9:f0:ee:
da:ff:a9:4c:35:36:f6:2a:8b:c1:9a:b9:1c:9b:da:60:78:bc:
a9:ef:1d:75:a9:9f:a8:93:f9:b4:fb:03:5e:61:07:52:75:d3:
3f:30:4e:6c:42:ad:7d:8f:5d:4f:d6:1d:39:aa:06:e7:40:25:
27:1a:99:49:d9:84:3a:85:e3:43:f1:c2:87:d4:44:e5:4c:c4:
99:00:42:2d:b3:f1:5a:ee:84:91:72:32:63:df:dc:42:1c:15:
0c:f8:06:82:b3:1d:c4:ac:e8:b4:96:c1:6e:53:94:a4:16:d8:
49:a3:18:9f:86:af:1e:34:44:44:cc:9e:2f:6a:25:26:47:ef:
df:06:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:52 2026 by rpki-client