$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft (raw, json) Hash identifier: USSY1l19M34raO/7EEvkO9x4LeX2h0QpcrlWrC2sno8= Subject key identifier: B4:43:31:C6:00:1A:C6:87:55:16:79:41:D3:23:A4:DD:5F:17:3C:B7 Authority key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Certificate issuer: /CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Certificate serial: 42B601B8A23F1AA67FB5A436449B5C16A202330F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft Manifest number: 04 Signing time: Tue 05 May 2026 06:40:08 +0000 Manifest this update: Tue 05 May 2026 06:35:08 +0000 Manifest next update: Wed 06 May 2026 10:14:08 +0000 Files and hashes: 1: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl (hash: J7jXNYKTcrsRdxqv4uy9z047WwHOz0m0zxf3xcU2l+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b6:01:b8:a2:3f:1a:a6:7f:b5:a4:36:44:9b:5c:16:a2:02:33:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Validity Not Before: May 5 06:35:08 2026 GMT Not After : May 6 10:14:08 2026 GMT Subject: CN=B44331C6001AC68755167941D323A4DD5F173CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2a:c8:42:27:07:db:e7:70:60:49:0a:8a:9d: 25:da:bf:1f:e8:8c:9d:2b:8e:3f:0f:64:e3:96:fd: 7a:a5:b6:c8:8c:94:fc:dc:ae:7e:67:00:b5:5c:c1: a4:20:19:b2:f2:b4:28:76:9f:be:0a:20:50:96:5d: ee:5e:ad:3a:10:66:de:40:a2:22:21:46:5a:72:3b: b2:f4:e7:8f:24:42:22:6d:f1:ae:9a:8c:58:dc:96: 8e:b5:eb:89:55:76:b7:68:a1:4a:e0:b4:1c:90:7f: 6c:fa:c7:70:24:a9:f0:93:73:02:e9:51:82:6d:be: fe:8a:a8:d6:7f:71:97:72:b2:1c:b3:ce:81:4e:f7: e5:04:fc:ee:6a:b9:b9:c2:70:57:69:f1:ef:40:0e: 87:a7:5f:ea:0c:30:49:d8:2f:64:87:7e:7f:27:f8: f7:26:b9:5e:9c:95:af:0c:9d:67:95:b1:9d:e5:e3: 87:4b:9d:55:fb:2c:ee:92:8a:61:db:66:67:61:07: ef:a6:21:00:6e:fa:c1:e4:89:19:2f:2b:83:24:b9: 04:e6:a3:72:9e:59:e4:f4:57:af:f9:49:c9:46:e4: f2:25:4e:b4:6d:d4:5a:6f:33:ed:84:2d:e0:8c:0b: c2:ae:e7:b3:a2:a5:47:c8:10:27:28:41:d1:8f:1e: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:43:31:C6:00:1A:C6:87:55:16:79:41:D3:23:A4:DD:5F:17:3C:B7 X509v3 Authority Key Identifier: keyid:02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:75:cc:d0:b8:35:b6:33:8c:e2:ba:f2:96:8f:76:2b:d7:e2: 9e:ec:d1:8d:85:9a:56:ce:bd:e4:1b:72:31:19:4b:55:2d:3e: 56:6f:3e:e7:6d:4c:af:78:74:a5:00:9d:f2:c4:a8:37:2a:a3: 87:a5:71:23:86:36:1e:70:ef:4a:c6:8a:94:b2:ae:43:77:d0: 83:2b:cd:c9:3e:03:29:6c:a3:9c:d7:c8:cb:95:3d:75:06:ab: ee:d1:93:b7:4b:9d:55:d1:e4:6d:d3:5e:e3:4c:c7:fb:0d:d9: 74:7e:57:9c:02:e6:9b:f3:9c:b6:50:8f:4c:b6:c2:ab:f2:0d: 08:bf:70:0a:41:b8:80:d1:20:0a:cd:8c:be:dd:0a:df:44:a8: 9b:b4:f7:82:26:0c:3c:6b:e4:a3:b2:1e:b4:d2:59:7c:19:16: c5:f4:29:3f:b3:3a:f6:2d:51:d9:18:8d:db:e6:87:fc:3b:dc: 2d:3d:4b:a0:ef:13:bd:4a:c4:de:6b:41:5d:51:71:3f:32:31: 65:2c:c0:b5:c9:13:d5:16:d7:a4:65:2d:6e:1c:d8:1f:a3:93: 66:bd:9a:16:60:83:eb:fe:95:2d:5f:bc:81:55:ab:f8:40:de: 66:a7:a6:b6:a4:df:25:7c:24:5c:bc:58:58:1c:0e:57:11:16: 9d:37:43:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrYBuKI/GqZ/taQ2RJtcFqICMw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYy QjA2QzhGMDAeFw0yNjA1MDUwNjM1MDhaFw0yNjA1MDYxMDE0MDhaMDMxMTAvBgNV BAMTKEI0NDMzMUM2MDAxQUM2ODc1NTE2Nzk0MUQzMjNBNERENUYxNzNDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhKshCJwfb53BgSQqKnSXavx/o jJ0rjj8PZOOW/XqltsiMlPzcrn5nALVcwaQgGbLytCh2n74KIFCWXe5erToQZt5A oiIhRlpyO7L0548kQiJt8a6ajFjclo6164lVdrdooUrgtByQf2z6x3AkqfCTcwLp UYJtvv6KqNZ/cZdyshyzzoFO9+UE/O5qubnCcFdp8e9ADoenX+oMMEnYL2SHfn8n +PcmuV6cla8MnWeVsZ3l44dLnVX7LO6SimHbZmdhB++mIQBu+sHkiRkvK4MkuQTm o3KeWeT0V6/5SclG5PIlTrRt1FpvM+2ELeCMC8Ku57OipUfIECcoQdGPHgTnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtEMxxgAaxodVFnlB0yOk3V8XPLcwHwYDVR0j BBgwFoAUAktrdAe5e3ZX3VKnNusxxisGyPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQw N0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYyQjA2QzhGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wMjRCNkI3NDA3Qjk3Qjc2NTdERDUyQTczNkVCMzFDNjJCMDZD OEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMx QzYyQjA2QzhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIN1zNC4NbYzjOK68paPdivX4p7s0Y2FmlbO veQbcjEZS1UtPlZvPudtTK94dKUAnfLEqDcqo4elcSOGNh5w70rGipSyrkN30IMr zck+Aylso5zXyMuVPXUGq+7Rk7dLnVXR5G3TXuNMx/sN2XR+V5wC5pvznLZQj0y2 wqvyDQi/cApBuIDRIArNjL7dCt9EqJu094ImDDxr5KOyHrTSWXwZFsX0KT+zOvYt UdkYjdvmh/w73C09S6DvE71KxN5rQV1RcT8yMWUswLXJE9UW16RlLW4c2B+jk2a9 mhZgg+v+lS1fvIFVq/hA3manprak3yV8JFy8WFgcDlcRFp03Q1E= -----END CERTIFICATE-----Generated at Tue May 5 15:37:49 2026 by rpki-client