$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft (raw, json) Hash identifier: 7Ltg6WiUFYcaPkxz5J+G14u/R4bTHBWXSItEg6cPmg4= Subject key identifier: 46:68:C3:DE:35:23:02:B1:17:6A:FF:FC:4F:C7:55:09:B9:1C:C7:81 Authority key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Certificate issuer: /CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Certificate serial: 75FFC1B327D702A9EBB73B74AB3D77A4D8939A10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 20:40:57 +0000 Manifest this update: Fri 19 Jun 2026 20:35:57 +0000 Manifest next update: Sat 20 Jun 2026 22:27:57 +0000 Files and hashes: 1: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl (hash: rJEY06VkXeC/zJ0HEQLm6hHaMTtenrPdhhKELBx1W58=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ff:c1:b3:27:d7:02:a9:eb:b7:3b:74:ab:3d:77:a4:d8:93:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Validity Not Before: Jun 19 20:35:57 2026 GMT Not After : Jun 20 22:27:57 2026 GMT Subject: CN=4668C3DE352302B1176AFFFC4FC75509B91CC781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:50:37:da:e6:6f:22:56:94:9f:0d:aa:88: d4:64:0d:06:13:31:2a:6d:46:96:8e:be:4a:70:26: 61:ed:2e:3d:fc:91:5c:7d:ca:07:82:b6:41:d2:a2: df:ff:d3:95:83:fb:74:11:7a:21:84:4a:a1:b6:c7: 8b:df:b4:a9:50:d6:2c:4b:c2:4c:21:2a:32:34:2f: be:2a:d9:b6:d4:af:16:21:21:d6:08:dd:65:1d:59: e3:ce:5d:61:e3:e5:0d:05:cb:fc:6e:32:a4:82:73: f9:85:11:9c:e6:24:7f:10:eb:a2:6a:59:6d:3e:47: a5:9f:c6:a8:ec:d6:c2:47:5c:57:d8:76:3e:a7:ed: cf:e7:f8:e5:08:27:e4:4c:b1:6c:96:dd:40:66:27: 32:9d:00:33:9c:cc:fe:62:54:ca:c2:55:50:da:12: 35:21:c1:01:eb:1b:06:96:1a:2a:e9:28:39:14:81: eb:b5:b0:ad:f2:d0:66:c7:29:52:6c:1b:ac:77:a2: a5:2a:37:51:c3:98:60:59:ce:b1:2a:e7:4c:fd:f9: 03:6b:ca:f9:b1:a9:6c:d9:84:f2:14:f8:cd:db:b1: 6d:7d:83:14:57:9d:d7:3b:c1:47:3d:46:85:5e:3b: 9d:63:49:50:21:4b:22:a7:dd:38:3a:1f:ce:28:c7: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:68:C3:DE:35:23:02:B1:17:6A:FF:FC:4F:C7:55:09:B9:1C:C7:81 X509v3 Authority Key Identifier: keyid:02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:61:61:f6:ef:03:d1:d8:70:e5:70:ab:02:58:d3:2c:2e:ab: 5c:38:d4:a8:91:b7:32:af:84:8b:7a:fb:6c:c3:ea:5b:2c:56: a7:2e:04:15:e2:af:81:ef:df:08:f0:ab:19:58:f0:86:dc:13: 89:2c:d7:c5:26:ac:cb:67:e1:7e:8b:21:68:35:96:de:56:f7: 56:97:ec:c1:67:61:bd:2e:1a:61:a1:50:a1:51:ca:e1:7c:55: 7a:3a:24:82:d6:2e:c9:18:21:ae:4f:34:dc:23:51:ba:a3:a2: ee:e8:ac:e8:70:7a:2e:3a:86:68:be:8b:81:34:cc:44:d8:a8: c7:12:f6:f1:88:6a:9f:d7:bc:8a:66:3e:d0:3b:b9:05:33:f4: 5c:92:c7:75:a8:c0:56:4b:ba:74:43:b1:ae:47:63:5c:8b:20: be:63:84:39:a1:14:07:31:a9:f7:ab:88:69:62:24:5f:43:61: cb:56:7a:22:69:48:eb:70:08:56:12:eb:a1:e2:cd:72:f6:21: 1a:bc:40:ed:19:b9:09:8d:e0:e0:a5:39:78:6a:b6:8b:24:03: f9:7d:ae:f2:75:74:79:8f:a3:cb:79:64:cc:37:92:6d:77:2c: b9:c4:8e:16:7d:f5:1e:b5:6c:87:a2:7b:15:5c:a1:ba:8f:3d: 54:24:cb:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdf/BsyfXAqnrtzt0qz13pNiTmhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYy QjA2QzhGMDAeFw0yNjA2MTkyMDM1NTdaFw0yNjA2MjAyMjI3NTdaMDMxMTAvBgNV BAMTKDQ2NjhDM0RFMzUyMzAyQjExNzZBRkZGQzRGQzc1NTA5QjkxQ0M3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd61A32uZvIlaUnw2qiNRkDQYT MSptRpaOvkpwJmHtLj38kVx9ygeCtkHSot//05WD+3QReiGESqG2x4vftKlQ1ixL wkwhKjI0L74q2bbUrxYhIdYI3WUdWePOXWHj5Q0Fy/xuMqSCc/mFEZzmJH8Q66Jq WW0+R6Wfxqjs1sJHXFfYdj6n7c/n+OUIJ+RMsWyW3UBmJzKdADOczP5iVMrCVVDa EjUhwQHrGwaWGirpKDkUgeu1sK3y0GbHKVJsG6x3oqUqN1HDmGBZzrEq50z9+QNr yvmxqWzZhPIU+M3bsW19gxRXndc7wUc9RoVeO51jSVAhSyKn3Tg6H84ox8D/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURmjD3jUjArEXav/8T8dVCbkcx4EwHwYDVR0j BBgwFoAUAktrdAe5e3ZX3VKnNusxxisGyPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQw N0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYyQjA2QzhGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wMjRCNkI3NDA3Qjk3Qjc2NTdERDUyQTczNkVCMzFDNjJCMDZD OEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMx QzYyQjA2QzhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdhYfbvA9HYcOVwqwJY0ywuq1w41KiRtzKv hIt6+2zD6lssVqcuBBXir4Hv3wjwqxlY8IbcE4ks18UmrMtn4X6LIWg1lt5W91aX 7MFnYb0uGmGhUKFRyuF8VXo6JILWLskYIa5PNNwjUbqjou7orOhwei46hmi+i4E0 zETYqMcS9vGIap/XvIpmPtA7uQUz9FySx3WowFZLunRDsa5HY1yLIL5jhDmhFAcx qferiGliJF9DYctWeiJpSOtwCFYS66HizXL2IRq8QO0ZuQmN4OClOXhqtoskA/l9 rvJ1dHmPo8t5ZMw3km13LLnEjhZ99R61bIeiexVcobqPPVQky/g= -----END CERTIFICATE-----Generated at Sat Jun 20 13:17:41 2026 by rpki-client