$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft (raw, json) Hash identifier: x6YRGcz6BkHZq1xSie1qF0utMdNFb9X/lfEBYJ4LXt0= Subject key identifier: 6A:73:61:9D:90:57:57:52:AD:BC:46:2E:5B:55:D3:8A:A1:24:B1:32 Authority key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Certificate issuer: /CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Certificate serial: 2D2346BA29F6CFB845D3D9966288D60363C145EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 18:51:53 +0000 Manifest this update: Wed 19 Aug 2026 18:46:53 +0000 Manifest next update: Thu 20 Aug 2026 19:06:53 +0000 Files and hashes: 1: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl (hash: KQBO5rNFbgZ40Bh3h3bISF7sTSw8AJXA89BRI3MBX0Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 19:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:23:46:ba:29:f6:cf:b8:45:d3:d9:96:62:88:d6:03:63:c1:45:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Validity Not Before: Aug 19 18:46:53 2026 GMT Not After : Aug 20 19:06:53 2026 GMT Subject: CN=6A73619D90575752ADBC462E5B55D38AA124B132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:78:5d:8a:16:a1:3f:fe:1c:45:09:c3:75:3b: 77:32:58:0a:08:3e:57:39:81:a1:d8:f1:ec:c7:fb: 18:23:fc:8f:e6:d1:30:7e:8b:f4:0b:ea:30:9c:87: 66:d5:b4:7c:5b:35:5f:14:c6:dc:54:25:56:c6:7d: 2d:e2:24:a5:28:03:20:b7:25:cd:40:79:d8:ff:57: 56:c8:e4:8c:f5:ef:86:1b:a0:16:98:ff:ba:55:bf: 12:72:df:57:2c:47:ed:f0:cf:d7:a6:0c:87:26:2c: a0:dd:65:6c:b6:65:9f:b8:84:e6:fd:10:0a:ad:f4: 0c:d2:b3:36:ed:ad:c3:36:38:e1:92:fe:bf:18:1d: 3b:27:56:7d:59:0d:31:d8:1d:c0:19:4f:0c:ee:03: ec:9e:95:8a:e0:e4:91:82:14:5f:94:03:54:22:ba: 8a:ad:9c:c2:55:7c:a5:91:a6:73:d4:13:18:04:30: ac:d4:bd:91:a4:05:16:7d:45:3b:61:66:ff:d8:bd: d1:29:67:56:85:cd:7c:da:7b:ea:86:c1:0e:bf:0d: 81:3b:d4:92:ca:d5:4b:bf:86:fb:2a:b3:31:2f:a6: 60:38:9b:dd:ab:b2:f9:23:66:c3:1a:e8:cd:9c:db: 4a:27:02:68:2b:25:38:bd:43:4b:6c:6d:94:6b:0b: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:73:61:9D:90:57:57:52:AD:BC:46:2E:5B:55:D3:8A:A1:24:B1:32 X509v3 Authority Key Identifier: keyid:02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:db:44:1e:d7:7e:ce:c5:5f:2f:bf:a0:58:33:f1:92:2c:6a: d2:48:89:93:2c:0f:b8:ad:e3:af:18:06:77:4d:9d:c6:5e:25: 8e:66:86:bc:18:02:99:c2:a7:8d:1a:f4:61:55:4e:c9:37:fc: ba:5d:9b:97:36:12:52:10:0b:f9:2a:7c:4a:08:e0:4c:e9:85: 31:b0:f2:6d:ed:ca:17:cd:8b:c0:a2:f8:db:aa:c7:0a:ec:fc: 62:52:aa:16:06:2f:44:44:79:87:50:46:46:b0:3e:46:44:c3: 00:64:29:51:3a:ec:af:49:0e:81:6a:82:03:d3:b9:3a:89:2c: af:8f:3c:78:95:54:53:af:0b:61:69:56:2b:a0:f6:0d:a6:a2: 51:a0:2d:42:79:78:47:81:e0:72:b2:e4:d5:94:9a:bf:d2:19: 0b:ab:0d:d6:77:f1:81:6d:13:e3:cb:84:f9:f5:fe:1d:3a:54: 57:5a:10:78:60:ec:52:8e:1f:35:69:b7:55:ab:59:99:bf:44: bd:24:5b:67:f6:ca:96:32:0b:07:e4:1d:00:9d:e3:d6:d0:35: 3b:5e:13:e7:b1:cf:b8:88:23:f4:79:60:6d:2e:4e:a3:23:7c: 97:77:03:06:db:66:24:c6:96:91:41:e3:96:3f:28:17:a1:a4: d7:2a:51:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSNGuin2z7hF09mWYojWA2PBRe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYy QjA2QzhGMDAeFw0yNjA4MTkxODQ2NTNaFw0yNjA4MjAxOTA2NTNaMDMxMTAvBgNV BAMTKDZBNzM2MTlEOTA1NzU3NTJBREJDNDYyRTVCNTVEMzhBQTEyNEIxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzeF2KFqE//hxFCcN1O3cyWAoI Plc5gaHY8ezH+xgj/I/m0TB+i/QL6jCch2bVtHxbNV8UxtxUJVbGfS3iJKUoAyC3 Jc1Aedj/V1bI5Iz174YboBaY/7pVvxJy31csR+3wz9emDIcmLKDdZWy2ZZ+4hOb9 EAqt9AzSszbtrcM2OOGS/r8YHTsnVn1ZDTHYHcAZTwzuA+yelYrg5JGCFF+UA1Qi uoqtnMJVfKWRpnPUExgEMKzUvZGkBRZ9RTthZv/YvdEpZ1aFzXzae+qGwQ6/DYE7 1JLK1Uu/hvsqszEvpmA4m92rsvkjZsMa6M2c20onAmgrJTi9Q0tsbZRrC4anAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUanNhnZBXV1KtvEYuW1XTiqEksTIwHwYDVR0j BBgwFoAUAktrdAe5e3ZX3VKnNusxxisGyPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQw N0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYyQjA2QzhGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wMjRCNkI3NDA3Qjk3Qjc2NTdERDUyQTczNkVCMzFDNjJCMDZD OEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMx QzYyQjA2QzhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvbRB7Xfs7FXy+/oFgz8ZIsatJIiZMsD7it 468YBndNncZeJY5mhrwYApnCp40a9GFVTsk3/Lpdm5c2ElIQC/kqfEoI4EzphTGw 8m3tyhfNi8Ci+Nuqxwrs/GJSqhYGL0REeYdQRkawPkZEwwBkKVE67K9JDoFqggPT uTqJLK+PPHiVVFOvC2FpViug9g2molGgLUJ5eEeB4HKy5NWUmr/SGQurDdZ38YFt E+PLhPn1/h06VFdaEHhg7FKOHzVpt1WrWZm/RL0kW2f2ypYyCwfkHQCd49bQNTte E+exz7iII/R5YG0uTqMjfJd3AwbbZiTGlpFB45Y/KBehpNcqUeE= -----END CERTIFICATE-----Generated at Thu Aug 20 05:25:19 2026 by rpki-client