$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft File: 024857CCDFA5066CE266529DD14709446E2D5817.mft (raw, json) Hash identifier: fiK+pqONhr/FXHLSCo48HbC7sPbpPzsTvcce5kscpmY= Subject key identifier: D1:94:F3:9A:F1:DA:82:F2:51:FF:57:DB:72:2D:F2:C3:95:2B:CF:3A Authority key identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 Certificate issuer: /CN=024857CCDFA5066CE266529DD14709446E2D5817 Certificate serial: 106935FD4A650390C46E6740021B927A52ACCF48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 01:14:23 +0000 Manifest this update: Wed 17 Jun 2026 01:09:23 +0000 Manifest next update: Thu 18 Jun 2026 02:55:23 +0000 Files and hashes: 1: 024857CCDFA5066CE266529DD14709446E2D5817.crl (hash: olPfwxNAeDDe4V5rrGv/SUgyef7ghO3AQdRu9IUW4i0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:69:35:fd:4a:65:03:90:c4:6e:67:40:02:1b:92:7a:52:ac:cf:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024857CCDFA5066CE266529DD14709446E2D5817 Validity Not Before: Jun 17 01:09:23 2026 GMT Not After : Jun 18 02:55:23 2026 GMT Subject: CN=D194F39AF1DA82F251FF57DB722DF2C3952BCF3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:9f:0e:d6:4d:b0:ba:70:60:84:d6:ad:99: 0a:bb:8f:f2:2e:f0:bd:0a:ad:dc:91:df:e1:1f:66: f8:ce:73:ca:ee:51:ff:25:a0:78:30:e0:ad:b9:b7: 00:30:f1:2f:90:47:e5:da:06:8f:ce:2c:30:2e:bb: 6c:1c:0e:aa:bc:2b:15:3d:9d:c9:07:dc:e7:8a:80: 46:84:16:dc:6c:a5:c2:08:df:d1:e7:5d:f1:e6:ac: e2:f6:ef:d9:b8:d1:87:e3:93:27:d5:56:63:05:86: c2:14:75:b5:1a:d4:50:98:41:e4:cf:d0:dc:49:4c: 19:9a:2c:36:4d:cd:21:15:bc:7d:72:52:d4:5a:01: 9a:43:ab:45:cd:89:a8:cb:61:c8:1d:53:c5:e9:49: 80:f8:d4:37:c0:0b:07:57:e9:06:31:c0:6a:66:bc: e0:89:6a:ca:05:6a:af:f2:61:13:88:99:0a:2f:46: e3:fc:6c:98:df:61:24:95:47:be:24:4e:76:b1:de: 60:81:32:65:c2:73:5c:1b:48:1a:da:8c:ac:d8:08: 2c:7c:91:12:4f:7b:c4:1b:08:ee:4e:90:1e:46:e4: ce:ba:ea:69:f1:41:a2:03:75:7e:cc:c1:43:0b:cb: ba:27:47:c3:6c:e6:f3:28:9c:e0:fa:6b:d3:e7:16: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:94:F3:9A:F1:DA:82:F2:51:FF:57:DB:72:2D:F2:C3:95:2B:CF:3A X509v3 Authority Key Identifier: keyid:02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:49:56:14:be:33:2c:3e:a2:55:e4:44:e7:6e:49:0e:59:7f: e8:51:d1:4d:bf:77:33:c0:43:66:94:69:b7:8c:07:6e:d9:5a: 84:6d:4a:de:1f:c1:8c:87:b7:53:68:9e:71:34:7f:05:fb:ce: 8e:96:df:68:48:6a:5f:25:1d:ab:f7:6b:84:4f:e7:82:06:bc: 6e:24:8f:91:f8:97:dc:f0:40:89:6e:c4:8c:61:89:d4:fe:c2: ee:21:0b:3f:df:d4:ec:4d:02:1e:fb:69:dd:13:7b:1b:15:60: d3:59:cf:83:b1:23:c4:8c:f6:ee:ad:45:64:10:f6:9e:3e:0e: dd:9c:dc:2c:b7:7c:a3:4a:f1:af:38:ef:df:0c:2f:d7:83:a2: 7e:74:5a:3e:53:40:b8:b4:c5:ec:1e:88:27:0b:22:d8:9d:38: fd:ec:0c:45:60:74:90:bc:bc:b5:d6:04:01:7d:a5:ab:7f:fa: 2f:84:4b:aa:83:d0:41:b6:31:15:e7:2b:52:dc:df:32:03:a7: ff:ea:ec:d5:52:72:4f:55:cd:83:4d:c4:b2:49:da:20:cd:fb: 6a:f5:41:dd:06:fb:8f:9d:d3:a7:e2:c8:cb:59:3e:73:9f:3f: 8b:6b:04:8e:40:93:1a:52:1a:f1:b7:11:d9:c7:14:fe:7b:c0: 3e:3a:70:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGk1/UplA5DEbmdAAhuSelKsz0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2 RTJENTgxNzAeFw0yNjA2MTcwMTA5MjNaFw0yNjA2MTgwMjU1MjNaMDMxMTAvBgNV BAMTKEQxOTRGMzlBRjFEQTgyRjI1MUZGNTdEQjcyMkRGMkMzOTUyQkNGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZgp8O1k2wunBghNatmQq7j/Iu 8L0KrdyR3+EfZvjOc8ruUf8loHgw4K25twAw8S+QR+XaBo/OLDAuu2wcDqq8KxU9 nckH3OeKgEaEFtxspcII39HnXfHmrOL279m40YfjkyfVVmMFhsIUdbUa1FCYQeTP 0NxJTBmaLDZNzSEVvH1yUtRaAZpDq0XNiajLYcgdU8XpSYD41DfACwdX6QYxwGpm vOCJasoFaq/yYROImQovRuP8bJjfYSSVR74kTnax3mCBMmXCc1wbSBrajKzYCCx8 kRJPe8QbCO5OkB5G5M666mnxQaIDdX7MwUMLy7onR8Ns5vMonOD6a9PnFsnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ZTzmvHagvJR/1fbci3yw5UrzzowHwYDVR0j BBgwFoAUAkhXzN+lBmziZlKd0UcJRG4tWBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5MzAyY2UtMTdlOS00MDM5LWIzZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NE RkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2RTJENTgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjQ4NTdDQ0RGQTUwNjZDRTI2NjUyOUREMTQ3MDk0NDZFMkQ1 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5 NDQ2RTJENTgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJJVhS+Myw+olXkROduSQ5Zf+hR0U2/dzPA Q2aUabeMB27ZWoRtSt4fwYyHt1NonnE0fwX7zo6W32hIal8lHav3a4RP54IGvG4k j5H4l9zwQIluxIxhidT+wu4hCz/f1OxNAh77ad0TexsVYNNZz4OxI8SM9u6tRWQQ 9p4+Dt2c3Cy3fKNK8a84798ML9eDon50Wj5TQLi0xeweiCcLItidOP3sDEVgdJC8 vLXWBAF9pat/+i+ES6qD0EG2MRXnK1Lc3zIDp//q7NVSck9VzYNNxLJJ2iDN+2r1 Qd0G+4+d06fiyMtZPnOfP4trBI5AkxpSGvG3EdnHFP57wD46cKk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:49 2026 by rpki-client