$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft File: 024857CCDFA5066CE266529DD14709446E2D5817.mft (raw, json) Hash identifier: CSY1MVXhMhgHRdUGTe217rz/zMwevhRtX7G5cJo8oPU= Subject key identifier: 38:73:BC:07:37:DB:00:EB:F1:A6:53:4E:B5:F9:D1:B8:F1:01:E1:15 Authority key identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 Certificate issuer: /CN=024857CCDFA5066CE266529DD14709446E2D5817 Certificate serial: 0807A013C38A53BD59F9E573E317A915A52D1BB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft Manifest number: C2 Signing time: Sat 26 Sep 2026 06:02:25 +0000 Manifest this update: Sat 26 Sep 2026 05:57:25 +0000 Manifest next update: Sun 27 Sep 2026 07:11:25 +0000 Files and hashes: 1: 024857CCDFA5066CE266529DD14709446E2D5817.crl (hash: dqjoPtr0RjDSnbbXccfSuiCiQsPMLeisdH8uuyh0u88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 07:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:07:a0:13:c3:8a:53:bd:59:f9:e5:73:e3:17:a9:15:a5:2d:1b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024857CCDFA5066CE266529DD14709446E2D5817 Validity Not Before: Sep 26 05:57:25 2026 GMT Not After : Sep 27 07:11:25 2026 GMT Subject: CN=3873BC0737DB00EBF1A6534EB5F9D1B8F101E115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:00:2f:31:46:fc:07:2c:7a:c9:7d:78:ad: 34:17:1b:96:ee:7d:b5:13:95:9d:73:6b:de:25:db: 15:96:b4:ab:08:07:30:6a:be:91:40:39:5c:ea:f1: 2c:ba:70:94:53:a6:d7:2b:d3:77:85:f1:6f:8f:ac: de:b6:cb:3b:98:08:a7:22:5c:ac:41:13:c1:4e:c1: 4f:aa:64:f7:79:76:e1:d7:fb:12:d1:dc:de:66:9e: c8:d3:79:16:a7:e3:4e:93:0e:81:97:d1:b3:64:27: 0e:b2:36:fd:b2:20:03:ae:96:6f:a3:9f:ac:0c:eb: e0:78:53:c0:3e:1c:b7:eb:23:b3:70:3b:fa:97:f7: 8b:81:30:91:a6:1b:a4:1f:67:72:e4:4a:3a:52:0b: 2e:09:64:c7:63:09:6c:f4:b4:09:1b:8b:1e:32:3c: 7d:e2:4e:5f:23:a6:ba:40:ba:0c:34:78:96:c8:2b: ae:21:7e:a4:fe:95:34:87:62:ba:95:f2:b9:0f:92: a4:2d:ba:2c:8c:e5:42:4d:6f:32:ac:60:69:34:19: 88:c7:bf:34:b8:19:b7:5f:73:24:bd:58:f2:89:2b: dc:39:b4:2c:8b:b6:45:bf:d2:3d:29:c2:ad:e6:8e: 34:c5:38:15:40:f0:3a:2a:3e:ea:7f:e2:67:71:4e: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:73:BC:07:37:DB:00:EB:F1:A6:53:4E:B5:F9:D1:B8:F1:01:E1:15 X509v3 Authority Key Identifier: keyid:02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b5:c7:38:3a:c5:6c:41:6a:f6:39:1c:50:22:71:53:54:9a: 48:e9:7a:7b:a1:ce:36:53:a0:13:f3:a0:78:f4:af:f7:44:18: e7:c0:15:35:60:45:4a:6a:d0:23:93:4d:79:1d:12:49:47:00: 67:c4:ee:8e:f4:f5:be:07:1c:c6:b5:bf:aa:cd:92:9a:7c:0c: 8f:14:11:90:54:74:7d:af:b7:e5:6f:51:e3:ea:0a:ab:04:de: 01:ff:d1:c1:b5:b7:67:de:1f:c7:52:79:42:6d:b4:d0:88:dd: 98:1e:d1:93:48:0a:73:1d:70:dd:24:9a:ae:24:fa:ee:1b:f8: f9:88:a6:32:63:b3:25:c9:ee:1e:79:e2:28:cd:47:24:fd:be: a9:2a:c0:84:21:95:b0:47:32:b1:b5:e6:e1:61:05:c7:1d:41: e4:d8:ca:bc:2a:a3:c7:2f:65:e1:4e:6b:77:68:48:09:f7:22: d3:2f:4f:33:ce:ed:dc:b9:92:78:1b:6a:96:30:69:77:a6:bd: 05:67:1a:6b:99:b2:0c:16:91:7d:9c:57:6c:91:36:8c:75:58: 6d:28:23:a5:0c:15:2d:ba:4a:48:dc:cb:78:de:6c:a3:3c:05: 9b:57:36:69:78:89:21:b7:47:e0:7c:6e:39:ba:4e:42:d6:30: 1f:dc:38:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAegE8OKU71Z+eVz4xepFaUtG7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2 RTJENTgxNzAeFw0yNjA5MjYwNTU3MjVaFw0yNjA5MjcwNzExMjVaMDMxMTAvBgNV BAMTKDM4NzNCQzA3MzdEQjAwRUJGMUE2NTM0RUI1RjlEMUI4RjEwMUUxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOsgAvMUb8Byx6yX14rTQXG5bu fbUTlZ1za94l2xWWtKsIBzBqvpFAOVzq8Sy6cJRTptcr03eF8W+PrN62yzuYCKci XKxBE8FOwU+qZPd5duHX+xLR3N5mnsjTeRan406TDoGX0bNkJw6yNv2yIAOulm+j n6wM6+B4U8A+HLfrI7NwO/qX94uBMJGmG6QfZ3LkSjpSCy4JZMdjCWz0tAkbix4y PH3iTl8jprpAugw0eJbIK64hfqT+lTSHYrqV8rkPkqQtuiyM5UJNbzKsYGk0GYjH vzS4GbdfcyS9WPKJK9w5tCyLtkW/0j0pwq3mjjTFOBVA8DoqPup/4mdxTnKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOHO8BzfbAOvxplNOtfnRuPEB4RUwHwYDVR0j BBgwFoAUAkhXzN+lBmziZlKd0UcJRG4tWBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5MzAyY2UtMTdlOS00MDM5LWIzZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NE RkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2RTJENTgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjQ4NTdDQ0RGQTUwNjZDRTI2NjUyOUREMTQ3MDk0NDZFMkQ1 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5 NDQ2RTJENTgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO1xzg6xWxBavY5HFAicVNUmkjpenuhzjZT oBPzoHj0r/dEGOfAFTVgRUpq0COTTXkdEklHAGfE7o709b4HHMa1v6rNkpp8DI8U EZBUdH2vt+VvUePqCqsE3gH/0cG1t2feH8dSeUJttNCI3Zge0ZNICnMdcN0kmq4k +u4b+PmIpjJjsyXJ7h554ijNRyT9vqkqwIQhlbBHMrG15uFhBccdQeTYyrwqo8cv ZeFOa3doSAn3ItMvTzPO7dy5kngbapYwaXemvQVnGmuZsgwWkX2cV2yRNox1WG0o I6UMFS26Skjcy3jebKM8BZtXNml4iSG3R+B8bjm6TkLWMB/cOOc= -----END CERTIFICATE-----Generated at Sat Sep 26 16:58:23 2026 by rpki-client