$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft File: 24B340250EB1D6C83128750AD8B2299EF1300112.mft (raw, json) Hash identifier: TLFsNdbMp4YGOEFCeLJqaYnjvcQ5fAr57rbgh8pO7ZY= Subject key identifier: E7:75:33:F4:71:7A:74:C8:87:31:A8:AA:01:D2:1B:B7:7B:83:12:12 Authority key identifier: 24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12 Certificate issuer: /CN=24B340250EB1D6C83128750AD8B2299EF1300112 Certificate serial: 7583AE76E3FFB0AED1FE4F476D61EEF6E5CE118B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft Manifest number: BD Signing time: Tue 22 Sep 2026 01:23:13 +0000 Manifest this update: Tue 22 Sep 2026 01:18:13 +0000 Manifest next update: Wed 23 Sep 2026 04:25:13 +0000 Files and hashes: 1: 24B340250EB1D6C83128750AD8B2299EF1300112.crl (hash: afiAKraEVYXsmdWDPVeexdp379Opzz9qWowd0oI6vPI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:83:ae:76:e3:ff:b0:ae:d1:fe:4f:47:6d:61:ee:f6:e5:ce:11:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B340250EB1D6C83128750AD8B2299EF1300112 Validity Not Before: Sep 22 01:18:13 2026 GMT Not After : Sep 23 04:25:13 2026 GMT Subject: CN=E77533F4717A74C88731A8AA01D21BB77B831212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:c6:f6:ca:d7:a3:30:f5:f5:8e:8f:75:7b: c0:ab:34:b8:a6:f5:7a:7a:35:4f:be:5d:1d:b1:6a: 7c:b3:f0:08:6e:1d:bc:70:ed:ca:56:5e:13:82:ca: 4c:ea:c6:52:43:4e:d3:e5:15:e2:48:2a:2d:00:b9: db:ea:e3:8b:c9:8a:b9:a5:df:17:a9:18:bb:57:f8: cc:9b:57:fb:19:03:a6:18:3a:c6:f9:9a:42:0a:4b: d7:d5:ea:9e:a1:67:59:7b:1b:fc:62:c3:24:f7:73: 43:36:a5:fa:78:6e:ab:80:dc:3a:4d:84:f0:97:3c: 44:97:23:ae:b2:d0:60:dc:c1:66:56:df:f6:e9:cb: 96:06:d6:7c:d4:71:fa:43:f4:60:8a:76:cd:fc:0d: 3c:6c:19:56:e7:15:a5:fc:0d:f9:c7:b3:b7:0e:a4: 73:95:d0:31:6d:aa:9a:e7:95:22:c0:21:87:ce:a9: 78:8f:83:11:20:15:ab:88:af:61:f3:6f:a2:ac:47: c4:14:24:d3:03:ae:a8:08:f6:da:d5:35:cf:11:b2: 7f:04:cc:7d:ba:ef:84:1b:c8:89:56:46:06:98:4d: 53:37:0d:34:55:ac:e9:6a:42:b7:df:25:bc:08:5d: 0b:0d:9e:36:3c:34:34:a3:aa:88:65:4e:f9:46:8d: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:75:33:F4:71:7A:74:C8:87:31:A8:AA:01:D2:1B:B7:7B:83:12:12 X509v3 Authority Key Identifier: keyid:24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:53:14:a7:d6:9b:af:5a:fe:3d:21:ae:9a:30:20:b6:b4:c8: a0:d7:fb:60:11:7f:68:4f:68:85:a8:62:ce:af:33:ee:33:bb: 76:c6:80:68:18:10:f2:4a:c2:4c:4f:5a:d8:94:66:d1:0d:38: 21:5b:27:cf:b8:86:1e:3a:67:3a:d8:a5:64:4f:32:71:62:4a: 45:44:cf:f1:56:a9:8f:2b:ee:5f:96:74:f8:1b:cf:e1:d4:54: 27:02:c6:0f:c9:32:fe:80:5c:3b:75:2c:80:45:f2:b4:08:f4: c5:51:ee:e6:07:88:09:04:00:fc:aa:d9:a0:0c:a2:a1:2f:de: 40:60:e0:ad:93:84:43:c7:bf:5c:8f:6f:66:40:90:0c:34:fa: 04:12:17:3b:af:92:66:d5:d1:c0:f5:23:38:d8:f4:89:ef:c0: 90:ef:bb:2c:39:6b:0c:bf:66:51:2e:06:7f:38:b2:5d:38:d5: 86:c5:76:40:63:ee:b9:b3:13:80:9b:17:bd:3c:3d:ec:07:6d: 29:5e:db:dd:d1:b4:11:5c:96:73:64:73:0d:8e:89:a2:50:9d: b7:62:a3:68:dd:a8:65:05:59:24:dc:64:38:78:4a:2a:84:dd: 51:dc:59:12:ac:24:05:a1:d6:ac:9f:6f:86:36:72:36:5e:fd: 63:25:68:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYOuduP/sK7R/k9HbWHu9uXOEYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQwMjUwRUIxRDZDODMxMjg3NTBBRDhCMjI5OUVG MTMwMDExMjAeFw0yNjA5MjIwMTE4MTNaFw0yNjA5MjMwNDI1MTNaMDMxMTAvBgNV BAMTKEU3NzUzM0Y0NzE3QTc0Qzg4NzMxQThBQTAxRDIxQkI3N0I4MzEyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq58b2ytejMPX1jo91e8CrNLim 9Xp6NU++XR2xanyz8AhuHbxw7cpWXhOCykzqxlJDTtPlFeJIKi0Audvq44vJirml 3xepGLtX+MybV/sZA6YYOsb5mkIKS9fV6p6hZ1l7G/xiwyT3c0M2pfp4bquA3DpN hPCXPESXI66y0GDcwWZW3/bpy5YG1nzUcfpD9GCKds38DTxsGVbnFaX8DfnHs7cO pHOV0DFtqprnlSLAIYfOqXiPgxEgFauIr2Hzb6KsR8QUJNMDrqgI9trVNc8Rsn8E zH2674QbyIlWRgaYTVM3DTRVrOlqQrffJbwIXQsNnjY8NDSjqohlTvlGjfQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53Uz9HF6dMiHMaiqAdIbt3uDEhIwHwYDVR0j BBgwFoAUJLNAJQ6x1sgxKHUK2LIpnvEwARIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJiY2YxZWMtOTIyZC00Y2Q3LThjYTYtNzI3MjRmNjZlNWZiLzAvMjRCMzQwMjUw RUIxRDZDODMxMjg3NTBBRDhCMjI5OUVGMTMwMDExMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNEIzNDAyNTBFQjFENkM4MzEyODc1MEFEOEIyMjk5RUYxMzAw MTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvMjRCMzQwMjUwRUIxRDZDODMxMjg3NTBBRDhCMjI5 OUVGMTMwMDExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNTFKfWm69a/j0hrpowILa0yKDX+2ARf2hP aIWoYs6vM+4zu3bGgGgYEPJKwkxPWtiUZtENOCFbJ8+4hh46ZzrYpWRPMnFiSkVE z/FWqY8r7l+WdPgbz+HUVCcCxg/JMv6AXDt1LIBF8rQI9MVR7uYHiAkEAPyq2aAM oqEv3kBg4K2ThEPHv1yPb2ZAkAw0+gQSFzuvkmbV0cD1IzjY9InvwJDvuyw5awy/ ZlEuBn84sl041YbFdkBj7rmzE4CbF708PewHbSle293RtBFclnNkcw2OiaJQnbdi o2jdqGUFWSTcZDh4SiqE3VHcWRKsJAWh1qyfb4Y2cjZe/WMlaGo= -----END CERTIFICATE-----Generated at Tue Sep 22 17:24:47 2026 by rpki-client