$ rpki-client -vvf rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft File: 24B340250EB1D6C83128750AD8B2299EF1300112.mft (raw, json) Hash identifier: Y8iNrBOkMjgetV/5JOD4zgfeP0DFZJYT2VRnSJD38xY= Subject key identifier: E1:98:25:E4:CD:5D:41:00:DC:A5:FD:D5:64:34:4A:30:67:4B:68:0D Authority key identifier: 24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12 Certificate issuer: /CN=24B340250EB1D6C83128750AD8B2299EF1300112 Certificate serial: 0854D3319B4848B553169AE46673137574A5F5B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 23:27:28 +0000 Manifest this update: Tue 16 Jun 2026 23:22:28 +0000 Manifest next update: Thu 18 Jun 2026 03:16:28 +0000 Files and hashes: 1: 24B340250EB1D6C83128750AD8B2299EF1300112.crl (hash: S8PY1RpcyHL29XSwYEqC0X1Sf2rfsYIv7VKOa55MIAQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:54:d3:31:9b:48:48:b5:53:16:9a:e4:66:73:13:75:74:a5:f5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B340250EB1D6C83128750AD8B2299EF1300112 Validity Not Before: Jun 16 23:22:28 2026 GMT Not After : Jun 18 03:16:28 2026 GMT Subject: CN=E19825E4CD5D4100DCA5FDD564344A30674B680D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:dd:6f:89:da:49:94:a1:70:11:00:a0:a6: fe:e6:6c:5f:70:d5:bb:e6:c9:9e:51:7c:53:4e:fa: 54:b4:e6:88:b7:83:c7:61:dc:1a:13:db:84:d8:af: a3:12:09:72:2f:78:74:3b:2c:d2:bf:50:cf:b3:b8: 08:01:78:e6:0a:b2:05:f0:68:3d:e2:dc:38:da:18: bf:e0:9c:33:7e:a1:b7:1e:8d:e1:42:47:24:f1:b2: df:c2:d4:01:0f:98:dc:fb:a5:23:4d:fd:f8:fc:33: c6:01:a3:5f:9f:21:43:9c:80:5f:27:34:e8:c0:46: 95:02:9d:68:b5:da:28:fb:60:c3:05:a0:45:af:a2: 14:42:92:95:8b:6c:17:4f:60:6a:27:90:d1:3d:52: d3:ab:ea:61:ea:0e:ec:5e:82:77:1b:18:ec:39:66: 58:3c:43:3a:03:60:de:1d:dc:ee:89:d4:4a:14:6d: 58:ff:35:3a:f3:e0:01:2b:e0:2c:c5:73:79:fa:33: 84:ad:0e:4d:40:3e:ef:fb:59:a4:fe:0f:99:33:17: 38:37:b7:2c:7b:82:91:83:a9:07:fc:b7:c5:26:13: a0:c5:70:b5:c9:91:2e:8e:cc:dc:15:46:6d:fa:20: 26:28:0e:86:c4:8e:95:ac:43:ac:78:90:46:da:f5: ff:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:98:25:E4:CD:5D:41:00:DC:A5:FD:D5:64:34:4A:30:67:4B:68:0D X509v3 Authority Key Identifier: keyid:24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b6:8b:a0:c0:6d:b1:13:94:d9:26:74:ac:a7:1c:db:b4:a7: 0f:a8:4f:ba:dc:54:3a:92:eb:76:0e:b7:85:a0:59:d1:cc:20: 61:38:52:4c:96:be:ef:cf:94:2d:b2:7d:81:5f:31:0c:3f:b1: 71:c3:04:35:1a:15:f8:64:c3:2e:c4:83:20:60:eb:e5:4a:49: ab:8f:ea:14:0b:27:ed:c7:72:64:da:23:5f:02:42:c2:ef:63: 7c:67:45:9d:8a:4b:23:3b:34:1e:99:6c:de:59:22:9a:6f:ae: fb:38:82:f6:09:8b:33:0b:de:12:3f:b4:a7:b6:be:f6:e3:cf: 51:15:51:69:2c:9f:26:5b:cb:55:26:99:cd:94:62:fa:1b:a9: 24:b3:18:0d:d5:7c:75:30:5e:e3:2a:32:74:15:43:2c:dc:38: 2f:d1:05:88:e8:d1:e7:2e:6c:f1:6d:93:12:5b:ac:ef:48:68: 63:a8:9a:44:0c:e8:94:53:f8:01:11:d2:ed:08:0a:45:15:34: 03:e8:35:35:0b:d7:fa:bf:a8:b4:b3:4c:ea:20:f7:93:4d:ff: 8c:3b:e0:5a:fb:b6:96:5d:15:5e:3e:55:57:d8:19:1e:30:44: dd:d3:8e:89:d4:03:3d:38:61:46:2f:36:6c:06:24:e8:66:6c: fe:43:03:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFTTMZtISLVTFprkZnMTdXSl9bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQwMjUwRUIxRDZDODMxMjg3NTBBRDhCMjI5OUVG MTMwMDExMjAeFw0yNjA2MTYyMzIyMjhaFw0yNjA2MTgwMzE2MjhaMDMxMTAvBgNV BAMTKEUxOTgyNUU0Q0Q1RDQxMDBEQ0E1RkRENTY0MzQ0QTMwNjc0QjY4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BN1vidpJlKFwEQCgpv7mbF9w 1bvmyZ5RfFNO+lS05oi3g8dh3BoT24TYr6MSCXIveHQ7LNK/UM+zuAgBeOYKsgXw aD3i3DjaGL/gnDN+obcejeFCRyTxst/C1AEPmNz7pSNN/fj8M8YBo1+fIUOcgF8n NOjARpUCnWi12ij7YMMFoEWvohRCkpWLbBdPYGonkNE9UtOr6mHqDuxegncbGOw5 Zlg8QzoDYN4d3O6J1EoUbVj/NTrz4AEr4CzFc3n6M4StDk1APu/7WaT+D5kzFzg3 tyx7gpGDqQf8t8UmE6DFcLXJkS6OzNwVRm36ICYoDobEjpWsQ6x4kEba9f/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Zgl5M1dQQDcpf3VZDRKMGdLaA0wHwYDVR0j BBgwFoAUJLNAJQ6x1sgxKHUK2LIpnvEwARIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJiY2YxZWMtOTIyZC00Y2Q3LThjYTYtNzI3MjRmNjZlNWZiLzAvMjRCMzQwMjUw RUIxRDZDODMxMjg3NTBBRDhCMjI5OUVGMTMwMDExMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNEIzNDAyNTBFQjFENkM4MzEyODc1MEFEOEIyMjk5RUYxMzAw MTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvMjRCMzQwMjUwRUIxRDZDODMxMjg3NTBBRDhCMjI5 OUVGMTMwMDExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG2i6DAbbETlNkmdKynHNu0pw+oT7rcVDqS 63YOt4WgWdHMIGE4UkyWvu/PlC2yfYFfMQw/sXHDBDUaFfhkwy7EgyBg6+VKSauP 6hQLJ+3HcmTaI18CQsLvY3xnRZ2KSyM7NB6ZbN5ZIppvrvs4gvYJizML3hI/tKe2 vvbjz1EVUWksnyZby1Ummc2UYvobqSSzGA3VfHUwXuMqMnQVQyzcOC/RBYjo0ecu bPFtkxJbrO9IaGOomkQM6JRT+AER0u0ICkUVNAPoNTUL1/q/qLSzTOog95NN/4w7 4Fr7tpZdFV4+VVfYGR4wRN3TjonUAz04YUYvNmwGJOhmbP5DA2Y= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:35 2026 by rpki-client