$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json) Hash identifier: RrRJlC83WeXE3chk5XvYSoO4/6eJh8HIVYdKlC8i5ww= Subject key identifier: 57:FE:65:7D:5D:CB:85:E0:42:20:8F:A0:B4:CD:15:78:4B:75:A3:E5 Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Certificate serial: 71644868A679C807E9D0FAD2E915EE1C66BBF9BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:31:46 +0000 Manifest this update: Mon 21 Sep 2026 12:26:46 +0000 Manifest next update: Tue 22 Sep 2026 12:38:46 +0000 Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: FQI6UC455VH4KlYTC83IcpX8hyotYZWUHNxncDun8yU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:64:48:68:a6:79:c8:07:e9:d0:fa:d2:e9:15:ee:1c:66:bb:f9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Validity Not Before: Sep 21 12:26:46 2026 GMT Not After : Sep 22 12:38:46 2026 GMT Subject: CN=57FE657D5DCB85E042208FA0B4CD15784B75A3E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:df:30:e1:09:46:cc:5e:2e:6f:d2:48:d0: b5:61:d8:f3:5b:ee:17:af:7d:cc:1b:c6:a7:99:56: 5d:10:e9:fe:8f:4e:b6:0a:74:4c:46:dd:aa:f5:85: 22:ab:ae:f0:c5:2c:06:c0:18:bd:fc:d8:e3:06:c3: 0f:8a:00:97:15:c8:fb:90:9b:bd:65:cb:09:c4:67: 17:af:05:c9:66:b3:f0:d0:ad:70:66:24:db:3e:0f: 7d:e6:2c:e5:7f:48:5d:c3:fe:d4:81:6c:72:f4:9a: 52:90:39:f4:28:c5:f2:1a:f8:9e:6e:ae:29:cf:76: 39:d9:2f:e0:fe:ee:79:8f:09:2a:e4:97:20:af:90: 95:be:00:ad:61:ad:ac:81:79:59:b5:86:7e:06:74: 2b:97:22:7d:47:b8:76:7e:31:46:08:44:be:ee:30: 2c:28:6f:71:26:b3:26:57:e6:7d:87:a9:0f:e3:e2: 67:c9:3e:37:ba:3c:4b:de:97:21:7e:bb:1e:11:d9: eb:70:6e:d6:8e:33:e0:5e:0d:ab:e1:e4:55:74:19: 6f:86:72:b2:d2:9a:15:ae:46:2f:21:a9:32:8f:16: fd:bf:e8:65:72:e8:ef:08:08:78:78:f3:1f:85:a2: 79:85:da:cc:15:01:a3:c1:92:bc:2c:85:9f:f1:1b: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:65:7D:5D:CB:85:E0:42:20:8F:A0:B4:CD:15:78:4B:75:A3:E5 X509v3 Authority Key Identifier: keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f3:9d:08:77:e9:ac:eb:e8:af:89:8c:f7:d5:ac:54:2f:97: 7e:58:21:ef:32:d1:40:33:76:d1:f6:5b:b1:06:b1:58:82:65: 42:54:bb:83:e4:a4:f3:75:23:bc:3d:c0:f2:1b:2b:6b:b7:d2: 91:6a:56:cd:92:33:dc:23:4c:45:04:d5:36:a3:ca:13:23:78: 0b:70:0a:a9:08:66:93:cb:eb:a1:0f:17:a0:64:56:b3:35:e3: 73:32:70:93:32:ae:8f:1b:1f:91:3c:2b:c6:bf:58:d8:c3:21: c7:8c:31:a3:d5:79:c2:f5:f0:72:52:ab:d7:3a:1f:07:62:a2: 06:a1:a8:7f:84:16:03:5a:fa:04:4d:cd:15:9b:42:f0:09:2c: bf:ed:03:ac:9f:61:58:c8:0f:6b:66:81:14:ed:60:85:cc:79: c0:22:05:88:f3:c9:1a:0e:b8:14:26:f5:9b:7b:df:e1:e6:bd: 71:af:a1:53:90:22:dd:7f:c7:a4:2d:62:b5:90:63:15:f6:4a: 33:f6:14:e5:7f:e2:a4:76:a0:4c:57:e4:a5:1b:32:d3:b9:e2: af:ab:db:be:d8:e8:4e:f9:e5:d2:12:e6:5b:e0:e7:a3:8a:ca: d2:db:82:63:94:76:bf:1b:8a:86:7d:e7:ab:85:06:cc:65:55: 08:a4:b7:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWRIaKZ5yAfp0PrS6RXuHGa7+bowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJCOEIw OENBMDY5NjAeFw0yNjA5MjExMjI2NDZaFw0yNjA5MjIxMjM4NDZaMDMxMTAvBgNV BAMTKDU3RkU2NTdENURDQjg1RTA0MjIwOEZBMEI0Q0QxNTc4NEI3NUEzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnat8w4QlGzF4ub9JI0LVh2PNb 7hevfcwbxqeZVl0Q6f6PTrYKdExG3ar1hSKrrvDFLAbAGL382OMGww+KAJcVyPuQ m71lywnEZxevBclms/DQrXBmJNs+D33mLOV/SF3D/tSBbHL0mlKQOfQoxfIa+J5u rinPdjnZL+D+7nmPCSrklyCvkJW+AK1hrayBeVm1hn4GdCuXIn1HuHZ+MUYIRL7u MCwob3EmsyZX5n2HqQ/j4mfJPje6PEvelyF+ux4R2etwbtaOM+BeDavh5FV0GW+G crLSmhWuRi8hqTKPFv2/6GVy6O8ICHh48x+FonmF2swVAaPBkrwshZ/xGxuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV/5lfV3LheBCII+gtM0VeEt1o+UwHwYDVR0j BBgwFoAUAkrwW2R28CJt7o6H5967iwjKBpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdkNTBmMjctN2U4OC00NzE4LTgzZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2 NDc2RjAyMjZERUU4RTg3RTdERUJCOEIwOENBMDY5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjRBRjA1QjY0NzZGMDIyNkRFRThFODdFN0RFQkI4QjA4Q0Ew Njk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJC OEIwOENBMDY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7znQh36azr6K+JjPfVrFQvl35YIe8y0UAz dtH2W7EGsViCZUJUu4PkpPN1I7w9wPIbK2u30pFqVs2SM9wjTEUE1TajyhMjeAtw CqkIZpPL66EPF6BkVrM143MycJMyro8bH5E8K8a/WNjDIceMMaPVecL18HJSq9c6 HwdiogahqH+EFgNa+gRNzRWbQvAJLL/tA6yfYVjID2tmgRTtYIXMecAiBYjzyRoO uBQm9Zt73+HmvXGvoVOQIt1/x6QtYrWQYxX2SjP2FOV/4qR2oExX5KUbMtO54q+r 277Y6E755dIS5lvg56OKytLbgmOUdr8bioZ956uFBsxlVQikt2Q= -----END CERTIFICATE-----Generated at Tue Sep 22 02:51:37 2026 by rpki-client