$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json) Hash identifier: Zzu6IwD/4gLFkcFcOw/+oGVT9CaNFRs1Iz4Be/LAvzc= Subject key identifier: 5E:93:DC:32:F5:00:D6:DF:47:C7:70:2E:0B:47:CD:F7:01:86:04:D8 Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Certificate serial: 0ACE17FB8EF7220431AEE220F38EC1DF2D608BBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft Manifest number: 73 Signing time: Tue 28 Jul 2026 12:52:30 +0000 Manifest this update: Tue 28 Jul 2026 12:47:30 +0000 Manifest next update: Wed 29 Jul 2026 13:01:30 +0000 Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: FVfRlWjM5DQW7471obPUkXYNiqp2wG7BcpsJWxXDOsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ce:17:fb:8e:f7:22:04:31:ae:e2:20:f3:8e:c1:df:2d:60:8b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Validity Not Before: Jul 28 12:47:30 2026 GMT Not After : Jul 29 13:01:30 2026 GMT Subject: CN=5E93DC32F500D6DF47C7702E0B47CDF7018604D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:09:0b:84:96:96:6b:b1:25:51:d1:ad:56: 61:ef:d0:74:c0:c8:31:f2:d5:87:02:61:90:f1:7c: 5f:9c:e8:05:59:82:a6:63:c6:1f:67:77:7e:b8:93: 78:e1:18:21:f1:93:5a:06:72:d7:15:da:1a:63:3d: ba:f9:65:c9:a5:d9:87:90:d9:91:80:2c:45:97:e4: 80:cf:8c:5b:5d:aa:e6:b2:4a:65:9d:3f:7b:c9:c1: d4:db:c1:8a:7c:20:48:71:b6:cf:55:af:e5:16:f4: cf:52:2f:0d:80:73:15:03:84:7b:f2:a1:60:98:52: 0a:78:9d:58:ea:5d:60:12:25:f7:c3:df:8d:56:ff: 34:74:b4:3e:42:4a:6e:dd:e4:e1:b1:7b:63:d0:45: 68:14:14:81:e1:53:0e:a7:34:f3:a5:ab:ad:d8:a3: d1:3f:6e:11:68:39:55:1d:b8:35:a7:13:03:0e:82: b7:ea:0b:6d:6c:b0:f4:b9:1b:03:f6:e8:ad:fb:74: ce:e3:f5:b6:69:98:2b:a4:56:c3:35:d4:c8:46:a6: ad:b5:5d:7b:f6:56:a0:ad:8e:e4:bb:72:d0:59:70: 3f:2c:19:56:29:2f:99:39:a8:34:d7:f2:ec:a9:fa: 66:91:6d:49:fb:81:87:38:42:a2:dc:de:0d:70:f2: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:93:DC:32:F5:00:D6:DF:47:C7:70:2E:0B:47:CD:F7:01:86:04:D8 X509v3 Authority Key Identifier: keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d9:22:4d:6f:67:bb:e0:c5:da:29:37:e3:ae:52:c4:17:19: 62:38:8e:85:f3:36:64:39:37:1a:38:15:df:53:74:64:8a:3e: 12:06:3d:59:64:95:f4:a1:2d:0a:9a:2a:32:50:87:a3:19:a3: a4:b9:d9:da:d5:2b:fc:12:12:3e:74:64:17:d5:f3:a8:eb:1d: ae:65:0b:02:c2:fe:aa:a2:d0:fd:a9:63:be:5c:53:70:24:5c: 89:f2:9b:0f:3b:e5:80:5c:87:f3:d8:42:df:98:9b:9d:20:19: 44:1f:1c:1f:9a:06:ff:02:f8:a8:94:ae:57:03:47:71:29:3d: 34:31:33:55:a5:d8:88:85:e0:d2:22:12:16:4c:2e:20:93:44: e2:31:fc:3d:75:b4:a6:a7:df:6d:92:b3:d4:f6:9d:7d:b3:e6: b8:9d:a4:5b:5c:b0:b6:18:e2:46:83:1b:5d:29:09:aa:c2:c0: 1d:59:61:0d:62:20:3e:2c:cd:bd:bf:1d:58:b3:af:79:8a:f9: fc:09:a3:08:58:d6:c7:30:a2:5a:23:5d:a2:4d:be:ae:1f:b2: b4:a5:8a:78:64:53:42:a3:0b:5e:f3:42:af:f7:e9:af:53:d9: e4:cf:17:33:51:ca:45:42:67:21:36:1e:a1:e1:3e:9e:72:9f: 13:5f:6b:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCs4X+473IgQxruIg847B3y1gi7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJCOEIw OENBMDY5NjAeFw0yNjA3MjgxMjQ3MzBaFw0yNjA3MjkxMzAxMzBaMDMxMTAvBgNV BAMTKDVFOTNEQzMyRjUwMEQ2REY0N0M3NzAyRTBCNDdDREY3MDE4NjA0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkQkLhJaWa7ElUdGtVmHv0HTA yDHy1YcCYZDxfF+c6AVZgqZjxh9nd364k3jhGCHxk1oGctcV2hpjPbr5Zcml2YeQ 2ZGALEWX5IDPjFtdquaySmWdP3vJwdTbwYp8IEhxts9Vr+UW9M9SLw2AcxUDhHvy oWCYUgp4nVjqXWASJffD341W/zR0tD5CSm7d5OGxe2PQRWgUFIHhUw6nNPOlq63Y o9E/bhFoOVUduDWnEwMOgrfqC21ssPS5GwP26K37dM7j9bZpmCukVsM11MhGpq21 XXv2VqCtjuS7ctBZcD8sGVYpL5k5qDTX8uyp+maRbUn7gYc4QqLc3g1w8qb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXpPcMvUA1t9Hx3AuC0fN9wGGBNgwHwYDVR0j BBgwFoAUAkrwW2R28CJt7o6H5967iwjKBpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdkNTBmMjctN2U4OC00NzE4LTgzZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2 NDc2RjAyMjZERUU4RTg3RTdERUJCOEIwOENBMDY5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjRBRjA1QjY0NzZGMDIyNkRFRThFODdFN0RFQkI4QjA4Q0Ew Njk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJC OEIwOENBMDY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLZIk1vZ7vgxdopN+OuUsQXGWI4joXzNmQ5 Nxo4Fd9TdGSKPhIGPVlklfShLQqaKjJQh6MZo6S52drVK/wSEj50ZBfV86jrHa5l CwLC/qqi0P2pY75cU3AkXInymw875YBch/PYQt+Ym50gGUQfHB+aBv8C+KiUrlcD R3EpPTQxM1Wl2IiF4NIiEhZMLiCTROIx/D11tKan322Ss9T2nX2z5ridpFtcsLYY 4kaDG10pCarCwB1ZYQ1iID4szb2/HVizr3mK+fwJowhY1scwolojXaJNvq4fsrSl inhkU0KjC17zQq/36a9T2eTPFzNRykVCZyE2HqHhPp5ynxNfa9s= -----END CERTIFICATE-----Generated at Tue Jul 28 23:33:28 2026 by rpki-client