$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft (raw, json) Hash identifier: mfFlvy8Nk3XLeFQGe5hhsI/c74qsBwkcxzlKy8TYqcA= Subject key identifier: E5:87:8D:05:15:6B:80:43:8C:46:48:A5:89:77:B9:2B:7D:E4:F4:29 Authority key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Certificate issuer: /CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Certificate serial: 0AA6FB94D9F3FE1FDC3C6A880ECA2699424038DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:20:47 +0000 Manifest this update: Mon 21 Sep 2026 07:15:47 +0000 Manifest next update: Tue 22 Sep 2026 09:26:47 +0000 Files and hashes: 1: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl (hash: IhM9fJSak2lJXkwDBypzr8NfhbITyHjpLRW8aj8E20s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 06:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a6:fb:94:d9:f3:fe:1f:dc:3c:6a:88:0e:ca:26:99:42:40:38:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Validity Not Before: Sep 21 07:15:47 2026 GMT Not After : Sep 22 09:26:47 2026 GMT Subject: CN=E5878D05156B80438C4648A58977B92B7DE4F429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:9c:bf:ad:d3:b3:26:df:0a:b1:7a:03:79: 49:ec:98:34:9b:3f:32:03:2a:ef:df:3d:7f:cc:e4: 54:9c:dc:dd:a1:a6:3f:5a:fa:45:08:68:46:15:7f: 25:17:99:dc:79:ec:9b:80:41:01:83:24:66:cf:3d: 1e:89:15:42:81:2a:3b:99:87:3f:5e:f8:b3:fb:53: 4a:b3:07:f3:aa:44:a9:19:f6:38:75:82:da:12:81: 6a:da:76:f8:3b:6b:63:74:63:31:45:aa:55:0e:c6: 37:8a:62:8c:4d:6a:aa:85:c7:1f:e0:3f:19:db:d8: fe:89:2e:cf:b0:e1:54:60:bc:6d:cc:42:05:ed:bd: b3:85:6a:b5:25:c2:8e:c8:b7:6f:98:00:ec:14:be: 17:f2:1b:73:af:69:39:11:c0:21:ff:36:1b:bf:de: e8:ed:37:34:c1:a5:d0:16:d9:be:79:f0:d5:14:9c: 78:12:7e:d3:f8:3e:a1:ee:6a:31:cb:ab:94:56:52: de:be:6e:61:ca:26:82:77:5f:96:2f:8f:86:80:9e: 5d:00:bb:d1:f3:f3:a5:45:7b:f1:18:03:e2:be:d2: 40:83:1f:e8:70:37:fd:e9:2d:4f:d8:71:e4:03:a9: 5b:51:11:db:21:c8:d9:ed:63:49:76:48:43:9a:2a: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:87:8D:05:15:6B:80:43:8C:46:48:A5:89:77:B9:2B:7D:E4:F4:29 X509v3 Authority Key Identifier: keyid:02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:ae:6f:6c:e0:4f:43:0b:e9:51:75:21:13:2c:f0:8d:53: 70:38:c3:33:1b:fc:7a:f7:0b:fd:80:f9:87:0b:7d:15:47:84: 78:86:83:2c:0e:3b:51:c7:a8:e8:1d:53:34:ac:d2:42:48:ba: ef:97:1c:93:94:c5:1e:c5:70:d8:5e:99:b1:a0:4f:7c:64:86: b8:98:3d:9c:ab:49:3e:1c:81:58:d3:90:84:01:55:b2:84:46: 5a:48:b0:6d:c5:06:d8:63:0d:46:6f:8c:e3:3f:bc:63:86:13: 05:cd:a3:3b:d1:2b:6c:d5:d3:4d:c8:30:a2:cf:83:f7:8f:6c: fa:68:76:bb:d1:d7:5f:f4:9d:1c:be:5e:7b:a5:6d:b2:9d:6d: 67:35:33:1d:0e:e5:f6:c8:c5:64:9d:a0:19:03:df:f8:71:a2: 4d:4d:c2:d5:ac:e5:dd:f3:2f:2d:db:c2:f3:f8:e7:d4:73:37: 06:f4:69:49:57:2d:42:65:9a:46:5a:de:93:4d:2b:e1:27:d7: aa:5a:a5:66:0e:a3:3f:b6:20:c4:e8:57:8b:bc:58:88:f7:47: ed:4b:d9:ca:7f:ef:2b:e9:45:11:51:dd:ab:45:53:53:5f:17: 58:2c:15:45:a4:e8:51:fb:ce:6f:10:cd:55:b7:bd:fb:4f:03: 64:4c:e4:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqb7lNnz/h/cPGqIDsommUJAONwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYy QjA2QzhGMDAeFw0yNjA5MjEwNzE1NDdaFw0yNjA5MjIwOTI2NDdaMDMxMTAvBgNV BAMTKEU1ODc4RDA1MTU2QjgwNDM4QzQ2NDhBNTg5NzdCOTJCN0RFNEY0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwpy/rdOzJt8KsXoDeUnsmDSb PzIDKu/fPX/M5FSc3N2hpj9a+kUIaEYVfyUXmdx57JuAQQGDJGbPPR6JFUKBKjuZ hz9e+LP7U0qzB/OqRKkZ9jh1gtoSgWradvg7a2N0YzFFqlUOxjeKYoxNaqqFxx/g Pxnb2P6JLs+w4VRgvG3MQgXtvbOFarUlwo7It2+YAOwUvhfyG3OvaTkRwCH/Nhu/ 3ujtNzTBpdAW2b558NUUnHgSftP4PqHuajHLq5RWUt6+bmHKJoJ3X5Yvj4aAnl0A u9Hz86VFe/EYA+K+0kCDH+hwN/3pLU/YceQDqVtREdshyNntY0l2SEOaKsE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5YeNBRVrgEOMRkiliXe5K33k9CkwHwYDVR0j BBgwFoAUAktrdAe5e3ZX3VKnNusxxisGyPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQw N0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYyQjA2QzhGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wMjRCNkI3NDA3Qjk3Qjc2NTdERDUyQTczNkVCMzFDNjJCMDZD OEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMx QzYyQjA2QzhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDRrm9s4E9DC+lRdSETLPCNU3A4wzMb/Hr3 C/2A+YcLfRVHhHiGgywOO1HHqOgdUzSs0kJIuu+XHJOUxR7FcNhembGgT3xkhriY PZyrST4cgVjTkIQBVbKERlpIsG3FBthjDUZvjOM/vGOGEwXNozvRK2zV003IMKLP g/ePbPpodrvR11/0nRy+XnulbbKdbWc1Mx0O5fbIxWSdoBkD3/hxok1NwtWs5d3z Ly3bwvP459RzNwb0aUlXLUJlmkZa3pNNK+En16papWYOoz+2IMToV4u8WIj3R+1L 2cp/7yvpRRFR3atFU1NfF1gsFUWk6FH7zm8QzVW3vftPA2RM5GM= -----END CERTIFICATE-----Generated at Mon Sep 21 16:22:52 2026 by rpki-client