$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft (raw, json) Hash identifier: 4EuhBvPGK1+Bzy/MnNgWr6rbWGvRYgmbouk7U45JUew= Subject key identifier: DE:B7:75:C8:AB:6D:25:37:32:4F:5A:AB:72:9F:BF:11:F4:FF:34:47 Authority key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Certificate issuer: /CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Certificate serial: 6E59ABE3B7897A730AA60A95D400C1AAE9A0D57E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:50:44 +0000 Manifest this update: Tue 16 Jun 2026 21:45:44 +0000 Manifest next update: Wed 17 Jun 2026 21:57:44 +0000 Files and hashes: 1: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl (hash: NFDn+4SUcDK0uRCHPmYddG73C+ZxeUbvDu/02iR9X8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:59:ab:e3:b7:89:7a:73:0a:a6:0a:95:d4:00:c1:aa:e9:a0:d5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Validity Not Before: Jun 16 21:45:44 2026 GMT Not After : Jun 17 21:57:44 2026 GMT Subject: CN=DEB775C8AB6D2537324F5AAB729FBF11F4FF3447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:0f:2f:d9:21:ed:02:59:df:1f:f1:ae:09: 0d:37:18:dd:48:0d:c9:9f:d5:dd:aa:3c:ca:65:7b: cb:f5:99:11:b4:7a:8e:3a:1c:cd:04:2b:b0:47:90: ed:8e:21:e9:38:8b:87:0b:88:20:5b:cc:8f:40:f8: 49:92:2e:59:69:c3:b4:4a:33:c3:9c:e8:c7:f2:c5: e2:17:56:03:2c:7d:1c:0f:6e:1f:e6:4f:2e:27:ef: a0:b3:47:04:a9:24:ba:16:e0:b8:f7:b8:68:33:7d: 4d:b2:28:46:ad:7a:13:80:a7:b2:1f:be:90:cb:cd: e7:73:10:b7:e6:ba:6d:70:44:0c:ca:a8:4f:79:90: 93:0c:58:96:85:19:96:a7:0a:3e:9c:bb:ce:1b:0d: 17:cd:73:93:b8:df:77:a1:3a:8b:63:0d:e3:ba:8d: db:f4:e9:9d:f5:54:2b:ed:19:9b:1d:e9:2d:68:98: c7:1f:43:b3:dd:a1:5c:a6:db:ee:58:18:ec:c3:59: a0:e1:8a:f2:d6:85:e8:9d:03:a0:fc:31:15:bd:fa: 3c:25:10:61:5a:3c:28:30:10:24:f3:25:59:84:eb: 99:b1:75:7f:6e:fc:27:c6:7a:0c:25:36:a1:2d:ba: 06:30:72:61:d6:cf:4e:38:3a:91:a4:12:ab:66:20: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B7:75:C8:AB:6D:25:37:32:4F:5A:AB:72:9F:BF:11:F4:FF:34:47 X509v3 Authority Key Identifier: keyid:02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:df:7a:09:ed:1e:13:66:1d:3f:e7:eb:76:be:99:3c:72:65: 92:0f:85:d6:75:b1:d4:75:52:22:38:a8:d3:bf:cb:bd:bc:67: d4:dd:f4:be:86:20:fd:da:47:61:2c:99:26:70:3a:4e:61:c2: 43:a9:f9:b1:59:6d:06:f6:96:e1:cb:01:82:01:df:d0:60:07: 5b:36:9a:bd:4f:f2:ee:00:b5:d1:24:09:79:38:5b:f7:16:bb: 26:a1:5b:8e:f8:34:da:b8:d4:94:43:ef:c6:44:1c:7a:48:6c: 86:d9:8e:38:dc:10:27:08:87:76:f6:48:25:d8:ba:8f:8b:cc: 10:e6:ca:f2:c4:ab:c7:85:93:97:be:3f:c4:24:79:cc:d2:a9: ea:9a:d6:56:d3:6f:18:58:d4:ec:39:ce:80:ed:98:91:24:96: ff:eb:83:73:66:00:59:04:c6:3b:64:30:6d:86:20:17:75:fb: 33:f8:0b:0c:cf:69:90:4b:69:79:ec:1a:ac:b1:10:24:89:9e: 08:27:e7:f5:ca:65:33:12:ff:50:2d:2c:d4:a7:b5:a4:80:6b: 5e:c5:e4:dd:09:20:a5:37:ef:64:8e:e3:cf:40:73:5e:28:b3: 18:11:76:53:69:fe:58:4c:e6:16:a1:44:71:fc:6d:8e:d1:14: 36:2f:74:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUblmr47eJenMKpgqV1ADBqumg1X4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYy QjA2QzhGMDAeFw0yNjA2MTYyMTQ1NDRaFw0yNjA2MTcyMTU3NDRaMDMxMTAvBgNV BAMTKERFQjc3NUM4QUI2RDI1MzczMjRGNUFBQjcyOUZCRjExRjRGRjM0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcg8v2SHtAlnfH/GuCQ03GN1I Dcmf1d2qPMple8v1mRG0eo46HM0EK7BHkO2OIek4i4cLiCBbzI9A+EmSLllpw7RK M8Oc6MfyxeIXVgMsfRwPbh/mTy4n76CzRwSpJLoW4Lj3uGgzfU2yKEatehOAp7If vpDLzedzELfmum1wRAzKqE95kJMMWJaFGZanCj6cu84bDRfNc5O433ehOotjDeO6 jdv06Z31VCvtGZsd6S1omMcfQ7PdoVym2+5YGOzDWaDhivLWheidA6D8MRW9+jwl EGFaPCgwECTzJVmE65mxdX9u/CfGegwlNqEtugYwcmHWz044OpGkEqtmIKqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rd1yKttJTcyT1qrcp+/EfT/NEcwHwYDVR0j BBgwFoAUAktrdAe5e3ZX3VKnNusxxisGyPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQw N0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYyQjA2QzhGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wMjRCNkI3NDA3Qjk3Qjc2NTdERDUyQTczNkVCMzFDNjJCMDZD OEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMx QzYyQjA2QzhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/fegntHhNmHT/n63a+mTxyZZIPhdZ1sdR1 UiI4qNO/y728Z9Td9L6GIP3aR2EsmSZwOk5hwkOp+bFZbQb2luHLAYIB39BgB1s2 mr1P8u4AtdEkCXk4W/cWuyahW474NNq41JRD78ZEHHpIbIbZjjjcECcIh3b2SCXY uo+LzBDmyvLEq8eFk5e+P8QkeczSqeqa1lbTbxhY1Ow5zoDtmJEklv/rg3NmAFkE xjtkMG2GIBd1+zP4CwzPaZBLaXnsGqyxECSJnggn5/XKZTMS/1AtLNSntaSAa17F 5N0JIKU372SO489Ac14osxgRdlNp/lhM5hahRHH8bY7RFDYvdI0= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:47 2026 by rpki-client