$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft File: 024857CCDFA5066CE266529DD14709446E2D5817.mft (raw, json) Hash identifier: 6V0O2m07hFISZJE4euXSjaGGZudQTuNPJ247gbXqO/8= Subject key identifier: 79:8E:0A:69:46:83:74:6A:A2:75:0B:36:E1:72:75:B0:7E:E5:A6:35 Authority key identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 Certificate issuer: /CN=024857CCDFA5066CE266529DD14709446E2D5817 Certificate serial: 09B207F94248F5334DFC84EB8D9A25A64780506A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 11:04:11 +0000 Manifest this update: Fri 25 Sep 2026 10:59:11 +0000 Manifest next update: Sat 26 Sep 2026 14:02:11 +0000 Files and hashes: 1: 024857CCDFA5066CE266529DD14709446E2D5817.crl (hash: N4g1/tIt/bixBq2XrzVhFAe36kE1X//ObKqiIhJ72PQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b2:07:f9:42:48:f5:33:4d:fc:84:eb:8d:9a:25:a6:47:80:50:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024857CCDFA5066CE266529DD14709446E2D5817 Validity Not Before: Sep 25 10:59:11 2026 GMT Not After : Sep 26 14:02:11 2026 GMT Subject: CN=798E0A694683746AA2750B36E17275B07EE5A635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:40:11:72:09:30:77:76:22:4d:67:44:4c: 13:da:29:86:f8:6a:50:22:64:c2:85:82:01:45:dd: 88:95:25:31:e2:0c:34:6b:0b:da:54:a7:f7:e4:83: 68:25:15:57:9f:93:31:ba:72:60:6d:cd:33:86:a3: d9:89:78:53:13:a5:5a:e1:8d:4b:14:a0:ad:b7:b5: 55:1d:8b:4a:02:ea:df:52:f1:f9:80:b0:5c:d1:54: 3c:64:cf:57:57:b3:a0:b6:36:6e:9a:46:e5:d6:89: df:f4:9d:6f:e4:04:06:b7:15:fd:b8:22:b7:be:a4: 5b:38:4d:e8:cc:94:07:5f:df:bc:8d:8a:c3:8b:f6: 45:12:91:76:1d:4b:df:8f:b3:34:1d:4e:b2:2a:b7: f5:e2:c7:14:43:14:00:98:cd:7f:e5:b4:48:ad:c5: 92:60:0b:cd:db:eb:89:ba:80:fe:08:d5:bc:62:6a: c1:08:55:5f:27:6f:79:3e:cd:8d:c5:29:6d:ab:5e: 0a:e2:ed:1a:78:37:4b:46:a1:44:62:61:31:9f:84: 05:c7:59:34:cb:be:95:3f:63:e3:2b:55:c1:4f:6b: c5:ff:c9:f0:2f:47:ea:e1:80:32:75:f5:39:6d:a1: f7:d7:ae:c1:4d:bd:44:23:41:72:f3:06:cc:94:47: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8E:0A:69:46:83:74:6A:A2:75:0B:36:E1:72:75:B0:7E:E5:A6:35 X509v3 Authority Key Identifier: keyid:02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6c:d4:2d:b5:5c:2b:76:47:b7:81:b9:07:d9:81:dd:d2:a1: ae:81:34:a7:8c:40:50:1d:d9:f8:64:4e:79:6a:37:a9:f3:cc: cd:e7:3b:29:3d:8d:b7:37:17:c2:03:ac:67:a0:64:80:6e:b8: cd:b1:8a:2e:f3:2a:31:9b:5d:a6:21:c9:ec:43:0e:b3:5a:c5: 54:be:f0:97:75:5a:a8:04:8c:de:02:75:83:83:27:cc:81:e7: 83:a0:9f:31:38:b7:92:59:e8:2b:7a:e1:f8:a4:78:8f:f9:13: 49:ab:55:83:b9:a3:d6:37:ee:df:73:37:2e:a3:92:6d:6e:e4: bf:4f:6d:34:12:d4:54:88:6d:27:49:1e:c0:17:da:13:60:f0: 3b:81:27:0f:ed:74:93:1e:c6:88:a2:51:68:4a:95:aa:f5:28: b0:8d:04:c6:35:4a:e2:1f:3e:24:27:1f:12:34:09:1c:69:4f: f9:e2:4b:65:24:14:9f:67:df:32:8c:e9:0b:1d:70:ff:9c:05: 58:83:bb:1f:a6:0f:ea:bc:0e:60:d3:d3:78:64:c6:62:53:0d: 68:3b:ae:eb:91:e1:5c:51:b9:a1:84:d4:7b:fb:13:9d:1a:ea: 63:9f:b5:7a:11:42:9d:63:34:39:67:cf:57:33:7b:2d:15:a9: 03:88:65:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbIH+UJI9TNN/ITrjZolpkeAUGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2 RTJENTgxNzAeFw0yNjA5MjUxMDU5MTFaFw0yNjA5MjYxNDAyMTFaMDMxMTAvBgNV BAMTKDc5OEUwQTY5NDY4Mzc0NkFBMjc1MEIzNkUxNzI3NUIwN0VFNUE2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATUARcgkwd3YiTWdETBPaKYb4 alAiZMKFggFF3YiVJTHiDDRrC9pUp/fkg2glFVefkzG6cmBtzTOGo9mJeFMTpVrh jUsUoK23tVUdi0oC6t9S8fmAsFzRVDxkz1dXs6C2Nm6aRuXWid/0nW/kBAa3Ff24 Ire+pFs4TejMlAdf37yNisOL9kUSkXYdS9+PszQdTrIqt/XixxRDFACYzX/ltEit xZJgC83b64m6gP4I1bxiasEIVV8nb3k+zY3FKW2rXgri7Rp4N0tGoURiYTGfhAXH WTTLvpU/Y+MrVcFPa8X/yfAvR+rhgDJ19TltoffXrsFNvUQjQXLzBsyUR8ifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeY4KaUaDdGqidQs24XJ1sH7lpjUwHwYDVR0j BBgwFoAUAkhXzN+lBmziZlKd0UcJRG4tWBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5MzAyY2UtMTdlOS00MDM5LWIzZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NE RkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2RTJENTgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjQ4NTdDQ0RGQTUwNjZDRTI2NjUyOUREMTQ3MDk0NDZFMkQ1 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5 NDQ2RTJENTgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9s1C21XCt2R7eBuQfZgd3Soa6BNKeMQFAd 2fhkTnlqN6nzzM3nOyk9jbc3F8IDrGegZIBuuM2xii7zKjGbXaYhyexDDrNaxVS+ 8Jd1WqgEjN4CdYODJ8yB54OgnzE4t5JZ6Ct64fikeI/5E0mrVYO5o9Y37t9zNy6j km1u5L9PbTQS1FSIbSdJHsAX2hNg8DuBJw/tdJMexoiiUWhKlar1KLCNBMY1SuIf PiQnHxI0CRxpT/niS2UkFJ9n3zKM6QsdcP+cBViDux+mD+q8DmDT03hkxmJTDWg7 ruuR4VxRuaGE1Hv7E50a6mOftXoRQp1jNDlnz1czey0VqQOIZbU= -----END CERTIFICATE-----Generated at Fri Sep 25 22:20:37 2026 by rpki-client