$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft File: 024857CCDFA5066CE266529DD14709446E2D5817.mft (raw, json) Hash identifier: dmekb8zmYf+VDlHvYvZ55ySlP1etmnzrAHJfn5bXGi8= Subject key identifier: 0D:E0:33:03:0E:9A:84:10:13:27:E2:1A:D0:34:F1:B4:D0:E8:03:42 Authority key identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 Certificate issuer: /CN=024857CCDFA5066CE266529DD14709446E2D5817 Certificate serial: 09278E751D2B7959A5F5C783E4C352F1A5ED384E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:06:50 +0000 Manifest this update: Tue 12 May 2026 17:01:50 +0000 Manifest next update: Wed 13 May 2026 18:36:50 +0000 Files and hashes: 1: 024857CCDFA5066CE266529DD14709446E2D5817.crl (hash: +82IkHcpBOeDrCCs+GirsBOZPFyUWAoeBw0kz2tav2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:27:8e:75:1d:2b:79:59:a5:f5:c7:83:e4:c3:52:f1:a5:ed:38:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024857CCDFA5066CE266529DD14709446E2D5817 Validity Not Before: May 12 17:01:50 2026 GMT Not After : May 13 18:36:50 2026 GMT Subject: CN=0DE033030E9A84101327E21AD034F1B4D0E80342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:e9:50:68:63:7d:39:5a:65:e8:00:24:c4: 84:ba:03:26:84:87:f9:da:ad:cb:2a:2f:92:26:e1: 82:ac:b6:55:55:9b:79:5e:5f:8e:77:5c:52:0f:d1: 6e:08:85:a0:95:1c:98:16:ad:12:fb:b6:19:9e:c4: 5e:94:7d:e2:09:2c:32:d8:67:8a:02:6f:df:d0:b4: 83:2c:0d:7e:bd:72:48:d9:bf:be:c0:53:b5:84:1f: f8:6e:e7:83:6b:77:3e:8a:b2:3b:e4:9e:b6:27:d4: d3:01:98:8b:2f:62:67:4e:10:46:6d:68:8c:c6:de: 2c:df:7a:b0:b7:21:ae:e8:20:ee:b7:3c:a3:b6:83: bc:be:a2:e7:fc:72:c0:5c:ba:af:b6:d2:bd:3a:8f: d1:20:d1:98:b5:a2:d2:3c:6c:d4:a3:ef:4a:c7:d1: c7:e4:9d:96:4f:49:54:87:87:2b:25:8d:2a:10:c6: 0c:35:35:05:cb:a7:4a:1d:bc:d4:f3:46:ea:03:97: 99:62:13:20:62:e1:35:82:3a:9e:3c:4a:51:f7:8c: 74:85:6e:a4:cc:a6:d7:89:6f:72:b2:8f:9b:dd:cd: bc:54:b0:c8:78:11:d0:40:ec:7e:4e:0b:e1:dc:c8: f1:7b:26:65:26:00:68:4b:76:db:7a:ba:27:d2:19: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E0:33:03:0E:9A:84:10:13:27:E2:1A:D0:34:F1:B4:D0:E8:03:42 X509v3 Authority Key Identifier: keyid:02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:94:a5:60:ba:2e:22:28:03:7d:9c:e6:59:38:77:b3:50:5a: 54:2d:33:c5:e0:f5:27:5b:f0:73:d4:fe:08:b4:09:2c:66:9f: 07:74:07:55:58:68:67:9d:53:b4:03:88:51:c7:eb:4d:51:5d: 20:2e:bb:19:0b:66:cc:c7:6f:d4:e9:54:a6:88:c1:d3:9c:90: d5:ac:05:d4:6d:9a:f6:42:46:09:c9:d2:18:66:0f:64:1e:9b: 1a:08:5c:34:ca:45:4c:52:76:fa:b1:b5:30:ea:89:90:42:7b: bf:2d:e2:c4:2d:d1:de:e0:9c:87:d1:89:9a:99:f8:f1:7d:39: be:2a:da:4b:31:26:cc:bc:15:9e:76:e0:fa:9e:d1:7c:9e:07: 44:75:31:ff:7b:e8:ec:10:c8:35:1a:15:5b:64:a4:c6:84:b6: ab:75:7a:29:2c:fb:4d:55:05:7c:be:26:d3:ee:e5:df:b2:06: f3:fb:a0:9b:07:eb:50:de:85:b7:1b:e8:08:c1:ac:b3:6e:83: d2:7b:84:c8:fb:c2:4f:1c:7f:a7:a5:ab:01:e4:33:9f:8c:b2: 4d:4e:44:49:c2:70:42:5a:34:f1:ff:88:06:9e:51:bb:e7:bc: 3a:d8:3a:3a:b0:56:a0:bc:4f:69:6c:48:25:82:57:7b:33:e2: 11:bb:85:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSeOdR0reVml9ceD5MNS8aXtOE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2 RTJENTgxNzAeFw0yNjA1MTIxNzAxNTBaFw0yNjA1MTMxODM2NTBaMDMxMTAvBgNV BAMTKDBERTAzMzAzMEU5QTg0MTAxMzI3RTIxQUQwMzRGMUI0RDBFODAzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FulQaGN9OVpl6AAkxIS6AyaE h/narcsqL5Im4YKstlVVm3leX453XFIP0W4IhaCVHJgWrRL7thmexF6UfeIJLDLY Z4oCb9/QtIMsDX69ckjZv77AU7WEH/hu54Nrdz6KsjvknrYn1NMBmIsvYmdOEEZt aIzG3izferC3Ia7oIO63PKO2g7y+ouf8csBcuq+20r06j9Eg0Zi1otI8bNSj70rH 0cfknZZPSVSHhysljSoQxgw1NQXLp0odvNTzRuoDl5liEyBi4TWCOp48SlH3jHSF bqTMpteJb3Kyj5vdzbxUsMh4EdBA7H5OC+HcyPF7JmUmAGhLdtt6uifSGWGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDeAzAw6ahBATJ+Ia0DTxtNDoA0IwHwYDVR0j BBgwFoAUAkhXzN+lBmziZlKd0UcJRG4tWBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5MzAyY2UtMTdlOS00MDM5LWIzZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NE RkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2RTJENTgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjQ4NTdDQ0RGQTUwNjZDRTI2NjUyOUREMTQ3MDk0NDZFMkQ1 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5 NDQ2RTJENTgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSUpWC6LiIoA32c5lk4d7NQWlQtM8Xg9Sdb 8HPU/gi0CSxmnwd0B1VYaGedU7QDiFHH601RXSAuuxkLZszHb9TpVKaIwdOckNWs BdRtmvZCRgnJ0hhmD2QemxoIXDTKRUxSdvqxtTDqiZBCe78t4sQt0d7gnIfRiZqZ +PF9Ob4q2ksxJsy8FZ524Pqe0XyeB0R1Mf976OwQyDUaFVtkpMaEtqt1eiks+01V BXy+JtPu5d+yBvP7oJsH61Dehbcb6AjBrLNug9J7hMj7wk8cf6elqwHkM5+Msk1O REnCcEJaNPH/iAaeUbvnvDrYOjqwVqC8T2lsSCWCV3sz4hG7hUA= -----END CERTIFICATE-----Generated at Wed May 13 04:54:05 2026 by rpki-client