$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft File: 024857CCDFA5066CE266529DD14709446E2D5817.mft (raw, json) Hash identifier: 3kZIhPlfXnfsQI+KH5wdwHeWj49ijkIx+IXrg3LS1uk= Subject key identifier: 52:17:7E:5B:78:E1:59:E0:FE:E4:1E:A2:04:07:32:C1:4D:F4:36:D8 Authority key identifier: 02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 Certificate issuer: /CN=024857CCDFA5066CE266529DD14709446E2D5817 Certificate serial: 67C29BB607B6559A098D0F1415F24D95B05BD37E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 09:15:46 +0000 Manifest this update: Fri 24 Jul 2026 09:10:46 +0000 Manifest next update: Sat 25 Jul 2026 10:57:46 +0000 Files and hashes: 1: 024857CCDFA5066CE266529DD14709446E2D5817.crl (hash: ZsQ0DOGPlS3Bx7I4FL1dPQhCFK/iB0FOnqsFyTUGHNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c2:9b:b6:07:b6:55:9a:09:8d:0f:14:15:f2:4d:95:b0:5b:d3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024857CCDFA5066CE266529DD14709446E2D5817 Validity Not Before: Jul 24 09:10:46 2026 GMT Not After : Jul 25 10:57:46 2026 GMT Subject: CN=52177E5B78E159E0FEE41EA2040732C14DF436D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:ab:de:a9:f6:52:0b:44:39:10:ee:de:cd: a3:a5:e7:c4:c3:08:de:75:df:17:fd:a8:cb:51:e0: 81:0c:a2:c2:f6:33:39:4f:3f:25:06:8b:51:a3:ab: 75:4e:4e:42:7f:59:29:26:a9:e4:79:17:bb:b4:7c: f5:d3:2f:ea:29:8f:74:d5:ff:fc:b5:06:81:04:1f: ef:0d:fa:ec:c7:f7:52:52:d0:7f:75:f1:db:5c:63: 3d:da:ae:19:52:fe:d0:da:ac:c5:8f:2c:3f:e5:ac: ec:25:cd:5d:23:16:34:50:47:8d:12:cd:40:5e:dc: ab:ff:c0:cf:31:49:8f:ca:e2:97:bc:be:55:d5:c5: 82:05:7b:23:e0:e3:21:bb:46:63:48:7c:27:8f:55: bd:b7:6a:9f:ef:a8:6b:0a:04:f8:30:61:d3:fc:b4: 47:44:35:97:f3:9b:e4:1a:9d:3a:f2:ed:8c:b1:e8: 49:fa:86:68:cc:4e:80:bc:db:bd:b7:00:c2:ce:66: 92:ac:ae:79:a6:81:a8:f7:6b:2c:52:3d:b8:a9:52: d7:7b:c6:57:9c:c0:ac:0e:79:54:ed:fe:72:9d:08: 99:ba:3f:e4:cf:6a:31:1a:c9:4e:d9:78:a8:c2:38: 7e:bf:9c:b8:70:52:67:ae:f8:72:d1:ba:6c:26:b0: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:7E:5B:78:E1:59:E0:FE:E4:1E:A2:04:07:32:C1:4D:F4:36:D8 X509v3 Authority Key Identifier: keyid:02:48:57:CC:DF:A5:06:6C:E2:66:52:9D:D1:47:09:44:6E:2D:58:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/024857CCDFA5066CE266529DD14709446E2D5817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/024857CCDFA5066CE266529DD14709446E2D5817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:65:f6:4f:db:9f:22:a1:80:2c:56:28:bf:0e:eb:10:c4:54: c0:34:1a:f8:03:25:e8:cf:a8:ad:fd:d1:1d:7d:0d:04:5c:c2: 45:23:5b:1d:3a:55:1e:8f:f5:f0:27:9c:7a:df:a4:e7:c2:30: f6:44:cd:3f:b8:ef:af:8d:a0:3d:58:93:a9:16:c3:d4:e9:25: 0d:b2:4b:df:75:92:69:e3:de:31:7b:80:8b:72:ee:b9:d7:03: 7c:04:a0:e0:ea:60:b6:17:3e:27:6a:83:90:25:88:ed:a8:9d: ec:7c:63:7f:e2:8f:b0:2c:07:32:1c:89:74:6e:04:b9:29:2f: 7b:75:45:8b:e9:5a:f1:df:1b:f5:92:b1:be:54:aa:69:91:a0: 5d:15:e0:a7:53:03:66:cc:f1:d6:48:a3:ce:0a:65:ec:87:3e: 70:7f:11:48:91:4e:c5:3d:b9:e5:37:ae:6d:11:84:f2:7f:56: 23:a6:72:ab:0d:39:1a:cb:3a:b6:b2:f4:37:e8:40:5f:a4:05: 18:db:36:af:81:cd:c9:bb:21:9f:b8:81:42:a4:ea:1a:9a:86: 19:bb:71:e0:64:21:25:82:77:49:d1:ac:62:b9:ff:d3:11:ef: 66:77:9f:3a:c3:a7:86:cb:d3:49:3b:bf:9d:80:e4:88:0e:13: 17:5c:d9:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8Kbtge2VZoJjQ8UFfJNlbBb034wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2 RTJENTgxNzAeFw0yNjA3MjQwOTEwNDZaFw0yNjA3MjUxMDU3NDZaMDMxMTAvBgNV BAMTKDUyMTc3RTVCNzhFMTU5RTBGRUU0MUVBMjA0MDczMkMxNERGNDM2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1aveqfZSC0Q5EO7ezaOl58TD CN513xf9qMtR4IEMosL2MzlPPyUGi1Gjq3VOTkJ/WSkmqeR5F7u0fPXTL+opj3TV //y1BoEEH+8N+uzH91JS0H918dtcYz3arhlS/tDarMWPLD/lrOwlzV0jFjRQR40S zUBe3Kv/wM8xSY/K4pe8vlXVxYIFeyPg4yG7RmNIfCePVb23ap/vqGsKBPgwYdP8 tEdENZfzm+QanTry7Yyx6En6hmjMToC82723AMLOZpKsrnmmgaj3ayxSPbipUtd7 xlecwKwOeVTt/nKdCJm6P+TPajEayU7ZeKjCOH6/nLhwUmeu+HLRumwmsIQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhd+W3jhWeD+5B6iBAcywU30NtgwHwYDVR0j BBgwFoAUAkhXzN+lBmziZlKd0UcJRG4tWBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5MzAyY2UtMTdlOS00MDM5LWIzZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NE RkE1MDY2Q0UyNjY1MjlERDE0NzA5NDQ2RTJENTgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjQ4NTdDQ0RGQTUwNjZDRTI2NjUyOUREMTQ3MDk0NDZFMkQ1 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvMDI0ODU3Q0NERkE1MDY2Q0UyNjY1MjlERDE0NzA5 NDQ2RTJENTgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpl9k/bnyKhgCxWKL8O6xDEVMA0GvgDJejP qK390R19DQRcwkUjWx06VR6P9fAnnHrfpOfCMPZEzT+476+NoD1Yk6kWw9TpJQ2y S991kmnj3jF7gIty7rnXA3wEoODqYLYXPidqg5AliO2onex8Y3/ij7AsBzIciXRu BLkpL3t1RYvpWvHfG/WSsb5UqmmRoF0V4KdTA2bM8dZIo84KZeyHPnB/EUiRTsU9 ueU3rm0RhPJ/ViOmcqsNORrLOray9DfoQF+kBRjbNq+Bzcm7IZ+4gUKk6hqahhm7 ceBkISWCd0nRrGK5/9MR72Z3nzrDp4bL00k7v52A5IgOExdc2fU= -----END CERTIFICATE-----Generated at Fri Jul 24 15:07:45 2026 by rpki-client