$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft File: 24B340250EB1D6C83128750AD8B2299EF1300112.mft (raw, json) Hash identifier: nekRRXzCD0xgkUaIJgERSKNcAUGB154v0liqE4nvalQ= Subject key identifier: DE:CB:EF:7E:AC:32:12:CD:5C:89:FD:A3:7C:65:94:03:B6:47:E1:BF Authority key identifier: 24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12 Certificate issuer: /CN=24B340250EB1D6C83128750AD8B2299EF1300112 Certificate serial: 3451DC975C5B550A364E3F746E02911A4A08A661 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 01:52:33 +0000 Manifest this update: Fri 25 Sep 2026 01:47:33 +0000 Manifest next update: Sat 26 Sep 2026 04:17:33 +0000 Files and hashes: 1: 24B340250EB1D6C83128750AD8B2299EF1300112.crl (hash: V9CFO8FKK2SCeOSYoMMmC2iVsY/SE/vUMwLMW6/Lj24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:51:dc:97:5c:5b:55:0a:36:4e:3f:74:6e:02:91:1a:4a:08:a6:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B340250EB1D6C83128750AD8B2299EF1300112 Validity Not Before: Sep 25 01:47:33 2026 GMT Not After : Sep 26 04:17:33 2026 GMT Subject: CN=DECBEF7EAC3212CD5C89FDA37C659403B647E1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:f0:d9:27:9e:4b:a0:94:10:1b:64:94:3d: 31:12:bc:c3:47:47:6e:b9:05:c8:53:c0:d9:84:fe: 29:70:dd:b9:d5:4d:90:dd:91:67:24:e7:33:94:29: 6e:44:3f:08:44:b0:d7:c9:47:ca:81:ee:19:a6:f2: 9a:4f:6a:b7:1f:f4:0f:57:62:fe:08:74:28:86:c5: 60:5d:2e:96:88:db:71:ed:bd:a9:a4:aa:04:4d:38: 67:e4:63:fa:42:ae:eb:b6:f6:80:9c:01:92:1b:29: b2:6d:03:77:6a:2c:36:7e:ff:ed:ff:8d:d2:a8:f6: 5e:66:9a:4c:5b:b9:a6:61:94:9c:bb:84:45:a4:a2: 0b:ae:8d:2d:46:aa:ff:64:3e:7b:8a:ad:9c:dd:2c: da:70:ae:70:89:14:ee:c3:13:b9:e9:a5:51:ff:2a: cf:37:71:bd:bd:41:2d:28:ab:54:87:3c:42:1e:6b: a0:74:83:c3:82:7a:ba:3a:e4:fa:f4:ac:57:ed:81: 95:31:95:39:ef:dd:fa:39:73:17:6c:01:43:a3:50: 25:c8:36:54:8e:94:88:dd:8b:7e:cd:3b:b0:63:8f: a6:03:d7:1a:7a:9a:da:86:cb:1f:21:6a:2a:17:9b: ef:81:b1:e9:0c:c1:df:bf:47:73:a5:8b:a8:6b:6a: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:EF:7E:AC:32:12:CD:5C:89:FD:A3:7C:65:94:03:B6:47:E1:BF X509v3 Authority Key Identifier: keyid:24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:78:e4:7e:60:4d:2d:17:45:7d:db:78:e3:df:9e:b7:85:62: 69:ea:a8:aa:8f:74:fe:c3:a7:92:59:b2:3f:67:28:f1:6b:20: 28:60:3c:b3:37:25:94:cc:a0:ef:8d:00:0f:14:20:56:a1:b5: bc:a9:36:44:4d:6a:7a:6c:82:e6:35:75:81:00:14:31:9c:2a: aa:fe:06:a5:b3:70:7a:24:ae:89:89:6a:57:ae:bc:48:94:b2: 17:d4:bb:ce:6c:17:a1:bf:91:5c:4d:10:e1:b4:96:f0:93:ae: d1:17:bf:7d:f4:f3:6f:0f:b2:54:3c:f3:fc:ae:52:8b:45:1e: 66:eb:d5:7e:b0:61:65:c9:46:dc:92:83:cf:24:63:fb:74:3f: 90:e3:35:07:ae:6b:65:28:d6:ce:d8:8c:af:58:a6:2e:da:d3: 53:f6:54:5c:8f:fb:d4:9e:69:e7:c0:f5:5a:1b:cb:75:60:8c: ab:88:21:7c:8d:f1:eb:97:37:42:fe:6d:eb:f3:88:a6:d7:73: d4:62:21:39:71:74:6e:9f:f2:0d:84:9a:37:ad:b3:84:5a:34: 57:51:be:87:1a:5d:a3:ec:69:c0:ba:63:bc:50:6f:38:50:14: 82:6b:42:33:30:50:d8:b4:20:ec:17:e6:f8:44:b7:09:f1:a5: 4e:b5:3c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFHcl1xbVQo2Tj90bgKRGkoIpmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQwMjUwRUIxRDZDODMxMjg3NTBBRDhCMjI5OUVG MTMwMDExMjAeFw0yNjA5MjUwMTQ3MzNaFw0yNjA5MjYwNDE3MzNaMDMxMTAvBgNV BAMTKERFQ0JFRjdFQUMzMjEyQ0Q1Qzg5RkRBMzdDNjU5NDAzQjY0N0UxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtPDZJ55LoJQQG2SUPTESvMNH R265BchTwNmE/ilw3bnVTZDdkWck5zOUKW5EPwhEsNfJR8qB7hmm8ppParcf9A9X Yv4IdCiGxWBdLpaI23HtvamkqgRNOGfkY/pCruu29oCcAZIbKbJtA3dqLDZ+/+3/ jdKo9l5mmkxbuaZhlJy7hEWkoguujS1Gqv9kPnuKrZzdLNpwrnCJFO7DE7nppVH/ Ks83cb29QS0oq1SHPEIea6B0g8OCero65Pr0rFftgZUxlTnv3fo5cxdsAUOjUCXI NlSOlIjdi37NO7Bjj6YD1xp6mtqGyx8haioXm++BsekMwd+/R3Oli6hraoBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3svvfqwyEs1cif2jfGWUA7ZH4b8wHwYDVR0j BBgwFoAUJLNAJQ6x1sgxKHUK2LIpnvEwARIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJiY2YxZWMtOTIyZC00Y2Q3LThjYTYtNzI3MjRmNjZlNWZiLzAvMjRCMzQwMjUw RUIxRDZDODMxMjg3NTBBRDhCMjI5OUVGMTMwMDExMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNEIzNDAyNTBFQjFENkM4MzEyODc1MEFEOEIyMjk5RUYxMzAw MTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvMjRCMzQwMjUwRUIxRDZDODMxMjg3NTBBRDhCMjI5 OUVGMTMwMDExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMd45H5gTS0XRX3beOPfnreFYmnqqKqPdP7D p5JZsj9nKPFrIChgPLM3JZTMoO+NAA8UIFahtbypNkRNanpsguY1dYEAFDGcKqr+ BqWzcHokromJaleuvEiUshfUu85sF6G/kVxNEOG0lvCTrtEXv330828PslQ88/yu UotFHmbr1X6wYWXJRtySg88kY/t0P5DjNQeua2Uo1s7YjK9Ypi7a01P2VFyP+9Se aefA9Voby3VgjKuIIXyN8euXN0L+bevziKbXc9RiITlxdG6f8g2Emjets4RaNFdR vocaXaPsacC6Y7xQbzhQFIJrQjMwUNi0IOwX5vhEtwnxpU61PBg= -----END CERTIFICATE-----Generated at Fri Sep 25 14:17:01 2026 by rpki-client