$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json) Hash identifier: PxoOw3f/JNlVmCsvDF/tkivK1OTZ+2zODX+hEBnfky8= Subject key identifier: 5B:4C:8A:45:86:24:C9:1C:DB:0C:04:07:63:76:7E:EA:1C:9F:04:78 Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Certificate serial: 3978CE644A4D25C897A29EAAA25AD18FCD5249ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 20:00:19 +0000 Manifest this update: Fri 25 Sep 2026 19:55:19 +0000 Manifest next update: Sat 26 Sep 2026 23:34:19 +0000 Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: bxCIlpR5bpfiJ4lEp2rdYAK/TksOWOfMdAWnYDkBKvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:78:ce:64:4a:4d:25:c8:97:a2:9e:aa:a2:5a:d1:8f:cd:52:49:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Validity Not Before: Sep 25 19:55:19 2026 GMT Not After : Sep 26 23:34:19 2026 GMT Subject: CN=5B4C8A458624C91CDB0C040763767EEA1C9F0478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:e6:7c:f9:e6:dd:c1:0f:60:fc:11:d0:9b: 97:26:a7:c6:3b:6e:35:02:41:f1:3a:4b:32:66:61: 5f:99:dc:73:7f:f7:31:93:79:37:70:4b:4b:1d:c7: e8:d7:de:62:34:8f:64:c2:a2:81:d0:99:f4:59:c1: 44:ed:58:26:1f:16:d0:e1:98:0f:58:43:af:80:a3: 66:40:46:4c:ce:c9:fd:3d:02:f5:1b:97:f5:64:5d: a0:0e:3f:d6:25:fa:9e:33:43:04:cd:4f:ac:b2:9b: 44:8a:8c:33:ec:d4:25:5a:80:99:f7:f0:b2:60:83: 79:7c:48:da:c9:60:8a:25:0f:f6:f3:00:d5:87:fd: b7:a4:e2:b5:2e:ad:82:af:7d:e1:01:e3:a3:5f:8f: ff:a9:5d:f6:6c:21:fd:fe:f4:6b:57:13:18:0a:8f: eb:9a:40:93:1a:25:c9:01:7b:00:e7:bb:0e:e1:a8: 2f:eb:e5:10:df:75:06:0f:1b:b4:e6:23:37:6d:13: 28:4d:f6:8d:97:d7:8e:ff:46:72:b9:1b:38:41:99: 6c:50:e4:fe:a8:6d:c6:11:b3:49:6d:3a:ed:3f:28: 95:3e:4b:09:94:72:2f:d6:e5:2e:93:f0:2f:75:73: 5d:89:c8:d5:0a:5f:cb:9e:0d:0c:82:00:a7:1c:50: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4C:8A:45:86:24:C9:1C:DB:0C:04:07:63:76:7E:EA:1C:9F:04:78 X509v3 Authority Key Identifier: keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1f:6b:e9:8d:cc:3d:00:16:91:c5:2b:f3:07:f0:a7:b4:93: d3:13:93:9f:63:57:27:88:a1:67:40:2d:ec:d6:67:ae:1b:fb: c3:85:1d:fa:ef:5c:2a:e4:6b:c4:bd:7a:1c:a7:2e:2a:d3:82: 2f:ef:d7:b5:96:52:da:43:37:51:a3:23:4f:46:d1:49:6c:72: 10:5a:b3:2c:9a:78:a4:1f:58:07:0f:7b:0c:ce:98:68:30:6c: 76:3d:ea:9f:3e:e6:ec:19:20:b8:05:cc:93:a0:8f:9c:74:82: 31:16:61:4c:ff:b7:6f:50:f7:84:cf:0f:a9:d3:78:38:32:05: 0b:59:72:cc:1f:18:a9:47:0f:50:6b:61:a4:a5:2a:6b:f4:22: f3:60:62:18:2e:23:13:9f:34:93:8b:e3:03:50:9d:a9:2a:10: a6:5c:b6:0d:b5:27:16:cb:b9:c3:6f:3b:b7:01:44:dc:d1:3f: 00:c4:cd:f6:e8:30:df:47:83:c9:b7:38:6f:e4:14:c6:0f:db: 3b:2d:2e:32:ab:93:27:31:2f:c3:1f:41:c6:15:68:22:e2:79: ef:39:86:cd:46:ab:03:e4:92:b3:d4:8d:79:16:49:35:91:36: 76:3c:a8:2b:35:24:6c:3a:36:4b:3e:24:66:74:66:32:2a:9d: e4:ca:24:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXjOZEpNJciXop6qolrRj81SSe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJCOEIw OENBMDY5NjAeFw0yNjA5MjUxOTU1MTlaFw0yNjA5MjYyMzM0MTlaMDMxMTAvBgNV BAMTKDVCNEM4QTQ1ODYyNEM5MUNEQjBDMDQwNzYzNzY3RUVBMUM5RjA0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFuZ8+ebdwQ9g/BHQm5cmp8Y7 bjUCQfE6SzJmYV+Z3HN/9zGTeTdwS0sdx+jX3mI0j2TCooHQmfRZwUTtWCYfFtDh mA9YQ6+Ao2ZARkzOyf09AvUbl/VkXaAOP9Yl+p4zQwTNT6yym0SKjDPs1CVagJn3 8LJgg3l8SNrJYIolD/bzANWH/bek4rUurYKvfeEB46Nfj/+pXfZsIf3+9GtXExgK j+uaQJMaJckBewDnuw7hqC/r5RDfdQYPG7TmIzdtEyhN9o2X147/RnK5GzhBmWxQ 5P6obcYRs0ltOu0/KJU+SwmUci/W5S6T8C91c12JyNUKX8ueDQyCAKccUDfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0yKRYYkyRzbDAQHY3Z+6hyfBHgwHwYDVR0j BBgwFoAUAkrwW2R28CJt7o6H5967iwjKBpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdkNTBmMjctN2U4OC00NzE4LTgzZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2 NDc2RjAyMjZERUU4RTg3RTdERUJCOEIwOENBMDY5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjRBRjA1QjY0NzZGMDIyNkRFRThFODdFN0RFQkI4QjA4Q0Ew Njk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJC OEIwOENBMDY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAfa+mNzD0AFpHFK/MH8Ke0k9MTk59jVyeI oWdALezWZ64b+8OFHfrvXCrka8S9ehynLirTgi/v17WWUtpDN1GjI09G0UlschBa syyaeKQfWAcPewzOmGgwbHY96p8+5uwZILgFzJOgj5x0gjEWYUz/t29Q94TPD6nT eDgyBQtZcswfGKlHD1BrYaSlKmv0IvNgYhguIxOfNJOL4wNQnakqEKZctg21JxbL ucNvO7cBRNzRPwDEzfboMN9Hg8m3OG/kFMYP2zstLjKrkycxL8MfQcYVaCLiee85 hs1GqwPkkrPUjXkWSTWRNnY8qCs1JGw6Nks+JGZ0ZjIqneTKJKU= -----END CERTIFICATE-----Generated at Sat Sep 26 08:51:58 2026 by rpki-client