$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json) Hash identifier: yfGuS92q5Mxd7x4WHZnV2M7VBOj+u3Y2EoH8acwO4pI= Subject key identifier: 41:83:5D:D0:0B:67:DB:E5:BD:CD:0A:50:15:86:4E:D5:76:6F:2D:DD Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Certificate serial: 79A747A31D0B5ADD4AA48B497D7760527014B1B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 22:32:21 +0000 Manifest this update: Thu 23 Jul 2026 22:27:21 +0000 Manifest next update: Sat 25 Jul 2026 01:14:21 +0000 Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: 2Mz3bi5pTRjP+g9TKNMTOF7QYuvBCXnTdKngO4fH6Hg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a7:47:a3:1d:0b:5a:dd:4a:a4:8b:49:7d:77:60:52:70:14:b1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Validity Not Before: Jul 23 22:27:21 2026 GMT Not After : Jul 25 01:14:21 2026 GMT Subject: CN=41835DD00B67DBE5BDCD0A5015864ED5766F2DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:7f:df:74:77:f2:42:3f:f5:98:bc:e9:8d: 6b:9f:39:c2:c0:bb:27:65:87:12:c6:e4:45:32:b2: ae:70:96:e9:46:db:6e:a7:26:27:45:7b:73:73:7f: 71:96:e2:8c:cc:f7:59:67:48:4f:bd:2d:46:f5:0e: 7e:6b:d3:a3:79:94:92:ad:36:f7:7c:a1:56:d2:d4: bf:bc:5c:a9:3f:34:af:28:32:fe:a2:a5:81:b1:ab: 7b:07:5a:fc:c5:6e:c1:75:3f:b1:ba:b0:45:11:88: 9d:5f:18:30:cf:52:9d:4a:27:3c:cd:8f:04:af:c0: 56:87:e0:ca:55:9c:b5:43:b4:3a:8b:d9:97:a7:1e: 2a:45:08:48:d3:c7:0c:97:c1:ba:0d:c2:f3:fb:83: 8b:1d:33:2b:ff:44:fa:51:00:b9:95:8d:db:48:56: 87:64:52:72:94:07:02:12:d6:cf:a0:9e:d7:21:78: bf:c1:d7:a6:38:bb:7f:6f:4d:8e:87:3a:0f:1b:5c: 01:ce:5f:9b:03:e2:e3:d8:7c:7e:d1:73:b8:be:5c: ca:33:57:ba:df:9e:db:53:07:e1:9b:f7:9d:d9:6c: 78:f5:56:a6:a9:67:38:5e:9b:25:42:8e:cf:3a:4b: aa:e8:5a:49:78:7d:de:76:20:3d:e9:90:6f:92:d8: a5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:83:5D:D0:0B:67:DB:E5:BD:CD:0A:50:15:86:4E:D5:76:6F:2D:DD X509v3 Authority Key Identifier: keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:62:c8:ce:89:87:5a:8e:e1:3c:8e:c0:b5:18:58:b1:d4:97: 63:dc:97:ea:c5:b1:e0:9f:b5:a3:64:9d:8d:3f:d0:f4:94:24: 49:1a:20:17:e8:4f:40:7d:80:d3:4f:05:40:54:50:74:ea:08: c3:17:2f:1e:ef:52:6a:31:56:3d:51:97:0e:06:1a:3b:f4:73: 98:63:57:87:25:2e:5d:eb:06:f3:47:93:d3:8e:10:84:5f:3b: 15:1d:c0:28:79:80:13:56:59:50:d0:e1:a8:3c:c6:87:e2:f7: 29:48:ae:71:e5:6c:22:d0:a2:42:d8:c2:8a:3b:d5:d0:f4:68: 82:91:a4:08:1b:82:14:4b:8b:40:4f:fb:89:e9:d7:ee:32:79: 0e:d9:eb:6a:57:82:19:fa:05:54:db:4f:75:1d:55:90:2b:09: 72:aa:7c:eb:fa:2d:a6:93:0f:ac:2a:5c:01:c3:e9:6e:3f:6a: e0:e2:65:97:a5:31:b8:c9:d0:d2:46:07:57:33:50:44:f1:1b: 51:be:a9:1c:2c:ac:d5:00:9b:4f:93:5a:49:90:0e:fd:58:b4: b0:ce:c8:9d:cd:2a:c3:0c:ef:f7:88:0e:43:9b:5f:b9:17:1e: 10:89:f0:16:ad:de:43:a1:d2:b2:c4:5c:b0:e0:8e:c0:d3:ac: a5:78:48:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeadHox0LWt1KpItJfXdgUnAUsbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJCOEIw OENBMDY5NjAeFw0yNjA3MjMyMjI3MjFaFw0yNjA3MjUwMTE0MjFaMDMxMTAvBgNV BAMTKDQxODM1REQwMEI2N0RCRTVCRENEMEE1MDE1ODY0RUQ1NzY2RjJEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCud3/fdHfyQj/1mLzpjWufOcLA uydlhxLG5EUysq5wlulG226nJidFe3Nzf3GW4ozM91lnSE+9LUb1Dn5r06N5lJKt Nvd8oVbS1L+8XKk/NK8oMv6ipYGxq3sHWvzFbsF1P7G6sEURiJ1fGDDPUp1KJzzN jwSvwFaH4MpVnLVDtDqL2ZenHipFCEjTxwyXwboNwvP7g4sdMyv/RPpRALmVjdtI VodkUnKUBwIS1s+gntcheL/B16Y4u39vTY6HOg8bXAHOX5sD4uPYfH7Rc7i+XMoz V7rfnttTB+Gb953ZbHj1VqapZzhemyVCjs86S6roWkl4fd52ID3pkG+S2KX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYNd0Atn2+W9zQpQFYZO1XZvLd0wHwYDVR0j BBgwFoAUAkrwW2R28CJt7o6H5967iwjKBpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdkNTBmMjctN2U4OC00NzE4LTgzZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2 NDc2RjAyMjZERUU4RTg3RTdERUJCOEIwOENBMDY5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjRBRjA1QjY0NzZGMDIyNkRFRThFODdFN0RFQkI4QjA4Q0Ew Njk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJC OEIwOENBMDY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFiyM6Jh1qO4TyOwLUYWLHUl2Pcl+rFseCf taNknY0/0PSUJEkaIBfoT0B9gNNPBUBUUHTqCMMXLx7vUmoxVj1Rlw4GGjv0c5hj V4clLl3rBvNHk9OOEIRfOxUdwCh5gBNWWVDQ4ag8xofi9ylIrnHlbCLQokLYwoo7 1dD0aIKRpAgbghRLi0BP+4np1+4yeQ7Z62pXghn6BVTbT3UdVZArCXKqfOv6LaaT D6wqXAHD6W4/auDiZZelMbjJ0NJGB1czUETxG1G+qRwsrNUAm0+TWkmQDv1YtLDO yJ3NKsMM7/eIDkObX7kXHhCJ8Bat3kOh0rLEXLDgjsDTrKV4SMQ= -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:15 2026 by rpki-client