$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft File: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft (raw, json) Hash identifier: H90hmG26w0nGYHV83RJv7PL3G8+PL8C5UaoDIqmrghs= Subject key identifier: 51:54:A9:79:5C:D3:F9:46:BB:69:61:4A:06:63:87:BE:95:99:AE:28 Authority key identifier: 02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 Certificate issuer: /CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Certificate serial: 2552A876605C2071763CDC14F2FB96B52209B2BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:23:38 +0000 Manifest this update: Tue 12 May 2026 18:18:38 +0000 Manifest next update: Wed 13 May 2026 20:40:38 +0000 Files and hashes: 1: 024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl (hash: yJMbymapS5M2TwZLzTX6tdrh6jpkE+LkabjAct8lG6Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:52:a8:76:60:5c:20:71:76:3c:dc:14:f2:fb:96:b5:22:09:b2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024AF05B6476F0226DEE8E87E7DEBB8B08CA0696 Validity Not Before: May 12 18:18:38 2026 GMT Not After : May 13 20:40:38 2026 GMT Subject: CN=5154A9795CD3F946BB69614A066387BE9599AE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:a2:a9:55:58:95:f4:bb:e3:6c:19:91:4a: 24:1f:47:94:fb:b4:c8:ff:d8:0a:3a:28:6d:d8:53: 6e:99:5b:11:21:3f:6d:5e:08:a5:d8:b7:82:9d:7e: 42:b2:e5:93:44:b9:37:85:3e:c4:ba:20:c3:32:b8: 2a:60:25:1a:87:07:bb:be:c8:c3:a2:90:4b:34:43: b4:09:66:fa:dd:5d:94:3f:05:fc:07:b6:82:47:48: f0:82:27:87:31:8b:74:b7:8a:b6:67:93:39:32:c4: a2:32:cd:69:ef:b2:a6:ec:18:ee:1b:fd:c4:ab:bd: 90:0c:32:ba:15:ed:9d:71:d2:9e:0a:5d:9f:32:0e: 22:de:c8:ab:f7:b5:d6:6c:22:63:a1:43:27:d7:81: 84:cc:d1:a7:c3:1f:d4:21:a0:e0:7b:dd:06:ff:99: ac:57:c2:93:e4:55:03:93:42:32:09:76:c3:a5:19: 19:98:cd:43:76:40:07:af:f3:93:91:fc:55:d8:f8: 67:11:47:77:d9:18:ee:37:ef:e2:7e:9c:89:65:21: cb:e0:c0:a8:74:90:95:79:28:a3:10:71:29:f2:4e: 0f:e9:c8:8d:2e:88:cc:8b:3f:7c:cc:69:b4:e4:d9: cf:d8:ba:f3:dd:78:01:86:ec:00:d4:6a:2f:2b:1b: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:54:A9:79:5C:D3:F9:46:BB:69:61:4A:06:63:87:BE:95:99:AE:28 X509v3 Authority Key Identifier: keyid:02:4A:F0:5B:64:76:F0:22:6D:EE:8E:87:E7:DE:BB:8B:08:CA:06:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/024AF05B6476F0226DEE8E87E7DEBB8B08CA0696.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:67:38:5e:87:fd:db:0e:9d:eb:f7:dd:ad:05:54:98:e2:d6: df:51:f5:0a:c5:0f:bb:43:cd:5d:b6:c7:27:45:2b:3e:64:ad: e3:e3:35:bb:f6:22:3a:4a:46:b6:b6:a3:4f:c9:d7:f7:39:0c: 6f:4a:15:85:17:22:da:8c:bd:d3:ed:5b:03:51:e9:5e:56:c3: c6:79:3e:a5:e7:7b:0f:a0:9d:45:7b:52:d0:19:fb:2a:21:b8: a0:71:f2:80:07:e7:86:c8:cd:04:0a:2f:1d:86:5f:0f:23:d7: ce:70:bf:b6:a1:ab:e7:97:ec:a9:80:ef:f5:6e:52:bf:9a:64: d0:f6:f9:0c:00:a7:45:1e:38:26:06:e6:0d:88:72:2a:51:85: 5b:2d:fa:f2:10:54:41:c9:18:66:fd:bc:fa:3b:fe:6c:2f:c1: 4c:ea:bd:26:3e:04:74:66:58:a0:ae:ad:88:1b:85:9b:cd:f5: 1c:53:d3:73:fa:37:06:ba:1e:66:fe:b5:3b:d8:ad:36:ef:d2: 50:f4:18:6f:1b:a2:47:a9:90:11:01:1f:c9:3f:77:83:f4:c5: 20:9d:d9:fe:50:a6:d2:d1:01:d7:a8:5a:72:24:0f:60:9e:4d: e3:9e:6c:5b:46:0e:a8:10:90:9d:e2:cf:20:64:08:65:c5:76: fa:a6:9d:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVKodmBcIHF2PNwU8vuWtSIJsr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJCOEIw OENBMDY5NjAeFw0yNjA1MTIxODE4MzhaFw0yNjA1MTMyMDQwMzhaMDMxMTAvBgNV BAMTKDUxNTRBOTc5NUNEM0Y5NDZCQjY5NjE0QTA2NjM4N0JFOTU5OUFFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9caKpVViV9LvjbBmRSiQfR5T7 tMj/2Ao6KG3YU26ZWxEhP21eCKXYt4KdfkKy5ZNEuTeFPsS6IMMyuCpgJRqHB7u+ yMOikEs0Q7QJZvrdXZQ/BfwHtoJHSPCCJ4cxi3S3irZnkzkyxKIyzWnvsqbsGO4b /cSrvZAMMroV7Z1x0p4KXZ8yDiLeyKv3tdZsImOhQyfXgYTM0afDH9QhoOB73Qb/ maxXwpPkVQOTQjIJdsOlGRmYzUN2QAev85OR/FXY+GcRR3fZGO437+J+nIllIcvg wKh0kJV5KKMQcSnyTg/pyI0uiMyLP3zMabTk2c/YuvPdeAGG7ADUai8rG8DXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVSpeVzT+Ua7aWFKBmOHvpWZrigwHwYDVR0j BBgwFoAUAkrwW2R28CJt7o6H5967iwjKBpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdkNTBmMjctN2U4OC00NzE4LTgzZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2 NDc2RjAyMjZERUU4RTg3RTdERUJCOEIwOENBMDY5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjRBRjA1QjY0NzZGMDIyNkRFRThFODdFN0RFQkI4QjA4Q0Ew Njk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvMDI0QUYwNUI2NDc2RjAyMjZERUU4RTg3RTdERUJC OEIwOENBMDY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJnOF6H/dsOnev33a0FVJji1t9R9QrFD7tD zV22xydFKz5krePjNbv2IjpKRra2o0/J1/c5DG9KFYUXItqMvdPtWwNR6V5Ww8Z5 PqXnew+gnUV7UtAZ+yohuKBx8oAH54bIzQQKLx2GXw8j185wv7ahq+eX7KmA7/Vu Ur+aZND2+QwAp0UeOCYG5g2IcipRhVst+vIQVEHJGGb9vPo7/mwvwUzqvSY+BHRm WKCurYgbhZvN9RxT03P6Nwa6Hmb+tTvYrTbv0lD0GG8bokepkBEBH8k/d4P0xSCd 2f5QptLRAdeoWnIkD2CeTeOebFtGDqgQkJ3izyBkCGXFdvqmnQ0= -----END CERTIFICATE-----Generated at Wed May 13 04:54:40 2026 by rpki-client