$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft (raw, json) Hash identifier: 0A2CVKAAigaAHiBXI/fpYX8LgLDrm/gt8nWE9AViXvA= Subject key identifier: D3:17:8B:17:AF:45:2D:56:7F:3A:AF:FF:45:48:68:13:D2:73:E9:05 Authority key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Certificate issuer: /CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Certificate serial: 2DDB51592B51F610F7BCB7D5585D04C005F80892 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:00:40 +0000 Manifest this update: Fri 24 Jul 2026 04:55:40 +0000 Manifest next update: Sat 25 Jul 2026 08:13:40 +0000 Files and hashes: 1: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl (hash: PMvfFUgLwpgWT/16qm+LNOTrMTbD+vIBLmKGGdCA+4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:db:51:59:2b:51:f6:10:f7:bc:b7:d5:58:5d:04:c0:05:f8:08:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Validity Not Before: Jul 24 04:55:40 2026 GMT Not After : Jul 25 08:13:40 2026 GMT Subject: CN=D3178B17AF452D567F3AAFFF45486813D273E905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:30:47:16:9f:a9:f2:db:39:b9:96:64:d0: b5:85:1a:d6:0b:e7:da:44:82:a8:97:cd:95:99:b7: 11:42:c0:d4:e4:a6:15:44:cd:cc:a7:4a:ea:c9:84: 18:b0:cb:9f:ac:71:7c:22:c3:ee:fa:24:1b:46:4b: 0c:c8:1b:d6:73:f1:ec:a4:f1:58:fe:2f:98:53:ce: 30:e2:30:a6:d2:6a:7a:1c:a5:2e:d2:a2:00:41:4b: 15:a0:d2:62:85:be:51:0b:39:cb:96:0d:02:9b:e1: 22:e0:6a:ac:67:d0:ad:44:61:13:6a:57:27:90:e0: 34:69:61:77:9e:1e:91:f0:1e:e8:ea:34:ca:be:98: be:b8:1c:f5:cf:4e:32:c9:e6:23:14:fc:08:e8:c9: 92:a2:cf:4c:40:6e:45:2f:17:30:5d:54:42:86:1d: 47:05:93:91:45:f2:26:8e:2c:32:3a:c2:e4:db:29: 9c:85:86:14:2d:63:15:c5:0f:5f:ed:96:c1:d5:e1: 9a:5c:7b:f2:d1:42:8f:1d:f4:e7:fc:44:9d:ca:c8: 38:7a:58:48:ba:0b:41:aa:9f:bd:69:1f:33:99:da: f8:f1:4a:5b:15:92:a2:68:a0:18:7a:b7:e6:2f:10: 29:88:3e:a2:6a:5f:95:81:f0:09:5b:9c:3b:32:f5: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:17:8B:17:AF:45:2D:56:7F:3A:AF:FF:45:48:68:13:D2:73:E9:05 X509v3 Authority Key Identifier: keyid:02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9b:7f:63:bd:88:b9:c5:11:9e:ed:c9:c2:91:7b:50:7a:18: 67:f6:83:23:20:8f:16:1b:7e:17:dd:a6:89:d0:a8:89:5a:88: 94:75:3b:7b:03:1d:37:bf:ea:4d:78:8f:a2:6f:d7:ba:c7:d3: 0b:8d:bb:b6:a7:d3:e8:69:9e:c7:ca:81:21:61:29:5b:90:41: fb:ec:d3:53:77:12:55:79:9b:e9:4e:ef:76:c7:ce:cb:6d:17: 58:e5:af:d7:a3:84:86:72:d6:45:9e:a3:d9:58:09:83:47:76: 4f:83:45:c6:2d:4f:c3:68:81:1c:2a:7b:57:15:9e:72:d8:00: 42:57:7d:79:21:8d:df:e2:6e:33:d1:e5:5f:85:11:7e:1f:68: 64:3e:a7:3e:6d:e0:ce:dd:38:41:62:2e:d8:60:7e:ea:5b:f5: b9:cd:40:7f:8f:09:e9:dc:d9:06:11:81:10:24:10:a6:6f:f1: d0:ff:23:bf:d7:0b:35:d9:f5:7f:96:b3:93:08:50:47:4c:5a: 1b:03:ac:7d:28:4c:d1:30:8d:08:49:ab:72:8e:6e:8e:ee:b8: c2:98:66:1b:c5:28:5e:fc:d4:56:27:51:97:b8:be:0d:81:4b: 6d:ec:a7:eb:c4:24:96:b2:72:78:01:92:18:92:a0:e4:09:29: f1:bf:65:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdtRWStR9hD3vLfVWF0EwAX4CJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYy QjA2QzhGMDAeFw0yNjA3MjQwNDU1NDBaFw0yNjA3MjUwODEzNDBaMDMxMTAvBgNV BAMTKEQzMTc4QjE3QUY0NTJENTY3RjNBQUZGRjQ1NDg2ODEzRDI3M0U5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgTBHFp+p8ts5uZZk0LWFGtYL 59pEgqiXzZWZtxFCwNTkphVEzcynSurJhBiwy5+scXwiw+76JBtGSwzIG9Zz8eyk 8Vj+L5hTzjDiMKbSanocpS7SogBBSxWg0mKFvlELOcuWDQKb4SLgaqxn0K1EYRNq VyeQ4DRpYXeeHpHwHujqNMq+mL64HPXPTjLJ5iMU/AjoyZKiz0xAbkUvFzBdVEKG HUcFk5FF8iaOLDI6wuTbKZyFhhQtYxXFD1/tlsHV4Zpce/LRQo8d9Of8RJ3KyDh6 WEi6C0Gqn71pHzOZ2vjxSlsVkqJooBh6t+YvECmIPqJqX5WB8AlbnDsy9bH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xeLF69FLVZ/Oq//RUhoE9Jz6QUwHwYDVR0j BBgwFoAUAktrdAe5e3ZX3VKnNusxxisGyPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQw N0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYyQjA2QzhGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wMjRCNkI3NDA3Qjk3Qjc2NTdERDUyQTczNkVCMzFDNjJCMDZD OEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMx QzYyQjA2QzhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWbf2O9iLnFEZ7tycKRe1B6GGf2gyMgjxYb fhfdponQqIlaiJR1O3sDHTe/6k14j6Jv17rH0wuNu7an0+hpnsfKgSFhKVuQQfvs 01N3ElV5m+lO73bHzsttF1jlr9ejhIZy1kWeo9lYCYNHdk+DRcYtT8NogRwqe1cV nnLYAEJXfXkhjd/ibjPR5V+FEX4faGQ+pz5t4M7dOEFiLthgfupb9bnNQH+PCenc 2QYRgRAkEKZv8dD/I7/XCzXZ9X+Ws5MIUEdMWhsDrH0oTNEwjQhJq3KObo7uuMKY ZhvFKF781FYnUZe4vg2BS23sp+vEJJaycngBkhiSoOQJKfG/ZSA= -----END CERTIFICATE-----Generated at Fri Jul 24 11:17:15 2026 by rpki-client