$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft (raw, json) Hash identifier: 3/mZFgCTZcM2JjtWlGK+Tg5B6hQClYO9RtHG6IaluwY= Subject key identifier: B9:13:55:87:7D:E6:B4:D3:99:FB:B0:64:02:3B:81:60:01:F8:2F:43 Authority key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Certificate issuer: /CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Certificate serial: 2E8D89F47599448324CB38336CBAABAC088188B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 02:48:48 +0000 Manifest this update: Fri 25 Sep 2026 02:43:48 +0000 Manifest next update: Sat 26 Sep 2026 04:58:48 +0000 Files and hashes: 1: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl (hash: yMzEIcgKBf3321Lk4qIuESWuN7vpLfsoivg1mXtiZmE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8d:89:f4:75:99:44:83:24:cb:38:33:6c:ba:ab:ac:08:81:88:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Validity Not Before: Sep 25 02:43:48 2026 GMT Not After : Sep 26 04:58:48 2026 GMT Subject: CN=B91355877DE6B4D399FBB064023B816001F82F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:47:04:df:74:a4:69:96:cf:c4:b7:af:46: 5a:83:7b:ed:ba:4e:11:ee:c3:06:0c:fe:5a:fe:ff: 8d:48:18:25:33:63:79:7b:f8:4a:aa:ed:08:12:d4: e6:14:27:54:05:99:1f:da:0f:50:4d:23:b6:93:4c: 0e:e3:89:8b:eb:ed:be:a3:bc:33:ad:79:a9:6d:0f: 7d:76:1e:cb:e0:72:ec:0f:cd:03:ba:71:37:be:2e: 51:0f:78:1c:e0:d8:68:dc:e4:c4:0d:b8:37:fd:2c: c4:d6:d6:89:33:9d:ae:c5:33:8f:b6:f9:ad:68:a5: c7:ee:60:a1:d3:c6:3a:bc:58:f8:92:83:59:b5:f3: 0f:0a:8d:7b:c1:e7:ac:32:34:bb:94:ab:6c:55:29: fd:09:f0:b3:17:2c:de:30:e8:8b:e2:64:10:53:45: 0d:89:5a:38:24:39:ea:ec:9e:86:ce:ab:ef:de:93: 54:bf:3c:8f:b8:df:54:50:59:ac:36:7f:39:7d:6c: 55:53:57:fb:b2:30:88:63:d8:a5:5b:ed:10:4e:97: c6:2d:f9:e9:3d:c2:75:b3:1a:99:f8:1e:89:8e:1e: 87:78:19:5c:92:ad:61:9a:a8:26:58:23:92:15:05: 43:9a:d5:34:eb:ec:72:f0:27:61:fb:f0:7d:0e:75: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:13:55:87:7D:E6:B4:D3:99:FB:B0:64:02:3B:81:60:01:F8:2F:43 X509v3 Authority Key Identifier: keyid:02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:78:7c:79:ca:62:ae:e3:9c:99:0a:c3:42:37:55:f7:0c:15: 19:36:10:68:3b:79:8d:a4:82:cd:de:e4:43:1f:0f:61:80:91: 9a:4b:ca:6d:b3:e2:ee:07:42:09:99:5f:56:99:8e:22:29:bc: ce:65:54:6d:25:bd:4a:cf:2d:cc:d2:21:16:3a:5a:be:c9:35: 30:f0:93:a3:c1:d2:d6:4b:88:0d:e2:28:f6:62:68:76:ef:d4: 4c:94:80:36:a0:e1:7e:85:69:11:d0:f5:93:6c:01:18:08:c9: ee:01:c9:78:43:9e:53:be:c5:4a:b3:21:1c:41:17:e3:8f:11: be:a0:d4:2c:be:32:3e:19:4b:7e:bb:e0:9c:b3:b7:ac:7e:52: 30:e6:f5:8f:52:04:53:c9:7b:d7:ed:a0:b7:80:a9:8c:70:f0: 22:f8:44:b1:81:e3:de:48:4e:14:ec:e5:88:e0:18:78:df:29: 26:c6:ac:58:e0:76:a1:bc:b5:84:28:b5:29:79:9b:43:56:2e: b7:ac:f3:d8:bc:8a:55:9c:9f:e0:9b:d6:39:ca:6f:ad:e6:6e: c4:5a:15:0c:b4:65:1a:ab:0d:83:53:bc:ef:df:02:b0:26:38: 06:0b:2e:b7:df:fa:d3:27:88:ab:07:83:6c:a8:6b:fd:74:a8: b8:e9:40:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULo2J9HWZRIMkyzgzbLqrrAiBiLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYy QjA2QzhGMDAeFw0yNjA5MjUwMjQzNDhaFw0yNjA5MjYwNDU4NDhaMDMxMTAvBgNV BAMTKEI5MTM1NTg3N0RFNkI0RDM5OUZCQjA2NDAyM0I4MTYwMDFGODJGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZoEcE33SkaZbPxLevRlqDe+26 ThHuwwYM/lr+/41IGCUzY3l7+Eqq7QgS1OYUJ1QFmR/aD1BNI7aTTA7jiYvr7b6j vDOtealtD312HsvgcuwPzQO6cTe+LlEPeBzg2Gjc5MQNuDf9LMTW1okzna7FM4+2 +a1opcfuYKHTxjq8WPiSg1m18w8KjXvB56wyNLuUq2xVKf0J8LMXLN4w6IviZBBT RQ2JWjgkOersnobOq+/ek1S/PI+431RQWaw2fzl9bFVTV/uyMIhj2KVb7RBOl8Yt +ek9wnWzGpn4HomOHod4GVySrWGaqCZYI5IVBUOa1TTr7HLwJ2H78H0OdSJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuRNVh33mtNOZ+7BkAjuBYAH4L0MwHwYDVR0j BBgwFoAUAktrdAe5e3ZX3VKnNusxxisGyPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQw N0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYyQjA2QzhGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wMjRCNkI3NDA3Qjk3Qjc2NTdERDUyQTczNkVCMzFDNjJCMDZD OEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMx QzYyQjA2QzhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN4fHnKYq7jnJkKw0I3VfcMFRk2EGg7eY2k gs3e5EMfD2GAkZpLym2z4u4HQgmZX1aZjiIpvM5lVG0lvUrPLczSIRY6Wr7JNTDw k6PB0tZLiA3iKPZiaHbv1EyUgDag4X6FaRHQ9ZNsARgIye4ByXhDnlO+xUqzIRxB F+OPEb6g1Cy+Mj4ZS3674Jyzt6x+UjDm9Y9SBFPJe9ftoLeAqYxw8CL4RLGB495I ThTs5YjgGHjfKSbGrFjgdqG8tYQotSl5m0NWLres89i8ilWcn+Cb1jnKb63mbsRa FQy0ZRqrDYNTvO/fArAmOAYLLrff+tMniKsHg2yoa/10qLjpQDA= -----END CERTIFICATE-----Generated at Fri Sep 25 16:25:37 2026 by rpki-client