$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft File: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft (raw, json) Hash identifier: pI/QHDoS+e8isf55S5GwVs+w1zXgvRXCylsIMRE2xrk= Subject key identifier: 7C:67:1E:C9:66:17:B7:32:7B:4D:F4:5F:B9:47:25:13:1C:D5:42:AD Authority key identifier: 02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 Certificate issuer: /CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Certificate serial: 2ABF6F69E19FC4C75EF7276AD4F5015C0574662D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 13:10:58 +0000 Manifest this update: Sat 14 Nov 2026 13:05:58 +0000 Manifest next update: Sun 15 Nov 2026 16:14:58 +0000 Files and hashes: 1: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl (hash: Lhl7GEw0RG2DIE80rMYRIzZIZ2DKUPRXqeUg13DfYFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bf:6f:69:e1:9f:c4:c7:5e:f7:27:6a:d4:f5:01:5c:05:74:66:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024B6B7407B97B7657DD52A736EB31C62B06C8F0 Validity Not Before: Nov 14 13:05:58 2026 GMT Not After : Nov 15 16:14:58 2026 GMT Subject: CN=7C671EC96617B7327B4DF45FB94725131CD542AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:47:92:be:cc:f2:6d:8e:a4:21:93:b4:7a: b4:52:c4:65:4b:b0:0a:a3:f3:26:4e:cd:86:71:d5: c6:6c:73:59:23:80:84:53:99:f1:9c:22:dc:ab:8b: 2d:b4:d7:11:d3:59:16:d7:f5:5b:66:bc:57:16:65: 9a:e0:bd:22:99:9a:c2:db:c1:ad:61:4b:26:4a:ac: 32:bc:4e:fe:6f:88:dc:8c:b7:b3:e4:36:1a:51:1a: 09:6b:c2:b1:99:7d:35:e8:bc:48:7f:c2:bd:38:8a: f4:7d:09:dc:1d:12:57:84:e6:36:dd:81:44:85:cc: 5e:e0:ed:79:1b:53:2c:81:dc:99:6a:04:fe:78:d6: 9d:b7:ed:c5:38:60:25:d6:dd:a3:41:e6:be:7b:a7: bb:c0:d9:71:64:72:b0:06:3e:54:4d:9d:45:3c:4c: 80:33:b6:91:1d:07:da:3a:58:75:f2:5d:60:29:53: 92:9d:27:f4:d3:7b:01:66:60:e9:d5:03:23:9a:92: 76:3e:79:36:70:ca:47:bc:ab:bd:d3:31:bb:d5:d3: ed:d9:5c:98:cf:47:f7:42:6b:c0:39:8c:60:e1:7e: e0:36:01:97:5b:3c:a9:61:9f:d1:16:3b:2a:48:e6: 57:99:a8:71:88:ec:f0:92:5d:aa:26:ff:e7:0a:bc: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:67:1E:C9:66:17:B7:32:7B:4D:F4:5F:B9:47:25:13:1C:D5:42:AD X509v3 Authority Key Identifier: keyid:02:4B:6B:74:07:B9:7B:76:57:DD:52:A7:36:EB:31:C6:2B:06:C8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/024B6B7407B97B7657DD52A736EB31C62B06C8F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:67:87:9d:d7:a1:08:ac:3a:fc:95:32:6b:e8:d4:4b:7e:a0: fe:1f:c9:84:83:3e:a0:51:49:6f:ff:51:48:50:b2:65:82:55: 29:18:cf:10:27:18:39:dc:c7:21:ac:53:1b:33:53:0d:ab:ed: eb:92:b8:e3:7f:52:dd:4f:a4:f9:f7:83:cd:ff:a0:0e:df:5f: 5e:bd:f2:d9:60:e3:e8:4c:79:b6:00:f4:18:f2:0c:e1:4d:8b: da:70:64:e0:76:74:a4:73:9c:df:5c:72:0b:56:a9:8b:07:b4: 43:ce:fa:36:cd:d1:a5:d2:19:18:76:45:5a:6a:91:6c:72:6e: 6b:f6:e4:7d:e1:f6:b9:b5:53:20:f0:7c:88:5a:21:39:ce:ba: f5:1b:8c:13:89:3d:46:41:a8:54:75:a1:02:de:b8:fa:55:e7: 4c:66:05:a0:fa:a6:b8:1f:91:1b:e1:e5:8a:59:4a:e7:79:ea: af:6c:91:52:69:86:de:fb:57:87:f7:06:60:e2:4a:5a:82:86: cb:8f:d0:af:42:c4:74:82:f5:fc:bc:fd:89:1d:bf:03:bb:85: 95:f6:ea:3f:c2:67:a1:47:fa:30:50:63:37:4c:c1:8a:0f:65: 4a:fd:6a:8e:fd:df:d7:b3:27:aa:46:21:b5:10:9c:50:8c:8d: 4c:9e:82:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKr9vaeGfxMde9ydq1PUBXAV0Zi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYy QjA2QzhGMDAeFw0yNjExMTQxMzA1NThaFw0yNjExMTUxNjE0NThaMDMxMTAvBgNV BAMTKDdDNjcxRUM5NjYxN0I3MzI3QjRERjQ1RkI5NDcyNTEzMUNENTQyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJk0eSvszybY6kIZO0erRSxGVL sAqj8yZOzYZx1cZsc1kjgIRTmfGcItyriy201xHTWRbX9VtmvFcWZZrgvSKZmsLb wa1hSyZKrDK8Tv5viNyMt7PkNhpRGglrwrGZfTXovEh/wr04ivR9CdwdEleE5jbd gUSFzF7g7XkbUyyB3JlqBP541p237cU4YCXW3aNB5r57p7vA2XFkcrAGPlRNnUU8 TIAztpEdB9o6WHXyXWApU5KdJ/TTewFmYOnVAyOaknY+eTZwyke8q73TMbvV0+3Z XJjPR/dCa8A5jGDhfuA2AZdbPKlhn9EWOypI5leZqHGI7PCSXaom/+cKvE4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfGceyWYXtzJ7TfRfuUclExzVQq0wHwYDVR0j BBgwFoAUAktrdAe5e3ZX3VKnNusxxisGyPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQw N0I5N0I3NjU3REQ1MkE3MzZFQjMxQzYyQjA2QzhGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wMjRCNkI3NDA3Qjk3Qjc2NTdERDUyQTczNkVCMzFDNjJCMDZD OEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvMDI0QjZCNzQwN0I5N0I3NjU3REQ1MkE3MzZFQjMx QzYyQjA2QzhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJnh53XoQisOvyVMmvo1Et+oP4fyYSDPqBR SW//UUhQsmWCVSkYzxAnGDncxyGsUxszUw2r7euSuON/Ut1PpPn3g83/oA7fX169 8tlg4+hMebYA9BjyDOFNi9pwZOB2dKRznN9ccgtWqYsHtEPO+jbN0aXSGRh2RVpq kWxybmv25H3h9rm1UyDwfIhaITnOuvUbjBOJPUZBqFR1oQLeuPpV50xmBaD6prgf kRvh5YpZSud56q9skVJpht77V4f3BmDiSlqChsuP0K9CxHSC9fy8/YkdvwO7hZX2 6j/CZ6FH+jBQYzdMwYoPZUr9ao7939ezJ6pGIbUQnFCMjUyegvU= -----END CERTIFICATE-----Generated at Sun Nov 15 08:03:46 2026 by rpki-client