$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft File: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft (raw, json) Hash identifier: lepdiHzvOzJWJNlSIOWZ82Zj8i9fNC4qpvJ9q/JjxYw= Subject key identifier: A8:6D:62:58:EC:8E:79:5A:00:92:55:FC:82:F8:0D:46:D5:10:50:D7 Authority key identifier: 0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC Certificate issuer: /CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Certificate serial: 5A3883AC2B0EC95B474D595E25189461AAF8ACBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:04:01 +0000 Manifest this update: Mon 21 Sep 2026 13:59:01 +0000 Manifest next update: Tue 22 Sep 2026 15:10:01 +0000 Files and hashes: 1: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl (hash: 8FKfmopxdd1D/PLG+4Pb+6b6C2rzxK0QIIq/m404aI4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:38:83:ac:2b:0e:c9:5b:47:4d:59:5e:25:18:94:61:aa:f8:ac:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Validity Not Before: Sep 21 13:59:01 2026 GMT Not After : Sep 22 15:10:01 2026 GMT Subject: CN=A86D6258EC8E795A009255FC82F80D46D51050D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:40:7a:1a:cb:85:d4:c0:2f:c8:34:95:a3:60: be:58:7c:92:06:f5:6e:9b:d7:2a:3b:fe:af:32:17: 1b:84:63:ec:ed:93:35:d9:b5:e4:3d:4f:da:9e:0e: 6f:83:b4:f0:bd:bd:92:99:fb:9f:9a:2e:c9:39:6c: 20:d1:50:a1:c3:20:48:38:26:cc:02:19:02:38:e3: 0a:36:b1:1e:a2:f5:4c:75:8b:1f:16:37:0c:47:65: 17:66:5f:f5:e9:19:4b:f4:99:9b:b0:6d:81:79:d8: 99:aa:60:37:d0:be:2e:43:f8:78:82:45:c2:9f:fe: dc:b0:5f:15:b4:cb:45:51:f9:40:12:69:ad:7c:ec: 19:76:c8:e1:9b:18:aa:2c:f7:a5:50:55:05:1b:a0: b2:a9:aa:51:ce:34:46:e3:ec:03:2d:27:79:f3:6c: 98:5d:1c:d2:c7:2a:96:aa:e3:b6:43:b9:3e:97:f9: c5:36:1c:47:02:43:af:68:da:b2:80:12:2c:d9:45: bf:3e:23:04:6a:fd:05:9c:a3:39:1c:b9:93:11:9e: 6a:96:85:44:7c:64:e5:06:f3:5a:93:4c:d0:f8:5d: e0:96:3f:b5:c3:20:c8:24:f8:b2:ea:89:b5:83:b4: 6c:d4:9d:0c:cb:0c:f8:7c:f3:10:67:c7:b0:23:44: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6D:62:58:EC:8E:79:5A:00:92:55:FC:82:F8:0D:46:D5:10:50:D7 X509v3 Authority Key Identifier: keyid:0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:26:c6:80:12:26:34:67:05:01:c6:56:14:0a:c6:23:9a:40: d9:5f:c0:4a:fa:e6:10:d8:b9:fe:e5:e5:93:22:91:d0:d5:34: bf:68:cb:32:63:5b:36:11:4d:f9:1f:9a:74:eb:2f:d1:cc:64: 47:e1:0c:68:c2:6f:ec:5f:e8:38:18:36:4e:fd:8f:a0:38:fe: 01:47:d3:92:f0:dd:9c:d5:3a:53:97:eb:e7:db:a1:0c:2a:34: 5a:f7:28:f6:4f:bc:43:bd:2e:c5:6a:4a:23:dd:cd:62:09:23: e7:f2:27:b5:d6:70:90:da:fa:0e:da:29:e3:64:4a:83:29:c8: 50:2e:06:8b:32:68:c5:27:7f:9e:66:66:75:91:0f:d8:13:13: 0c:58:4c:a6:60:f1:5e:55:b8:1f:9d:2f:49:96:66:18:68:57: 15:32:4c:15:df:cb:09:54:11:18:06:0a:f9:a4:4d:bb:ca:f7: 76:17:f8:a0:21:4b:71:0f:81:25:de:25:75:ae:d0:d7:72:e2: 0e:69:aa:ce:25:64:90:ea:91:90:4c:e4:9d:39:75:b4:91:65: ca:ee:69:e9:e9:14:45:57:f2:c1:a6:9e:cd:84:9a:44:4e:32: f2:e5:e8:cd:89:7b:01:b5:7d:0e:9c:60:98:a3:96:b3:79:80: ac:f4:f4:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjiDrCsOyVtHTVleJRiUYar4rLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBF NUQ3NkNFQzAeFw0yNjA5MjExMzU5MDFaFw0yNjA5MjIxNTEwMDFaMDMxMTAvBgNV BAMTKEE4NkQ2MjU4RUM4RTc5NUEwMDkyNTVGQzgyRjgwRDQ2RDUxMDUwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQHoay4XUwC/INJWjYL5YfJIG 9W6b1yo7/q8yFxuEY+ztkzXZteQ9T9qeDm+DtPC9vZKZ+5+aLsk5bCDRUKHDIEg4 JswCGQI44wo2sR6i9Ux1ix8WNwxHZRdmX/XpGUv0mZuwbYF52JmqYDfQvi5D+HiC RcKf/tywXxW0y0VR+UASaa187Bl2yOGbGKos96VQVQUboLKpqlHONEbj7AMtJ3nz bJhdHNLHKpaq47ZDuT6X+cU2HEcCQ69o2rKAEizZRb8+IwRq/QWcozkcuZMRnmqW hUR8ZOUG81qTTND4XeCWP7XDIMgk+LLqibWDtGzUnQzLDPh88xBnx7AjRI+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqG1iWOyOeVoAklX8gvgNRtUQUNcwHwYDVR0j BBgwFoAUDB7E1r4dehkrptGIygx1cOXXbOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4MGY3NTUtNWMyNy00MGY4LTgwYWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZC RTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBFNUQ3NkNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzFFQzRENkJFMUQ3QTE5MkJBNkQxODhDQTBDNzU3MEU1RDc2 Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1 NzBFNUQ3NkNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkmxoASJjRnBQHGVhQKxiOaQNlfwEr65hDY uf7l5ZMikdDVNL9oyzJjWzYRTfkfmnTrL9HMZEfhDGjCb+xf6DgYNk79j6A4/gFH 05Lw3ZzVOlOX6+fboQwqNFr3KPZPvEO9LsVqSiPdzWIJI+fyJ7XWcJDa+g7aKeNk SoMpyFAuBosyaMUnf55mZnWRD9gTEwxYTKZg8V5VuB+dL0mWZhhoVxUyTBXfywlU ERgGCvmkTbvK93YX+KAhS3EPgSXeJXWu0Ndy4g5pqs4lZJDqkZBM5J05dbSRZcru aenpFEVX8sGmns2EmkROMvLl6M2JewG1fQ6cYJijlrN5gKz09Ck= -----END CERTIFICATE-----Generated at Tue Sep 22 10:20:03 2026 by rpki-client