$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft File: 0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft (raw, json) Hash identifier: tcjdqH02HUtTRY9hCK76dIgRPHFyyHF4rYcc58v/NB0= Subject key identifier: 08:40:B0:76:DA:85:77:99:68:86:4F:58:83:36:8A:7A:9F:F0:6B:32 Authority key identifier: 0C:5B:86:D6:54:91:27:DB:C4:D1:6B:A0:A7:C4:9A:54:6D:9E:E8:7B Certificate issuer: /CN=0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B Certificate serial: 4D709E988AC15150FB6DF7885F0660EBEF44FD5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft Manifest number: BD Signing time: Mon 21 Sep 2026 20:11:26 +0000 Manifest this update: Mon 21 Sep 2026 20:06:26 +0000 Manifest next update: Tue 22 Sep 2026 21:01:26 +0000 Files and hashes: 1: 0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl (hash: 8hB92AVpUaWsuVhcGKtKoa+dmSR6sxFVPOGa13imzZk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:70:9e:98:8a:c1:51:50:fb:6d:f7:88:5f:06:60:eb:ef:44:fd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B Validity Not Before: Sep 21 20:06:26 2026 GMT Not After : Sep 22 21:01:26 2026 GMT Subject: CN=0840B076DA85779968864F5883368A7A9FF06B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:b4:bb:d3:93:1a:45:30:8f:e7:0a:79:39: 9e:00:bc:78:a8:b7:3a:5e:d3:eb:0c:c4:ae:7b:df: 7e:ac:a8:05:8a:11:32:42:74:a4:03:04:df:d3:0a: b0:c6:0f:68:e8:50:de:c2:46:32:34:3b:a0:83:0a: d8:2b:51:cf:3c:99:15:0d:d8:ab:58:cf:f1:59:7e: 65:f1:0d:b7:e5:ad:8b:72:b5:ac:31:40:d1:15:93: 43:39:c2:9b:11:8d:9a:1b:d2:95:8e:ac:43:2d:15: 24:89:6d:56:d1:36:b7:69:d2:2e:5a:c3:12:0b:55: 2f:d1:75:df:2f:d4:00:72:d6:4e:5e:e3:3c:c7:6a: e5:0c:cc:5d:b3:8d:f6:70:41:ce:f0:6f:7b:93:3a: 5d:b1:0f:bc:87:cd:a6:22:cb:e3:e1:f5:12:4f:c6: d1:45:47:ec:51:41:23:8d:cd:78:37:84:83:05:e2: 68:2e:43:39:a5:c8:a2:81:91:ab:b8:af:7a:e2:9c: 30:75:22:23:ec:de:45:11:91:8f:86:7f:e9:d9:4a: 1e:a0:d2:76:1b:74:03:25:1c:4c:1e:e8:8d:a0:5a: 40:f0:aa:20:0e:d4:4d:5d:41:ba:fb:a9:28:2d:41: c0:58:25:2e:84:d8:d5:34:f6:a9:55:c1:76:70:29: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:40:B0:76:DA:85:77:99:68:86:4F:58:83:36:8A:7A:9F:F0:6B:32 X509v3 Authority Key Identifier: keyid:0C:5B:86:D6:54:91:27:DB:C4:D1:6B:A0:A7:C4:9A:54:6D:9E:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5c:5b:7b:b8:86:b1:7d:ef:b8:07:8e:e7:99:89:d3:0a:88: 36:0c:70:8c:37:ee:4a:16:ca:38:0c:c1:b5:9f:84:7a:24:5b: 3a:f0:94:78:10:72:51:fb:37:10:81:e7:08:39:0f:71:83:3b: 8e:56:fb:10:e5:98:45:18:9d:dc:8d:95:00:48:f9:58:1b:c7: f6:dc:b3:56:61:05:a4:ca:38:61:97:12:86:a9:f2:5e:30:ed: 3e:14:cd:34:25:15:4e:0b:be:9d:49:17:1b:c1:ee:45:f3:2e: 1d:2a:2e:63:6a:cf:f7:3e:85:3a:bb:12:6d:c8:75:48:5c:ee: 3c:99:5b:dd:05:0c:5e:1e:80:c0:d3:39:7f:d1:11:da:40:f1: 05:b9:73:d9:8b:90:f8:52:b4:8f:f7:1b:d9:b8:f5:16:1e:e1: 95:da:f0:d0:eb:e3:b5:a8:6b:e4:cc:a8:d6:14:2e:76:6e:3b: 22:1e:75:7c:64:9f:e9:69:52:00:59:06:d0:8c:76:28:94:4a: f9:14:89:cd:79:71:7e:5d:53:b0:0a:6a:a3:dd:9a:88:1b:c0: 1c:f9:1a:c4:cc:e7:de:d3:e1:e4:31:84:fe:7b:ea:62:8b:df: 55:ef:81:3b:2b:06:5a:8d:15:45:b4:89:d8:ff:08:27:65:68: c1:2a:25:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXCemIrBUVD7bfeIXwZg6+9E/V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM1Qjg2RDY1NDkxMjdEQkM0RDE2QkEwQTdDNDlBNTQ2 RDlFRTg3QjAeFw0yNjA5MjEyMDA2MjZaFw0yNjA5MjIyMTAxMjZaMDMxMTAvBgNV BAMTKDA4NDBCMDc2REE4NTc3OTk2ODg2NEY1ODgzMzY4QTdBOUZGMDZCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCporS705MaRTCP5wp5OZ4AvHio tzpe0+sMxK57336sqAWKETJCdKQDBN/TCrDGD2joUN7CRjI0O6CDCtgrUc88mRUN 2KtYz/FZfmXxDbflrYtytawxQNEVk0M5wpsRjZob0pWOrEMtFSSJbVbRNrdp0i5a wxILVS/Rdd8v1ABy1k5e4zzHauUMzF2zjfZwQc7wb3uTOl2xD7yHzaYiy+Ph9RJP xtFFR+xRQSONzXg3hIMF4mguQzmlyKKBkau4r3rinDB1IiPs3kURkY+Gf+nZSh6g 0nYbdAMlHEwe6I2gWkDwqiAO1E1dQbr7qSgtQcBYJS6E2NU09qlVwXZwKZRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCECwdtqFd5lohk9YgzaKep/wazIwHwYDVR0j BBgwFoAUDFuG1lSRJ9vE0Wugp8SaVG2e6HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNiNTljZTQtNjZhMi00ZjRkLWIzZDYtOTI5OTQ4NGJhNTZiLzAvMEM1Qjg2RDY1 NDkxMjdEQkM0RDE2QkEwQTdDNDlBNTQ2RDlFRTg3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzVCODZENjU0OTEyN0RCQzREMTZCQTBBN0M0OUE1NDZEOUVF ODdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvMEM1Qjg2RDY1NDkxMjdEQkM0RDE2QkEwQTdDNDlB NTQ2RDlFRTg3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1cW3u4hrF977gHjueZidMKiDYMcIw37koW yjgMwbWfhHokWzrwlHgQclH7NxCB5wg5D3GDO45W+xDlmEUYndyNlQBI+Vgbx/bc s1ZhBaTKOGGXEoap8l4w7T4UzTQlFU4Lvp1JFxvB7kXzLh0qLmNqz/c+hTq7Em3I dUhc7jyZW90FDF4egMDTOX/REdpA8QW5c9mLkPhStI/3G9m49RYe4ZXa8NDr47Wo a+TMqNYULnZuOyIedXxkn+lpUgBZBtCMdiiUSvkUic15cX5dU7AKaqPdmogbwBz5 GsTM597T4eQxhP576mKL31XvgTsrBlqNFUW0idj/CCdlaMEqJc8= -----END CERTIFICATE-----Generated at Mon Sep 21 23:48:40 2026 by rpki-client