$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft File: 851B60F64AE44DA53ED7359592F434C5A590686C.mft (raw, json) Hash identifier: K+I3KV7E7DOKEgUxf0dQaV+BSB82nSmTlWC+ms3A++g= Subject key identifier: 48:C4:F2:3C:16:DD:53:81:31:C8:2B:06:72:B5:97:01:D6:31:C6:C4 Authority key identifier: 85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C Certificate issuer: /CN=851B60F64AE44DA53ED7359592F434C5A590686C Certificate serial: 10B072CF01BE89D63971457BFFC6FB65E14D2A48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 09:09:03 +0000 Manifest this update: Wed 17 Jun 2026 09:04:03 +0000 Manifest next update: Thu 18 Jun 2026 13:00:03 +0000 Files and hashes: 1: 851B60F64AE44DA53ED7359592F434C5A590686C.crl (hash: LuoEgfMiVRVXZzO2IQ5pBr3My6JKfhk2QhrXQmvNiTw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b0:72:cf:01:be:89:d6:39:71:45:7b:ff:c6:fb:65:e1:4d:2a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851B60F64AE44DA53ED7359592F434C5A590686C Validity Not Before: Jun 17 09:04:03 2026 GMT Not After : Jun 18 13:00:03 2026 GMT Subject: CN=48C4F23C16DD538131C82B0672B59701D631C6C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:37:39:6e:6f:04:ca:f0:6e:57:70:91:a9: 1f:ee:9d:0b:d9:63:e1:42:da:1e:c2:3b:57:1d:fe: a3:8c:56:df:51:1e:b0:87:ab:c4:b4:1e:74:6d:c8: 05:e3:9d:a6:fa:10:c2:10:4e:8d:c3:36:26:8a:a3: 4e:ae:3c:c3:6c:1a:85:83:22:9f:75:3f:94:66:7f: 6c:27:00:9c:0f:0b:42:45:36:a0:7e:21:33:51:6a: 32:a5:8e:53:c0:07:5b:03:25:d7:8f:a4:93:8f:d8: 67:0b:87:a0:f1:41:f1:ad:08:f3:32:cc:18:7f:c0: ea:8a:ee:6f:65:4f:21:0c:61:8e:b5:ac:86:cb:3c: ad:85:31:e9:c3:6a:e2:12:b7:52:ee:ea:0b:61:ca: 6e:89:3b:6f:23:f4:63:8a:15:2d:72:06:c5:6b:3b: ad:9b:f8:0a:fe:d1:8b:f5:d0:ff:7c:cd:72:8e:4e: f8:c0:5e:93:5a:2f:f6:4e:36:b2:83:01:d1:e1:d8: aa:5a:c2:cb:0a:3b:52:44:8f:6b:4c:b8:16:e5:eb: 37:a7:63:18:97:5c:d8:95:d1:01:2a:95:22:33:17: a4:bc:5a:aa:17:70:b4:85:ee:84:fd:9e:59:da:37: 39:1e:40:4b:f3:ee:19:96:c3:69:7b:f1:07:f8:e5: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C4:F2:3C:16:DD:53:81:31:C8:2B:06:72:B5:97:01:D6:31:C6:C4 X509v3 Authority Key Identifier: keyid:85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ad:a8:62:51:cd:84:26:35:d8:99:32:38:08:4e:ca:ce:96: 9f:eb:e1:a1:72:95:5a:39:ce:2a:bc:d7:99:22:67:1b:3f:a8: d1:02:01:03:b2:f1:6a:07:0d:31:f4:1c:7a:4c:1d:a0:83:9a: d7:c3:e3:a0:c8:6c:e7:5c:30:03:cc:fb:c3:81:df:98:ed:59: 90:eb:c4:19:ef:49:18:39:d5:79:5e:0e:75:9d:10:06:74:ef: d3:e7:ea:68:a1:45:d7:dc:83:fb:aa:70:95:53:ee:1f:fd:89: 45:b6:5a:3c:55:fe:d2:07:f1:f9:e7:02:58:f6:ce:6b:e8:63: 7d:5c:24:78:90:f2:f6:2f:9c:b2:2f:b9:f4:35:c2:08:80:40: 5d:73:26:18:90:d7:c5:8c:92:86:1e:73:90:50:92:a4:08:f1: 72:4d:ce:47:eb:df:3a:05:e8:98:02:b3:f2:be:85:fa:16:b1: 8d:58:1e:01:22:fd:51:7e:33:38:fe:5c:e2:a1:57:74:86:1f: 05:0d:fb:84:e4:4f:ad:d6:ee:be:5b:71:c7:29:d2:68:65:03: ad:5c:88:4f:7e:7e:25:a7:ad:35:5e:26:d8:da:df:b8:2d:68: 7b:44:61:95:18:ea:c0:06:4d:9b:e9:64:31:28:f5:f0:a6:65: a5:12:2c:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELByzwG+idY5cUV7/8b7ZeFNKkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0QzVB NTkwNjg2QzAeFw0yNjA2MTcwOTA0MDNaFw0yNjA2MTgxMzAwMDNaMDMxMTAvBgNV BAMTKDQ4QzRGMjNDMTZERDUzODEzMUM4MkIwNjcyQjU5NzAxRDYzMUM2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjvDc5bm8EyvBuV3CRqR/unQvZ Y+FC2h7CO1cd/qOMVt9RHrCHq8S0HnRtyAXjnab6EMIQTo3DNiaKo06uPMNsGoWD Ip91P5Rmf2wnAJwPC0JFNqB+ITNRajKljlPAB1sDJdePpJOP2GcLh6DxQfGtCPMy zBh/wOqK7m9lTyEMYY61rIbLPK2FMenDauISt1Lu6gthym6JO28j9GOKFS1yBsVr O62b+Ar+0Yv10P98zXKOTvjAXpNaL/ZONrKDAdHh2KpawssKO1JEj2tMuBbl6zen YxiXXNiV0QEqlSIzF6S8WqoXcLSF7oT9nlnaNzkeQEvz7hmWw2l78Qf45fGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSMTyPBbdU4ExyCsGcrWXAdYxxsQwHwYDVR0j BBgwFoAUhRtg9krkTaU+1zWVkvQ0xaWQaGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE0ODZjY2QtMGM5NS00OTFhLWI5ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0 QUU0NERBNTNFRDczNTk1OTJGNDM0QzVBNTkwNjg2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTFCNjBGNjRBRTQ0REE1M0VENzM1OTU5MkY0MzRDNUE1OTA2 ODZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0 QzVBNTkwNjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIutqGJRzYQmNdiZMjgITsrOlp/r4aFylVo5 ziq815kiZxs/qNECAQOy8WoHDTH0HHpMHaCDmtfD46DIbOdcMAPM+8OB35jtWZDr xBnvSRg51XleDnWdEAZ079Pn6mihRdfcg/uqcJVT7h/9iUW2WjxV/tIH8fnnAlj2 zmvoY31cJHiQ8vYvnLIvufQ1wgiAQF1zJhiQ18WMkoYec5BQkqQI8XJNzkfr3zoF 6JgCs/K+hfoWsY1YHgEi/VF+Mzj+XOKhV3SGHwUN+4TkT63W7r5bcccp0mhlA61c iE9+fiWnrTVeJtja37gtaHtEYZUY6sAGTZvpZDEo9fCmZaUSLJU= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:29 2026 by rpki-client