$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft File: 851B60F64AE44DA53ED7359592F434C5A590686C.mft (raw, json) Hash identifier: o6JcygOwg7iuPtSI3842JnotWPtun7iIBN6HIVgUYJc= Subject key identifier: C4:EE:A3:1F:50:ED:D4:E0:D7:F3:FE:61:E9:52:D4:1B:D9:DA:B4:28 Authority key identifier: 85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C Certificate issuer: /CN=851B60F64AE44DA53ED7359592F434C5A590686C Certificate serial: 2C29FD94578C035A68DA419ED98D11F235529B37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft Manifest number: BF Signing time: Wed 23 Sep 2026 02:34:15 +0000 Manifest this update: Wed 23 Sep 2026 02:29:15 +0000 Manifest next update: Thu 24 Sep 2026 02:43:15 +0000 Files and hashes: 1: 851B60F64AE44DA53ED7359592F434C5A590686C.crl (hash: 1kWLz4w/KjOhJpaJel5pHyJa5X6RTlA4cmp545MuHfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:29:fd:94:57:8c:03:5a:68:da:41:9e:d9:8d:11:f2:35:52:9b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851B60F64AE44DA53ED7359592F434C5A590686C Validity Not Before: Sep 23 02:29:15 2026 GMT Not After : Sep 24 02:43:15 2026 GMT Subject: CN=C4EEA31F50EDD4E0D7F3FE61E952D41BD9DAB428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:67:47:31:47:16:d6:ef:bf:37:0a:a6:da: 5b:f4:00:b9:8b:a8:f9:3b:03:6b:5c:5d:55:17:7c: e2:e2:8c:06:25:40:6c:f1:66:88:06:f3:b0:fe:56: a4:20:8a:bc:b4:58:cf:cd:a3:91:c2:0a:c2:bc:b9: 78:3c:7b:55:60:57:27:31:d2:fa:d0:0f:99:88:87: 42:89:0b:33:08:51:a0:1c:e7:d4:a1:f9:3e:b1:b3: 14:e0:56:ab:62:d6:b3:1b:23:0d:73:3c:6d:eb:43: 3c:b0:b5:0d:19:96:af:a6:74:da:19:31:ca:cf:f6: 1f:9c:1d:5a:12:ae:92:f8:0a:ef:41:a1:e6:c3:ce: c2:a6:4f:01:67:ef:99:0b:5b:0f:8b:50:d7:33:de: c5:d8:e4:1f:77:5e:39:45:00:60:3f:d9:5a:18:41: a7:e6:e9:62:1b:18:38:5a:50:72:38:95:78:5d:e2: aa:40:c1:c3:46:07:b9:a7:94:e7:9f:8e:17:14:ec: 37:41:c7:e1:c9:e6:73:1e:09:6b:82:2d:99:6f:0d: 01:f9:59:ea:79:3b:81:91:f2:11:a4:05:e8:e2:e4: 01:e5:eb:f7:73:16:f8:b1:72:8a:05:84:4c:4a:b9: 47:22:e6:41:6c:4b:be:b1:10:0d:18:c1:91:54:ec: d9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EE:A3:1F:50:ED:D4:E0:D7:F3:FE:61:E9:52:D4:1B:D9:DA:B4:28 X509v3 Authority Key Identifier: keyid:85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d2:51:ec:50:ef:8e:a2:9c:1b:bd:52:13:b9:01:9f:53:d6: 27:79:19:e8:11:01:80:56:b1:7a:24:2f:e0:09:7b:a8:95:bc: 1b:ff:c1:e9:0d:fc:83:6b:21:44:24:db:e9:b2:62:e9:fb:c7: 9a:ef:b1:9a:4d:90:99:db:ff:ac:12:59:f1:c3:07:e1:05:93: 1e:c2:01:bd:cd:48:83:50:5f:c5:df:10:1e:2f:3d:45:a4:df: 4b:ae:b2:8a:1b:7e:2b:93:a8:5b:4a:da:1c:b1:68:ae:bf:4a: 6e:b5:51:b8:92:9b:6b:3a:ef:03:6d:51:ed:4b:82:f5:99:66: 89:13:74:0e:10:8a:64:7e:8c:8f:9b:90:07:9e:e1:e7:55:22: ee:11:25:a7:44:38:c1:71:b8:56:e6:f4:78:95:b7:3f:34:0a: 92:d1:b0:e5:c9:73:d3:2f:b3:94:e8:98:ed:91:31:00:e7:ab: 3a:2e:57:95:d8:37:97:8b:51:7c:df:90:ba:44:31:95:33:e0: a5:a4:0d:d3:dc:05:ab:88:11:29:e0:92:d1:9c:0e:b7:d1:89: 3f:ec:b8:0a:2d:71:f6:31:6a:ea:a3:7f:a3:3c:8e:55:38:91: 08:6f:66:a6:46:06:6a:6b:75:fa:56:0f:ed:26:c0:86:cc:c9: 09:61:08:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCn9lFeMA1po2kGe2Y0R8jVSmzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0QzVB NTkwNjg2QzAeFw0yNjA5MjMwMjI5MTVaFw0yNjA5MjQwMjQzMTVaMDMxMTAvBgNV BAMTKEM0RUVBMzFGNTBFREQ0RTBEN0YzRkU2MUU5NTJENDFCRDlEQUI0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSIWdHMUcW1u+/Nwqm2lv0ALmL qPk7A2tcXVUXfOLijAYlQGzxZogG87D+VqQgiry0WM/No5HCCsK8uXg8e1VgVycx 0vrQD5mIh0KJCzMIUaAc59Sh+T6xsxTgVqti1rMbIw1zPG3rQzywtQ0Zlq+mdNoZ McrP9h+cHVoSrpL4Cu9BoebDzsKmTwFn75kLWw+LUNcz3sXY5B93XjlFAGA/2VoY Qafm6WIbGDhaUHI4lXhd4qpAwcNGB7mnlOefjhcU7DdBx+HJ5nMeCWuCLZlvDQH5 Wep5O4GR8hGkBeji5AHl6/dzFvixcooFhExKuUci5kFsS76xEA0YwZFU7NmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxO6jH1Dt1ODX8/5h6VLUG9natCgwHwYDVR0j BBgwFoAUhRtg9krkTaU+1zWVkvQ0xaWQaGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE0ODZjY2QtMGM5NS00OTFhLWI5ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0 QUU0NERBNTNFRDczNTk1OTJGNDM0QzVBNTkwNjg2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTFCNjBGNjRBRTQ0REE1M0VENzM1OTU5MkY0MzRDNUE1OTA2 ODZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0 QzVBNTkwNjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXSUexQ746inBu9UhO5AZ9T1id5GegRAYBW sXokL+AJe6iVvBv/wekN/INrIUQk2+myYun7x5rvsZpNkJnb/6wSWfHDB+EFkx7C Ab3NSINQX8XfEB4vPUWk30uusoobfiuTqFtK2hyxaK6/Sm61UbiSm2s67wNtUe1L gvWZZokTdA4QimR+jI+bkAee4edVIu4RJadEOMFxuFbm9HiVtz80CpLRsOXJc9Mv s5TomO2RMQDnqzouV5XYN5eLUXzfkLpEMZUz4KWkDdPcBauIESngktGcDrfRiT/s uAotcfYxauqjf6M8jlU4kQhvZqZGBmprdfpWD+0mwIbMyQlhCLY= -----END CERTIFICATE-----Generated at Wed Sep 23 04:35:51 2026 by rpki-client