$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft File: C855F0A07BFEA69901C5345D79932B70E2991F5E.mft (raw, json) Hash identifier: IhbKZ8u8jrBAkiD+IfddTObuOzefP2g7OTcaS5UVIFU= Subject key identifier: BA:10:11:EA:55:1F:7D:CF:50:F1:B5:3A:68:92:4E:82:5F:C8:1A:EC Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Certificate serial: 51EAFD962BB6D5564D36BA1AF4753DB9EF40D61B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 15:20:37 +0000 Manifest this update: Mon 21 Sep 2026 15:15:37 +0000 Manifest next update: Tue 22 Sep 2026 18:19:37 +0000 Files and hashes: 1: C855F0A07BFEA69901C5345D79932B70E2991F5E.crl (hash: MyN+usiHU+COdEHRQfBd9/16hYUMqgEJy2FY8U+6eHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ea:fd:96:2b:b6:d5:56:4d:36:ba:1a:f4:75:3d:b9:ef:40:d6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Validity Not Before: Sep 21 15:15:37 2026 GMT Not After : Sep 22 18:19:37 2026 GMT Subject: CN=BA1011EA551F7DCF50F1B53A68924E825FC81AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:c4:9b:28:cb:4c:44:5d:07:6e:35:81:96: 5c:68:81:52:f7:fc:d7:d7:02:cd:3a:0a:05:2c:04: aa:f7:bd:47:16:c4:f1:6b:25:d2:ee:c6:d2:c5:7f: f4:24:8f:17:b5:fa:66:5a:b5:10:fc:80:39:6b:17: dc:f0:40:77:9b:40:2d:fe:76:61:9e:3e:82:f6:0c: 01:ca:a3:67:ec:56:f7:dc:1a:56:a3:b5:c9:fb:75: 13:c9:ff:a3:59:ad:aa:56:22:9e:2e:6f:2f:24:44: f5:7b:c5:91:89:c0:d5:44:90:eb:53:2f:39:35:bf: f6:77:9f:61:9b:e4:7b:49:49:4e:c5:59:eb:86:a7: f9:5a:0b:dd:24:7b:27:a5:0b:dc:b7:56:6c:9d:9c: 83:f6:75:00:00:21:e5:8f:ef:44:2b:7d:62:43:f5: 2b:24:40:8d:10:1a:84:ee:05:59:84:cc:c0:fb:96: 25:31:f5:20:4a:c9:2a:35:66:62:bf:8f:6b:0d:c0: c9:5b:3f:bb:c8:7c:f7:c3:43:6e:a0:3e:b2:ff:f3: b2:63:a2:85:a1:9d:54:2b:08:4d:f6:6a:2e:67:7a: c1:66:43:d8:58:70:b4:db:55:6e:f6:e7:3b:eb:b8: 50:47:8b:a6:87:c7:f4:25:83:f1:c8:3e:3c:cd:72: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:10:11:EA:55:1F:7D:CF:50:F1:B5:3A:68:92:4E:82:5F:C8:1A:EC X509v3 Authority Key Identifier: keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f7:b3:5d:4f:a3:5b:a9:fe:a2:ea:09:91:01:86:97:3d:09: 8e:a8:23:d6:65:2f:8f:b8:20:cd:b9:b1:c6:6f:8b:3f:c9:04: f5:3c:f2:d7:9b:96:a6:12:ac:b4:fd:ca:1c:fd:b5:bc:a5:b2: c2:b0:33:af:5e:9b:5e:c2:14:25:59:3d:7e:ed:25:40:20:f3: 27:94:ba:22:9f:04:b7:d8:7f:34:3b:e7:23:03:cc:66:e9:7d: 69:06:5f:54:69:28:94:df:43:2e:aa:1b:05:b7:0c:fa:70:4e: 32:e1:56:a8:87:8b:4a:fc:19:a5:5a:f7:dd:15:30:0b:79:de: ec:0b:1b:2c:85:ed:aa:57:55:84:ef:98:a6:67:9a:5c:ca:e1: 47:5b:6e:a3:8e:ba:7a:27:ec:17:19:eb:e7:25:60:f4:52:04: e3:a3:67:ff:e7:42:62:a8:5a:42:52:30:4c:06:44:d0:e0:3c: 08:c1:a3:48:4c:b9:c2:ee:4a:f2:22:4c:1c:84:f5:f1:69:48: 3b:36:cb:1d:6a:34:6a:20:e7:6f:37:4e:6e:df:35:64:cc:3d: dd:4c:85:ab:50:c4:f0:2b:e8:1c:91:a3:a2:75:1d:f4:12:83: 2c:dc:12:7e:37:20:5a:86:52:39:1b:0f:38:c7:64:63:2a:c9: 5f:b2:65:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUer9liu21VZNNroa9HU9ue9A1hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBF Mjk5MUY1RTAeFw0yNjA5MjExNTE1MzdaFw0yNjA5MjIxODE5MzdaMDMxMTAvBgNV BAMTKEJBMTAxMUVBNTUxRjdEQ0Y1MEYxQjUzQTY4OTI0RTgyNUZDODFBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0MSbKMtMRF0HbjWBllxogVL3 /NfXAs06CgUsBKr3vUcWxPFrJdLuxtLFf/Qkjxe1+mZatRD8gDlrF9zwQHebQC3+ dmGePoL2DAHKo2fsVvfcGlajtcn7dRPJ/6NZrapWIp4uby8kRPV7xZGJwNVEkOtT Lzk1v/Z3n2Gb5HtJSU7FWeuGp/laC90keyelC9y3VmydnIP2dQAAIeWP70QrfWJD 9SskQI0QGoTuBVmEzMD7liUx9SBKySo1ZmK/j2sNwMlbP7vIfPfDQ26gPrL/87Jj ooWhnVQrCE32ai5nesFmQ9hYcLTbVW725zvruFBHi6aHx/Qlg/HIPjzNchVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhAR6lUffc9Q8bU6aJJOgl/IGuwwHwYDVR0j BBgwFoAUyFXwoHv+ppkBxTRdeZMrcOKZH14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkZTFhOGUtYzJiOC00OTk2LTk0OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3 QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBFMjk5MUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU1RjBBMDdCRkVBNjk5MDFDNTM0NUQ3OTkzMkI3MEUyOTkx RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJC NzBFMjk5MUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz3s11Po1up/qLqCZEBhpc9CY6oI9ZlL4+4 IM25scZviz/JBPU88teblqYSrLT9yhz9tbylssKwM69em17CFCVZPX7tJUAg8yeU uiKfBLfYfzQ75yMDzGbpfWkGX1RpKJTfQy6qGwW3DPpwTjLhVqiHi0r8GaVa990V MAt53uwLGyyF7apXVYTvmKZnmlzK4UdbbqOOunon7BcZ6+clYPRSBOOjZ//nQmKo WkJSMEwGRNDgPAjBo0hMucLuSvIiTByE9fFpSDs2yx1qNGog5283Tm7fNWTMPd1M hatQxPAr6ByRo6J1HfQSgyzcEn43IFqGUjkbDzjHZGMqyV+yZd4= -----END CERTIFICATE-----Generated at Tue Sep 22 03:08:12 2026 by rpki-client