$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft File: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft (raw, json) Hash identifier: 1XQ+bKcwyD/hA4XDzEGWsdCnwnWEquQj2uSb+H98LVc= Subject key identifier: D9:24:58:0C:99:62:32:A7:82:42:75:E7:13:E7:B9:67:25:C0:58:F8 Authority key identifier: 61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE Certificate issuer: /CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE Certificate serial: 2B7FF6BE95B17041A0F4F74ADE036431D8101334 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft Manifest number: BC Signing time: Sun 20 Sep 2026 14:29:50 +0000 Manifest this update: Sun 20 Sep 2026 14:24:50 +0000 Manifest next update: Mon 21 Sep 2026 17:41:50 +0000 Files and hashes: 1: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl (hash: yIhpoaSdoJSiJApqAQKoXABwvC2I96vRNhHiKMDVyzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7f:f6:be:95:b1:70:41:a0:f4:f7:4a:de:03:64:31:d8:10:13:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE Validity Not Before: Sep 20 14:24:50 2026 GMT Not After : Sep 21 17:41:50 2026 GMT Subject: CN=D924580C996232A7824275E713E7B96725C058F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:3c:0a:c8:a3:d5:48:0d:f1:8e:f2:8b:29: 01:4b:92:de:83:c4:7c:a3:9a:9f:b3:0e:ec:38:27: cb:8c:fa:d9:bb:15:ba:de:4c:b7:06:a6:a7:21:2a: 53:2d:08:95:1c:ee:f3:53:ca:94:e9:54:d7:fa:6c: a9:e0:4e:d8:fc:32:1b:19:ad:88:f6:0b:b1:af:9b: f1:ce:cb:32:2b:5d:da:1b:3d:b4:a1:cd:d6:83:f4: d1:96:07:72:3b:0b:cf:83:42:ea:97:d9:0c:7b:ed: 41:12:de:10:b4:64:78:b2:0a:ec:d9:54:80:61:03: e3:d8:72:ab:7b:a5:b0:15:56:7f:3b:8e:d2:63:ce: 68:ef:55:25:39:a8:fc:ca:e1:a7:b7:5d:d9:1d:62: 78:11:a6:a9:80:b4:e1:d1:39:71:74:66:42:04:86: 6a:85:df:ac:1d:5d:1f:86:e0:c5:b0:5f:6e:5c:75: e1:24:5a:92:e7:8d:2f:70:25:b2:53:6c:3f:b8:6f: d6:5f:4c:92:b9:b4:cc:cf:f1:52:3c:48:51:f9:6b: fe:ca:1e:04:be:b8:06:ae:b5:41:2c:da:2c:4c:ab: dd:ad:f4:4e:e7:e7:bc:7d:02:45:ee:27:7a:61:61: 8c:ca:b7:f3:8a:3a:0a:56:20:43:8e:2a:5b:0b:f8: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:24:58:0C:99:62:32:A7:82:42:75:E7:13:E7:B9:67:25:C0:58:F8 X509v3 Authority Key Identifier: keyid:61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8b:85:e2:fd:ed:3d:8f:e7:3f:9c:4a:4f:72:85:b8:1f:f0: 56:ff:b9:86:6c:b4:76:4e:a5:0f:90:9a:42:c8:2c:bc:fc:b0: 49:a7:e3:60:49:29:05:b9:ae:43:d6:1d:82:a5:ad:02:a3:d8: c4:88:6f:97:14:f6:0e:4c:30:76:eb:87:a1:d8:be:00:49:e9: 04:98:a1:f6:c4:48:04:fa:b1:96:17:4f:94:77:e4:80:cb:82: bb:0f:86:af:3f:f7:3d:5d:c1:d7:4a:a2:79:4f:12:f8:7b:08: 23:30:ab:ad:6a:48:58:cd:80:83:f2:d7:fc:56:c0:a6:ef:bf: dd:a2:6f:48:96:03:11:dd:97:5c:5b:0b:5d:71:ef:98:ee:9e: d1:d8:95:dd:b8:86:7d:d6:34:50:99:b4:7a:39:ac:8b:6a:d9: 00:c2:c9:d8:da:3f:20:cd:cc:e9:45:77:0a:59:e7:0c:7e:32: ec:fd:ee:65:17:c8:bc:29:40:e1:41:3e:35:df:12:65:33:f3: 78:79:3a:e8:1a:50:ac:c9:49:eb:0f:50:85:54:3f:07:25:04: a1:17:78:d9:b0:f8:3a:40:25:74:66:0d:ed:cb:3d:03:43:50: e5:52:9d:5d:6c:e9:49:86:d6:3e:2c:dc:c5:e6:f4:ac:73:04: 47:d0:2b:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3/2vpWxcEGg9PdK3gNkMdgQEzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3N0U5RDNEQkFCNjNFRjZDQkI0MzZDOTA2RDVDNUY3 NTM1NTZGRTAeFw0yNjA5MjAxNDI0NTBaFw0yNjA5MjExNzQxNTBaMDMxMTAvBgNV BAMTKEQ5MjQ1ODBDOTk2MjMyQTc4MjQyNzVFNzEzRTdCOTY3MjVDMDU4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYTwKyKPVSA3xjvKLKQFLkt6D xHyjmp+zDuw4J8uM+tm7FbreTLcGpqchKlMtCJUc7vNTypTpVNf6bKngTtj8MhsZ rYj2C7Gvm/HOyzIrXdobPbShzdaD9NGWB3I7C8+DQuqX2Qx77UES3hC0ZHiyCuzZ VIBhA+PYcqt7pbAVVn87jtJjzmjvVSU5qPzK4ae3XdkdYngRpqmAtOHROXF0ZkIE hmqF36wdXR+G4MWwX25cdeEkWpLnjS9wJbJTbD+4b9ZfTJK5tMzP8VI8SFH5a/7K HgS+uAautUEs2ixMq92t9E7n57x9AkXuJ3phYYzKt/OKOgpWIEOOKlsL+J4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2SRYDJliMqeCQnXnE+e5ZyXAWPgwHwYDVR0j BBgwFoAUYXfp09urY+9su0NskG1cX3U1Vv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI5ODUxYjEtNWE2ZC00ZTc1LTlmZmYtYzAzYTljNDljZjY5LzAvNjE3N0U5RDNE QkFCNjNFRjZDQkI0MzZDOTA2RDVDNUY3NTM1NTZGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MTc3RTlEM0RCQUI2M0VGNkNCQjQzNkM5MDZENUM1Rjc1MzU1 NkZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvNjE3N0U5RDNEQkFCNjNFRjZDQkI0MzZDOTA2RDVD NUY3NTM1NTZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCLheL97T2P5z+cSk9yhbgf8Fb/uYZstHZO pQ+QmkLILLz8sEmn42BJKQW5rkPWHYKlrQKj2MSIb5cU9g5MMHbrh6HYvgBJ6QSY ofbESAT6sZYXT5R35IDLgrsPhq8/9z1dwddKonlPEvh7CCMwq61qSFjNgIPy1/xW wKbvv92ib0iWAxHdl1xbC11x75juntHYld24hn3WNFCZtHo5rItq2QDCydjaPyDN zOlFdwpZ5wx+Muz97mUXyLwpQOFBPjXfEmUz83h5OugaUKzJSesPUIVUPwclBKEX eNmw+DpAJXRmDe3LPQNDUOVSnV1s6UmG1j4s3MXm9KxzBEfQKxM= -----END CERTIFICATE-----Generated at Mon Sep 21 01:22:01 2026 by rpki-client