$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft File: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft (raw, json) Hash identifier: thFPrObkp2MFIxG5cod4heq8W0kl5bkDHm+YXsfXKqo= Subject key identifier: 50:E9:2D:2D:82:29:8B:6D:AA:36:F8:79:0B:2C:75:AF:EB:D2:DD:96 Authority key identifier: 0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC Certificate issuer: /CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Certificate serial: 344BDF8689D353CFC323DB4FAEB324A948C27017 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:36:29 +0000 Manifest this update: Thu 24 Sep 2026 12:31:29 +0000 Manifest next update: Fri 25 Sep 2026 13:49:29 +0000 Files and hashes: 1: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl (hash: M6UN4MF0qJNKzOsrCBj6+ZJreLI5APh+k37tS/8jI7Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4b:df:86:89:d3:53:cf:c3:23:db:4f:ae:b3:24:a9:48:c2:70:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Validity Not Before: Sep 24 12:31:29 2026 GMT Not After : Sep 25 13:49:29 2026 GMT Subject: CN=50E92D2D82298B6DAA36F8790B2C75AFEBD2DD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:03:6d:71:2b:be:72:6f:9e:a5:e9:96:dd: 46:d9:b7:e2:11:4c:63:91:f7:c3:bc:93:ad:f5:e3: 73:d3:14:dd:c0:df:3a:ef:91:a9:d9:f1:f6:d6:7f: 4f:c2:3a:9b:b3:2e:3f:08:51:31:79:45:87:e5:6c: 59:11:e4:d3:de:a2:c9:5b:61:c0:22:f6:e9:5a:c2: e3:fd:dd:99:a7:67:f5:ac:38:9c:f1:68:7f:cc:11: ed:e4:3c:3e:13:f4:2c:97:d2:73:a4:8b:69:d2:60: d5:ae:b8:4f:02:2f:8a:f7:e1:16:e0:6b:48:e4:59: 95:af:6a:9e:f3:58:82:b6:7c:35:cc:22:36:6d:5b: 68:58:ce:50:60:58:04:ab:ed:ce:9d:95:cf:67:c4: fb:05:ac:65:3e:60:66:6d:81:a6:e5:76:0e:24:71: dd:ce:61:12:92:63:c3:29:4d:6e:5d:2d:96:93:17: 4a:e7:85:6c:ef:c4:a1:cf:03:28:72:d2:a4:1a:6c: a1:63:4e:f1:de:ac:a5:32:d0:3d:be:19:67:b9:66: 9d:af:bb:7c:83:d5:59:37:fc:ff:e0:68:33:61:d3: 7b:e9:db:74:ed:d2:97:22:83:f4:05:dc:bc:f4:65: e8:41:67:71:0b:c9:c8:59:45:f8:b4:a5:b3:6e:e5: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:2D:2D:82:29:8B:6D:AA:36:F8:79:0B:2C:75:AF:EB:D2:DD:96 X509v3 Authority Key Identifier: keyid:0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cf:b6:21:f2:12:3c:63:32:cd:0d:5f:b9:71:17:ac:5d:35: 8c:a2:e5:cc:d0:6b:69:21:32:28:4f:7e:a8:e9:81:bc:47:86: a9:88:ef:e3:be:14:89:0b:56:45:f5:d7:de:01:c8:13:a9:00: 1c:18:dd:17:bd:e6:a0:af:b2:82:a8:2a:b1:1f:27:7d:e9:8f: 97:1c:d5:7b:3a:26:14:44:c5:2e:e7:e3:f7:5a:c4:3b:54:5b: c6:cf:e7:f8:03:c0:98:a7:59:bd:52:c0:30:b9:25:91:1d:6a: 1a:3b:89:f0:c1:8a:ae:fb:06:ed:a4:05:34:71:84:89:14:8f: 91:35:b7:b1:58:de:90:cc:61:92:95:b8:47:49:08:fe:0d:31: eb:7f:21:f8:df:43:e0:d3:0a:6c:58:80:5e:3e:a0:c6:75:89: 44:c2:6b:39:5d:0d:a8:42:64:8a:a6:ce:a4:14:7e:d8:c8:5e: 96:2a:15:e7:37:f7:5d:98:48:6b:2d:40:fe:19:57:a6:88:a9: de:a9:ad:b7:69:ac:3e:28:77:45:59:32:20:83:6b:b9:c7:ff: 69:6c:a4:9b:65:76:61:22:29:47:68:24:28:d4:97:d3:ef:6b: f1:39:c4:79:b7:32:7c:20:2d:7a:e5:63:c0:82:e9:6d:4e:32: 23:f7:3a:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEvfhonTU8/DI9tPrrMkqUjCcBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBF NUQ3NkNFQzAeFw0yNjA5MjQxMjMxMjlaFw0yNjA5MjUxMzQ5MjlaMDMxMTAvBgNV BAMTKDUwRTkyRDJEODIyOThCNkRBQTM2Rjg3OTBCMkM3NUFGRUJEMkREOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+ANtcSu+cm+epemW3UbZt+IR TGOR98O8k63143PTFN3A3zrvkanZ8fbWf0/COpuzLj8IUTF5RYflbFkR5NPeoslb YcAi9ulawuP93ZmnZ/WsOJzxaH/MEe3kPD4T9CyX0nOki2nSYNWuuE8CL4r34Rbg a0jkWZWvap7zWIK2fDXMIjZtW2hYzlBgWASr7c6dlc9nxPsFrGU+YGZtgabldg4k cd3OYRKSY8MpTW5dLZaTF0rnhWzvxKHPAyhy0qQabKFjTvHerKUy0D2+GWe5Zp2v u3yD1Vk3/P/gaDNh03vp23Tt0pcig/QF3Lz0ZehBZ3ELychZRfi0pbNu5W+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUOktLYIpi22qNvh5Cyx1r+vS3ZYwHwYDVR0j BBgwFoAUDB7E1r4dehkrptGIygx1cOXXbOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4MGY3NTUtNWMyNy00MGY4LTgwYWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZC RTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBFNUQ3NkNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzFFQzRENkJFMUQ3QTE5MkJBNkQxODhDQTBDNzU3MEU1RDc2 Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1 NzBFNUQ3NkNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTPtiHyEjxjMs0NX7lxF6xdNYyi5czQa2kh MihPfqjpgbxHhqmI7+O+FIkLVkX1194ByBOpABwY3Re95qCvsoKoKrEfJ33pj5cc 1Xs6JhRExS7n4/daxDtUW8bP5/gDwJinWb1SwDC5JZEdaho7ifDBiq77Bu2kBTRx hIkUj5E1t7FY3pDMYZKVuEdJCP4NMet/IfjfQ+DTCmxYgF4+oMZ1iUTCazldDahC ZIqmzqQUftjIXpYqFec3912YSGstQP4ZV6aIqd6prbdprD4od0VZMiCDa7nH/2ls pJtldmEiKUdoJCjUl9Pva/E5xHm3MnwgLXrlY8CC6W1OMiP3Op0= -----END CERTIFICATE-----Generated at Fri Sep 25 05:13:32 2026 by rpki-client