$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft File: C2B50C176FE80567FC831542D1C8AC57BD65209A.mft (raw, json) Hash identifier: jRib1m/RV5XjjrMP6Mh7tElpFv2E9XyP7xbF5lqcBs0= Subject key identifier: DC:96:59:E8:F6:77:FE:4A:34:DF:D1:A0:E9:B2:79:5D:55:A2:1D:CC Authority key identifier: C2:B5:0C:17:6F:E8:05:67:FC:83:15:42:D1:C8:AC:57:BD:65:20:9A Certificate issuer: /CN=C2B50C176FE80567FC831542D1C8AC57BD65209A Certificate serial: 6A901FBB5A3A6E95EE7DBECAF5B7A0C0DA4A893A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 06:17:14 +0000 Manifest this update: Sun 27 Sep 2026 06:12:14 +0000 Manifest next update: Mon 28 Sep 2026 06:24:14 +0000 Files and hashes: 1: C2B50C176FE80567FC831542D1C8AC57BD65209A.crl (hash: LuIDCvERuG3C3DL3Rfobp5yTmGRH6Eeu8JFkHp0MSAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.crl rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:90:1f:bb:5a:3a:6e:95:ee:7d:be:ca:f5:b7:a0:c0:da:4a:89:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2B50C176FE80567FC831542D1C8AC57BD65209A Validity Not Before: Sep 27 06:12:14 2026 GMT Not After : Sep 28 06:24:14 2026 GMT Subject: CN=DC9659E8F677FE4A34DFD1A0E9B2795D55A21DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:bd:01:20:b1:cd:cd:1b:4c:84:8b:c2:15: 19:ea:6f:98:77:c7:74:a8:60:aa:70:d6:fb:ef:ac: 56:03:29:27:b0:c5:57:0a:dc:bf:b6:20:a3:73:8f: 72:6b:bf:b8:d6:81:7e:f1:23:b2:b8:26:ae:55:5b: c1:0b:6c:e5:3a:2b:fb:bd:4f:57:70:4e:42:75:5e: 2f:f4:11:cf:85:a6:fa:b6:0f:f3:14:39:fc:6b:a0: e6:e1:69:5b:f4:36:a2:0f:44:a9:4b:e5:6e:4c:82: f9:c0:2b:e9:97:19:5d:b3:6b:05:f9:d5:b1:01:b3: 15:73:9d:12:69:b5:ab:3a:e9:1d:42:75:67:0c:fb: 57:33:40:87:38:a5:7f:ed:1d:5f:11:56:80:a7:24: 8d:23:b5:47:ab:66:89:7a:b3:21:3d:10:da:13:90: ff:22:5a:f3:41:6b:04:0a:2c:14:e7:b9:a5:88:18: 2f:ff:56:40:96:14:60:40:e8:dc:1f:50:71:9f:bb: fa:c3:7e:8d:bb:8d:7a:67:93:43:4a:a8:06:1f:32: 21:70:58:47:c7:e2:01:b9:b9:05:b0:fa:81:bd:1b: b9:3d:14:a3:24:38:c0:84:3d:72:6c:53:e9:83:74: bb:68:63:3c:db:6c:3c:1e:92:09:6c:92:57:88:55: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:96:59:E8:F6:77:FE:4A:34:DF:D1:A0:E9:B2:79:5D:55:A2:1D:CC X509v3 Authority Key Identifier: keyid:C2:B5:0C:17:6F:E8:05:67:FC:83:15:42:D1:C8:AC:57:BD:65:20:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:35:02:04:c8:03:18:7d:da:fc:da:f8:cf:9f:d4:a7:52:c7: 0e:8c:ab:28:4b:ba:de:24:f9:90:c8:9d:86:6e:00:d2:9a:06: 18:0d:50:3a:1d:3b:1f:f1:91:c6:c0:23:a4:e4:c8:5c:d2:8c: d6:4a:0c:cd:b1:36:25:f2:2a:21:34:69:e5:05:64:2f:02:9f: a6:7e:18:15:52:b3:e8:ce:9a:44:b9:04:6a:43:11:97:2a:1b: 37:cb:57:db:74:d5:81:0d:76:aa:10:4a:76:b5:e6:f7:37:f4: 2d:65:4c:1c:0a:19:4f:72:55:b3:17:3f:87:ca:7f:38:8e:a6: 40:99:bb:92:4d:1f:7f:d0:70:f6:2a:d5:6c:f9:1c:50:06:08: a9:90:ab:74:16:01:fa:63:2a:6b:17:d6:e7:9e:35:23:e6:fe: 7c:51:1b:59:6c:7f:21:04:fe:ce:27:ac:14:93:d2:10:68:52: 00:4e:9d:94:06:1c:33:66:92:04:f4:14:6b:2f:f7:8c:19:f9: 8a:04:5b:14:91:25:c7:12:db:2b:42:7f:fb:b3:e3:71:4b:8d: 54:c0:f1:a5:51:a4:ef:62:5f:d9:30:2a:32:f2:b9:31:a3:6e: 5c:af:0c:d2:c6:d5:c8:03:ac:70:39:a8:95:0c:79:bf:bc:15: 01:e4:de:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUapAfu1o6bpXufb7K9begwNpKiTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJCNTBDMTc2RkU4MDU2N0ZDODMxNTQyRDFDOEFDNTdC RDY1MjA5QTAeFw0yNjA5MjcwNjEyMTRaFw0yNjA5MjgwNjI0MTRaMDMxMTAvBgNV BAMTKERDOTY1OUU4RjY3N0ZFNEEzNERGRDFBMEU5QjI3OTVENTVBMjFEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPR70BILHNzRtMhIvCFRnqb5h3 x3SoYKpw1vvvrFYDKSewxVcK3L+2IKNzj3Jrv7jWgX7xI7K4Jq5VW8ELbOU6K/u9 T1dwTkJ1Xi/0Ec+Fpvq2D/MUOfxroObhaVv0NqIPRKlL5W5MgvnAK+mXGV2zawX5 1bEBsxVznRJptas66R1CdWcM+1czQIc4pX/tHV8RVoCnJI0jtUerZol6syE9ENoT kP8iWvNBawQKLBTnuaWIGC//VkCWFGBA6NwfUHGfu/rDfo27jXpnk0NKqAYfMiFw WEfH4gG5uQWw+oG9G7k9FKMkOMCEPXJsU+mDdLtoYzzbbDwekglskleIVTqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3JZZ6PZ3/ko039Gg6bJ5XVWiHcwwHwYDVR0j BBgwFoAUwrUMF2/oBWf8gxVC0cisV71lIJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRhZDViMDUtZDc4Ny00YzZmLTgyNzctNTlkYWYxZWFjNmU2LzAvQzJCNTBDMTc2 RkU4MDU2N0ZDODMxNTQyRDFDOEFDNTdCRDY1MjA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkI1MEMxNzZGRTgwNTY3RkM4MzE1NDJEMUM4QUM1N0JENjUy MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRhZDViMDUtZDc4Ny00YzZmLTgy NzctNTlkYWYxZWFjNmU2LzAvQzJCNTBDMTc2RkU4MDU2N0ZDODMxNTQyRDFDOEFD NTdCRDY1MjA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH01AgTIAxh92vza+M+f1KdSxw6MqyhLut4k +ZDInYZuANKaBhgNUDodOx/xkcbAI6TkyFzSjNZKDM2xNiXyKiE0aeUFZC8Cn6Z+ GBVSs+jOmkS5BGpDEZcqGzfLV9t01YENdqoQSna15vc39C1lTBwKGU9yVbMXP4fK fziOpkCZu5JNH3/QcPYq1Wz5HFAGCKmQq3QWAfpjKmsX1ueeNSPm/nxRG1lsfyEE /s4nrBST0hBoUgBOnZQGHDNmkgT0FGsv94wZ+YoEWxSRJccS2ytCf/uz43FLjVTA 8aVRpO9iX9kwKjLyuTGjblyvDNLG1cgDrHA5qJUMeb+8FQHk3ug= -----END CERTIFICATE-----Generated at Sun Sep 27 12:01:27 2026 by rpki-client