$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft File: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft (raw, json) Hash identifier: TbL1b1iVnbA1a+Tz4tp82E2Na+JH0sUF3PSg7Q4XaPI= Subject key identifier: 0A:C6:18:FC:CD:7F:EE:F1:84:77:A9:E2:C8:85:20:80:CB:0B:F7:13 Authority key identifier: C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C Certificate issuer: /CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Certificate serial: 2A5C876E6B028A6360BBB559DD7E216EB2EA9CB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 09:52:53 +0000 Manifest this update: Thu 24 Sep 2026 09:47:53 +0000 Manifest next update: Fri 25 Sep 2026 13:00:53 +0000 Files and hashes: 1: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl (hash: CBNs358sjXx6mVTv48AARr+LZ1MWAIPfz1PlwL/g7Bk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5c:87:6e:6b:02:8a:63:60:bb:b5:59:dd:7e:21:6e:b2:ea:9c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Validity Not Before: Sep 24 09:47:53 2026 GMT Not After : Sep 25 13:00:53 2026 GMT Subject: CN=0AC618FCCD7FEEF18477A9E2C8852080CB0BF713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:11:7e:80:c5:de:41:e3:cd:f6:52:4c:e4: 28:25:ce:b5:81:b1:15:f0:cb:ae:d6:ce:f2:73:bb: d2:c1:9a:47:f8:fc:36:24:c3:64:a8:54:a7:21:e9: ad:40:05:38:43:e4:88:fb:33:1a:67:b5:65:a3:77: ed:de:5c:bd:73:d0:54:53:6f:7c:68:af:2a:ac:c9: 06:b1:73:f1:11:72:cc:d9:f6:65:09:fe:cd:4c:ed: 10:74:52:91:8c:2b:dd:e3:7f:02:21:75:02:ba:51: 4a:fe:b2:4f:0e:43:2e:2c:0d:ce:a8:5b:7a:21:1d: 45:12:ae:88:1e:19:27:99:ab:0f:aa:d1:69:51:b4: 32:17:94:6c:a8:99:5d:73:f7:66:ae:bb:67:6a:4e: b8:d6:73:5b:70:2f:20:ea:4d:03:5c:7f:fe:df:2a: 35:33:f9:45:02:4a:30:be:37:11:55:8d:5d:d3:5f: d0:58:e3:45:7e:19:c8:92:76:40:79:b4:75:f3:5c: da:4e:a3:b8:24:18:d7:c2:13:09:43:dd:da:67:2a: 7e:3c:d0:d0:4b:b7:2d:9c:e9:4f:c9:8e:42:43:28: c2:1d:45:06:de:c6:7f:6c:c2:7e:03:30:9a:c9:0b: ba:fa:90:e8:63:6c:e2:ea:77:23:3a:ec:70:8e:e4: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C6:18:FC:CD:7F:EE:F1:84:77:A9:E2:C8:85:20:80:CB:0B:F7:13 X509v3 Authority Key Identifier: keyid:C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:88:b0:56:33:02:e3:e1:ed:0e:6f:a2:d8:56:ef:c1:1a:94: a6:b6:0a:48:4d:10:2c:d8:d7:e9:aa:cd:c5:c6:e7:6c:33:2a: e2:1a:6e:1c:56:b3:a4:c2:41:07:00:c4:e7:c3:09:63:45:7f: 7c:ba:4e:f3:b1:07:57:d9:bd:77:46:0d:4e:e9:f7:4e:af:e0: a0:3e:ef:d8:73:77:98:d0:51:7c:d3:88:94:4d:58:5d:c8:6d: eb:a7:0f:bd:60:8c:d2:31:32:ca:bd:46:f9:53:cd:37:c8:5e: 2d:af:9e:21:80:86:b9:1b:74:6c:17:22:ac:2d:2d:a8:83:82: 83:4e:2d:dd:5b:69:66:61:2d:da:c6:91:4e:23:ad:53:5b:ac: 19:12:a0:50:f6:c8:62:80:64:a7:cb:53:75:20:0f:1d:a4:2a: 65:c3:47:8c:c3:e3:c1:5c:de:00:04:33:7b:08:e4:11:58:78: 79:05:d9:60:a0:a2:f6:aa:32:e7:37:5c:9d:ef:00:37:b6:d8: 63:85:88:4f:01:38:29:1a:ee:62:44:b8:c7:3f:cd:38:58:19: 64:55:6e:67:e6:ad:36:fa:8c:32:e7:b1:d9:61:4b:84:87:34: 9e:f2:fa:2b:3b:c6:d5:b9:fa:86:ff:6c:3f:7c:0f:3d:f9:49: 0e:89:e7:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlyHbmsCimNgu7VZ3X4hbrLqnLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNBMTlC MjQ2REU4QzAeFw0yNjA5MjQwOTQ3NTNaFw0yNjA5MjUxMzAwNTNaMDMxMTAvBgNV BAMTKDBBQzYxOEZDQ0Q3RkVFRjE4NDc3QTlFMkM4ODUyMDgwQ0IwQkY3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWCxF+gMXeQePN9lJM5CglzrWB sRXwy67WzvJzu9LBmkf4/DYkw2SoVKch6a1ABThD5Ij7MxpntWWjd+3eXL1z0FRT b3xoryqsyQaxc/ERcszZ9mUJ/s1M7RB0UpGMK93jfwIhdQK6UUr+sk8OQy4sDc6o W3ohHUUSrogeGSeZqw+q0WlRtDIXlGyomV1z92auu2dqTrjWc1twLyDqTQNcf/7f KjUz+UUCSjC+NxFVjV3TX9BY40V+GciSdkB5tHXzXNpOo7gkGNfCEwlD3dpnKn48 0NBLty2c6U/JjkJDKMIdRQbexn9swn4DMJrJC7r6kOhjbOLqdyM67HCO5JM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsYY/M1/7vGEd6niyIUggMsL9xMwHwYDVR0j BBgwFoAUwsVOnuMKOW/NttVd9wI6GbJG3owwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNmM2MyMTEtMDY0NS00ODgyLWE0ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVF MzBBMzk2RkNEQjZENTVERjcwMjNBMTlCMjQ2REU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkM1NEU5RUUzMEEzOTZGQ0RCNkQ1NURGNzAyM0ExOUIyNDZE RThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNB MTlCMjQ2REU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKIsFYzAuPh7Q5vothW78EalKa2CkhNECzY 1+mqzcXG52wzKuIabhxWs6TCQQcAxOfDCWNFf3y6TvOxB1fZvXdGDU7p906v4KA+ 79hzd5jQUXzTiJRNWF3IbeunD71gjNIxMsq9RvlTzTfIXi2vniGAhrkbdGwXIqwt LaiDgoNOLd1baWZhLdrGkU4jrVNbrBkSoFD2yGKAZKfLU3UgDx2kKmXDR4zD48Fc 3gAEM3sI5BFYeHkF2WCgovaqMuc3XJ3vADe22GOFiE8BOCka7mJEuMc/zThYGWRV bmfmrTb6jDLnsdlhS4SHNJ7y+is7xtW5+ob/bD98Dz35SQ6J564= -----END CERTIFICATE-----Generated at Fri Sep 25 05:41:51 2026 by rpki-client