$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft File: 851B60F64AE44DA53ED7359592F434C5A590686C.mft (raw, json) Hash identifier: iIFn9mKiq5RbfjdYKmgLO3qm+kZmv7iyRH29EwF2KKk= Subject key identifier: D6:3B:70:D5:76:A6:4D:0E:63:17:3C:E5:E8:9E:CF:33:E0:A1:21:66 Authority key identifier: 85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C Certificate issuer: /CN=851B60F64AE44DA53ED7359592F434C5A590686C Certificate serial: 76B5DC847CDF8D6FCFCDF2BE13B1C01D6E88E6F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 11:23:59 +0000 Manifest this update: Thu 23 Jul 2026 11:18:59 +0000 Manifest next update: Fri 24 Jul 2026 14:46:59 +0000 Files and hashes: 1: 851B60F64AE44DA53ED7359592F434C5A590686C.crl (hash: I/2/dPX251nq0xvZrxG2WfUczrmOgWwRjs8jME3i6kE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b5:dc:84:7c:df:8d:6f:cf:cd:f2:be:13:b1:c0:1d:6e:88:e6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851B60F64AE44DA53ED7359592F434C5A590686C Validity Not Before: Jul 23 11:18:59 2026 GMT Not After : Jul 24 14:46:59 2026 GMT Subject: CN=D63B70D576A64D0E63173CE5E89ECF33E0A12166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bb:e4:3e:e5:6d:4c:ba:59:6c:5a:21:ac:59: b0:48:8e:a7:16:a1:e6:b3:f8:2a:38:9a:77:28:96: 7a:1e:21:bb:01:b9:70:de:ca:94:bf:29:4e:e5:f1: 39:16:4c:02:d4:27:fa:57:21:9b:7b:7e:52:b4:82: 05:e5:b8:53:c6:53:1c:d7:34:38:f8:cb:e3:4b:be: d6:e7:ab:73:58:34:be:af:22:79:c9:3b:ea:1d:e9: a3:37:1d:67:18:fb:e0:f3:2b:ba:09:d1:6c:d2:de: 54:ff:ef:8c:1c:94:9b:b1:1e:d3:fe:be:bd:13:fb: d3:73:58:d8:e0:a2:d2:ca:be:c0:9c:71:35:f9:86: 9f:6d:cb:79:81:a8:fb:bf:13:37:26:51:e9:af:d7: 6d:de:af:42:db:63:d2:82:89:e5:a3:f9:38:77:d2: 0c:9c:63:e4:60:eb:73:a9:dc:54:a4:c6:3a:c6:40: 5b:65:69:f8:f3:b1:a9:20:fa:91:15:b4:ad:b0:c8: 1c:9c:0b:62:bf:d5:38:b7:6c:b0:27:5a:31:b5:94: c5:a6:49:bf:26:ed:f5:22:24:4e:da:0c:34:78:c2: 83:fa:a5:d7:58:b7:50:8f:2c:be:89:2b:e8:46:88: 12:ba:42:53:d5:e4:5c:1c:f9:6c:72:0d:e2:ff:33: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3B:70:D5:76:A6:4D:0E:63:17:3C:E5:E8:9E:CF:33:E0:A1:21:66 X509v3 Authority Key Identifier: keyid:85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:a3:95:e1:2d:12:34:75:60:3a:5a:16:54:18:de:7b:af: b8:45:02:ad:8c:f7:d6:19:74:c3:35:a7:3b:fc:07:c5:c1:c7: 27:b6:55:47:fa:e4:23:f0:bc:c0:2f:b1:fd:1f:23:69:85:99: a2:52:57:cf:55:a9:d3:81:16:c5:dd:20:30:e1:cc:e9:52:5e: c2:b1:04:d1:fd:c0:f2:bc:b2:a5:4b:fd:22:7d:6c:a0:70:69: 59:29:30:f2:d0:86:fc:3f:31:ac:1a:db:ad:5b:b6:5e:d4:b6: 77:a6:71:5c:67:ab:8a:0c:58:79:8f:db:ce:8f:6b:cc:3a:39: 1a:03:e9:52:a4:41:75:ad:84:5f:2b:42:5e:86:f7:24:76:fa: a5:20:04:77:73:d8:dd:13:07:c0:8a:51:74:e2:f2:7e:c2:0d: d8:04:77:f3:d3:a6:bc:ec:f9:5c:e6:55:e1:c5:0d:6c:4f:3f: 66:41:2a:22:3b:f8:84:af:4b:99:ad:e7:f3:66:94:88:ea:9c: ae:52:46:b6:f8:9b:52:f9:0b:03:1a:7b:58:32:23:e0:9d:37: cf:82:7e:3c:76:34:81:44:2b:d6:7a:a5:1f:f8:5d:3b:d6:46: c8:fa:dd:64:2b:cf:a6:83:90:90:8a:1c:db:53:91:01:e1:d8: 13:50:01:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrXchHzfjW/PzfK+E7HAHW6I5vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0QzVB NTkwNjg2QzAeFw0yNjA3MjMxMTE4NTlaFw0yNjA3MjQxNDQ2NTlaMDMxMTAvBgNV BAMTKEQ2M0I3MEQ1NzZBNjREMEU2MzE3M0NFNUU4OUVDRjMzRTBBMTIxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTu+Q+5W1MullsWiGsWbBIjqcW oeaz+Co4mncolnoeIbsBuXDeypS/KU7l8TkWTALUJ/pXIZt7flK0ggXluFPGUxzX NDj4y+NLvtbnq3NYNL6vInnJO+od6aM3HWcY++DzK7oJ0WzS3lT/74wclJuxHtP+ vr0T+9NzWNjgotLKvsCccTX5hp9ty3mBqPu/EzcmUemv123er0LbY9KCieWj+Th3 0gycY+Rg63Op3FSkxjrGQFtlafjzsakg+pEVtK2wyBycC2K/1Ti3bLAnWjG1lMWm Sb8m7fUiJE7aDDR4woP6pddYt1CPLL6JK+hGiBK6QlPV5Fwc+WxyDeL/M12jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jtw1XamTQ5jFzzl6J7PM+ChIWYwHwYDVR0j BBgwFoAUhRtg9krkTaU+1zWVkvQ0xaWQaGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE0ODZjY2QtMGM5NS00OTFhLWI5ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0 QUU0NERBNTNFRDczNTk1OTJGNDM0QzVBNTkwNjg2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTFCNjBGNjRBRTQ0REE1M0VENzM1OTU5MkY0MzRDNUE1OTA2 ODZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0 QzVBNTkwNjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgJo5XhLRI0dWA6WhZUGN57r7hFAq2M99YZ dMM1pzv8B8XBxye2VUf65CPwvMAvsf0fI2mFmaJSV89VqdOBFsXdIDDhzOlSXsKx BNH9wPK8sqVL/SJ9bKBwaVkpMPLQhvw/Mawa261btl7UtnemcVxnq4oMWHmP286P a8w6ORoD6VKkQXWthF8rQl6G9yR2+qUgBHdz2N0TB8CKUXTi8n7CDdgEd/PTprzs +VzmVeHFDWxPP2ZBKiI7+ISvS5mt5/NmlIjqnK5SRrb4m1L5CwMae1gyI+CdN8+C fjx2NIFEK9Z6pR/4XTvWRsj63WQrz6aDkJCKHNtTkQHh2BNQAWc= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:34 2026 by rpki-client