$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft File: 851B60F64AE44DA53ED7359592F434C5A590686C.mft (raw, json) Hash identifier: eAZ3qh0kZuOhyyS6MsWSOwPvIHxZIJARHtSP88l4EZ8= Subject key identifier: C9:56:52:A7:9C:EA:79:AF:40:00:E6:EF:B0:66:F2:D3:39:5E:D7:EB Authority key identifier: 85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C Certificate issuer: /CN=851B60F64AE44DA53ED7359592F434C5A590686C Certificate serial: 04FA3B1A3362996294F3EB0C4C1C532821A63840 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 12:21:00 +0000 Manifest this update: Thu 24 Sep 2026 12:16:00 +0000 Manifest next update: Fri 25 Sep 2026 12:38:00 +0000 Files and hashes: 1: 851B60F64AE44DA53ED7359592F434C5A590686C.crl (hash: 6WhH9LTAaEMdAvEHbxokdMgkJFsEaiXFYv18jdOeAtk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fa:3b:1a:33:62:99:62:94:f3:eb:0c:4c:1c:53:28:21:a6:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851B60F64AE44DA53ED7359592F434C5A590686C Validity Not Before: Sep 24 12:16:00 2026 GMT Not After : Sep 25 12:38:00 2026 GMT Subject: CN=C95652A79CEA79AF4000E6EFB066F2D3395ED7EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:cb:1d:cb:bf:44:a5:b9:bf:97:1c:f7:d5: 35:42:2a:b6:81:bf:28:39:93:2f:30:5d:56:e4:df: 5b:5b:d5:eb:0c:9f:57:e4:8b:45:51:da:04:9a:07: da:ca:5b:4f:5a:2d:bf:b0:98:27:5a:73:95:6c:ef: 7e:66:c4:0a:ee:0e:0e:98:45:a1:2c:ee:03:a1:4d: 19:ee:91:b5:3d:75:56:85:ac:8a:85:01:74:a0:1a: bb:9f:d5:53:76:69:e0:92:08:b6:f5:49:b3:50:54: 2c:51:15:6b:66:90:f9:77:4e:e3:fc:1b:e3:23:ae: 49:d7:d3:64:2c:aa:47:e1:3a:78:69:1e:0e:f1:10: 0c:88:64:21:85:b0:3e:b3:99:a4:82:01:f5:c9:03: e9:a5:54:a0:52:5f:5c:35:90:d9:d3:45:f2:15:0b: 68:62:bf:a8:37:b5:19:4c:2f:29:72:48:15:15:e2: 07:39:25:03:62:1a:d2:a3:16:e0:ed:7f:70:ac:d7: 59:0f:ce:3a:25:f0:25:c0:5c:50:8b:37:ba:89:59: 58:36:41:a5:b6:74:80:08:75:41:0e:e2:7b:34:0e: e8:27:8c:ea:cd:77:7e:3b:0f:2a:0e:a5:4c:f4:cc: e2:05:5f:cf:f8:28:58:e5:2c:9c:63:07:8e:ea:30: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:56:52:A7:9C:EA:79:AF:40:00:E6:EF:B0:66:F2:D3:39:5E:D7:EB X509v3 Authority Key Identifier: keyid:85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:c9:df:0b:1c:0f:18:61:14:cc:db:54:86:8c:01:af:bc: d9:90:1e:4f:de:af:18:9c:f2:bf:97:de:a5:cf:04:99:82:f5: 61:b0:28:64:d8:5f:dc:8f:bd:05:39:90:d8:c4:df:d5:c0:55: 29:bd:ba:b5:da:5c:5e:45:3c:50:74:fd:cc:7b:7b:30:5a:b0: 2a:d7:ea:85:52:ac:ff:4c:37:71:d8:46:98:9f:98:e4:d0:b2: 74:9a:b8:02:80:eb:e1:a3:c5:4c:41:68:91:7d:e7:59:10:cb: 65:29:4c:36:71:29:54:81:18:f6:6f:22:4f:c5:f0:47:5a:6c: 67:14:bf:d6:a6:b3:70:d2:99:70:1d:dc:da:0b:8c:58:89:0f: 33:b2:ba:71:76:d1:7c:b7:7b:14:e0:9f:e5:17:13:b4:9c:e9: 0b:32:5f:83:40:18:c3:86:27:a6:46:9c:89:f7:d3:c4:ab:89: c7:7b:58:f8:27:a2:db:e5:93:08:2d:90:bb:7b:8c:bc:29:02: 09:49:10:b8:a0:68:70:6c:4e:48:c0:b8:25:f3:04:ea:91:18: 76:15:bd:2c:11:7f:9b:70:f8:1c:55:46:ae:57:f0:d1:01:29: fa:24:2b:c1:a3:33:fe:e5:80:2a:fe:27:c4:53:ea:a1:96:bf: 74:1e:8f:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPo7GjNimWKU8+sMTBxTKCGmOEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0QzVB NTkwNjg2QzAeFw0yNjA5MjQxMjE2MDBaFw0yNjA5MjUxMjM4MDBaMDMxMTAvBgNV BAMTKEM5NTY1MkE3OUNFQTc5QUY0MDAwRTZFRkIwNjZGMkQzMzk1RUQ3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Mssdy79Epbm/lxz31TVCKraB vyg5ky8wXVbk31tb1esMn1fki0VR2gSaB9rKW09aLb+wmCdac5Vs735mxAruDg6Y RaEs7gOhTRnukbU9dVaFrIqFAXSgGruf1VN2aeCSCLb1SbNQVCxRFWtmkPl3TuP8 G+MjrknX02QsqkfhOnhpHg7xEAyIZCGFsD6zmaSCAfXJA+mlVKBSX1w1kNnTRfIV C2hiv6g3tRlMLylySBUV4gc5JQNiGtKjFuDtf3Cs11kPzjol8CXAXFCLN7qJWVg2 QaW2dIAIdUEO4ns0DugnjOrNd347DyoOpUz0zOIFX8/4KFjlLJxjB47qMJqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyVZSp5zqea9AAObvsGby0zle1+swHwYDVR0j BBgwFoAUhRtg9krkTaU+1zWVkvQ0xaWQaGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE0ODZjY2QtMGM5NS00OTFhLWI5ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0 QUU0NERBNTNFRDczNTk1OTJGNDM0QzVBNTkwNjg2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTFCNjBGNjRBRTQ0REE1M0VENzM1OTU5MkY0MzRDNUE1OTA2 ODZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0 QzVBNTkwNjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF0yd8LHA8YYRTM21SGjAGvvNmQHk/erxic 8r+X3qXPBJmC9WGwKGTYX9yPvQU5kNjE39XAVSm9urXaXF5FPFB0/cx7ezBasCrX 6oVSrP9MN3HYRpifmOTQsnSauAKA6+GjxUxBaJF951kQy2UpTDZxKVSBGPZvIk/F 8EdabGcUv9ams3DSmXAd3NoLjFiJDzOyunF20Xy3exTgn+UXE7Sc6QsyX4NAGMOG J6ZGnIn308Sricd7WPgnotvlkwgtkLt7jLwpAglJELigaHBsTkjAuCXzBOqRGHYV vSwRf5tw+BxVRq5X8NEBKfokK8GjM/7lgCr+J8RT6qGWv3Qej94= -----END CERTIFICATE-----Generated at Thu Sep 24 14:19:05 2026 by rpki-client