$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft File: 851B60F64AE44DA53ED7359592F434C5A590686C.mft (raw, json) Hash identifier: eeLpsLN19IcLN14+W2WcPEx1rewOiWvmeuDYjLmhWBw= Subject key identifier: 53:A3:CA:18:25:C4:F2:5F:13:ED:A7:A7:A9:83:0C:4D:E4:D4:83:D2 Authority key identifier: 85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C Certificate issuer: /CN=851B60F64AE44DA53ED7359592F434C5A590686C Certificate serial: 0A43EEBF5AB3942E7D864CE9FD343241E000D1F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:06:48 +0000 Manifest this update: Tue 12 May 2026 17:01:48 +0000 Manifest next update: Wed 13 May 2026 20:37:48 +0000 Files and hashes: 1: 851B60F64AE44DA53ED7359592F434C5A590686C.crl (hash: toO+IKzeA2sulLR3slgea5zop/Zgug86CCFi4w7+hCI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:43:ee:bf:5a:b3:94:2e:7d:86:4c:e9:fd:34:32:41:e0:00:d1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851B60F64AE44DA53ED7359592F434C5A590686C Validity Not Before: May 12 17:01:48 2026 GMT Not After : May 13 20:37:48 2026 GMT Subject: CN=53A3CA1825C4F25F13EDA7A7A9830C4DE4D483D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:eb:5d:d2:c7:d2:bd:c5:60:43:8d:53:1f: f8:26:cf:f7:05:37:f8:c7:d0:c7:6b:37:cf:e6:16: c4:8e:67:3b:fe:ec:5d:cc:55:5c:86:49:6b:6e:70: 69:b1:2b:34:3e:41:59:b1:da:58:c5:d2:16:3a:5a: f8:7d:89:c1:46:43:d5:90:f7:9b:2e:f8:25:08:ea: 9e:c8:0d:57:2e:1b:8c:91:6c:ab:13:67:64:fd:32: 41:47:20:e4:63:8f:be:3f:23:6e:4a:0b:ae:19:39: cd:1c:04:c8:79:e4:44:04:00:f0:1f:7a:5e:74:9d: 80:de:2d:03:17:d4:46:a4:55:c5:fd:a6:f7:b7:78: 66:bd:1e:1e:88:82:c1:49:9d:62:bb:a7:c2:e6:23: 16:b6:ff:67:ab:20:80:d6:8d:f9:65:69:86:0a:11: 59:77:80:d6:aa:4f:0c:00:77:c2:ce:46:26:33:dd: 79:68:c8:39:c9:af:43:eb:89:1f:2b:1d:d2:f1:df: 73:f5:b7:0c:ff:62:e6:f4:b1:da:fc:5c:69:57:fc: 7f:d7:29:b9:53:01:b2:95:55:10:22:7f:34:f1:78: 1a:45:0d:f1:97:e4:86:0a:55:ee:86:54:bd:98:41: 42:ee:c5:98:19:26:74:d4:9a:d2:1a:ef:56:f9:b8: a4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:CA:18:25:C4:F2:5F:13:ED:A7:A7:A9:83:0C:4D:E4:D4:83:D2 X509v3 Authority Key Identifier: keyid:85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:38:2d:8b:b4:a0:ed:92:b6:e0:63:29:85:7f:5d:69:55:f2: 6d:2e:8c:4c:2a:9f:5a:82:24:72:b4:1b:a7:6b:3a:da:5e:c3: cb:f3:14:8c:0b:bd:02:ac:e8:95:89:4a:3a:c8:67:df:cc:af: 1e:1d:3f:83:05:3b:ed:6d:65:07:db:6a:a0:3a:ac:21:55:18: 5b:14:e5:3c:4b:e3:73:2b:3f:1c:64:df:81:4d:22:a7:99:ba: 27:b9:b1:37:92:5e:c1:d2:08:bd:a9:69:ea:af:06:6a:c3:56: e5:9a:c5:7d:c9:78:72:39:19:3a:82:f9:49:46:a3:86:09:0f: 9b:78:24:ff:e1:ad:9d:c1:3e:c6:b2:00:2e:ef:76:78:b8:c4: d8:61:0a:d5:ba:3c:fd:ba:bb:da:25:ca:be:27:45:d6:89:e8: fd:40:35:50:6a:78:90:04:1d:e3:76:81:53:f3:ef:fa:12:21: 56:fc:6b:1f:12:0c:14:f5:bf:9b:9c:dc:00:a2:8d:4c:49:e3: 9c:18:31:61:ef:a8:c4:b7:ef:a1:52:84:f2:77:ec:a0:27:eb: 37:aa:12:98:b4:05:0b:de:3a:a6:41:50:95:2b:7b:e0:b3:48: 16:10:be:a5:8b:f9:a5:82:62:87:dd:ca:46:5f:52:c8:37:13: 61:ea:26:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkPuv1qzlC59hkzp/TQyQeAA0fcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0QzVB NTkwNjg2QzAeFw0yNjA1MTIxNzAxNDhaFw0yNjA1MTMyMDM3NDhaMDMxMTAvBgNV BAMTKDUzQTNDQTE4MjVDNEYyNUYxM0VEQTdBN0E5ODMwQzRERTRENDgzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5utd0sfSvcVgQ41TH/gmz/cF N/jH0MdrN8/mFsSOZzv+7F3MVVyGSWtucGmxKzQ+QVmx2ljF0hY6Wvh9icFGQ9WQ 95su+CUI6p7IDVcuG4yRbKsTZ2T9MkFHIORjj74/I25KC64ZOc0cBMh55EQEAPAf el50nYDeLQMX1EakVcX9pve3eGa9Hh6IgsFJnWK7p8LmIxa2/2erIIDWjfllaYYK EVl3gNaqTwwAd8LORiYz3XloyDnJr0PriR8rHdLx33P1twz/Yub0sdr8XGlX/H/X KblTAbKVVRAifzTxeBpFDfGX5IYKVe6GVL2YQULuxZgZJnTUmtIa71b5uKTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU6PKGCXE8l8T7aenqYMMTeTUg9IwHwYDVR0j BBgwFoAUhRtg9krkTaU+1zWVkvQ0xaWQaGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE0ODZjY2QtMGM5NS00OTFhLWI5ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0 QUU0NERBNTNFRDczNTk1OTJGNDM0QzVBNTkwNjg2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTFCNjBGNjRBRTQ0REE1M0VENzM1OTU5MkY0MzRDNUE1OTA2 ODZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0 QzVBNTkwNjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk4LYu0oO2StuBjKYV/XWlV8m0ujEwqn1qC JHK0G6drOtpew8vzFIwLvQKs6JWJSjrIZ9/Mrx4dP4MFO+1tZQfbaqA6rCFVGFsU 5TxL43MrPxxk34FNIqeZuie5sTeSXsHSCL2paeqvBmrDVuWaxX3JeHI5GTqC+UlG o4YJD5t4JP/hrZ3BPsayAC7vdni4xNhhCtW6PP26u9olyr4nRdaJ6P1ANVBqeJAE HeN2gVPz7/oSIVb8ax8SDBT1v5uc3ACijUxJ45wYMWHvqMS376FShPJ37KAn6zeq Epi0BQveOqZBUJUre+CzSBYQvqWL+aWCYofdykZfUsg3E2HqJsI= -----END CERTIFICATE-----Generated at Wed May 13 02:37:36 2026 by rpki-client