$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft File: C855F0A07BFEA69901C5345D79932B70E2991F5E.mft (raw, json) Hash identifier: ScXGxtBqVJzXDQGcLrQ7vIZInxxMDIrfAmX7pctq0hA= Subject key identifier: DA:9D:25:C8:00:57:C9:92:12:3B:58:12:77:AD:F2:2E:B9:1D:41:4A Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Certificate serial: 2E59989BB324BD123F27C1FD52FF59F1904958E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 04:01:03 +0000 Manifest this update: Wed 23 Sep 2026 03:56:03 +0000 Manifest next update: Thu 24 Sep 2026 04:10:03 +0000 Files and hashes: 1: C855F0A07BFEA69901C5345D79932B70E2991F5E.crl (hash: u8W0lg2Dn5k+F+mctNRelBcpMh5FnOOGHxwHQBK2feY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:59:98:9b:b3:24:bd:12:3f:27:c1:fd:52:ff:59:f1:90:49:58:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Validity Not Before: Sep 23 03:56:03 2026 GMT Not After : Sep 24 04:10:03 2026 GMT Subject: CN=DA9D25C80057C992123B581277ADF22EB91D414A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:88:5f:b2:37:2c:a4:9b:6b:32:38:f4:85:9c: 76:d5:24:1a:1a:43:db:ef:60:ef:61:1b:66:8c:59: 8a:6a:07:19:97:a6:9e:24:8f:bd:9f:68:18:f2:2c: d4:42:9c:fe:01:d3:09:68:94:f0:f3:7c:55:89:44: 2c:e0:e1:61:88:65:19:be:a3:52:0a:e1:57:73:f0: 64:44:39:79:bd:2a:e8:95:27:f6:2a:41:48:d9:8a: a0:f2:40:39:6a:ed:9c:47:e2:49:13:65:58:91:6c: b1:ec:01:9d:9e:79:ac:93:97:ff:cf:98:11:32:ed: 96:f1:b6:92:6d:6c:4c:15:14:88:9e:00:fa:7c:2f: 5b:f5:d8:6e:a2:9b:ca:20:3c:e1:ea:03:22:b8:de: 32:37:c8:1d:9b:87:28:ee:55:12:c8:2d:63:cd:aa: 88:4c:e3:8e:a0:14:bc:60:ae:99:f4:58:ac:98:3e: 99:b6:a5:09:2c:aa:33:f4:4c:c9:46:f0:99:82:e4: 48:69:ee:f6:26:bb:57:7c:d3:27:d7:2a:41:27:ce: 22:21:fc:25:52:26:05:1b:36:2c:61:bc:7b:36:bf: 6e:c1:e0:f3:a2:0a:a7:b5:96:64:55:fb:1a:59:db: 0b:0c:2c:8d:97:71:57:4b:d3:d3:59:8b:ff:51:52: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9D:25:C8:00:57:C9:92:12:3B:58:12:77:AD:F2:2E:B9:1D:41:4A X509v3 Authority Key Identifier: keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9b:ec:9f:1b:dd:04:3b:8d:dd:40:fd:59:1d:0e:27:a9:a8: e2:b5:40:fa:47:a4:dc:e3:76:51:4d:1c:7d:b8:de:c6:1b:7f: 0c:16:04:e3:55:c6:62:5a:9d:1a:5b:f2:d6:2c:4f:11:45:b6: ef:ca:fa:e9:17:5f:d6:d2:fe:ab:b3:1c:d3:83:8e:c3:b5:e8: 77:0e:a8:0e:c7:c6:d6:d5:47:b8:e9:57:2a:b0:66:8b:32:aa: 2d:a6:5c:1f:8f:23:bd:78:84:ca:8e:19:44:9e:7d:ab:ad:5b: 7a:55:8e:b2:31:ed:73:9e:e0:3b:0b:88:7f:cf:b3:26:68:6f: a8:52:86:ed:bb:34:65:39:cf:55:18:78:8a:f3:7e:35:88:1c: 23:a7:74:6b:fe:b4:e3:e5:bd:3b:ad:f1:b5:e1:5b:6b:19:b4: d9:04:17:59:f0:44:2a:8a:1b:1d:7d:93:76:06:6a:3a:fc:b8: b6:75:46:a4:67:1c:f1:72:16:18:9b:4f:9f:4f:0b:fc:77:c4: 9e:1b:a6:2b:0e:54:0f:bd:f2:87:c7:06:e2:9b:3e:23:b0:6b: a8:a6:f2:25:01:b5:fe:5e:55:cb:a3:3d:d2:fe:32:88:f4:e4: 74:b6:c9:7b:63:59:85:a7:4f:0c:4e:03:47:57:ef:5b:93:09: b0:f0:13:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlmYm7MkvRI/J8H9Uv9Z8ZBJWOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBF Mjk5MUY1RTAeFw0yNjA5MjMwMzU2MDNaFw0yNjA5MjQwNDEwMDNaMDMxMTAvBgNV BAMTKERBOUQyNUM4MDA1N0M5OTIxMjNCNTgxMjc3QURGMjJFQjkxRDQxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIiF+yNyykm2syOPSFnHbVJBoa Q9vvYO9hG2aMWYpqBxmXpp4kj72faBjyLNRCnP4B0wlolPDzfFWJRCzg4WGIZRm+ o1IK4Vdz8GREOXm9KuiVJ/YqQUjZiqDyQDlq7ZxH4kkTZViRbLHsAZ2eeayTl//P mBEy7ZbxtpJtbEwVFIieAPp8L1v12G6im8ogPOHqAyK43jI3yB2bhyjuVRLILWPN qohM446gFLxgrpn0WKyYPpm2pQksqjP0TMlG8JmC5Ehp7vYmu1d80yfXKkEnziIh /CVSJgUbNixhvHs2v27B4POiCqe1lmRV+xpZ2wsMLI2XcVdL09NZi/9RUghNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2p0lyABXyZISO1gSd63yLrkdQUowHwYDVR0j BBgwFoAUyFXwoHv+ppkBxTRdeZMrcOKZH14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkZTFhOGUtYzJiOC00OTk2LTk0OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3 QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBFMjk5MUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU1RjBBMDdCRkVBNjk5MDFDNTM0NUQ3OTkzMkI3MEUyOTkx RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJC NzBFMjk5MUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGb7J8b3QQ7jd1A/VkdDiepqOK1QPpHpNzj dlFNHH243sYbfwwWBONVxmJanRpb8tYsTxFFtu/K+ukXX9bS/quzHNODjsO16HcO qA7HxtbVR7jpVyqwZosyqi2mXB+PI714hMqOGUSefautW3pVjrIx7XOe4DsLiH/P syZob6hShu27NGU5z1UYeIrzfjWIHCOndGv+tOPlvTut8bXhW2sZtNkEF1nwRCqK Gx19k3YGajr8uLZ1RqRnHPFyFhibT59PC/x3xJ4bpisOVA+98ofHBuKbPiOwa6im 8iUBtf5eVcujPdL+Moj05HS2yXtjWYWnTwxOA0dX71uTCbDwEx8= -----END CERTIFICATE-----Generated at Wed Sep 23 22:25:43 2026 by rpki-client