$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft File: 0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft (raw, json) Hash identifier: 1M9vhLmNDdsJmkBY/fuh9mNP2XmadWCZ0a5tewo4K6c= Subject key identifier: 2F:13:A5:0B:A0:5D:25:E9:F7:F7:E4:06:18:E7:D1:BD:75:7F:21:06 Authority key identifier: 0C:5B:86:D6:54:91:27:DB:C4:D1:6B:A0:A7:C4:9A:54:6D:9E:E8:7B Certificate issuer: /CN=0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B Certificate serial: 021BA0AB94667E9BDBA4B5136CDC2F7F6BE3156C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 08:03:25 +0000 Manifest this update: Thu 17 Sep 2026 07:58:25 +0000 Manifest next update: Fri 18 Sep 2026 11:02:25 +0000 Files and hashes: 1: 0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl (hash: 1YXZe2wUlOP26mXgtvdKtJamxr9riU9f5S6Me3lVnnQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1b:a0:ab:94:66:7e:9b:db:a4:b5:13:6c:dc:2f:7f:6b:e3:15:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B Validity Not Before: Sep 17 07:58:25 2026 GMT Not After : Sep 18 11:02:25 2026 GMT Subject: CN=2F13A50BA05D25E9F7F7E40618E7D1BD757F2106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:5a:5b:25:5f:23:f0:e6:a2:24:a7:33:7e:b3: 37:e4:ca:7d:24:7b:53:23:e5:ea:95:ac:d8:69:00: d1:00:ad:a4:a2:fd:93:b1:a6:38:3b:f6:66:6d:62: be:1d:a5:34:f8:48:e4:8d:a5:94:95:c6:07:20:df: 8a:04:5e:4b:2b:45:3e:e7:44:67:3c:85:ad:30:e1: ee:3d:75:c1:d1:1a:2d:46:97:e3:21:a0:9a:07:f8: 91:6d:ee:ba:92:4d:59:35:aa:58:b8:5b:7b:d0:68: 2e:35:5a:d9:2a:de:26:a7:1c:bf:de:38:fb:bb:1e: c5:66:a4:c5:61:d7:03:ce:20:b6:f4:8d:d1:4b:9d: 87:bc:fc:12:8c:eb:86:d4:7d:87:c1:e2:28:8d:2b: 0e:e4:6c:66:07:30:a4:90:6d:87:db:33:e8:91:db: e2:4c:e7:2f:e8:de:37:57:7f:df:e8:ef:33:ca:17: 0a:85:8e:3d:ce:b9:f0:d8:f5:4c:a3:92:1e:c6:ba: 54:dd:6b:79:f1:f0:f3:5d:ab:07:65:cb:56:26:67: 6e:36:1f:4c:92:75:ca:d8:3c:e1:d2:55:51:bf:f2: c6:a7:08:a5:0f:c8:eb:30:90:3e:d6:f0:4f:78:de: 9d:1e:ba:63:7e:65:a0:e3:6e:81:67:5c:8b:f1:2c: d0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:13:A5:0B:A0:5D:25:E9:F7:F7:E4:06:18:E7:D1:BD:75:7F:21:06 X509v3 Authority Key Identifier: keyid:0C:5B:86:D6:54:91:27:DB:C4:D1:6B:A0:A7:C4:9A:54:6D:9E:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e6:2d:5c:69:ee:a6:a9:e4:64:0c:81:d9:f1:2e:e0:98:9d: 95:9a:32:7f:8d:87:3c:46:d1:53:2c:d8:83:7f:57:54:76:73: 23:19:7d:24:4c:c3:6f:4b:d9:50:45:0d:4a:71:ee:e4:c5:a1: a2:41:43:77:eb:5a:b6:b1:a8:8d:10:77:1f:05:81:f0:7d:55: 49:f4:94:7d:67:46:d7:25:4a:ff:73:c1:43:53:15:a4:ec:8d: a3:ea:f9:d6:8d:f6:0d:60:93:ed:6e:b5:65:30:91:c1:fe:8a: f6:ad:9b:3a:7a:9c:29:fe:5b:dc:bf:c0:7c:1b:bb:67:d4:5f: 54:95:65:46:43:08:8e:11:cb:ef:08:a8:2e:b6:f2:cd:ee:c8: a2:75:e9:1b:d9:4a:7a:10:c2:95:84:29:c1:e8:9b:33:02:4e: fd:37:33:c0:5c:dc:55:8d:42:23:45:4a:81:9a:7d:0b:4b:60: 9c:0b:db:81:cd:02:96:1f:11:02:78:92:36:41:a7:e0:12:d5: 34:62:f8:6b:12:b7:a4:fd:aa:1a:93:16:1c:71:0c:17:fa:63: 85:f3:c2:b3:9e:ae:e9:1d:68:56:43:45:06:e3:a4:9b:25:10: d8:98:d7:63:96:1a:26:ab:d4:d2:64:ee:a7:72:69:8d:24:fc: 9d:8f:2e:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhugq5RmfpvbpLUTbNwvf2vjFWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM1Qjg2RDY1NDkxMjdEQkM0RDE2QkEwQTdDNDlBNTQ2 RDlFRTg3QjAeFw0yNjA5MTcwNzU4MjVaFw0yNjA5MTgxMTAyMjVaMDMxMTAvBgNV BAMTKDJGMTNBNTBCQTA1RDI1RTlGN0Y3RTQwNjE4RTdEMUJENzU3RjIxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7WlslXyPw5qIkpzN+szfkyn0k e1Mj5eqVrNhpANEAraSi/ZOxpjg79mZtYr4dpTT4SOSNpZSVxgcg34oEXksrRT7n RGc8ha0w4e49dcHRGi1Gl+MhoJoH+JFt7rqSTVk1qli4W3vQaC41Wtkq3ianHL/e OPu7HsVmpMVh1wPOILb0jdFLnYe8/BKM64bUfYfB4iiNKw7kbGYHMKSQbYfbM+iR 2+JM5y/o3jdXf9/o7zPKFwqFjj3OufDY9Uyjkh7GulTda3nx8PNdqwdly1YmZ242 H0ySdcrYPOHSVVG/8sanCKUPyOswkD7W8E943p0eumN+ZaDjboFnXIvxLNAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULxOlC6BdJen39+QGGOfRvXV/IQYwHwYDVR0j BBgwFoAUDFuG1lSRJ9vE0Wugp8SaVG2e6HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNiNTljZTQtNjZhMi00ZjRkLWIzZDYtOTI5OTQ4NGJhNTZiLzAvMEM1Qjg2RDY1 NDkxMjdEQkM0RDE2QkEwQTdDNDlBNTQ2RDlFRTg3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzVCODZENjU0OTEyN0RCQzREMTZCQTBBN0M0OUE1NDZEOUVF ODdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvMEM1Qjg2RDY1NDkxMjdEQkM0RDE2QkEwQTdDNDlB NTQ2RDlFRTg3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/mLVxp7qap5GQMgdnxLuCYnZWaMn+NhzxG 0VMs2IN/V1R2cyMZfSRMw29L2VBFDUpx7uTFoaJBQ3frWraxqI0Qdx8FgfB9VUn0 lH1nRtclSv9zwUNTFaTsjaPq+daN9g1gk+1utWUwkcH+ivatmzp6nCn+W9y/wHwb u2fUX1SVZUZDCI4Ry+8IqC628s3uyKJ16RvZSnoQwpWEKcHomzMCTv03M8Bc3FWN QiNFSoGafQtLYJwL24HNApYfEQJ4kjZBp+AS1TRi+GsSt6T9qhqTFhxxDBf6Y4Xz wrOerukdaFZDRQbjpJslENiY12OWGiar1NJk7qdyaY0k/J2PLrA= -----END CERTIFICATE-----Generated at Thu Sep 17 16:27:49 2026 by rpki-client