$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft File: 10B2C61A3BF002D69AD557B8392E1F340162A168.mft (raw, json) Hash identifier: OgfogAktaNNYrJyUO3D2DdwKmRbPTpymWNyfWepdLNA= Subject key identifier: BB:C2:22:9D:A6:D0:4E:2C:AB:27:61:37:B4:42:D5:28:4F:3A:6D:C7 Authority key identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 Certificate issuer: /CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Certificate serial: 51C1020D30131DFB269EAF9B94B25E9A5AC8DBAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft Manifest number: 91 Signing time: Wed 19 Aug 2026 13:40:18 +0000 Manifest this update: Wed 19 Aug 2026 13:35:18 +0000 Manifest next update: Thu 20 Aug 2026 15:09:18 +0000 Files and hashes: 1: 10B2C61A3BF002D69AD557B8392E1F340162A168.crl (hash: pkpT5tzTLLotuIuaqBv6PSFgAyHzi7lJp5FP38oMAI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 15:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c1:02:0d:30:13:1d:fb:26:9e:af:9b:94:b2:5e:9a:5a:c8:db:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Validity Not Before: Aug 19 13:35:18 2026 GMT Not After : Aug 20 15:09:18 2026 GMT Subject: CN=BBC2229DA6D04E2CAB276137B442D5284F3A6DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:c9:94:09:6c:85:0b:2d:c5:49:ab:0c:f6: 88:91:7d:66:d1:61:3e:89:ef:65:13:ec:ce:b5:a3: c9:6e:e8:b0:fb:b2:ca:17:24:d3:94:b0:39:26:72: 7a:f2:4b:0c:70:08:bf:a3:e2:ef:9f:35:8c:d4:ff: 46:0b:59:90:cd:2a:a5:a3:e8:41:9b:ed:9e:33:21: 8e:26:25:85:7a:cd:9d:c5:69:6d:a7:26:87:02:fb: 28:fc:ee:fb:0b:7f:53:68:2d:13:70:9d:9b:01:fc: bb:1d:67:36:6e:c9:3b:f1:e2:f3:24:ea:76:33:0b: da:f7:52:20:37:a4:78:3b:f6:d6:0c:42:ea:fb:e9: 34:a7:2c:de:66:d7:b5:b0:c6:ce:b8:0b:32:3f:d8: c7:eb:17:2c:fd:60:04:cd:76:b1:34:50:2f:dd:6d: e6:e3:ed:86:08:b9:ec:59:d0:9e:fa:67:5b:08:c7: e5:3d:5d:e0:96:27:0a:45:31:aa:29:f2:59:59:cd: 7d:60:95:ed:86:9e:3c:c4:e0:4d:a7:11:b0:4d:a8: af:4d:00:84:68:09:07:7b:c6:71:75:7b:9b:79:0c: 0b:0e:0d:21:74:f3:b6:09:f9:92:98:0d:d6:e2:54: 3c:6f:aa:e9:ec:bc:bb:b6:75:9c:34:97:c3:ae:96: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:22:9D:A6:D0:4E:2C:AB:27:61:37:B4:42:D5:28:4F:3A:6D:C7 X509v3 Authority Key Identifier: keyid:10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:54:3e:90:cb:60:a3:33:2e:cc:16:f3:f3:2a:87:c4:d8:2e: 92:b1:02:f2:3d:89:6c:86:5c:df:2b:44:65:2f:dd:99:4d:89: c1:87:c8:0c:f8:03:ad:41:15:bc:55:85:15:92:e7:91:1d:e6: c3:c4:f2:c5:f4:7f:14:7d:e1:ff:c9:d4:bb:6d:ca:7e:ab:06: ae:c3:5a:b5:b6:0a:91:38:ea:b3:5f:57:10:2f:08:35:6c:06: f5:a7:2b:7b:d7:2b:cf:22:92:a0:12:65:b8:b6:81:9d:64:14: ca:26:a8:20:98:a1:1b:96:9f:bc:af:a1:0f:f9:ba:e1:5a:e7: 28:81:8f:fc:d0:df:34:a6:5e:51:3d:9a:90:2f:8f:7a:f3:0f: 0f:e0:bf:07:c3:15:cd:58:95:51:63:d5:88:ba:9d:2f:dc:15: b5:94:01:d2:46:61:71:5e:7f:4f:c6:a0:e8:7d:51:8e:7c:85: 30:98:7a:63:1e:35:16:82:1a:9b:c9:c5:66:ff:9c:36:d6:b3: d5:18:8b:30:4a:87:0d:64:0c:aa:59:ea:37:2c:7c:3a:d6:96: f2:85:fd:97:b1:f2:2e:c2:9f:64:28:a7:54:bc:10:0c:50:17: d1:57:a6:4a:6b:d8:4b:e0:35:06:10:c5:ae:43:2f:d9:7f:2d: 8e:a0:12:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcECDTATHfsmnq+blLJemlrI268wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFGMzQw MTYyQTE2ODAeFw0yNjA4MTkxMzM1MThaFw0yNjA4MjAxNTA5MThaMDMxMTAvBgNV BAMTKEJCQzIyMjlEQTZEMDRFMkNBQjI3NjEzN0I0NDJENTI4NEYzQTZEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBcmUCWyFCy3FSasM9oiRfWbR YT6J72UT7M61o8lu6LD7ssoXJNOUsDkmcnrySwxwCL+j4u+fNYzU/0YLWZDNKqWj 6EGb7Z4zIY4mJYV6zZ3FaW2nJocC+yj87vsLf1NoLRNwnZsB/LsdZzZuyTvx4vMk 6nYzC9r3UiA3pHg79tYMQur76TSnLN5m17Wwxs64CzI/2MfrFyz9YATNdrE0UC/d bebj7YYIuexZ0J76Z1sIx+U9XeCWJwpFMaop8llZzX1gle2GnjzE4E2nEbBNqK9N AIRoCQd7xnF1e5t5DAsODSF087YJ+ZKYDdbiVDxvqunsvLu2dZw0l8Oulnu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8IinabQTiyrJ2E3tELVKE86bccwHwYDVR0j BBgwFoAUELLGGjvwAtaa1Ve4OS4fNAFioWgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEz QkYwMDJENjlBRDU1N0I4MzkyRTFGMzQwMTYyQTE2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8xMEIyQzYxQTNCRjAwMkQ2OUFENTU3QjgzOTJFMUYzNDAxNjJB MTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFG MzQwMTYyQTE2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdUPpDLYKMzLswW8/Mqh8TYLpKxAvI9iWyG XN8rRGUv3ZlNicGHyAz4A61BFbxVhRWS55Ed5sPE8sX0fxR94f/J1Lttyn6rBq7D WrW2CpE46rNfVxAvCDVsBvWnK3vXK88ikqASZbi2gZ1kFMomqCCYoRuWn7yvoQ/5 uuFa5yiBj/zQ3zSmXlE9mpAvj3rzDw/gvwfDFc1YlVFj1Yi6nS/cFbWUAdJGYXFe f0/GoOh9UY58hTCYemMeNRaCGpvJxWb/nDbWs9UYizBKhw1kDKpZ6jcsfDrWlvKF /Zex8i7Cn2Qop1S8EAxQF9FXpkpr2EvgNQYQxa5DL9l/LY6gEp0= -----END CERTIFICATE-----Generated at Thu Aug 20 05:25:12 2026 by rpki-client