$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft File: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft (raw, json) Hash identifier: j46yCccPYNNj1n7rLe4GMZ0SsXbzrE5PSDvMGYkO56A= Subject key identifier: A0:07:6A:E6:8A:29:C6:67:6F:E1:A0:3B:FF:01:01:8C:B8:9F:AB:94 Authority key identifier: C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C Certificate issuer: /CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Certificate serial: 4C5AC7C46899DD91F221561CC4981697D320E2DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:11:12 +0000 Manifest this update: Thu 17 Sep 2026 10:06:12 +0000 Manifest next update: Fri 18 Sep 2026 12:24:12 +0000 Files and hashes: 1: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl (hash: 2telrHUghnG5+22EWyvcQRgWyM65T6lSuXWRN5NGU0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5a:c7:c4:68:99:dd:91:f2:21:56:1c:c4:98:16:97:d3:20:e2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Validity Not Before: Sep 17 10:06:12 2026 GMT Not After : Sep 18 12:24:12 2026 GMT Subject: CN=A0076AE68A29C6676FE1A03BFF01018CB89FAB94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:ae:40:82:83:5c:f4:66:f4:b5:63:66:ab: 2b:84:66:23:23:49:93:37:de:c5:7d:35:da:18:c7: 64:4b:28:ea:36:e4:05:92:fe:8a:50:c3:ce:2a:d2: 5c:ac:87:2a:6a:df:c0:1e:0f:5d:44:aa:bc:eb:2d: dc:f8:77:b4:ef:e6:84:57:90:24:88:75:45:39:84: 3a:8d:14:aa:fe:bd:3b:21:fe:36:3a:1e:d5:94:02: cb:46:14:7e:38:66:6c:1f:d6:ef:65:f9:79:db:8d: ef:6b:35:81:62:74:cf:5f:4a:9c:19:b7:e8:7e:59: 2e:08:46:05:a3:66:c9:86:24:28:03:d5:a3:c8:68: 73:96:a2:6c:59:d6:c6:e9:bb:17:96:40:7e:fe:63: d1:50:fd:5c:cf:99:0a:95:ec:14:0e:6f:45:76:51: 28:b8:30:3b:29:94:1f:d3:b1:d2:cb:35:f3:9e:45: ee:ae:1f:0c:d3:03:1b:4a:0a:93:a2:7f:75:a9:8b: 09:b4:2a:ad:3e:e7:68:ad:9a:fb:61:78:b0:4d:80: 88:47:0b:a5:36:72:91:40:28:f7:92:f3:ce:c7:da: 77:f2:ad:ed:63:95:22:e6:56:52:48:d2:19:2a:eb: 19:b2:3f:27:37:a9:9d:9b:97:0d:ce:cf:4a:a5:89: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:07:6A:E6:8A:29:C6:67:6F:E1:A0:3B:FF:01:01:8C:B8:9F:AB:94 X509v3 Authority Key Identifier: keyid:C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:20:35:49:88:e6:35:99:f8:78:77:f0:3d:2d:92:ee:65:b4: 35:91:35:dc:c4:6b:f6:cf:d2:e9:43:c0:3c:da:d2:38:3b:f6: 46:70:27:6b:25:f4:dc:cf:31:ff:74:56:5e:30:50:7a:2d:20: e5:2e:bd:a8:1b:bf:6a:70:76:7d:f2:b9:ad:4d:6f:cd:6a:5e: 4f:71:42:1a:4b:b8:ee:9e:40:35:1e:14:03:a6:bc:7f:ef:b6: da:66:28:e8:f7:bf:81:14:49:cb:bf:16:a9:6f:8f:97:c7:22: 7e:55:c4:67:1d:f4:c0:4f:b3:aa:cb:a0:05:54:08:ab:4b:3a: f6:3f:9e:28:cb:18:3f:10:d6:67:39:c8:a4:7d:09:c7:c9:47: a6:da:34:aa:0e:e8:f9:f8:ce:9a:4c:49:63:5a:4c:c6:1e:23: 94:61:f6:36:80:59:32:56:18:c6:d7:32:ec:5d:9b:95:9e:8c: a3:d6:7f:30:fe:92:4d:50:be:4c:ad:3d:de:ce:b3:aa:4b:99: f5:a0:61:02:40:15:9d:05:7e:c7:59:41:d9:94:a9:a3:2b:9e: 84:74:df:1b:de:d2:3f:45:ff:1c:5c:92:df:e6:85:cf:cc:4b: 20:86:a8:fd:d5:e0:9a:d7:a7:03:79:7c:ba:c2:b6:6c:8e:59: e9:9c:4a:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFrHxGiZ3ZHyIVYcxJgWl9Mg4twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNBMTlC MjQ2REU4QzAeFw0yNjA5MTcxMDA2MTJaFw0yNjA5MTgxMjI0MTJaMDMxMTAvBgNV BAMTKEEwMDc2QUU2OEEyOUM2Njc2RkUxQTAzQkZGMDEwMThDQjg5RkFCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kK5AgoNc9Gb0tWNmqyuEZiMj SZM33sV9NdoYx2RLKOo25AWS/opQw84q0lyshypq38AeD11EqrzrLdz4d7Tv5oRX kCSIdUU5hDqNFKr+vTsh/jY6HtWUAstGFH44Zmwf1u9l+Xnbje9rNYFidM9fSpwZ t+h+WS4IRgWjZsmGJCgD1aPIaHOWomxZ1sbpuxeWQH7+Y9FQ/VzPmQqV7BQOb0V2 USi4MDsplB/TsdLLNfOeRe6uHwzTAxtKCpOif3Wpiwm0Kq0+52itmvtheLBNgIhH C6U2cpFAKPeS887H2nfyre1jlSLmVlJI0hkq6xmyPyc3qZ2blw3Oz0qliQHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoAdq5oopxmdv4aA7/wEBjLifq5QwHwYDVR0j BBgwFoAUwsVOnuMKOW/NttVd9wI6GbJG3owwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNmM2MyMTEtMDY0NS00ODgyLWE0ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVF MzBBMzk2RkNEQjZENTVERjcwMjNBMTlCMjQ2REU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkM1NEU5RUUzMEEzOTZGQ0RCNkQ1NURGNzAyM0ExOUIyNDZE RThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNB MTlCMjQ2REU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEgNUmI5jWZ+Hh38D0tku5ltDWRNdzEa/bP 0ulDwDza0jg79kZwJ2sl9NzPMf90Vl4wUHotIOUuvagbv2pwdn3yua1Nb81qXk9x QhpLuO6eQDUeFAOmvH/vttpmKOj3v4EUScu/Fqlvj5fHIn5VxGcd9MBPs6rLoAVU CKtLOvY/nijLGD8Q1mc5yKR9CcfJR6baNKoO6Pn4zppMSWNaTMYeI5Rh9jaAWTJW GMbXMuxdm5WejKPWfzD+kk1QvkytPd7Os6pLmfWgYQJAFZ0FfsdZQdmUqaMrnoR0 3xve0j9F/xxckt/mhc/MSyCGqP3V4JrXpwN5fLrCtmyOWemcShY= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:33 2026 by rpki-client