$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft File: 851B60F64AE44DA53ED7359592F434C5A590686C.mft (raw, json) Hash identifier: oNNZFVaodhlO3v1Q9s78SN4wI+uCaFfXMnVeD2PdJ94= Subject key identifier: F7:52:D8:7E:D7:27:04:BB:36:72:79:69:51:1F:DE:2A:2C:80:FF:54 Authority key identifier: 85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C Certificate issuer: /CN=851B60F64AE44DA53ED7359592F434C5A590686C Certificate serial: 5F6735C842C660EF175F8E0AFB10481516089132 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 02:31:33 +0000 Manifest this update: Thu 17 Sep 2026 02:26:33 +0000 Manifest next update: Fri 18 Sep 2026 03:27:33 +0000 Files and hashes: 1: 851B60F64AE44DA53ED7359592F434C5A590686C.crl (hash: fK4iYIYaTTR3raHUSgkSZLJvjZtMl0s2QMwMapz2P1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:67:35:c8:42:c6:60:ef:17:5f:8e:0a:fb:10:48:15:16:08:91:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851B60F64AE44DA53ED7359592F434C5A590686C Validity Not Before: Sep 17 02:26:33 2026 GMT Not After : Sep 18 03:27:33 2026 GMT Subject: CN=F752D87ED72704BB36727969511FDE2A2C80FF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:ff:06:a7:7d:e3:46:4f:f1:49:e0:cf:68: 1d:6a:b3:ac:70:5b:92:0b:2c:cd:04:1b:f7:e2:da: a4:40:4b:02:56:3d:79:2c:10:dc:96:97:36:c3:ea: 7b:89:79:ad:e7:7f:97:dd:73:21:c4:1f:50:4d:61: 05:17:a5:44:76:a5:fd:89:95:c6:6d:ed:12:2c:e2: 76:cc:c3:14:77:13:08:f9:a9:b3:7e:20:48:54:c4: e6:4b:23:e5:d1:37:c0:36:28:c6:a8:77:9f:61:66: a9:3d:01:6f:e8:b3:ea:a5:9c:d4:5b:b7:23:bc:7d: 12:25:31:f6:4d:9f:47:21:0f:06:06:b3:8d:a2:1b: 12:d5:d3:da:a4:2e:85:be:2d:f5:b5:e5:30:4c:94: a7:2d:39:3d:7d:60:4e:89:89:f0:c6:42:27:1f:90: 7c:7e:9c:42:6a:96:c7:64:63:b4:c5:1f:ff:06:95: 0d:65:6c:8e:24:03:aa:9e:42:6c:bf:0b:c6:e2:f2: de:06:e2:df:8f:b3:ea:2f:22:47:aa:76:26:fd:70: b5:b0:96:b2:d0:c2:5d:47:9c:02:b3:95:63:56:c3: 2d:63:02:06:2d:52:74:5d:3f:f1:8f:7a:68:fa:58: fa:21:e7:2a:f0:a3:e5:a4:44:5d:66:39:1c:35:14: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:52:D8:7E:D7:27:04:BB:36:72:79:69:51:1F:DE:2A:2C:80:FF:54 X509v3 Authority Key Identifier: keyid:85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0a:0a:72:f5:5c:28:f4:a1:70:45:a0:77:2c:93:96:9e:1a: f8:a9:79:21:2e:91:52:cd:ff:4b:17:25:0e:dc:c4:86:8d:da: 8c:f5:4d:44:9c:5c:4b:95:1d:b6:2a:47:bc:f6:05:02:39:85: 9b:3d:00:d4:71:b8:bf:a6:cb:94:7a:2f:18:c9:0b:1f:da:b8: 9c:df:98:05:9c:ce:51:6a:18:2c:3f:6b:62:c1:81:3c:f0:e8: 87:e0:d5:b0:23:27:4d:a3:c6:90:02:61:fb:93:96:66:6f:42: df:d7:ea:64:3d:65:20:9b:07:dc:85:dd:c4:d5:b1:c5:24:07: 30:84:83:6d:52:01:79:43:c5:1b:02:44:24:e5:dd:fb:b7:d9: b0:64:1a:b6:cc:0c:be:fc:e8:e3:a9:06:6e:ac:14:6b:ac:8d: 3b:50:2f:2b:43:2c:fc:59:af:31:f8:39:34:76:0a:83:0d:23: 9d:06:d5:95:e4:c3:4b:f9:73:3f:d2:d3:ef:26:4c:a7:24:97: aa:d8:3b:1c:e5:8a:eb:b3:d5:d1:c1:9c:49:d9:a1:e6:7b:35: 80:db:b1:40:5f:1a:6e:aa:ba:0c:6f:e5:0c:63:fb:d2:38:8b: 84:43:59:99:c9:38:e2:78:cd:e2:41:04:1d:14:1f:0e:63:6d: 15:80:a8:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2c1yELGYO8XX44K+xBIFRYIkTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0QzVB NTkwNjg2QzAeFw0yNjA5MTcwMjI2MzNaFw0yNjA5MTgwMzI3MzNaMDMxMTAvBgNV BAMTKEY3NTJEODdFRDcyNzA0QkIzNjcyNzk2OTUxMUZERTJBMkM4MEZGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsg/8Gp33jRk/xSeDPaB1qs6xw W5ILLM0EG/fi2qRASwJWPXksENyWlzbD6nuJea3nf5fdcyHEH1BNYQUXpUR2pf2J lcZt7RIs4nbMwxR3Ewj5qbN+IEhUxOZLI+XRN8A2KMaod59hZqk9AW/os+qlnNRb tyO8fRIlMfZNn0chDwYGs42iGxLV09qkLoW+LfW15TBMlKctOT19YE6JifDGQicf kHx+nEJqlsdkY7TFH/8GlQ1lbI4kA6qeQmy/C8bi8t4G4t+Ps+ovIkeqdib9cLWw lrLQwl1HnAKzlWNWwy1jAgYtUnRdP/GPemj6WPoh5yrwo+WkRF1mORw1FAevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU91LYftcnBLs2cnlpUR/eKiyA/1QwHwYDVR0j BBgwFoAUhRtg9krkTaU+1zWVkvQ0xaWQaGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE0ODZjY2QtMGM5NS00OTFhLWI5ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0 QUU0NERBNTNFRDczNTk1OTJGNDM0QzVBNTkwNjg2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTFCNjBGNjRBRTQ0REE1M0VENzM1OTU5MkY0MzRDNUE1OTA2 ODZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvODUxQjYwRjY0QUU0NERBNTNFRDczNTk1OTJGNDM0 QzVBNTkwNjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIKCnL1XCj0oXBFoHcsk5aeGvipeSEukVLN /0sXJQ7cxIaN2oz1TUScXEuVHbYqR7z2BQI5hZs9ANRxuL+my5R6LxjJCx/auJzf mAWczlFqGCw/a2LBgTzw6Ifg1bAjJ02jxpACYfuTlmZvQt/X6mQ9ZSCbB9yF3cTV scUkBzCEg21SAXlDxRsCRCTl3fu32bBkGrbMDL786OOpBm6sFGusjTtQLytDLPxZ rzH4OTR2CoMNI50G1ZXkw0v5cz/S0+8mTKckl6rYOxzliuuz1dHBnEnZoeZ7NYDb sUBfGm6qugxv5Qxj+9I4i4RDWZnJOOJ4zeJBBB0UHw5jbRWAqCA= -----END CERTIFICATE-----Generated at Thu Sep 17 16:27:21 2026 by rpki-client