$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft File: C855F0A07BFEA69901C5345D79932B70E2991F5E.mft (raw, json) Hash identifier: gWFFp0xaGnQQhN/wDu5QP7DSpcQmqfASSKpt/Un4pZw= Subject key identifier: B0:5F:93:B4:50:80:F8:F7:5E:90:9F:2F:97:0B:DF:7A:19:BD:06:EE Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Certificate serial: 48CFF90D83E26494A1D2FA435F762048890537F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft Manifest number: BA Signing time: Wed 16 Sep 2026 23:33:01 +0000 Manifest this update: Wed 16 Sep 2026 23:28:01 +0000 Manifest next update: Fri 18 Sep 2026 03:32:01 +0000 Files and hashes: 1: C855F0A07BFEA69901C5345D79932B70E2991F5E.crl (hash: oHO6prFtEzC9VwIA+WZ+lx3WR7vW6cyKp+rKY593qJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cf:f9:0d:83:e2:64:94:a1:d2:fa:43:5f:76:20:48:89:05:37:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Validity Not Before: Sep 16 23:28:01 2026 GMT Not After : Sep 18 03:32:01 2026 GMT Subject: CN=B05F93B45080F8F75E909F2F970BDF7A19BD06EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:ef:68:88:85:8a:8a:cf:65:0c:c4:fe:00: ab:2b:fa:6e:9e:b7:56:40:c4:18:f7:3a:77:44:6b: 9a:c8:94:a3:6a:54:6b:d1:ef:01:6a:f2:62:77:b2: 15:75:52:d6:b0:69:3a:7d:51:c7:d9:95:bc:f4:ca: fb:e1:92:bb:61:58:e0:18:0f:51:02:b3:96:a3:d9: f5:2e:d0:5a:fd:25:67:21:c9:94:52:a5:a0:68:51: 66:a3:be:d0:c3:72:f1:2c:de:76:d1:78:9d:e7:74: 03:e7:d8:fa:44:62:9a:a8:bf:e9:5f:9c:a6:3f:38: f0:44:5f:35:08:6b:17:f2:7b:4f:e0:2f:96:f3:8c: d4:df:49:32:e1:61:25:91:e4:e2:39:49:d5:db:67: 7f:c9:b5:bc:76:10:45:86:a2:6f:9b:71:40:80:62: 93:26:59:d1:43:22:a7:46:09:4a:3f:f2:ad:3a:13: a3:a6:16:b8:1f:39:42:75:4d:99:12:7a:21:e5:61: ac:ac:8a:b8:9f:9e:c4:c3:6a:93:3f:41:91:f2:bd: 30:b1:10:57:fc:1a:7e:0d:3c:8e:d1:c7:12:db:08: 1f:de:e1:9a:06:c2:4b:2a:f4:04:34:f3:d4:c1:d3: 72:ea:76:9c:f3:23:63:f5:8a:c2:ba:f8:1d:42:c2: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5F:93:B4:50:80:F8:F7:5E:90:9F:2F:97:0B:DF:7A:19:BD:06:EE X509v3 Authority Key Identifier: keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:81:6e:59:f0:2c:25:92:ad:32:71:47:7a:3a:60:7d:7e:f6: 52:32:89:ab:f1:39:c6:44:d7:7b:1d:9f:72:8a:a0:5e:2f:13: d1:47:16:30:e3:f2:8c:73:4e:90:6a:1f:c7:c4:36:80:bc:8d: 6f:66:12:21:73:38:a0:29:27:1b:69:4f:f8:72:06:02:22:f7: ee:25:b3:89:6c:db:24:4f:a0:25:32:78:fd:87:0e:43:86:9d: 46:6e:9e:40:65:16:6f:77:93:e9:57:6e:d1:44:bd:12:af:81: 73:ef:50:9f:40:24:15:fa:1d:ec:c0:34:15:9e:8d:aa:fb:28: 5e:ab:d1:b5:38:86:91:72:ba:88:68:d7:ab:db:df:90:6d:02: b5:e0:f5:86:9e:0b:ce:db:89:63:fc:89:63:19:c8:75:75:b6: c9:ed:2a:54:fa:47:db:92:c4:6b:03:94:fd:70:43:9a:3a:21: 98:e6:d9:9d:d3:c8:58:08:fe:07:e9:a1:ac:b3:20:d4:74:b5: f2:f8:e5:e6:29:8d:b6:fc:85:f0:c3:10:13:d4:1e:17:7d:ea: fa:6c:1b:63:61:c9:17:83:3d:54:b2:e7:6a:88:cd:72:2d:99: 3d:17:28:3b:1e:2a:46:79:a9:d9:ac:ef:56:85:9c:ad:e5:34: dd:ae:04:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSM/5DYPiZJSh0vpDX3YgSIkFN/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBF Mjk5MUY1RTAeFw0yNjA5MTYyMzI4MDFaFw0yNjA5MTgwMzMyMDFaMDMxMTAvBgNV BAMTKEIwNUY5M0I0NTA4MEY4Rjc1RTkwOUYyRjk3MEJERjdBMTlCRDA2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPG+9oiIWKis9lDMT+AKsr+m6e t1ZAxBj3OndEa5rIlKNqVGvR7wFq8mJ3shV1UtawaTp9UcfZlbz0yvvhkrthWOAY D1ECs5aj2fUu0Fr9JWchyZRSpaBoUWajvtDDcvEs3nbReJ3ndAPn2PpEYpqov+lf nKY/OPBEXzUIaxfye0/gL5bzjNTfSTLhYSWR5OI5SdXbZ3/Jtbx2EEWGom+bcUCA YpMmWdFDIqdGCUo/8q06E6OmFrgfOUJ1TZkSeiHlYaysirifnsTDapM/QZHyvTCx EFf8Gn4NPI7RxxLbCB/e4ZoGwksq9AQ089TB03LqdpzzI2P1isK6+B1CwhehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsF+TtFCA+PdekJ8vlwvfehm9Bu4wHwYDVR0j BBgwFoAUyFXwoHv+ppkBxTRdeZMrcOKZH14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkZTFhOGUtYzJiOC00OTk2LTk0OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3 QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBFMjk5MUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU1RjBBMDdCRkVBNjk5MDFDNTM0NUQ3OTkzMkI3MEUyOTkx RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJC NzBFMjk5MUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCBblnwLCWSrTJxR3o6YH1+9lIyiavxOcZE 13sdn3KKoF4vE9FHFjDj8oxzTpBqH8fENoC8jW9mEiFzOKApJxtpT/hyBgIi9+4l s4ls2yRPoCUyeP2HDkOGnUZunkBlFm93k+lXbtFEvRKvgXPvUJ9AJBX6HezANBWe jar7KF6r0bU4hpFyuoho16vb35BtArXg9YaeC87biWP8iWMZyHV1tsntKlT6R9uS xGsDlP1wQ5o6IZjm2Z3TyFgI/gfpoayzINR0tfL45eYpjbb8hfDDEBPUHhd96vps G2NhyReDPVSy52qIzXItmT0XKDseKkZ5qdms71aFnK3lNN2uBNg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:05 2026 by rpki-client