$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft File: 11B59A73410511C9A6E01CB13423495DDC1B58CE.mft (raw, json) Hash identifier: cPYlBWqw5+VbWHeP/8MSsjbx1U0y7LYOJv82VHt8NM8= Subject key identifier: 90:A1:98:20:0C:95:29:C9:07:9E:06:0E:8C:1C:89:7E:51:93:27:1F Authority key identifier: 11:B5:9A:73:41:05:11:C9:A6:E0:1C:B1:34:23:49:5D:DC:1B:58:CE Certificate issuer: /CN=11B59A73410511C9A6E01CB13423495DDC1B58CE Certificate serial: 5C8B2F715F5407CA7F8BFAB746AC5F8700DBE56B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 07:32:46 +0000 Manifest this update: Thu 17 Sep 2026 07:27:46 +0000 Manifest next update: Fri 18 Sep 2026 09:04:46 +0000 Files and hashes: 1: 11B59A73410511C9A6E01CB13423495DDC1B58CE.crl (hash: tNrFBzNdoRNYmDYwm1ntP83I6zqpB4s+d/OzY6FPtRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.crl rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8b:2f:71:5f:54:07:ca:7f:8b:fa:b7:46:ac:5f:87:00:db:e5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B59A73410511C9A6E01CB13423495DDC1B58CE Validity Not Before: Sep 17 07:27:46 2026 GMT Not After : Sep 18 09:04:46 2026 GMT Subject: CN=90A198200C9529C9079E060E8C1C897E5193271F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:aa:03:9c:b0:e7:11:88:ae:8f:c1:75:40: 5f:88:46:06:b5:29:cc:ef:2a:b7:60:1b:7d:ed:31: 85:65:b4:11:a1:dd:4e:ad:9d:50:4a:8d:7c:c6:b9: a7:5a:52:75:d5:24:c2:0e:1f:e8:2d:39:2f:77:b5: c4:f5:db:c6:5a:e4:9e:2e:d8:6c:3a:fc:ac:a1:b4: 2c:08:3b:31:5b:85:40:c7:39:35:80:73:60:12:35: db:f4:fb:51:00:72:de:56:a5:15:65:45:fc:71:eb: ef:13:40:3b:cb:02:28:c8:0b:14:25:d2:71:81:07: 0b:9a:27:23:41:50:1d:ca:7d:5a:97:d6:bb:d1:9f: df:fb:f1:bd:6f:f1:a5:a6:14:8f:40:93:aa:03:77: e2:84:d2:0c:8b:97:5c:a9:2d:d1:c6:94:67:c7:83: 12:44:27:2b:12:77:f1:17:26:c1:51:ae:15:d4:d2: 44:39:e0:0a:e1:06:7b:b9:94:6f:26:95:4d:90:c6: 24:c5:c3:d8:80:56:d7:ea:d5:c0:36:28:e3:8f:d9: b4:23:d4:af:cb:93:ea:45:02:f9:b9:c1:85:38:24: 35:74:3f:01:dc:6d:05:f5:91:26:95:6b:e3:f7:99: 26:38:b7:bf:90:1b:cf:fd:db:4e:92:7b:a4:12:53: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A1:98:20:0C:95:29:C9:07:9E:06:0E:8C:1C:89:7E:51:93:27:1F X509v3 Authority Key Identifier: keyid:11:B5:9A:73:41:05:11:C9:A6:E0:1C:B1:34:23:49:5D:DC:1B:58:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:bd:af:19:24:a6:1c:ce:11:52:0f:f7:2f:34:5d:3a:f6:29: f3:93:f8:51:49:46:15:2b:d3:6e:5b:bd:22:f3:97:96:97:c5: f0:bb:6b:0b:91:49:98:b1:b5:30:4e:80:17:8c:de:de:9e:d8: 92:4c:fd:e2:5f:86:96:35:69:49:c7:a4:e4:a6:dc:7e:e6:0a: cf:15:90:2d:ba:f8:9c:e1:fd:cf:3d:34:1b:6e:03:c3:3f:06: 0c:93:7f:56:f1:0e:15:f8:04:af:4e:bd:c2:26:87:42:88:6a: e4:16:c2:a2:7e:22:0a:41:f1:31:4d:2c:ff:77:03:f9:00:c2: 2c:05:4b:8f:a1:8e:76:b9:73:7d:b7:8e:df:b2:22:d3:f0:ad: cc:c1:f0:8f:ba:90:02:12:20:5e:80:64:45:df:a2:48:3f:83: 53:b7:00:50:81:53:e5:63:d6:ac:86:a7:75:49:65:80:6a:ac: bb:f5:3e:4a:0e:ab:f8:ab:69:04:1f:75:8f:22:d9:b8:1b:c6: 70:e1:61:99:7c:ee:7a:1f:8e:37:dc:ba:f3:f2:53:3a:5a:21: 6b:65:0d:a4:b9:64:79:9d:7b:3f:f2:d2:52:ed:d9:5f:92:b6: 16:04:78:57:66:4e:87:64:f5:64:af:8e:99:b4:b9:0f:52:7e: ea:a6:2e:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIsvcV9UB8p/i/q3RqxfhwDb5WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCNTlBNzM0MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5NURE QzFCNThDRTAeFw0yNjA5MTcwNzI3NDZaFw0yNjA5MTgwOTA0NDZaMDMxMTAvBgNV BAMTKDkwQTE5ODIwMEM5NTI5QzkwNzlFMDYwRThDMUM4OTdFNTE5MzI3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0KoDnLDnEYiuj8F1QF+IRga1 KczvKrdgG33tMYVltBGh3U6tnVBKjXzGuadaUnXVJMIOH+gtOS93tcT128Za5J4u 2Gw6/KyhtCwIOzFbhUDHOTWAc2ASNdv0+1EAct5WpRVlRfxx6+8TQDvLAijICxQl 0nGBBwuaJyNBUB3KfVqX1rvRn9/78b1v8aWmFI9Ak6oDd+KE0gyLl1ypLdHGlGfH gxJEJysSd/EXJsFRrhXU0kQ54ArhBnu5lG8mlU2QxiTFw9iAVtfq1cA2KOOP2bQj 1K/Lk+pFAvm5wYU4JDV0PwHcbQX1kSaVa+P3mSY4t7+QG8/9206Se6QSU5rPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkKGYIAyVKckHngYOjByJflGTJx8wHwYDVR0j BBgwFoAUEbWac0EFEcmm4ByxNCNJXdwbWM4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzRkNDEwMDMtMTJiMC00ZTZhLWIwODUtNTZiYzJkMTlkYWE4LzAvMTFCNTlBNzM0 MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5NUREQzFCNThDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMUI1OUE3MzQxMDUxMUM5QTZFMDFDQjEzNDIzNDk1RERDMUI1 OENFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMTFCNTlBNzM0MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5 NUREQzFCNThDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAES9rxkkphzOEVIP9y80XTr2KfOT+FFJRhUr 025bvSLzl5aXxfC7awuRSZixtTBOgBeM3t6e2JJM/eJfhpY1aUnHpOSm3H7mCs8V kC26+Jzh/c89NBtuA8M/BgyTf1bxDhX4BK9OvcImh0KIauQWwqJ+IgpB8TFNLP93 A/kAwiwFS4+hjna5c323jt+yItPwrczB8I+6kAISIF6AZEXfokg/g1O3AFCBU+Vj 1qyGp3VJZYBqrLv1PkoOq/iraQQfdY8i2bgbxnDhYZl87nofjjfcuvPyUzpaIWtl DaS5ZHmdez/y0lLt2V+SthYEeFdmTodk9WSvjpm0uQ9SfuqmLs8= -----END CERTIFICATE-----Generated at Thu Sep 17 09:23:01 2026 by rpki-client