$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft File: 4C2533216EFE900E826FB212E41459F4DC754554.mft (raw, json) Hash identifier: aeWW3dqYOYrEXPG5pLgCBH+UZUvjNcuvvt+0fMKGLto= Subject key identifier: E8:D9:37:09:A5:DB:54:07:68:5B:21:72:34:F9:F9:3E:63:D4:33:E1 Authority key identifier: 4C:25:33:21:6E:FE:90:0E:82:6F:B2:12:E4:14:59:F4:DC:75:45:54 Certificate issuer: /CN=4C2533216EFE900E826FB212E41459F4DC754554 Certificate serial: 098B796BC0633635BFEED6CD6C4B6C6103761870 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft Manifest number: BE Signing time: Tue 22 Sep 2026 04:06:33 +0000 Manifest this update: Tue 22 Sep 2026 04:01:33 +0000 Manifest next update: Wed 23 Sep 2026 05:53:33 +0000 Files and hashes: 1: 4C2533216EFE900E826FB212E41459F4DC754554.crl (hash: npw/H4z74Yo6JDrGKabkhga0IbPuoCkxLSsxBXQcJc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.crl rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8b:79:6b:c0:63:36:35:bf:ee:d6:cd:6c:4b:6c:61:03:76:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C2533216EFE900E826FB212E41459F4DC754554 Validity Not Before: Sep 22 04:01:33 2026 GMT Not After : Sep 23 05:53:33 2026 GMT Subject: CN=E8D93709A5DB5407685B217234F9F93E63D433E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:c7:e7:54:6d:55:6c:5c:6b:e1:f9:cf:6f: b6:77:57:23:18:53:55:ae:e0:0a:f1:59:8d:ba:8a: ce:5d:3d:bf:09:3d:57:23:3f:19:0a:f7:e7:df:6d: 4b:16:cd:93:8c:1a:c9:91:0b:06:82:90:e5:de:00: 73:6f:fe:d1:aa:90:94:b0:e8:a9:91:9f:9d:65:71: 6e:24:23:80:77:3a:65:1e:b5:f4:99:3d:9c:d2:3c: 62:27:b8:ae:b5:fd:ef:79:93:fb:c1:80:22:0e:00: 6f:da:c9:d8:bc:29:2a:1b:75:9f:ce:78:2a:85:02: f8:69:b0:02:6d:cc:97:3f:05:e6:3b:5b:0a:2c:97: f9:51:39:6c:22:17:fa:71:c6:d3:f0:df:36:dc:d1: e5:1d:af:60:2c:af:bb:97:c4:d5:a2:72:5c:61:bf: aa:66:fc:3f:43:db:d4:ee:48:37:92:c9:cf:31:1a: e0:88:b6:08:96:5a:c6:e1:3f:92:cd:d3:4c:db:ba: dd:c3:63:0b:92:f0:fe:03:1e:2b:30:d4:b6:d8:51: ce:04:39:c8:ac:6d:12:16:70:1a:23:5d:89:bc:29: f8:4c:c4:50:14:e9:6f:c2:86:1a:71:55:28:ca:5f: 24:89:0f:3d:fb:a7:62:e2:a8:fd:77:19:00:8b:2e: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D9:37:09:A5:DB:54:07:68:5B:21:72:34:F9:F9:3E:63:D4:33:E1 X509v3 Authority Key Identifier: keyid:4C:25:33:21:6E:FE:90:0E:82:6F:B2:12:E4:14:59:F4:DC:75:45:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:17:58:85:09:ae:f3:16:db:cd:7e:d0:e5:58:fa:3b:33:89: 0b:eb:2a:2d:9d:ac:4c:ab:10:da:41:03:eb:9b:52:42:b2:8a: f7:72:19:3a:41:be:e6:bf:1a:24:63:ae:98:c0:bc:8d:ee:ec: a4:e0:49:ad:aa:ec:36:30:04:22:7d:f2:3f:d0:8b:9b:93:b5: 72:dc:d7:9c:ba:9c:63:03:96:47:e5:5c:1e:7a:d4:78:44:49: 7e:34:9e:41:9f:45:f8:f5:70:4c:75:77:7a:83:66:eb:b5:f7: b2:28:0f:ea:a3:b8:35:f3:f9:6c:90:81:02:d6:30:5a:eb:60: ab:02:7d:66:25:c6:ae:10:ab:33:30:96:13:3e:11:3e:47:26: 6d:74:72:e5:24:da:ae:69:c0:28:e6:6f:32:5d:50:60:87:a0: 19:10:0d:5d:79:dd:ef:4d:aa:4e:9e:05:04:ff:42:a2:45:35: 11:f8:40:8b:89:31:dd:3d:86:51:ba:8d:9e:db:35:55:a0:d6: 8f:26:f9:71:a0:b0:4f:0e:68:e2:f8:8d:c3:48:0d:c5:ed:71: 5b:e9:1e:2e:c6:b0:18:92:33:75:61:82:d5:9e:09:54:d7:74: 77:33:a1:e4:a3:64:50:cb:2d:f2:7b:1d:8f:87:1a:54:c0:57: c7:a5:5b:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYt5a8BjNjW/7tbNbEtsYQN2GHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMyNTMzMjE2RUZFOTAwRTgyNkZCMjEyRTQxNDU5RjRE Qzc1NDU1NDAeFw0yNjA5MjIwNDAxMzNaFw0yNjA5MjMwNTUzMzNaMDMxMTAvBgNV BAMTKEU4RDkzNzA5QTVEQjU0MDc2ODVCMjE3MjM0RjlGOTNFNjNENDMzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINMfnVG1VbFxr4fnPb7Z3VyMY U1Wu4ArxWY26is5dPb8JPVcjPxkK9+ffbUsWzZOMGsmRCwaCkOXeAHNv/tGqkJSw 6KmRn51lcW4kI4B3OmUetfSZPZzSPGInuK61/e95k/vBgCIOAG/aydi8KSobdZ/O eCqFAvhpsAJtzJc/BeY7Wwosl/lROWwiF/pxxtPw3zbc0eUdr2Asr7uXxNWiclxh v6pm/D9D29TuSDeSyc8xGuCItgiWWsbhP5LN00zbut3DYwuS8P4DHisw1LbYUc4E OcisbRIWcBojXYm8KfhMxFAU6W/ChhpxVSjKXySJDz37p2LiqP13GQCLLsTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Nk3CaXbVAdoWyFyNPn5PmPUM+EwHwYDVR0j BBgwFoAUTCUzIW7+kA6Cb7IS5BRZ9Nx1RVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU2MGQyZGYtNjVmZi00M2E4LWE5ODMtMzMyMGNmOWZkMjkyLzAvNEMyNTMzMjE2 RUZFOTAwRTgyNkZCMjEyRTQxNDU5RjREQzc1NDU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzI1MzMyMTZFRkU5MDBFODI2RkIyMTJFNDE0NTlGNERDNzU0 NTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNEMyNTMzMjE2RUZFOTAwRTgyNkZCMjEyRTQxNDU5 RjREQzc1NDU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgXWIUJrvMW281+0OVY+jsziQvrKi2drEyr ENpBA+ubUkKyivdyGTpBvua/GiRjrpjAvI3u7KTgSa2q7DYwBCJ98j/Qi5uTtXLc 15y6nGMDlkflXB561HhESX40nkGfRfj1cEx1d3qDZuu197IoD+qjuDXz+WyQgQLW MFrrYKsCfWYlxq4QqzMwlhM+ET5HJm10cuUk2q5pwCjmbzJdUGCHoBkQDV153e9N qk6eBQT/QqJFNRH4QIuJMd09hlG6jZ7bNVWg1o8m+XGgsE8OaOL4jcNIDcXtcVvp Hi7GsBiSM3VhgtWeCVTXdHczoeSjZFDLLfJ7HY+HGlTAV8elWxw= -----END CERTIFICATE-----Generated at Tue Sep 22 17:26:49 2026 by rpki-client