$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft File: F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft (raw, json) Hash identifier: gILbsyHI8kLrg9KtUwZqbydkX7vzQGwc3FzhCSBuNKg= Subject key identifier: 9C:06:4A:4D:D5:FB:58:52:A9:95:92:BA:2B:54:FE:21:D5:AC:16:D9 Authority key identifier: F4:74:0D:72:C7:EF:FF:97:CE:C9:C1:1B:4D:F8:B3:D5:76:18:E1:0F Certificate issuer: /CN=F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F Certificate serial: 2797BD9D49EDA8DBC1EACD33CCB4260FE619E3EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft Manifest number: 3E Signing time: Sun 15 Nov 2026 06:27:12 +0000 Manifest this update: Sun 15 Nov 2026 06:22:12 +0000 Manifest next update: Mon 16 Nov 2026 10:10:12 +0000 Files and hashes: 1: F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.crl (hash: YdjBrDrKMH8FgZLXm/sTRxqQTIXWkNlchPEQX9+fGoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.crl rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:97:bd:9d:49:ed:a8:db:c1:ea:cd:33:cc:b4:26:0f:e6:19:e3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F Validity Not Before: Nov 15 06:22:12 2026 GMT Not After : Nov 16 10:10:12 2026 GMT Subject: CN=9C064A4DD5FB5852A99592BA2B54FE21D5AC16D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:5e:2e:a4:a0:a1:e5:f5:94:44:29:2a:ed: 49:82:55:55:e3:d8:fb:5c:c2:b8:6a:e9:3c:b1:08: f7:13:ef:4c:94:ae:39:de:75:48:be:bf:86:ce:d7: f5:d0:6c:00:33:8f:85:86:b4:7b:3c:a8:62:9b:fd: e2:6f:4f:99:a7:00:32:14:0c:d6:74:b5:1f:8e:db: 5b:a4:ca:45:0b:25:33:8f:3c:e7:a1:bc:c1:bd:3c: 4a:ad:f0:ba:88:ed:93:0e:c7:8e:b8:e7:ea:aa:25: b6:f8:ab:29:09:d1:bd:10:a3:18:5d:da:05:8e:9a: cf:1e:3b:af:2c:3a:6a:16:8b:13:b8:24:aa:f0:98: 51:f0:b4:45:19:3c:35:8b:c4:5a:0c:2d:9a:f7:ef: 33:29:72:57:ca:4d:d6:e3:31:c4:f6:56:dc:d5:f2: ad:30:c9:c4:7d:5c:68:12:38:d7:65:9e:92:61:cc: 39:bd:88:72:5f:22:78:90:9b:1b:09:18:0d:51:29: e1:66:a0:93:dc:7a:58:c0:ad:c6:1f:c6:c6:3e:43: f1:83:03:03:cb:75:2a:91:ba:58:2c:30:49:91:06: 43:f8:5d:22:06:39:e4:4d:f2:6d:f2:cb:d0:44:bd: 0b:c8:e8:cc:b2:de:5f:f9:c4:16:67:d9:19:68:52: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:06:4A:4D:D5:FB:58:52:A9:95:92:BA:2B:54:FE:21:D5:AC:16:D9 X509v3 Authority Key Identifier: keyid:F4:74:0D:72:C7:EF:FF:97:CE:C9:C1:1B:4D:F8:B3:D5:76:18:E1:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:96:55:52:c0:1b:44:6f:3a:35:d0:8a:ff:5b:17:1a:a1:23: 55:9b:ce:cb:e5:4a:e7:c5:51:12:a2:4d:93:76:f7:a8:33:0f: d0:c0:e3:b9:81:4a:ca:8a:9e:69:a2:2e:4b:07:6b:ed:f0:ce: b0:55:0d:5a:98:4b:59:21:d7:a0:fe:d7:43:c1:a7:6e:50:6a: ea:b8:ec:c8:35:39:78:7f:c1:eb:eb:de:aa:a3:cd:20:2b:d1: 1e:62:47:ad:e0:a6:5f:3f:03:3f:50:94:64:e1:5f:f0:fd:19: 32:cf:eb:4b:7d:5f:e4:d8:26:98:b5:3b:db:e7:ae:e7:73:b6: 71:18:96:4f:88:42:dd:02:ab:d2:a3:f2:67:38:ed:49:f9:31: f9:9d:0c:12:15:34:fc:28:ec:46:03:1e:23:a7:33:14:16:43: c1:c7:7b:25:9f:9b:4e:b7:01:4c:41:3d:9f:2d:9c:6c:fa:9c: 8c:cc:9b:3b:81:95:9a:d3:d7:45:e9:02:a1:8f:16:09:af:f8: fd:3b:7f:86:04:d3:b3:be:aa:f7:d5:f1:36:05:ac:41:9e:4e: 36:68:83:7b:14:6d:c5:5f:f9:01:73:22:ea:61:96:4b:50:8f: 3a:fd:c5:f9:26:b3:9a:fe:42:d7:8e:98:28:38:ac:93:d1:09: ff:0b:79:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ5e9nUntqNvB6s0zzLQmD+YZ4+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ3NDBENzJDN0VGRkY5N0NFQzlDMTFCNERGOEIzRDU3 NjE4RTEwRjAeFw0yNjExMTUwNjIyMTJaFw0yNjExMTYxMDEwMTJaMDMxMTAvBgNV BAMTKDlDMDY0QTRERDVGQjU4NTJBOTk1OTJCQTJCNTRGRTIxRDVBQzE2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGl4upKCh5fWURCkq7UmCVVXj 2Ptcwrhq6TyxCPcT70yUrjnedUi+v4bO1/XQbAAzj4WGtHs8qGKb/eJvT5mnADIU DNZ0tR+O21ukykULJTOPPOehvMG9PEqt8LqI7ZMOx4645+qqJbb4qykJ0b0Qoxhd 2gWOms8eO68sOmoWixO4JKrwmFHwtEUZPDWLxFoMLZr37zMpclfKTdbjMcT2VtzV 8q0wycR9XGgSONdlnpJhzDm9iHJfIniQmxsJGA1RKeFmoJPceljArcYfxsY+Q/GD AwPLdSqRulgsMEmRBkP4XSIGOeRN8m3yy9BEvQvI6Myy3l/5xBZn2RloUjl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnAZKTdX7WFKplZK6K1T+IdWsFtkwHwYDVR0j BBgwFoAU9HQNcsfv/5fOycEbTfiz1XYY4Q8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZDA3YWUtM2M3NC00NTdkLTg5N2YtNWI4MDZiZWRlYTg3LzAvRjQ3NDBENzJD N0VGRkY5N0NFQzlDMTFCNERGOEIzRDU3NjE4RTEwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDc0MEQ3MkM3RUZGRjk3Q0VDOUMxMUI0REY4QjNENTc2MThF MTBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZDA3YWUtM2M3NC00NTdkLTg5 N2YtNWI4MDZiZWRlYTg3LzAvRjQ3NDBENzJDN0VGRkY5N0NFQzlDMTFCNERGOEIz RDU3NjE4RTEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiWVVLAG0RvOjXQiv9bFxqhI1WbzsvlSufF URKiTZN296gzD9DA47mBSsqKnmmiLksHa+3wzrBVDVqYS1kh16D+10PBp25Qauq4 7Mg1OXh/wevr3qqjzSAr0R5iR63gpl8/Az9QlGThX/D9GTLP60t9X+TYJpi1O9vn rudztnEYlk+IQt0Cq9Kj8mc47Un5MfmdDBIVNPwo7EYDHiOnMxQWQ8HHeyWfm063 AUxBPZ8tnGz6nIzMmzuBlZrT10XpAqGPFgmv+P07f4YE07O+qvfV8TYFrEGeTjZo g3sUbcVf+QFzIuphlktQjzr9xfkms5r+QteOmCg4rJPRCf8LeWA= -----END CERTIFICATE-----Generated at Sun Nov 15 17:44:35 2026 by rpki-client