$ rpki-client -vvvf rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft File: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft (raw, json) Hash identifier: nkHPw+zHa42NUFSyQvY8chSz0hE4P9z6WWhrby/XYE4= Subject key identifier: B1:FA:8D:71:FE:0A:8A:DC:BF:B3:DF:B5:89:2F:CD:EA:C7:EE:DD:E5 Authority key identifier: 4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 Certificate issuer: /CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Certificate serial: 401FD566C93991D3FEEE0B233BDE38EE7418AC07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft Manifest number: BD Signing time: Mon 21 Sep 2026 14:29:32 +0000 Manifest this update: Mon 21 Sep 2026 14:24:32 +0000 Manifest next update: Tue 22 Sep 2026 17:14:32 +0000 Files and hashes: 1: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl (hash: uABaGpypWA6be7iNzvOlDgR9M8Vz9BCDjskIp/Ya824=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1f:d5:66:c9:39:91:d3:fe:ee:0b:23:3b:de:38:ee:74:18:ac:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Validity Not Before: Sep 21 14:24:32 2026 GMT Not After : Sep 22 17:14:32 2026 GMT Subject: CN=B1FA8D71FE0A8ADCBFB3DFB5892FCDEAC7EEDDE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:b3:85:1f:fa:33:b7:ec:90:35:31:2f:6d: 4c:7d:ea:6d:0b:c1:cf:f3:0b:d9:cf:72:57:bd:45: d1:7f:76:e6:5b:bc:7d:92:d1:ef:97:e4:3a:65:49: e7:ab:f8:38:80:86:eb:52:78:80:d0:2f:63:fa:b4: 0b:c2:56:b6:c2:6e:de:4b:2f:d0:c8:d1:db:6e:d7: 12:a1:cf:6d:c8:b5:48:33:df:28:81:6b:7f:38:93: 71:df:62:49:b9:fe:42:ca:40:f4:d1:00:de:a8:01: bf:68:05:55:97:b0:2a:c9:97:20:77:ea:03:14:26: b2:fe:93:ec:bf:d8:7c:b4:bc:29:7f:7e:ce:40:e8: a1:ec:e1:ab:94:ac:cd:9f:6c:0b:4c:33:b4:41:d5: 61:50:a2:1d:78:16:e3:53:71:a4:34:06:6c:8c:34: 0a:78:35:fd:1c:c5:64:5e:da:75:bf:66:5e:a4:e2: f0:6e:19:ec:01:d4:27:33:05:ed:7f:e4:1d:cf:48: 07:ae:43:75:0a:ab:e3:26:e1:8a:47:8b:88:93:b4: dd:01:d7:5e:5c:02:76:cd:0b:6f:97:04:9e:4f:30: 87:48:1f:5c:b9:71:69:7a:70:22:70:d4:ba:6f:91: 36:41:68:e2:89:33:6a:44:1a:f4:be:02:53:f3:85: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FA:8D:71:FE:0A:8A:DC:BF:B3:DF:B5:89:2F:CD:EA:C7:EE:DD:E5 X509v3 Authority Key Identifier: keyid:4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:bc:f2:51:45:e6:5a:c4:99:c7:e1:15:a6:95:b8:a7:b1:79: 3f:65:20:e5:e8:39:5c:7b:a7:ee:12:a5:45:a4:99:f6:7a:3c: c0:38:4f:a3:73:68:0c:f3:4f:d5:19:39:c3:54:58:de:37:6d: 4e:3c:3a:dc:83:39:a8:58:b1:dd:d5:04:20:1e:6f:13:e2:6e: a0:f1:b5:97:3a:50:38:94:fa:c6:3e:95:02:6d:98:bc:98:b7: f8:bd:20:a0:6d:dc:d3:44:2e:e2:40:56:2b:81:e3:2e:7a:e8: d7:9e:0c:25:6b:dd:6e:09:a9:6c:61:ea:8f:c4:bc:5b:1b:dd: 59:43:5d:88:7d:aa:5d:7d:32:7c:93:9b:7a:07:0b:0f:9c:1b: 83:4d:04:c7:c8:62:af:da:1a:48:e7:e4:f1:40:bc:36:a3:f4: 0b:bd:bd:23:3a:eb:7d:f8:85:39:2f:e0:ed:a5:ef:70:18:f4: 54:b3:66:72:b7:d1:da:fe:c5:2a:1b:e7:37:b0:43:91:b1:80: 20:da:dd:ac:0b:94:94:41:2c:c6:97:21:52:e9:79:11:14:41: 27:b9:ee:90:c9:c8:04:31:b3:70:3c:59:97:d2:d1:fb:a4:9a: b6:02:96:3d:7a:14:65:73:9b:83:42:c7:ec:1a:e8:d2:cc:1d: 06:7e:7d:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQB/VZsk5kdP+7gsjO9447nQYrAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0 NjY5RTFGMDAeFw0yNjA5MjExNDI0MzJaFw0yNjA5MjIxNzE0MzJaMDMxMTAvBgNV BAMTKEIxRkE4RDcxRkUwQThBRENCRkIzREZCNTg5MkZDREVBQzdFRURERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9rOFH/ozt+yQNTEvbUx96m0L wc/zC9nPcle9RdF/duZbvH2S0e+X5DplSeer+DiAhutSeIDQL2P6tAvCVrbCbt5L L9DI0dtu1xKhz23ItUgz3yiBa384k3HfYkm5/kLKQPTRAN6oAb9oBVWXsCrJlyB3 6gMUJrL+k+y/2Hy0vCl/fs5A6KHs4auUrM2fbAtMM7RB1WFQoh14FuNTcaQ0BmyM NAp4Nf0cxWRe2nW/Zl6k4vBuGewB1CczBe1/5B3PSAeuQ3UKq+Mm4YpHi4iTtN0B 115cAnbNC2+XBJ5PMIdIH1y5cWl6cCJw1LpvkTZBaOKJM2pEGvS+AlPzhd/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfqNcf4Kity/s9+1iS/N6sfu3eUwHwYDVR0j BBgwFoAUS+EwB+j//HwseDoTctt0tEZp4fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM0ZjEzZTgtZGVlZi00OGE4LWEyZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdF OEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0NjY5RTFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkUxMzAwN0U4RkZGQzdDMkM3ODNBMTM3MkRCNzRCNDQ2NjlF MUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0 QjQ0NjY5RTFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJm88lFF5lrEmcfhFaaVuKexeT9lIOXoOVx7 p+4SpUWkmfZ6PMA4T6NzaAzzT9UZOcNUWN43bU48OtyDOahYsd3VBCAebxPibqDx tZc6UDiU+sY+lQJtmLyYt/i9IKBt3NNELuJAViuB4y566NeeDCVr3W4JqWxh6o/E vFsb3VlDXYh9ql19MnyTm3oHCw+cG4NNBMfIYq/aGkjn5PFAvDaj9Au9vSM66334 hTkv4O2l73AY9FSzZnK30dr+xSob5zewQ5GxgCDa3awLlJRBLMaXIVLpeREUQSe5 7pDJyAQxs3A8WZfS0fukmrYClj16FGVzm4NCx+wa6NLMHQZ+fT0= -----END CERTIFICATE-----Generated at Tue Sep 22 05:36:50 2026 by rpki-client