$ rpki-client -vvf rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft File: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft (raw, json) Hash identifier: ucmbjhWjM9TbpXvzqf9MMKnDzj5vONBxijIQEBYiPeg= Subject key identifier: 4F:FB:1B:A8:A4:9C:6D:33:CD:B3:DC:6C:A1:CF:39:66:02:86:CF:0C Authority key identifier: 4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 Certificate issuer: /CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Certificate serial: 5CB4D2812D23BEBA0EECC5C56503F2250E58A4E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 01:24:32 +0000 Manifest this update: Wed 17 Jun 2026 01:19:32 +0000 Manifest next update: Thu 18 Jun 2026 03:40:32 +0000 Files and hashes: 1: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl (hash: oVpSP+aLviFROjTJh5X5ki2TY6kCPl7pd1kmKF2UY5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b4:d2:81:2d:23:be:ba:0e:ec:c5:c5:65:03:f2:25:0e:58:a4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Validity Not Before: Jun 17 01:19:32 2026 GMT Not After : Jun 18 03:40:32 2026 GMT Subject: CN=4FFB1BA8A49C6D33CDB3DC6CA1CF39660286CF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:20:48:e8:3d:29:e2:c1:b9:47:4f:52:a8: 81:f4:6d:7e:c4:ba:18:8a:ca:7f:8e:e0:98:df:7a: be:8f:e0:5b:72:da:ed:a3:1a:0a:98:52:11:46:ec: ff:10:c2:bd:ac:78:e6:8d:6a:a5:88:9b:bd:f1:90: f3:53:d4:3e:d4:2b:c7:7b:15:db:e1:59:35:27:fc: 02:19:78:0b:2b:b8:b3:7a:fe:93:7c:00:91:fa:69: 16:30:d2:23:22:ab:9f:ec:1a:80:82:a9:40:14:c0: c0:d9:25:fc:2d:d8:11:5f:14:68:f8:dd:f4:1f:86: 50:d0:5a:93:85:79:f0:d5:84:4b:75:b4:77:9a:ed: 61:2c:d6:e0:75:58:56:ba:39:a1:b1:03:7e:97:ae: d8:e2:79:8b:de:a6:75:a8:85:ac:a2:d1:25:4b:71: b4:10:df:f9:bb:cd:1b:91:36:70:bd:2e:17:c8:eb: 68:dc:f8:09:37:61:2c:66:7f:f5:f7:1d:a0:27:ba: 9d:bc:64:90:4d:04:be:b5:e2:1c:9b:f8:72:2b:4f: 07:5a:9a:58:bb:52:00:ed:cc:e6:4a:ff:8b:ef:82: f4:7a:f9:a1:6c:76:76:bf:60:3a:72:14:87:e7:e2: 3d:5b:09:32:83:a3:a9:c2:1b:11:1b:fc:56:6d:69: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FB:1B:A8:A4:9C:6D:33:CD:B3:DC:6C:A1:CF:39:66:02:86:CF:0C X509v3 Authority Key Identifier: keyid:4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ac:7f:c1:75:2d:81:b8:c6:cd:82:4b:79:70:81:78:ec:13: 50:bd:5f:28:0f:f8:0e:d5:ad:89:72:cd:56:c2:13:57:f4:2a: 20:a2:ef:df:1b:33:8c:d4:86:5f:30:4e:15:52:1a:34:69:a5: e8:3a:6b:fe:51:00:e8:44:c1:81:fe:c5:e1:e9:42:07:75:84: 36:89:08:77:05:cf:af:79:76:48:7e:bf:45:1e:ff:89:1d:c5: c7:af:aa:72:89:0a:ee:83:35:79:8f:4b:59:0f:12:b8:59:83: f1:95:6a:1a:48:96:eb:96:d8:08:87:d1:3c:8d:51:ab:d1:f2: 7b:57:55:2f:1b:3f:3c:5c:6f:a6:09:83:12:27:00:3d:25:34: 9f:40:d4:95:e9:56:0e:f8:4e:6f:0c:1e:3f:2f:9f:c8:9a:b9: 7e:1b:42:dd:2a:42:75:d8:22:1a:4b:65:0f:f8:83:b4:89:d2: 52:91:b0:11:1e:88:71:13:7e:15:a3:bd:8b:08:99:1f:72:6c: 13:e0:f8:9b:0d:ed:98:2c:b3:58:ac:10:b0:44:08:bb:a5:f6: f8:69:58:b0:3d:28:c1:a7:be:45:a3:eb:a9:f8:54:21:8a:47: bf:b9:fa:90:44:46:af:fe:1e:c4:6e:37:8b:23:f1:94:c4:0f: 30:4c:60:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLTSgS0jvroO7MXFZQPyJQ5YpOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0 NjY5RTFGMDAeFw0yNjA2MTcwMTE5MzJaFw0yNjA2MTgwMzQwMzJaMDMxMTAvBgNV BAMTKDRGRkIxQkE4QTQ5QzZEMzNDREIzREM2Q0ExQ0YzOTY2MDI4NkNGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6yBI6D0p4sG5R09SqIH0bX7E uhiKyn+O4Jjfer6P4Fty2u2jGgqYUhFG7P8Qwr2seOaNaqWIm73xkPNT1D7UK8d7 FdvhWTUn/AIZeAsruLN6/pN8AJH6aRYw0iMiq5/sGoCCqUAUwMDZJfwt2BFfFGj4 3fQfhlDQWpOFefDVhEt1tHea7WEs1uB1WFa6OaGxA36XrtjieYvepnWohayi0SVL cbQQ3/m7zRuRNnC9LhfI62jc+Ak3YSxmf/X3HaAnup28ZJBNBL614hyb+HIrTwda mli7UgDtzOZK/4vvgvR6+aFsdna/YDpyFIfn4j1bCTKDo6nCGxEb/FZtaQw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT/sbqKScbTPNs9xsoc85ZgKGzwwwHwYDVR0j BBgwFoAUS+EwB+j//HwseDoTctt0tEZp4fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM0ZjEzZTgtZGVlZi00OGE4LWEyZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdF OEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0NjY5RTFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkUxMzAwN0U4RkZGQzdDMkM3ODNBMTM3MkRCNzRCNDQ2NjlF MUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0 QjQ0NjY5RTFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCsf8F1LYG4xs2CS3lwgXjsE1C9XygP+A7V rYlyzVbCE1f0KiCi798bM4zUhl8wThVSGjRppeg6a/5RAOhEwYH+xeHpQgd1hDaJ CHcFz695dkh+v0Ue/4kdxcevqnKJCu6DNXmPS1kPErhZg/GVahpIluuW2AiH0TyN UavR8ntXVS8bPzxcb6YJgxInAD0lNJ9A1JXpVg74Tm8MHj8vn8iauX4bQt0qQnXY IhpLZQ/4g7SJ0lKRsBEeiHETfhWjvYsImR9ybBPg+JsN7Zgss1isELBECLul9vhp WLA9KMGnvkWj66n4VCGKR7+5+pBERq/+HsRuN4sj8ZTEDzBMYJc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:00 2026 by rpki-client