$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft File: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft (raw, json) Hash identifier: lDnCgSJeZ6uOxp/88jl34i+FuTP59GMuFiXRsS5FAh4= Subject key identifier: 98:BB:26:89:0D:97:3C:42:01:3C:D5:05:40:51:20:BA:95:F7:5F:BF Authority key identifier: B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 Certificate issuer: /CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Certificate serial: 1124EFA6173A7DB6927E781809ABADBEB0037D52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft Manifest number: BC Signing time: Mon 21 Sep 2026 04:52:40 +0000 Manifest this update: Mon 21 Sep 2026 04:47:40 +0000 Manifest next update: Tue 22 Sep 2026 06:54:40 +0000 Files and hashes: 1: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl (hash: X+JZPL6Q7TYc9hdGRCz+aVzBGb11Tj/Z3P1fu4LWZJw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:24:ef:a6:17:3a:7d:b6:92:7e:78:18:09:ab:ad:be:b0:03:7d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Validity Not Before: Sep 21 04:47:40 2026 GMT Not After : Sep 22 06:54:40 2026 GMT Subject: CN=98BB26890D973C42013CD505405120BA95F75FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:6a:2b:43:18:ce:5f:1b:2e:3a:89:aa:6b: 53:f4:5c:76:91:c4:19:4f:f9:a6:85:c8:ed:39:cf: a8:b5:8c:61:ce:1e:85:39:3c:c4:39:05:00:e7:b8: 62:0d:c8:a2:45:10:db:fa:c9:5a:f9:ca:1d:ef:ea: 64:73:de:b6:1d:db:26:aa:da:c7:12:33:b7:1a:ac: 7d:8c:02:77:90:43:23:f4:d7:2f:52:ee:68:e5:4a: 3d:bd:09:88:e7:67:37:0f:e0:60:d8:e3:e9:15:86: 6d:3d:ac:b1:57:5e:b4:f4:d2:74:68:ae:43:5a:18: cf:a5:7c:50:b6:d5:8a:5e:41:da:d9:12:8e:1a:98: 34:99:bf:c0:d1:dc:b9:63:93:8d:cf:a1:8d:b4:73: b9:a4:af:3b:c7:14:ca:81:bf:ee:b2:57:0b:fb:d6: 1e:3a:52:12:a0:e1:2c:6e:3b:48:0f:d7:54:f1:ff: b8:4b:d8:57:f5:19:fe:72:99:4d:21:bd:0f:6d:87: 43:9f:c2:da:b6:9b:44:d4:d5:a2:c0:72:d6:1a:ab: 45:5f:1f:00:fb:7a:04:64:4d:27:60:7d:93:2d:42: c3:9e:c9:53:0e:ba:0f:df:07:51:8e:22:3b:43:91: 4a:3d:b3:0a:89:ab:f1:2a:2e:fd:73:5a:98:fe:df: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BB:26:89:0D:97:3C:42:01:3C:D5:05:40:51:20:BA:95:F7:5F:BF X509v3 Authority Key Identifier: keyid:B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:af:2d:f6:66:e4:47:ad:7c:7e:44:0a:d5:f0:30:8e:39:63: 33:e3:31:f5:b1:28:a9:62:94:6d:28:82:04:59:90:fc:15:84: 50:b5:c7:a9:0d:cd:d7:cc:54:12:82:f6:48:29:a7:0f:0a:3b: 5a:ea:10:2f:c7:0e:c4:a6:bf:13:d7:33:17:73:f6:e2:70:3a: 8d:e0:0f:c1:3b:48:79:85:89:c2:bb:16:65:33:30:ee:bd:1d: 54:b9:42:e2:54:e0:4b:69:14:cc:a4:ae:85:d8:bc:48:00:16: 20:23:4c:39:4f:a6:b7:59:d7:0d:40:51:e3:17:fe:d6:2a:2c: c8:48:5c:e0:9b:e7:be:5c:86:be:ef:5c:7d:48:64:ac:b1:81: 66:26:13:17:a6:d5:e2:c6:33:32:0b:32:93:f9:9e:43:99:71: 84:1c:8d:ab:e5:63:81:9c:60:fd:7d:ab:c6:37:89:c0:a3:bd: 4c:b8:e9:49:16:3d:09:2a:1d:95:85:ce:e0:69:aa:53:55:74: ae:dc:19:87:df:bb:52:47:91:6c:c7:dc:94:a1:74:fc:a8:b5: a5:ab:da:7d:4a:55:fb:35:6c:a2:61:b5:5d:b8:5c:43:ba:00: 0e:1b:60:3f:ff:90:a9:51:ef:77:56:86:0b:32:7a:83:4d:ed: ce:71:9f:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESTvphc6fbaSfngYCautvrADfVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVD QzQyRjE0NDAeFw0yNjA5MjEwNDQ3NDBaFw0yNjA5MjIwNjU0NDBaMDMxMTAvBgNV BAMTKDk4QkIyNjg5MEQ5NzNDNDIwMTNDRDUwNTQwNTEyMEJBOTVGNzVGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzmorQxjOXxsuOomqa1P0XHaR xBlP+aaFyO05z6i1jGHOHoU5PMQ5BQDnuGINyKJFENv6yVr5yh3v6mRz3rYd2yaq 2scSM7carH2MAneQQyP01y9S7mjlSj29CYjnZzcP4GDY4+kVhm09rLFXXrT00nRo rkNaGM+lfFC21YpeQdrZEo4amDSZv8DR3Lljk43PoY20c7mkrzvHFMqBv+6yVwv7 1h46UhKg4SxuO0gP11Tx/7hL2Ff1Gf5ymU0hvQ9th0Ofwtq2m0TU1aLActYaq0Vf HwD7egRkTSdgfZMtQsOeyVMOug/fB1GOIjtDkUo9swqJq/EqLv1zWpj+31LnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLsmiQ2XPEIBPNUFQFEgupX3X78wHwYDVR0j BBgwFoAUtMmy2Fyer2dR/X+SLuCAjsxC8UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzYjIzMGEtZmZmMS00N2YwLWJmOTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1 QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVDQzQyRjE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM5QjJEODVDOUVBRjY3NTFGRDdGOTIyRUUwODA4RUNDNDJG MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgw OEVDQzQyRjE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2vLfZm5EetfH5ECtXwMI45YzPjMfWxKKli lG0oggRZkPwVhFC1x6kNzdfMVBKC9kgppw8KO1rqEC/HDsSmvxPXMxdz9uJwOo3g D8E7SHmFicK7FmUzMO69HVS5QuJU4EtpFMykroXYvEgAFiAjTDlPprdZ1w1AUeMX /tYqLMhIXOCb575chr7vXH1IZKyxgWYmExem1eLGMzILMpP5nkOZcYQcjavlY4Gc YP19q8Y3icCjvUy46UkWPQkqHZWFzuBpqlNVdK7cGYffu1JHkWzH3JShdPyotaWr 2n1KVfs1bKJhtV24XEO6AA4bYD//kKlR73dWhgsyeoNN7c5xn88= -----END CERTIFICATE-----Generated at Mon Sep 21 16:01:57 2026 by rpki-client