$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft File: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft (raw, json) Hash identifier: rR18OFJmc8W+kKa0AftSod2DprTe7zXEzb0+RN05BkI= Subject key identifier: 26:00:5D:48:46:31:2A:E6:0C:E7:96:1C:C4:02:FF:8B:E5:7C:EF:DD Authority key identifier: B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 Certificate issuer: /CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Certificate serial: 2E19DF16858385030053F7DFF2D421977E3BF5C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft Manifest number: 3C Signing time: Wed 17 Jun 2026 04:18:01 +0000 Manifest this update: Wed 17 Jun 2026 04:13:01 +0000 Manifest next update: Thu 18 Jun 2026 06:04:01 +0000 Files and hashes: 1: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl (hash: 93UQMLheW6zQJuLcU34K0g9zMmNiNcqLLXKhqp8p1zk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:19:df:16:85:83:85:03:00:53:f7:df:f2:d4:21:97:7e:3b:f5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Validity Not Before: Jun 17 04:13:01 2026 GMT Not After : Jun 18 06:04:01 2026 GMT Subject: CN=26005D4846312AE60CE7961CC402FF8BE57CEFDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:34:07:d2:d7:c7:46:06:50:57:73:9f:b3: 3a:af:f7:ea:b0:51:2a:09:3d:50:7a:1a:86:97:02: 22:70:04:b8:d8:04:ce:5d:77:3c:ec:6c:ca:5f:82: 38:3e:4b:c2:ca:fc:42:89:75:d3:ae:78:9b:cd:ef: ad:1e:c4:50:12:4d:70:db:bc:7d:5b:02:12:4f:fa: 9b:7c:30:b0:79:d6:ef:41:ef:ff:44:fe:5e:58:36: 87:d2:22:eb:64:63:93:3d:f8:76:f3:0c:e6:54:97: a9:35:d8:36:4d:ac:02:c2:b1:50:1b:16:c7:0f:d9: 4e:36:82:9c:da:4d:e4:1f:e5:8d:48:34:cf:b4:65: b1:34:28:21:f9:fc:bf:e0:05:b9:6d:9c:11:0c:fd: c2:29:d4:ed:0e:0c:0e:cc:96:49:9a:d5:6d:0e:14: c8:a2:58:9c:b1:16:d2:88:1e:d0:69:c9:35:a8:78: f8:21:1f:ca:6b:d1:87:74:56:bf:de:8e:f1:34:41: 84:44:84:fc:04:b5:71:13:d8:44:27:4c:76:7a:e9: fd:32:ed:16:83:ae:2d:2f:67:52:90:25:85:c7:cc: 39:1e:7d:ec:cc:1c:50:e7:6b:ed:95:ec:64:d5:d6: 32:eb:3e:22:db:20:e2:f9:fe:4e:42:20:47:f7:f4: 9f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:00:5D:48:46:31:2A:E6:0C:E7:96:1C:C4:02:FF:8B:E5:7C:EF:DD X509v3 Authority Key Identifier: keyid:B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8f:52:c9:4b:de:67:9d:bc:ae:38:ce:92:00:da:ec:ee:69: 76:aa:58:c5:84:b6:da:80:e7:3c:b9:f9:5c:52:1c:cb:74:ad: 61:48:e4:34:ad:28:bc:53:fb:58:76:49:b1:56:43:43:ff:73: 02:df:b5:9b:ca:55:17:88:8c:60:8f:b4:b9:55:a5:ce:b3:1a: 32:dd:bc:be:fd:9e:ca:07:a1:d9:61:4a:d2:19:d0:3b:d8:b0: 59:8a:a0:7b:85:a1:1e:5c:ad:28:6b:28:16:a4:0e:1d:89:63: 7c:bc:12:ce:8b:b7:bb:52:d5:df:d4:9f:04:4c:38:97:b4:f9: f4:de:1d:21:77:e8:53:49:35:06:a0:3e:5f:8e:fa:10:df:2c: e5:67:5e:25:46:27:24:87:d0:16:25:33:c9:4f:30:a4:b4:99: 43:7a:a5:7b:af:b7:4c:5b:7d:6c:a6:18:a6:ad:94:63:a1:b3: 4b:a9:09:78:48:04:46:7d:29:24:50:83:b5:67:c3:58:ac:f6: a0:36:8b:9c:f0:c4:b4:42:84:f3:be:f8:54:e9:c7:41:be:d4: 8c:07:f2:3d:33:70:a3:10:d7:53:11:2f:8b:35:a3:4f:7c:1e: 0a:61:d3:72:14:5c:d3:6a:ce:30:b8:d4:c3:7c:9e:49:b1:29: ca:57:0e:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhnfFoWDhQMAU/ff8tQhl3479cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVD QzQyRjE0NDAeFw0yNjA2MTcwNDEzMDFaFw0yNjA2MTgwNjA0MDFaMDMxMTAvBgNV BAMTKDI2MDA1RDQ4NDYzMTJBRTYwQ0U3OTYxQ0M0MDJGRjhCRTU3Q0VGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlTQH0tfHRgZQV3Ofszqv9+qw USoJPVB6GoaXAiJwBLjYBM5ddzzsbMpfgjg+S8LK/EKJddOueJvN760exFASTXDb vH1bAhJP+pt8MLB51u9B7/9E/l5YNofSIutkY5M9+HbzDOZUl6k12DZNrALCsVAb FscP2U42gpzaTeQf5Y1INM+0ZbE0KCH5/L/gBbltnBEM/cIp1O0ODA7Mlkma1W0O FMiiWJyxFtKIHtBpyTWoePghH8pr0Yd0Vr/ejvE0QYREhPwEtXET2EQnTHZ66f0y 7RaDri0vZ1KQJYXHzDkefezMHFDna+2V7GTV1jLrPiLbIOL5/k5CIEf39J8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgBdSEYxKuYM55YcxAL/i+V8790wHwYDVR0j BBgwFoAUtMmy2Fyer2dR/X+SLuCAjsxC8UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzYjIzMGEtZmZmMS00N2YwLWJmOTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1 QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVDQzQyRjE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM5QjJEODVDOUVBRjY3NTFGRDdGOTIyRUUwODA4RUNDNDJG MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgw OEVDQzQyRjE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGPUslL3medvK44zpIA2uzuaXaqWMWEttqA 5zy5+VxSHMt0rWFI5DStKLxT+1h2SbFWQ0P/cwLftZvKVReIjGCPtLlVpc6zGjLd vL79nsoHodlhStIZ0DvYsFmKoHuFoR5crShrKBakDh2JY3y8Es6Lt7tS1d/UnwRM OJe0+fTeHSF36FNJNQagPl+O+hDfLOVnXiVGJySH0BYlM8lPMKS0mUN6pXuvt0xb fWymGKatlGOhs0upCXhIBEZ9KSRQg7Vnw1is9qA2i5zwxLRChPO++FTpx0G+1IwH 8j0zcKMQ11MRL4s1o098Hgph03IUXNNqzjC41MN8nkmxKcpXDgs= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:41 2026 by rpki-client