$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft File: E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft (raw, json) Hash identifier: hiF64BADkfYv4u7lKUUcLYcpbqQnH7FDX0Ru2b0dozY= Subject key identifier: 8A:2A:55:A0:5C:FE:B1:1B:74:B2:7E:1D:65:D7:FE:A5:F9:4C:20:7E Authority key identifier: E4:62:22:C6:A7:E7:CD:E9:21:08:B0:C0:DC:8B:DC:74:B2:B6:1F:C0 Certificate issuer: /CN=E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0 Certificate serial: 27730E95C416591604C8036A40C89B04DD630628 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft Manifest number: BE Signing time: Tue 22 Sep 2026 15:20:21 +0000 Manifest this update: Tue 22 Sep 2026 15:15:21 +0000 Manifest next update: Wed 23 Sep 2026 15:40:21 +0000 Files and hashes: 1: E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.crl (hash: rCgiW1XvKR6nCKYDY+dbMJ9DfHXO5ZMhTyiZqCy0U/A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.crl rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:73:0e:95:c4:16:59:16:04:c8:03:6a:40:c8:9b:04:dd:63:06:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0 Validity Not Before: Sep 22 15:15:21 2026 GMT Not After : Sep 23 15:40:21 2026 GMT Subject: CN=8A2A55A05CFEB11B74B27E1D65D7FEA5F94C207E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:03:9f:de:26:a9:f1:01:d8:d7:9b:95:c7: 08:82:8a:3e:ab:54:8b:5f:26:98:6d:7f:17:20:bc: 79:23:e1:12:ea:19:bc:f8:e5:11:9d:ca:f8:de:59: c7:2d:56:07:7e:aa:77:71:69:1e:66:94:37:4d:f3: 8d:7a:6d:fb:9c:f8:72:08:cd:cb:6b:e6:ba:bb:68: db:fc:11:52:ef:4e:26:c9:80:26:f0:65:e3:4d:47: b7:16:4e:63:b5:71:2b:b3:5f:35:34:a7:af:cf:5f: 56:06:d9:07:07:19:e5:6d:dd:30:99:1a:3f:ff:19: 6a:8e:88:f9:ac:6a:6f:dc:29:14:a5:d3:17:83:34: b9:37:3f:14:c5:3e:4d:8a:0d:b5:ff:ff:a3:bc:ce: bc:20:18:e5:7d:39:70:ce:72:54:f8:87:a2:e1:dc: 66:a4:79:91:cb:4d:c4:fb:17:70:be:21:84:14:44: 79:0e:f0:a0:72:cd:57:3b:c3:cb:d0:ca:99:b6:27: 71:d7:a1:58:16:58:e3:02:7d:32:d7:d7:39:94:bb: bd:22:d8:08:ed:9d:a2:38:64:a7:be:47:3a:cf:63: 73:0c:83:64:13:78:09:f7:55:33:dd:ed:28:30:e5: 21:72:d9:27:ae:a6:68:bc:74:83:65:30:b0:af:b0: cf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:55:A0:5C:FE:B1:1B:74:B2:7E:1D:65:D7:FE:A5:F9:4C:20:7E X509v3 Authority Key Identifier: keyid:E4:62:22:C6:A7:E7:CD:E9:21:08:B0:C0:DC:8B:DC:74:B2:B6:1F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:96:c0:3b:c1:94:a9:34:f9:32:b6:93:44:6f:9d:b3:81:e7: a3:d3:50:63:53:2e:a9:25:41:0f:dd:c9:05:2d:e7:0a:dc:65: 21:f3:a1:68:da:a6:06:ce:60:11:08:48:15:f3:68:41:c5:ea: a2:ea:d0:5c:34:6d:a1:b1:c4:89:b3:dc:03:4d:95:54:f2:73: b0:3a:60:ca:77:a4:ef:2b:8c:90:c7:0d:66:32:eb:e8:3b:15: c6:8a:97:ed:8f:8b:6e:c7:f8:87:ae:7a:dc:f7:a0:47:8d:2f: 43:6c:74:e9:5f:6a:6f:26:6d:8c:6d:d5:52:33:a5:5c:64:a2: 61:6b:51:87:db:71:94:17:51:b8:a8:a4:8f:72:4c:6b:0f:b7: ca:26:ce:61:33:8a:3a:21:29:62:92:66:c1:10:4d:81:ee:9a: 9c:6a:6c:ef:11:d7:b4:b8:06:1f:16:bf:b1:0a:da:a1:b7:54: d8:bc:91:82:49:08:45:97:a8:ae:4a:8c:53:7e:12:e1:76:08: 23:f0:e1:e2:b8:c6:d4:7a:9c:94:7b:6f:d1:c5:7b:1f:12:64: fb:9a:92:48:16:2a:ae:9d:fe:0b:43:75:73:3b:00:83:2a:09: 9e:c6:21:ad:ad:3f:48:8e:05:06:1d:c6:8f:76:8e:5f:b5:03: eb:f4:ef:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3MOlcQWWRYEyANqQMibBN1jBigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ2MjIyQzZBN0U3Q0RFOTIxMDhCMEMwREM4QkRDNzRC MkI2MUZDMDAeFw0yNjA5MjIxNTE1MjFaFw0yNjA5MjMxNTQwMjFaMDMxMTAvBgNV BAMTKDhBMkE1NUEwNUNGRUIxMUI3NEIyN0UxRDY1RDdGRUE1Rjk0QzIwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJgOf3iap8QHY15uVxwiCij6r VItfJphtfxcgvHkj4RLqGbz45RGdyvjeWcctVgd+qndxaR5mlDdN8416bfuc+HII zctr5rq7aNv8EVLvTibJgCbwZeNNR7cWTmO1cSuzXzU0p6/PX1YG2QcHGeVt3TCZ Gj//GWqOiPmsam/cKRSl0xeDNLk3PxTFPk2KDbX//6O8zrwgGOV9OXDOclT4h6Lh 3GakeZHLTcT7F3C+IYQURHkO8KByzVc7w8vQypm2J3HXoVgWWOMCfTLX1zmUu70i 2AjtnaI4ZKe+RzrPY3MMg2QTeAn3VTPd7Sgw5SFy2Seupmi8dINlMLCvsM8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiipVoFz+sRt0sn4dZdf+pflMIH4wHwYDVR0j BBgwFoAU5GIixqfnzekhCLDA3IvcdLK2H8AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTRmZTE4MTEtYzAzZi00OWQ4LTkyMTctMTNmZjIyYTMxZWJlLzAvRTQ2MjIyQzZB N0U3Q0RFOTIxMDhCMEMwREM4QkRDNzRCMkI2MUZDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDYyMjJDNkE3RTdDREU5MjEwOEIwQzBEQzhCREM3NEIyQjYx RkMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvRTQ2MjIyQzZBN0U3Q0RFOTIxMDhCMEMwREM4QkRD NzRCMkI2MUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGWwDvBlKk0+TK2k0RvnbOB56PTUGNTLqkl QQ/dyQUt5wrcZSHzoWjapgbOYBEISBXzaEHF6qLq0Fw0baGxxImz3ANNlVTyc7A6 YMp3pO8rjJDHDWYy6+g7FcaKl+2Pi27H+Ieuetz3oEeNL0NsdOlfam8mbYxt1VIz pVxkomFrUYfbcZQXUbiopI9yTGsPt8omzmEzijohKWKSZsEQTYHumpxqbO8R17S4 Bh8Wv7EK2qG3VNi8kYJJCEWXqK5KjFN+EuF2CCPw4eK4xtR6nJR7b9HFex8SZPua kkgWKq6d/gtDdXM7AIMqCZ7GIa2tP0iOBQYdxo92jl+1A+v076Y= -----END CERTIFICATE-----Generated at Wed Sep 23 02:21:17 2026 by rpki-client