$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft File: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft (raw, json) Hash identifier: 0Ncwr+GODwyvVDI/4ijT+XDuqb8YniMVShYUUeMEpPA= Subject key identifier: 37:3A:AD:4A:E4:8D:95:1A:C7:D8:2C:C5:C0:31:02:5F:2E:DF:B1:2E Authority key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F Certificate issuer: /CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Certificate serial: 229B25DDA313487B28E8B5E8EEC7A39E476CB421 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 22:24:32 +0000 Manifest this update: Sun 20 Sep 2026 22:19:32 +0000 Manifest next update: Mon 21 Sep 2026 22:54:32 +0000 Files and hashes: 1: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl (hash: wEraRODcPRF29Hjrwd16XSQtqi+TFkjB5ihuuRzrFqY=) 2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: ySMFpx3jAtHRk6Y0gp/23WMKdK2+n4m1Qj3cdUQcw48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9b:25:dd:a3:13:48:7b:28:e8:b5:e8:ee:c7:a3:9e:47:6c:b4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Validity Not Before: Sep 20 22:19:32 2026 GMT Not After : Sep 21 22:54:32 2026 GMT Subject: CN=373AAD4AE48D951AC7D82CC5C031025F2EDFB12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:b8:38:2f:bf:6b:29:01:20:6c:b6:a6:0b: be:e0:c1:fd:97:88:df:5f:f4:50:8a:1d:6f:fb:df: a6:04:bd:4f:b7:75:12:d6:f3:59:9e:b0:d7:d9:98: d4:3b:da:4c:6e:f6:1c:af:a9:7a:7e:ea:d4:be:31: 21:24:df:8b:23:83:23:ed:f5:42:e3:cf:5a:30:04: a1:0b:5c:00:0b:d9:46:f9:96:39:89:0f:4e:84:81: 47:e2:8f:85:77:41:a2:f1:ec:6d:8c:ca:c1:12:5a: 28:57:25:20:a6:b4:c9:89:75:25:33:d9:62:ba:bd: e1:c9:93:cc:91:30:7a:94:c2:4e:eb:a3:fd:ab:0b: 70:54:44:88:00:c3:57:44:ff:73:2d:59:e8:ec:94: 83:e4:a3:45:37:55:55:68:5c:52:f8:60:74:79:0f: 4d:5b:fb:0f:32:7d:da:0c:e3:aa:5c:56:40:a5:48: cb:a6:0c:b3:32:d9:47:72:99:19:99:b7:2d:85:b2: de:75:8a:b5:8a:9b:43:97:7a:71:aa:75:f8:3d:a1: ca:37:a1:f2:83:fe:00:f0:19:04:59:fa:ea:81:44: c2:85:79:7a:bb:d1:ef:6c:fd:67:6f:85:65:60:68: c8:36:35:d9:34:95:48:e4:a7:6f:6b:34:fd:33:2c: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3A:AD:4A:E4:8D:95:1A:C7:D8:2C:C5:C0:31:02:5F:2E:DF:B1:2E X509v3 Authority Key Identifier: keyid:4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:71:58:27:b3:18:9c:ce:b7:fe:84:7b:e9:58:52:fc:4c:25: 33:0e:b8:97:4f:ca:f5:6b:f1:71:06:63:33:2a:82:5b:9e:75: 92:07:a7:34:15:25:bf:af:0a:10:d6:47:cb:b0:94:08:d6:f6: f9:f4:14:2e:b2:2d:53:62:e1:a9:9c:c7:74:0e:ba:71:07:00: 41:d9:ec:3c:cf:06:16:35:50:77:a4:f5:16:58:94:ec:f1:5f: fa:3f:4e:e4:4a:04:0c:88:59:35:11:91:13:1a:ea:e6:29:d5: f5:31:d2:f5:17:58:90:4f:63:f6:af:f0:62:63:fd:b2:64:00: a0:71:ba:a1:a8:ea:79:e8:7d:ac:57:d8:81:90:5b:11:1e:04: 9b:8c:f9:ef:16:6c:db:c7:ee:51:6b:01:5b:f1:26:f9:c4:0e: ab:52:e5:4b:ca:8a:13:51:75:d1:5c:db:64:05:5d:47:cd:88: 6c:9a:0b:f3:74:ea:ee:f0:e5:63:80:ad:84:48:3a:f0:c1:7b: 39:2e:77:a8:94:ab:14:2f:bc:d9:f7:8c:79:bc:01:8e:dc:01: 66:56:8e:6f:e6:3a:98:ed:d3:72:f6:ea:92:69:c0:77:b7:7f: 94:61:73:c3:a7:84:0f:4c:ef:30:bc:23:f9:88:69:13:7e:5c: 46:54:48:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIpsl3aMTSHso6LXo7sejnkdstCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIxRUFCQTc2NDYwREJFNjA0NkI4NTdCNTdGREZCNTI4 QzJEQTA5RjAeFw0yNjA5MjAyMjE5MzJaFw0yNjA5MjEyMjU0MzJaMDMxMTAvBgNV BAMTKDM3M0FBRDRBRTQ4RDk1MUFDN0Q4MkNDNUMwMzEwMjVGMkVERkIxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqrg4L79rKQEgbLamC77gwf2X iN9f9FCKHW/736YEvU+3dRLW81mesNfZmNQ72kxu9hyvqXp+6tS+MSEk34sjgyPt 9ULjz1owBKELXAAL2Ub5ljmJD06EgUfij4V3QaLx7G2MysESWihXJSCmtMmJdSUz 2WK6veHJk8yRMHqUwk7ro/2rC3BURIgAw1dE/3MtWejslIPko0U3VVVoXFL4YHR5 D01b+w8yfdoM46pcVkClSMumDLMy2UdymRmZty2Fst51irWKm0OXenGqdfg9oco3 ofKD/gDwGQRZ+uqBRMKFeXq70e9s/WdvhWVgaMg2Ndk0lUjkp29rNP0zLB07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNzqtSuSNlRrH2CzFwDECXy7fsS4wHwYDVR0j BBgwFoAUSx6rp2Rg2+YEa4V7V/37UowtoJ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg4NTc1YzgtNTRmZS00ODAxLWE3YjEtNTE3ZDBlNmI4YjczLzAvNEIxRUFCQTc2 NDYwREJFNjA0NkI4NTdCNTdGREZCNTI4QzJEQTA5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QjFFQUJBNzY0NjBEQkU2MDQ2Qjg1N0I1N0ZERkI1MjhDMkRB MDlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNEIxRUFCQTc2NDYwREJFNjA0NkI4NTdCNTdGREZC NTI4QzJEQTA5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5xWCezGJzOt/6Ee+lYUvxMJTMOuJdPyvVr 8XEGYzMqgluedZIHpzQVJb+vChDWR8uwlAjW9vn0FC6yLVNi4amcx3QOunEHAEHZ 7DzPBhY1UHek9RZYlOzxX/o/TuRKBAyIWTURkRMa6uYp1fUx0vUXWJBPY/av8GJj /bJkAKBxuqGo6nnofaxX2IGQWxEeBJuM+e8WbNvH7lFrAVvxJvnEDqtS5UvKihNR ddFc22QFXUfNiGyaC/N06u7w5WOArYRIOvDBezkud6iUqxQvvNn3jHm8AY7cAWZW jm/mOpjt03L26pJpwHe3f5Rhc8OnhA9M7zC8I/mIaRN+XEZUSHg= -----END CERTIFICATE-----Generated at Mon Sep 21 15:32:56 2026 by rpki-client