$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft File: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft (raw, json) Hash identifier: Hw2/3ibkaGoMP+rH5/WBPTc77fUaP/BcPpjccEW+HLs= Subject key identifier: 99:9A:F3:67:CF:33:1B:04:55:A6:54:4D:96:15:6C:16:EE:C7:AA:4D Authority key identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 Certificate issuer: /CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Certificate serial: 7E2B73BF1FC8853FFB82EA22469D1C11B53E96A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft Manifest number: BC Signing time: Mon 21 Sep 2026 09:59:00 +0000 Manifest this update: Mon 21 Sep 2026 09:54:00 +0000 Manifest next update: Tue 22 Sep 2026 13:00:00 +0000 Files and hashes: 1: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl (hash: N3pwbtKwR2JFK/P1bB+HH8RCwjw6BXn+c2Po91g5FmA=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: fyKEzPeEJ4+E+32EaynXxqr/Ouql5hSrF2WTR5BFrF8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2b:73:bf:1f:c8:85:3f:fb:82:ea:22:46:9d:1c:11:b5:3e:96:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Validity Not Before: Sep 21 09:54:00 2026 GMT Not After : Sep 22 13:00:00 2026 GMT Subject: CN=999AF367CF331B0455A6544D96156C16EEC7AA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:94:15:3c:3b:f0:be:23:91:47:32:7f:a5: 15:de:68:6a:9b:c1:df:f3:b0:15:f5:34:65:96:8f: dc:7b:9a:66:8a:fe:81:57:d9:a8:78:15:d9:bb:c0: 2f:d5:dd:15:36:82:c8:d8:3d:c2:d0:8f:a5:26:3a: 77:9b:d0:91:65:45:42:47:20:e4:e0:c5:67:4a:d4: 41:c2:74:d9:3b:c3:6c:44:92:9e:52:dd:57:0f:ca: af:c6:8b:54:43:67:51:4e:3c:af:12:72:c6:15:0a: 4e:2a:69:ff:a6:a5:4b:c1:00:03:8a:82:5a:7e:d8: cb:c8:c0:83:39:a1:70:eb:90:a7:30:49:3a:c1:06: 96:8f:0e:59:9c:e6:9d:ac:fb:36:c4:11:c9:38:25: 59:ec:d8:88:94:ff:85:b4:31:6c:0f:02:55:d0:37: 1d:e5:be:80:49:f6:f2:10:e1:cf:e5:7f:c5:3a:db: ef:f6:89:5f:ae:b8:95:02:77:3f:94:2e:7b:56:dd: fc:75:4c:49:93:89:86:3a:7c:0a:1a:bd:3e:16:26: 7d:c7:a4:cb:b7:5f:26:f6:d0:3c:07:97:62:c1:82: f4:3d:a6:fd:55:6e:99:9c:fe:af:93:0a:6b:f0:96: 9f:17:35:a4:e9:27:88:d3:cc:9b:67:97:9c:72:20: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:F3:67:CF:33:1B:04:55:A6:54:4D:96:15:6C:16:EE:C7:AA:4D X509v3 Authority Key Identifier: keyid:4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:bb:9a:76:91:39:52:95:cf:d8:f8:db:25:b9:02:54:a6:dc: 14:2d:27:79:64:0b:17:1c:6a:92:45:90:a6:f2:0f:15:2a:1c: 49:79:76:e1:37:9c:09:60:68:2f:d1:5a:52:e2:fc:1d:14:d1: cc:40:a3:cf:86:c6:8e:d8:cd:a3:0f:22:b8:a3:99:31:c3:e9: 43:02:61:c5:2b:fd:5b:3b:d2:ec:61:24:a4:a8:b6:75:9a:48: a2:c0:60:30:a4:91:a7:89:26:d6:ef:23:c0:5e:72:c3:dd:cd: 29:4f:ed:97:97:08:99:62:e6:76:69:23:6e:90:ea:fa:72:65: 2d:99:40:d1:d3:1c:5a:c2:68:1f:a9:42:cd:6b:a0:1c:91:96: d6:3a:ab:92:8e:83:2e:ff:fa:f3:df:96:d1:c8:e9:2c:8f:40: 31:d6:44:55:82:05:89:01:33:78:72:7d:24:72:c9:4d:06:ed: 71:a2:c1:af:18:5f:42:87:09:cf:3e:8e:13:07:d0:84:88:be: 89:75:16:d8:68:19:a3:c0:9c:90:a7:0c:ab:35:c1:b9:cc:95: e7:03:68:33:37:e9:9d:4d:d4:a3:fb:59:ae:bc:f6:d0:da:1f: 6a:bc:d3:bc:8c:42:31:3b:88:81:e0:29:ec:81:54:1c:b0:33: 34:ed:b1:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfitzvx/IhT/7guoiRp0cEbU+lqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0 RkI0RTFCMDAeFw0yNjA5MjEwOTU0MDBaFw0yNjA5MjIxMzAwMDBaMDMxMTAvBgNV BAMTKDk5OUFGMzY3Q0YzMzFCMDQ1NUE2NTQ0RDk2MTU2QzE2RUVDN0FBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5ZQVPDvwviORRzJ/pRXeaGqb wd/zsBX1NGWWj9x7mmaK/oFX2ah4Fdm7wC/V3RU2gsjYPcLQj6UmOneb0JFlRUJH IOTgxWdK1EHCdNk7w2xEkp5S3VcPyq/Gi1RDZ1FOPK8ScsYVCk4qaf+mpUvBAAOK glp+2MvIwIM5oXDrkKcwSTrBBpaPDlmc5p2s+zbEEck4JVns2IiU/4W0MWwPAlXQ Nx3lvoBJ9vIQ4c/lf8U62+/2iV+uuJUCdz+ULntW3fx1TEmTiYY6fAoavT4WJn3H pMu3Xyb20DwHl2LBgvQ9pv1Vbpmc/q+TCmvwlp8XNaTpJ4jTzJtnl5xyIHvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZrzZ88zGwRVplRNlhVsFu7Hqk0wHwYDVR0j BBgwFoAUS+bBu/Dp9TCXGVVoreoiJk+04bAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQzOGMxOTUtNDk0YS00NmEyLWI5M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJG MEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0RkI0RTFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkU2QzFCQkYwRTlGNTMwOTcxOTU1NjhBREVBMjIyNjRGQjRF MUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIy MjY0RkI0RTFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe7mnaROVKVz9j42yW5AlSm3BQtJ3lkCxcc apJFkKbyDxUqHEl5duE3nAlgaC/RWlLi/B0U0cxAo8+Gxo7YzaMPIrijmTHD6UMC YcUr/Vs70uxhJKSotnWaSKLAYDCkkaeJJtbvI8BecsPdzSlP7ZeXCJli5nZpI26Q 6vpyZS2ZQNHTHFrCaB+pQs1roByRltY6q5KOgy7/+vPfltHI6SyPQDHWRFWCBYkB M3hyfSRyyU0G7XGiwa8YX0KHCc8+jhMH0ISIvol1FthoGaPAnJCnDKs1wbnMlecD aDM36Z1N1KP7Wa689tDaH2q807yMQjE7iIHgKeyBVBywMzTtsUI= -----END CERTIFICATE-----Generated at Mon Sep 21 20:40:49 2026 by rpki-client