$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft File: 4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft (raw, json) Hash identifier: 0iJakmQoK2mBsRJEtm37oKGCCqH8KYwY3utpfmema88= Subject key identifier: 36:F8:11:9A:B5:63:13:B5:FF:40:4C:30:0D:D3:31:B1:25:10:30:6C Authority key identifier: 4A:BE:5E:2C:04:73:48:84:D2:DB:57:7A:34:C0:A9:99:FB:B3:26:9C Certificate issuer: /CN=4ABE5E2C04734884D2DB577A34C0A999FBB3269C Certificate serial: 4E9228976CF5794E007A5FBB546D36A0E6B8012B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 05:43:33 +0000 Manifest this update: Tue 22 Sep 2026 05:38:33 +0000 Manifest next update: Wed 23 Sep 2026 09:04:33 +0000 Files and hashes: 1: 4ABE5E2C04734884D2DB577A34C0A999FBB3269C.crl (hash: sLkQiAwOhYBAtT6pFWmYn0SkZpn0QvvBrIUDQk9NQ4Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.crl rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:92:28:97:6c:f5:79:4e:00:7a:5f:bb:54:6d:36:a0:e6:b8:01:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ABE5E2C04734884D2DB577A34C0A999FBB3269C Validity Not Before: Sep 22 05:38:33 2026 GMT Not After : Sep 23 09:04:33 2026 GMT Subject: CN=36F8119AB56313B5FF404C300DD331B12510306C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:eb:3b:65:41:59:6e:93:d1:78:f3:bb:5f: 5e:ff:5c:68:bb:5e:8f:22:43:9c:79:3b:50:11:a3: 2a:4f:f5:b8:09:ab:6f:0d:21:82:e4:24:34:b7:7d: 90:21:d4:86:07:9c:e1:45:11:88:db:ca:06:f5:fe: 35:83:ab:5d:00:a0:31:2a:a6:f8:6a:a6:43:ff:d4: 5f:1a:e3:49:b1:36:df:9d:82:f7:26:71:e6:77:5d: cd:db:68:e9:ba:fe:9c:0f:d8:cd:45:da:c4:77:da: 29:4c:71:05:8a:a3:8c:69:41:df:68:79:50:cd:dd: b2:65:02:21:f7:02:6b:8c:4e:3c:a5:8d:cf:d1:15: 0e:7c:95:72:14:c6:bf:0a:6c:41:38:05:2a:d2:b1: db:51:a3:60:49:1c:26:af:3b:a7:f6:db:90:fe:fa: ea:7b:e9:45:ca:19:e7:24:fe:0f:e2:e8:68:5d:3f: 9b:ad:59:e6:3a:c2:e7:b3:a8:61:41:b2:38:ba:29: 70:14:4f:1d:62:fb:2f:a0:50:5b:7c:4f:6f:46:0d: 22:be:e9:0c:17:d8:7d:7d:72:08:1d:c9:9c:27:20: e5:39:36:4a:48:a4:74:bd:f3:4e:ee:be:bc:80:71: eb:a6:e8:f5:d5:51:07:c5:db:d2:c7:9b:57:f3:52: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F8:11:9A:B5:63:13:B5:FF:40:4C:30:0D:D3:31:B1:25:10:30:6C X509v3 Authority Key Identifier: keyid:4A:BE:5E:2C:04:73:48:84:D2:DB:57:7A:34:C0:A9:99:FB:B3:26:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6b:1f:74:40:cf:11:54:a6:82:4a:45:51:4b:fa:d2:88:c8: 1e:62:12:0a:9b:35:ef:4f:43:c8:ff:3b:2a:67:19:45:a4:b9: a6:d5:61:82:7b:bf:27:dd:f4:bb:dd:0f:4c:22:c3:5e:62:ad: 03:0f:81:1c:ca:a4:7e:17:9b:50:32:8c:a9:07:a8:15:58:fb: 38:9e:a9:94:c3:a1:52:1e:15:c7:28:63:bf:19:5c:17:4c:68: 38:06:41:93:f0:a0:fe:5f:0b:35:a7:0d:20:6d:35:58:d2:2f: c5:8a:2c:60:09:f4:ee:8d:e2:c4:1b:e9:d9:8b:4c:9a:15:10: 3d:6c:57:55:49:d5:67:2d:20:cb:d8:fb:b1:7a:e0:8d:ff:af: e1:06:d4:59:c9:fd:3c:65:8c:e4:11:e3:13:16:dc:3e:d1:45: 23:79:01:52:f2:6f:bb:be:7d:8f:b2:6f:71:3f:8a:b1:54:46: bb:f2:ef:7d:69:11:a6:2d:e2:ea:bc:b3:15:b7:a8:32:1d:ab: 1d:d0:ee:c3:a9:50:39:67:44:2b:d5:c7:0f:4c:2d:0f:8a:c4: b4:1a:ba:24:02:bc:e8:95:92:71:c9:69:bc:9e:c6:60:a4:b2: 26:c4:fe:02:72:a6:57:5d:55:7b:7b:00:90:a5:b5:d7:4c:a2: b7:18:6c:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpIol2z1eU4Ael+7VG02oOa4ASswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCRTVFMkMwNDczNDg4NEQyREI1NzdBMzRDMEE5OTlG QkIzMjY5QzAeFw0yNjA5MjIwNTM4MzNaFw0yNjA5MjMwOTA0MzNaMDMxMTAvBgNV BAMTKDM2RjgxMTlBQjU2MzEzQjVGRjQwNEMzMDBERDMzMUIxMjUxMDMwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OOs7ZUFZbpPRePO7X17/XGi7 Xo8iQ5x5O1ARoypP9bgJq28NIYLkJDS3fZAh1IYHnOFFEYjbygb1/jWDq10AoDEq pvhqpkP/1F8a40mxNt+dgvcmceZ3Xc3baOm6/pwP2M1F2sR32ilMcQWKo4xpQd9o eVDN3bJlAiH3AmuMTjyljc/RFQ58lXIUxr8KbEE4BSrSsdtRo2BJHCavO6f225D+ +up76UXKGeck/g/i6GhdP5utWeY6wuezqGFBsji6KXAUTx1i+y+gUFt8T29GDSK+ 6QwX2H19cggdyZwnIOU5NkpIpHS9807uvryAceum6PXVUQfF29LHm1fzUqQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNvgRmrVjE7X/QEwwDdMxsSUQMGwwHwYDVR0j BBgwFoAUSr5eLARzSITS21d6NMCpmfuzJpwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg4NGM5MzUtM2UzMy00NDU2LWFjYTctMjRmMzNhMTdhMWE0LzAvNEFCRTVFMkMw NDczNDg4NEQyREI1NzdBMzRDMEE5OTlGQkIzMjY5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUJFNUUyQzA0NzM0ODg0RDJEQjU3N0EzNEMwQTk5OUZCQjMy NjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg4NGM5MzUtM2UzMy00NDU2LWFj YTctMjRmMzNhMTdhMWE0LzAvNEFCRTVFMkMwNDczNDg4NEQyREI1NzdBMzRDMEE5 OTlGQkIzMjY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxrH3RAzxFUpoJKRVFL+tKIyB5iEgqbNe9P Q8j/OypnGUWkuabVYYJ7vyfd9LvdD0wiw15irQMPgRzKpH4Xm1AyjKkHqBVY+zie qZTDoVIeFccoY78ZXBdMaDgGQZPwoP5fCzWnDSBtNVjSL8WKLGAJ9O6N4sQb6dmL TJoVED1sV1VJ1WctIMvY+7F64I3/r+EG1FnJ/TxljOQR4xMW3D7RRSN5AVLyb7u+ fY+yb3E/irFURrvy731pEaYt4uq8sxW3qDIdqx3Q7sOpUDlnRCvVxw9MLQ+KxLQa uiQCvOiVknHJabyexmCksibE/gJyplddVXt7AJCltddMorcYbAw= -----END CERTIFICATE-----Generated at Tue Sep 22 09:08:55 2026 by rpki-client