$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft File: F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft (raw, json) Hash identifier: dzU8AY7BIPOF+15sKXFt9jOl0/v+gL6J8s7xvprBo28= Subject key identifier: D5:E8:E2:39:3B:62:49:32:E0:6E:E1:57:E5:E8:3D:26:26:AD:34:A7 Authority key identifier: F4:74:0D:72:C7:EF:FF:97:CE:C9:C1:1B:4D:F8:B3:D5:76:18:E1:0F Certificate issuer: /CN=F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F Certificate serial: 0BDABB909D8411A83A0E8E93C61227A07A53169B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft Manifest number: 21 Signing time: Sat 24 Oct 2026 01:15:35 +0000 Manifest this update: Sat 24 Oct 2026 01:10:35 +0000 Manifest next update: Sun 25 Oct 2026 03:34:35 +0000 Files and hashes: 1: F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.crl (hash: zHVO3CyblX01OgIPCjpSid9ZtfaSAzF8zyyQoPWH7os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.crl rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:da:bb:90:9d:84:11:a8:3a:0e:8e:93:c6:12:27:a0:7a:53:16:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F Validity Not Before: Oct 24 01:10:35 2026 GMT Not After : Oct 25 03:34:35 2026 GMT Subject: CN=D5E8E2393B624932E06EE157E5E83D2626AD34A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:ae:96:f0:68:33:2a:f0:75:81:96:f4:74: e2:12:84:1a:4a:aa:29:54:72:63:9f:8b:91:a1:bc: 82:d2:4c:cf:c7:bc:6e:b6:1a:36:99:0f:42:b5:fb: 31:bb:03:f9:1b:71:c5:d6:9e:f7:87:c7:e4:9d:7a: d1:bf:2e:73:76:31:0b:31:a5:fd:ee:20:86:ab:66: d8:4b:56:14:5f:03:46:ff:b4:29:08:ce:4c:b1:69: a3:39:0f:27:cb:b7:6c:bb:0d:54:24:45:5c:12:62: c9:c0:3b:6c:31:36:43:0e:74:31:89:64:b5:56:ab: 51:ba:5d:9d:7c:5a:71:eb:2c:fb:6c:af:e9:bd:26: 91:ef:af:03:ba:cd:8f:84:16:52:b4:6d:6f:c5:a9: f0:57:9a:fb:a6:2a:5e:b0:0a:c0:2d:fc:f9:06:5b: 0a:c0:35:ce:ae:a1:78:bc:3f:51:82:ec:e6:30:9e: 5f:67:5d:51:2f:33:57:c8:23:0b:42:53:74:a4:32: 64:5e:61:35:8a:1c:c2:67:2f:6c:48:b1:c0:0f:ce: d2:06:57:4c:db:6b:2b:82:ef:5d:b9:f1:2b:72:ee: 26:24:00:7b:98:eb:57:48:fc:37:63:e1:43:36:dd: 81:c3:f2:81:31:50:e1:07:a3:2f:45:26:8a:db:f7: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E8:E2:39:3B:62:49:32:E0:6E:E1:57:E5:E8:3D:26:26:AD:34:A7 X509v3 Authority Key Identifier: keyid:F4:74:0D:72:C7:EF:FF:97:CE:C9:C1:1B:4D:F8:B3:D5:76:18:E1:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/0/F4740D72C7EFFF97CEC9C11B4DF8B3D57618E10F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b0:3f:67:60:65:15:8a:db:e0:cd:cf:a6:15:78:25:34:0f: 4d:3a:14:37:ce:6a:8f:cf:a9:50:7c:cd:56:d3:75:ec:77:75: ce:3c:f2:55:c2:9d:0b:63:c9:56:b6:56:bc:c3:29:0c:69:8f: b8:ec:63:81:2d:0f:e7:17:67:1c:87:80:b8:6a:91:4b:d2:e3: 20:70:fd:17:74:68:8a:d3:ae:32:12:5e:65:b0:a1:1e:dd:ba: c6:63:70:09:18:20:32:cc:69:a5:19:90:6f:f9:86:42:c6:59: 70:2b:b6:fe:bb:06:c6:6e:fb:d4:d1:f9:5f:40:a2:41:10:07: 85:96:ec:14:ea:eb:5d:5a:31:95:61:28:e4:04:65:0f:d6:43: 7f:17:90:fd:43:99:ad:58:8d:1e:1b:cd:14:93:44:1b:b8:9f: ef:cc:83:85:8e:4c:3e:ae:a8:00:06:57:25:55:5c:36:8b:ed: 17:28:0f:a0:af:1c:13:73:10:db:78:43:f3:59:7d:e5:a8:9d: f9:4c:c8:16:40:45:da:c2:14:59:d0:b4:38:94:09:1f:9a:b7: 9f:2b:68:b6:04:29:5b:6f:3e:41:0b:b5:cd:1e:2f:09:9d:7a: c8:68:53:8b:d9:a9:73:3c:81:6c:66:d7:1b:0f:b2:fd:fa:3e: 94:49:ee:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9q7kJ2EEag6Do6TxhInoHpTFpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ3NDBENzJDN0VGRkY5N0NFQzlDMTFCNERGOEIzRDU3 NjE4RTEwRjAeFw0yNjEwMjQwMTEwMzVaFw0yNjEwMjUwMzM0MzVaMDMxMTAvBgNV BAMTKEQ1RThFMjM5M0I2MjQ5MzJFMDZFRTE1N0U1RTgzRDI2MjZBRDM0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3q6W8GgzKvB1gZb0dOIShBpK qilUcmOfi5GhvILSTM/HvG62GjaZD0K1+zG7A/kbccXWnveHx+SdetG/LnN2MQsx pf3uIIarZthLVhRfA0b/tCkIzkyxaaM5DyfLt2y7DVQkRVwSYsnAO2wxNkMOdDGJ ZLVWq1G6XZ18WnHrLPtsr+m9JpHvrwO6zY+EFlK0bW/FqfBXmvumKl6wCsAt/PkG WwrANc6uoXi8P1GC7OYwnl9nXVEvM1fIIwtCU3SkMmReYTWKHMJnL2xIscAPztIG V0zbayuC71258Sty7iYkAHuY61dI/Ddj4UM23YHD8oExUOEHoy9FJorb95mfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ejiOTtiSTLgbuFX5eg9JiatNKcwHwYDVR0j BBgwFoAU9HQNcsfv/5fOycEbTfiz1XYY4Q8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZDA3YWUtM2M3NC00NTdkLTg5N2YtNWI4MDZiZWRlYTg3LzAvRjQ3NDBENzJD N0VGRkY5N0NFQzlDMTFCNERGOEIzRDU3NjE4RTEwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDc0MEQ3MkM3RUZGRjk3Q0VDOUMxMUI0REY4QjNENTc2MThF MTBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZDA3YWUtM2M3NC00NTdkLTg5 N2YtNWI4MDZiZWRlYTg3LzAvRjQ3NDBENzJDN0VGRkY5N0NFQzlDMTFCNERGOEIz RDU3NjE4RTEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALawP2dgZRWK2+DNz6YVeCU0D006FDfOao/P qVB8zVbTdex3dc488lXCnQtjyVa2VrzDKQxpj7jsY4EtD+cXZxyHgLhqkUvS4yBw /Rd0aIrTrjISXmWwoR7dusZjcAkYIDLMaaUZkG/5hkLGWXArtv67BsZu+9TR+V9A okEQB4WW7BTq611aMZVhKOQEZQ/WQ38XkP1Dma1YjR4bzRSTRBu4n+/Mg4WOTD6u qAAGVyVVXDaL7RcoD6CvHBNzENt4Q/NZfeWonflMyBZARdrCFFnQtDiUCR+at58r aLYEKVtvPkELtc0eLwmdeshoU4vZqXM8gWxm1xsPsv36PpRJ7j0= -----END CERTIFICATE-----Generated at Sat Oct 24 10:11:07 2026 by rpki-client