$ rpki-client -vvvf rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft File: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft (raw, json) Hash identifier: UzVHsZViB38jTgvk8Wkz3L+fU4Eysta2Jut4PbRB+Yk= Subject key identifier: A5:16:F5:54:39:D9:24:82:FB:A8:49:EC:C3:A7:EC:F9:F9:08:B7:9D Authority key identifier: 4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 Certificate issuer: /CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Certificate serial: 1F9CD798D3DFC11A3AC5B772A1E98BBE5C0BDEEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 00:08:53 +0000 Manifest this update: Thu 17 Sep 2026 00:03:53 +0000 Manifest next update: Fri 18 Sep 2026 02:47:53 +0000 Files and hashes: 1: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl (hash: 1BHeNUeNhQcu5WrYxj5kKRLQdKSQBZqxCFqr2LIdnB4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:9c:d7:98:d3:df:c1:1a:3a:c5:b7:72:a1:e9:8b:be:5c:0b:de:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Validity Not Before: Sep 17 00:03:53 2026 GMT Not After : Sep 18 02:47:53 2026 GMT Subject: CN=A516F55439D92482FBA849ECC3A7ECF9F908B79D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:05:cf:d0:9f:07:ea:14:b6:66:bb:e8:8b: 96:28:93:61:2f:a2:2f:d3:62:68:ff:68:83:f0:25: 0d:4f:b0:55:fd:ca:16:09:04:7c:8f:07:71:e2:bb: 96:13:ce:71:16:f9:21:ff:9c:90:90:ec:c1:8f:cd: 27:da:99:37:2d:7d:be:7d:37:ba:15:4e:b0:b4:4f: 3b:b3:54:d7:4b:0c:1b:9f:73:c5:f4:76:7b:58:13: ce:b5:b3:94:1d:62:8d:ff:01:67:1e:83:50:57:e5: 3f:52:57:e0:6c:79:49:63:25:88:c8:38:90:7c:a7: fd:1f:8a:5e:4c:7f:c1:cf:66:92:fc:6a:54:3c:5c: 42:7b:41:58:03:0a:65:1a:7f:28:f5:62:57:c7:d6: 4d:12:f2:b1:33:af:99:b9:0a:67:7d:9d:66:82:83: ea:23:f0:db:9a:9b:d4:74:ee:3f:df:af:d9:6a:94: 02:52:0b:7a:c1:28:4e:90:92:b8:13:83:08:3d:ed: 78:38:9c:c1:72:b9:21:db:da:b5:2e:26:c2:82:24: 13:7f:d8:a9:9d:4c:04:f9:22:df:11:e7:43:43:ba: ba:fc:b1:ca:af:83:ad:3c:c1:74:d7:bf:c8:77:a0: f9:4a:91:fb:8a:58:03:2a:a6:86:e1:9f:76:92:ce: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:F5:54:39:D9:24:82:FB:A8:49:EC:C3:A7:EC:F9:F9:08:B7:9D X509v3 Authority Key Identifier: keyid:4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:57:5d:bb:3d:fa:b1:5f:9b:b8:74:19:b1:67:98:b4:0a:e0: 62:85:bd:33:d4:1b:c3:96:2c:6c:de:02:32:94:37:86:01:b9: c6:d7:73:dd:74:16:9e:51:06:f7:6e:8c:24:4a:1a:dd:f2:0e: a3:01:22:b9:3d:69:17:a5:d2:e0:ab:fc:2b:fa:65:39:85:6f: fb:41:9f:7d:95:76:c4:04:47:c1:4e:36:cf:f9:9f:b5:0b:3b: 64:95:59:72:6d:d5:22:72:00:c3:8b:8e:9d:c8:8a:7f:58:1f: ad:cd:bd:96:a7:74:cf:13:e3:81:73:d3:2b:da:b7:63:56:40: e0:f8:24:98:d3:50:08:2a:64:77:7b:3e:29:c8:21:2f:e6:ad: 20:23:27:c7:5d:55:76:8e:e7:09:dc:6e:68:7e:2a:3f:f3:a9: a6:58:9f:13:39:45:34:72:68:79:34:f9:a3:c2:6a:f8:a8:fa: 01:a6:f1:b1:8b:11:b2:a3:98:60:78:8e:fc:cc:8a:01:03:ed: 42:30:51:99:47:fd:2b:26:0d:a3:ba:3d:62:57:c8:0f:6b:d1: 5a:e5:c2:c3:07:11:a0:d7:b0:f3:d1:f6:f2:e0:dc:61:35:25: 06:6f:57:34:9a:43:42:38:e1:51:cb:54:08:a5:c2:1e:f8:8d: 65:93:5c:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5zXmNPfwRo6xbdyoemLvlwL3u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0 NjY5RTFGMDAeFw0yNjA5MTcwMDAzNTNaFw0yNjA5MTgwMjQ3NTNaMDMxMTAvBgNV BAMTKEE1MTZGNTU0MzlEOTI0ODJGQkE4NDlFQ0MzQTdFQ0Y5RjkwOEI3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOAXP0J8H6hS2Zrvoi5Yok2Ev oi/TYmj/aIPwJQ1PsFX9yhYJBHyPB3Hiu5YTznEW+SH/nJCQ7MGPzSfamTctfb59 N7oVTrC0TzuzVNdLDBufc8X0dntYE861s5QdYo3/AWceg1BX5T9SV+BseUljJYjI OJB8p/0fil5Mf8HPZpL8alQ8XEJ7QVgDCmUafyj1YlfH1k0S8rEzr5m5Cmd9nWaC g+oj8Nuam9R07j/fr9lqlAJSC3rBKE6QkrgTgwg97Xg4nMFyuSHb2rUuJsKCJBN/ 2KmdTAT5It8R50NDurr8scqvg608wXTXv8h3oPlKkfuKWAMqpobhn3aSzvC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpRb1VDnZJIL7qEnsw6fs+fkIt50wHwYDVR0j BBgwFoAUS+EwB+j//HwseDoTctt0tEZp4fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM0ZjEzZTgtZGVlZi00OGE4LWEyZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdF OEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0NjY5RTFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkUxMzAwN0U4RkZGQzdDMkM3ODNBMTM3MkRCNzRCNDQ2NjlF MUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0 QjQ0NjY5RTFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5XXbs9+rFfm7h0GbFnmLQK4GKFvTPUG8OW LGzeAjKUN4YBucbXc910Fp5RBvdujCRKGt3yDqMBIrk9aRel0uCr/Cv6ZTmFb/tB n32VdsQER8FONs/5n7ULO2SVWXJt1SJyAMOLjp3Iin9YH63NvZandM8T44Fz0yva t2NWQOD4JJjTUAgqZHd7PinIIS/mrSAjJ8ddVXaO5wncbmh+Kj/zqaZYnxM5RTRy aHk0+aPCavio+gGm8bGLEbKjmGB4jvzMigED7UIwUZlH/SsmDaO6PWJXyA9r0Vrl wsMHEaDXsPPR9vLg3GE1JQZvVzSaQ0I44VHLVAilwh74jWWTXCs= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:20 2026 by rpki-client