$ rpki-client -vvf rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft File: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft (raw, json) Hash identifier: DhWU7THOgxnsf+xRwJl3xUfF1s6FVC7WXyawXTUIjJA= Subject key identifier: EA:48:07:47:4A:EA:02:10:E6:35:98:0F:68:2C:52:FC:1C:20:BD:6C Authority key identifier: 4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 Certificate issuer: /CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Certificate serial: 4D5B3C352A351C7364270E714219DEBB84A8DE78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:06:04 +0000 Manifest this update: Sat 20 Jun 2026 05:01:04 +0000 Manifest next update: Sun 21 Jun 2026 08:36:04 +0000 Files and hashes: 1: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl (hash: CGmlZDGT6scEXs0iOyZcrGWOlR6zrXBA4tEPJxIYJAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 08:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5b:3c:35:2a:35:1c:73:64:27:0e:71:42:19:de:bb:84:a8:de:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Validity Not Before: Jun 20 05:01:04 2026 GMT Not After : Jun 21 08:36:04 2026 GMT Subject: CN=EA4807474AEA0210E635980F682C52FC1C20BD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:63:4d:d4:c5:1c:23:6f:be:00:05:07:6e: 22:aa:36:0f:a4:1c:de:91:ce:1b:c6:90:c1:78:c3: f5:e0:8a:c9:f5:e6:a5:4b:ca:f2:28:a8:b5:74:04: d6:59:fc:17:f9:5d:c5:8d:ba:50:32:c3:74:ff:60: c4:62:b9:34:b6:f5:3c:f2:8d:d2:56:79:37:64:00: 83:f6:d2:75:1a:14:03:d9:40:10:85:e6:e7:a5:e3: 3b:6c:7a:09:3c:75:84:1a:ef:33:60:cf:86:15:e7: 60:4b:69:70:c1:77:8d:75:2f:1e:ce:94:ee:65:1b: 7d:7c:ad:f3:84:18:b1:b3:3c:64:0a:66:08:41:5d: 1b:f8:21:10:36:7f:9d:2f:1c:90:a2:5a:de:dc:ed: 6f:03:d3:60:67:4d:3c:8b:8a:91:a0:23:8b:ff:01: ec:e4:a7:52:05:b1:af:7b:b2:98:31:c6:18:67:7a: d0:85:10:02:65:e2:b6:72:d2:53:7a:cf:29:8e:5f: 8e:b1:d3:52:b7:c8:ff:8d:26:a7:6c:e9:cf:30:a8: 02:5f:6c:f7:f7:ee:46:97:2f:f9:68:ef:f4:ef:bd: 5b:3e:72:23:57:1e:03:b3:69:e7:a0:1e:59:8a:4a: 3f:e9:a3:e8:67:fe:c1:b1:c4:19:9a:f0:f1:78:82: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:48:07:47:4A:EA:02:10:E6:35:98:0F:68:2C:52:FC:1C:20:BD:6C X509v3 Authority Key Identifier: keyid:4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1f:b4:ba:f9:82:e2:59:25:f4:f9:da:eb:a3:7a:75:97:2a: 21:e3:6f:ea:25:3e:df:f7:16:c7:e7:03:31:ab:1d:a8:e3:99: 53:0d:76:b5:ed:10:dd:67:4c:b0:f1:9b:be:d8:bc:55:ec:bd: e5:b1:fd:0b:81:0a:a4:b5:12:20:87:24:c5:40:1a:3f:f4:66: 5f:44:42:f2:dd:fb:84:68:a8:4e:0f:51:d1:37:4e:9f:eb:ea: d3:65:50:78:3a:d0:68:17:56:33:c0:82:d4:96:1e:d8:4c:39: 27:21:84:e0:16:84:d2:b7:b7:3f:82:44:3c:ad:91:28:e4:0d: b1:15:a1:10:15:94:73:61:08:bc:3e:d4:7e:fd:9a:0d:4e:72: 7a:ad:ce:e5:26:e5:b2:16:e6:16:a1:1c:ad:57:dd:34:a2:2e: 79:5d:f3:7f:60:61:bb:d9:a6:46:2b:de:6c:62:ad:e9:4d:4e: 69:d7:75:99:29:05:e2:45:97:71:aa:de:95:b7:fe:af:f2:12: 9d:34:14:97:a1:73:e8:38:a6:92:19:4c:8a:ef:08:c6:76:dd: b8:c8:97:68:c5:29:7b:a7:6c:79:28:a5:8f:9d:1e:10:fa:70: 0f:30:67:46:9f:a3:f2:e3:06:ac:24:65:9d:b3:97:4f:0a:4b: 0f:77:79:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVs8NSo1HHNkJw5xQhneu4So3ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0 NjY5RTFGMDAeFw0yNjA2MjAwNTAxMDRaFw0yNjA2MjEwODM2MDRaMDMxMTAvBgNV BAMTKEVBNDgwNzQ3NEFFQTAyMTBFNjM1OTgwRjY4MkM1MkZDMUMyMEJENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OGNN1MUcI2++AAUHbiKqNg+k HN6RzhvGkMF4w/Xgisn15qVLyvIoqLV0BNZZ/Bf5XcWNulAyw3T/YMRiuTS29Tzy jdJWeTdkAIP20nUaFAPZQBCF5uel4ztsegk8dYQa7zNgz4YV52BLaXDBd411Lx7O lO5lG318rfOEGLGzPGQKZghBXRv4IRA2f50vHJCiWt7c7W8D02BnTTyLipGgI4v/ Aezkp1IFsa97spgxxhhnetCFEAJl4rZy0lN6zymOX46x01K3yP+NJqds6c8wqAJf bPf37kaXL/lo7/TvvVs+ciNXHgOzaeegHlmKSj/po+hn/sGxxBma8PF4ghlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6kgHR0rqAhDmNZgPaCxS/BwgvWwwHwYDVR0j BBgwFoAUS+EwB+j//HwseDoTctt0tEZp4fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM0ZjEzZTgtZGVlZi00OGE4LWEyZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdF OEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0NjY5RTFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkUxMzAwN0U4RkZGQzdDMkM3ODNBMTM3MkRCNzRCNDQ2NjlF MUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0 QjQ0NjY5RTFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgftLr5guJZJfT52uujenWXKiHjb+olPt/3 FsfnAzGrHajjmVMNdrXtEN1nTLDxm77YvFXsveWx/QuBCqS1EiCHJMVAGj/0Zl9E QvLd+4RoqE4PUdE3Tp/r6tNlUHg60GgXVjPAgtSWHthMOSchhOAWhNK3tz+CRDyt kSjkDbEVoRAVlHNhCLw+1H79mg1OcnqtzuUm5bIW5hahHK1X3TSiLnld839gYbvZ pkYr3mxirelNTmnXdZkpBeJFl3Gq3pW3/q/yEp00FJehc+g4ppIZTIrvCMZ23bjI l2jFKXunbHkopY+dHhD6cA8wZ0afo/LjBqwkZZ2zl08KSw93eQE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:11 2026 by rpki-client