$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft File: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft (raw, json) Hash identifier: Nidn30QH+zU0Ssr9oNSqCGDWDkot9KxZfETD3xnHZgQ= Subject key identifier: 98:EE:28:86:C6:0D:A4:48:3A:3B:DF:E2:AB:CA:4C:81:39:96:7F:B3 Authority key identifier: B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 Certificate issuer: /CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Certificate serial: 1711718F9FE8CFA52E9AA0D323C214908B8EAF4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 11:38:01 +0000 Manifest this update: Thu 17 Sep 2026 11:33:01 +0000 Manifest next update: Fri 18 Sep 2026 12:14:01 +0000 Files and hashes: 1: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl (hash: HnMsAIFLpz81Z/msDnV6tfHyc3Lop4V7rUXl2scCNo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:11:71:8f:9f:e8:cf:a5:2e:9a:a0:d3:23:c2:14:90:8b:8e:af:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Validity Not Before: Sep 17 11:33:01 2026 GMT Not After : Sep 18 12:14:01 2026 GMT Subject: CN=98EE2886C60DA4483A3BDFE2ABCA4C8139967FB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:6b:0c:3f:cb:83:39:e4:b7:e5:87:4d:9d: 07:c7:d3:39:1d:48:f7:b8:df:5f:9e:0b:90:58:81: 48:6f:0b:de:6d:ff:56:c5:1c:95:3c:35:26:31:ed: 96:d4:b8:b3:c5:90:e4:03:85:8e:6f:9c:54:f7:68: 09:86:6a:4b:7c:79:2b:01:a5:4c:48:a7:b1:eb:b8: 57:4e:ad:47:46:c3:7b:f6:02:e6:52:3d:84:a4:1a: fe:6c:35:f2:bb:a2:93:e4:32:78:22:7b:b1:e8:b3: 02:50:11:2d:13:a6:63:61:a2:cf:eb:01:cf:8c:82: 46:64:65:41:6c:d5:b7:c7:ad:74:89:5c:d6:76:c2: a0:11:e7:ec:68:c9:75:95:89:66:0c:2c:63:c0:0f: f3:4a:a5:49:67:ed:64:a4:73:44:d9:1d:db:b2:3a: fd:f7:ca:c6:c1:2e:a5:9d:98:b9:83:1f:c3:f5:27: c5:16:6a:d4:3c:18:5b:bb:bc:75:65:c2:15:8a:b1: b1:c2:fb:0a:78:d0:8c:36:20:f4:f2:17:1b:c1:05: 72:0e:bf:e7:fb:0b:f0:8e:5c:9e:c6:de:32:8d:fc: 78:99:75:54:53:21:71:67:94:15:b0:c3:0a:93:1a: 58:73:38:38:21:95:a9:11:4a:b5:84:79:96:43:e3: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EE:28:86:C6:0D:A4:48:3A:3B:DF:E2:AB:CA:4C:81:39:96:7F:B3 X509v3 Authority Key Identifier: keyid:B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:34:eb:61:79:66:c2:52:5c:83:ab:d2:69:f0:83:9b:fa:cb: 5b:5d:4f:3b:de:04:fe:a4:5c:6a:84:3b:05:64:99:c4:15:12: 7b:24:30:8c:9d:f2:0e:98:29:15:17:0c:9b:46:09:46:05:ab: 85:f8:ff:b7:19:51:cd:9a:c3:b3:5a:03:45:7b:cf:ea:77:fe: f8:ff:7e:19:62:95:8b:3c:94:16:b9:2a:6a:5f:e1:65:c1:98: 04:28:12:1f:f7:02:70:b0:87:7b:da:ff:f5:72:1e:0f:b4:c0: 3e:87:25:37:88:53:6b:0f:8f:6d:08:06:d0:cd:6a:2f:25:b4: b1:5c:ad:54:54:ac:10:94:9c:88:a0:82:b0:f2:83:bb:be:ef: 3d:82:ed:3f:c9:36:f8:02:1c:8d:36:28:10:0c:11:ef:9c:aa: 6d:48:d7:d5:e7:d8:91:1d:56:99:90:f4:77:e0:52:a4:27:f2: 74:2a:56:5d:77:22:d4:1b:41:13:68:de:ee:e2:d2:ec:08:34: e9:30:e2:ee:f3:e1:45:41:3a:ed:6e:78:47:4f:31:97:00:9e: 58:bc:14:9a:51:47:39:bc:4a:e8:37:21:77:23:ad:f6:03:6c: 32:1b:a2:25:d6:7e:e7:76:36:8e:eb:60:22:35:81:69:f8:bd: f5:ee:aa:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFxFxj5/oz6UumqDTI8IUkIuOr08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVD QzQyRjE0NDAeFw0yNjA5MTcxMTMzMDFaFw0yNjA5MTgxMjE0MDFaMDMxMTAvBgNV BAMTKDk4RUUyODg2QzYwREE0NDgzQTNCREZFMkFCQ0E0QzgxMzk5NjdGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxy2sMP8uDOeS35YdNnQfH0zkd SPe431+eC5BYgUhvC95t/1bFHJU8NSYx7ZbUuLPFkOQDhY5vnFT3aAmGakt8eSsB pUxIp7HruFdOrUdGw3v2AuZSPYSkGv5sNfK7opPkMngie7HoswJQES0TpmNhos/r Ac+MgkZkZUFs1bfHrXSJXNZ2wqAR5+xoyXWViWYMLGPAD/NKpUln7WSkc0TZHduy Ov33ysbBLqWdmLmDH8P1J8UWatQ8GFu7vHVlwhWKsbHC+wp40Iw2IPTyFxvBBXIO v+f7C/COXJ7G3jKN/HiZdVRTIXFnlBWwwwqTGlhzODghlakRSrWEeZZD4zORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmO4ohsYNpEg6O9/iq8pMgTmWf7MwHwYDVR0j BBgwFoAUtMmy2Fyer2dR/X+SLuCAjsxC8UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzYjIzMGEtZmZmMS00N2YwLWJmOTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1 QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVDQzQyRjE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM5QjJEODVDOUVBRjY3NTFGRDdGOTIyRUUwODA4RUNDNDJG MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgw OEVDQzQyRjE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY062F5ZsJSXIOr0mnwg5v6y1tdTzveBP6k XGqEOwVkmcQVEnskMIyd8g6YKRUXDJtGCUYFq4X4/7cZUc2aw7NaA0V7z+p3/vj/ fhlilYs8lBa5Kmpf4WXBmAQoEh/3AnCwh3va//VyHg+0wD6HJTeIU2sPj20IBtDN ai8ltLFcrVRUrBCUnIiggrDyg7u+7z2C7T/JNvgCHI02KBAMEe+cqm1I19Xn2JEd VpmQ9HfgUqQn8nQqVl13ItQbQRNo3u7i0uwINOkw4u7z4UVBOu1ueEdPMZcAnli8 FJpRRzm8Sug3IXcjrfYDbDIboiXWfud2No7rYCI1gWn4vfXuqqg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:29 2026 by rpki-client