$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft File: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft (raw, json) Hash identifier: eAZCTzaA+E8H09YpwQXQNv076/BhvqI2j796TVNHuxM= Subject key identifier: BD:6A:D6:83:F3:08:B4:F1:86:0B:F5:DE:15:9D:12:B4:F0:59:B5:F6 Authority key identifier: B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 Certificate issuer: /CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Certificate serial: 345B6EB7AB6E645D8B8092EED56309A31C59CA6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 05:51:53 +0000 Manifest this update: Sat 20 Jun 2026 05:46:53 +0000 Manifest next update: Sun 21 Jun 2026 07:56:53 +0000 Files and hashes: 1: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl (hash: LWbkHEr9bmf+T0z1VhnJEd0xETwhtoZ4yZnC0rq8sKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5b:6e:b7:ab:6e:64:5d:8b:80:92:ee:d5:63:09:a3:1c:59:ca:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Validity Not Before: Jun 20 05:46:53 2026 GMT Not After : Jun 21 07:56:53 2026 GMT Subject: CN=BD6AD683F308B4F1860BF5DE159D12B4F059B5F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:97:a3:d2:81:ce:b7:17:5d:73:bf:e6:bf: 2c:1e:07:20:8c:f1:85:87:96:2d:b0:0a:aa:c3:e0: 6d:5e:99:c5:b0:89:3a:d5:5a:c4:67:d7:4c:34:7c: 41:bb:00:f7:13:4e:53:8e:02:18:1e:f1:74:1e:54: 31:05:f0:6a:86:51:7c:38:43:f9:b7:6a:76:0d:eb: a9:85:e7:b1:4c:22:94:09:7a:87:b8:04:32:a4:bd: b5:1b:ac:b6:45:40:3e:c1:13:dc:bb:ec:0c:f4:3a: 25:17:5e:cb:07:00:0d:a7:cf:14:5f:54:8b:c7:bb: 22:4b:fe:9b:26:a0:66:5a:bb:bb:63:82:0e:dc:09: ce:0e:f2:9d:ce:a1:a3:38:2d:72:e2:b7:06:d3:6e: 07:0c:ce:8c:20:8b:5c:df:9d:10:fc:51:a0:f5:83: 9e:dd:90:04:51:54:85:38:cf:ce:74:1a:52:26:94: 59:97:fc:1c:95:37:f8:c0:3e:fe:86:8f:4d:90:65: 85:00:e0:7d:44:fc:ee:09:c3:09:15:9b:75:90:59: 2f:54:ae:e9:89:7e:a7:d2:36:1e:d4:6f:70:24:da: f7:31:08:52:cd:8c:b9:d8:38:ef:69:74:03:e8:17: a4:b2:46:b4:7d:46:9c:55:4f:64:23:da:4c:19:b6: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6A:D6:83:F3:08:B4:F1:86:0B:F5:DE:15:9D:12:B4:F0:59:B5:F6 X509v3 Authority Key Identifier: keyid:B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7a:32:c7:ca:91:a0:86:4f:c8:d6:1b:6c:02:cc:4c:0e:3f: 17:de:4f:80:36:1a:9c:20:65:44:79:6a:79:cf:fd:aa:2d:1f: 46:a7:a6:a0:dd:1b:25:d4:8e:35:50:ed:bc:db:50:56:74:f7: 87:81:3a:6b:0a:ed:29:b1:6c:ee:4f:c4:ca:a2:96:f4:7b:56: 79:3c:a6:59:22:a5:53:09:7d:21:e5:a7:90:1f:1a:4d:16:13: 1d:21:c8:77:f7:95:49:79:ab:0e:71:cc:c5:02:cb:c9:30:a1: e0:27:e7:1a:e1:4d:bd:30:11:11:15:80:ee:2e:4b:46:61:bf: 87:29:e0:43:72:1c:b8:b5:39:25:22:ac:8d:d3:2a:11:b0:94: 6a:76:8c:bb:82:50:2c:fb:4f:2b:08:d0:a9:27:ca:5f:12:3a: 6f:a8:dc:ef:86:5a:76:89:08:e2:00:8d:31:2a:de:14:1d:c4: 60:3f:27:bc:11:b2:df:e3:93:43:cd:02:cf:d9:47:2b:78:1c: c6:4d:6e:ce:13:28:f9:78:47:d9:d8:d5:82:ae:6f:59:c8:9e: 62:c9:7c:6a:3e:ad:ac:b6:cb:e1:0a:a5:a5:c2:c2:9c:0d:06: e5:da:fa:e6:08:1a:b7:bf:45:b7:16:94:c9:37:8c:31:21:f8: c9:25:2a:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFtut6tuZF2LgJLu1WMJoxxZymswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVD QzQyRjE0NDAeFw0yNjA2MjAwNTQ2NTNaFw0yNjA2MjEwNzU2NTNaMDMxMTAvBgNV BAMTKEJENkFENjgzRjMwOEI0RjE4NjBCRjVERTE1OUQxMkI0RjA1OUI1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaVpej0oHOtxddc7/mvyweByCM 8YWHli2wCqrD4G1emcWwiTrVWsRn10w0fEG7APcTTlOOAhge8XQeVDEF8GqGUXw4 Q/m3anYN66mF57FMIpQJeoe4BDKkvbUbrLZFQD7BE9y77Az0OiUXXssHAA2nzxRf VIvHuyJL/psmoGZau7tjgg7cCc4O8p3OoaM4LXLitwbTbgcMzowgi1zfnRD8UaD1 g57dkARRVIU4z850GlImlFmX/ByVN/jAPv6Gj02QZYUA4H1E/O4JwwkVm3WQWS9U rumJfqfSNh7Ub3Ak2vcxCFLNjLnYOO9pdAPoF6SyRrR9RpxVT2Qj2kwZtkUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWrWg/MItPGGC/XeFZ0StPBZtfYwHwYDVR0j BBgwFoAUtMmy2Fyer2dR/X+SLuCAjsxC8UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzYjIzMGEtZmZmMS00N2YwLWJmOTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1 QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVDQzQyRjE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM5QjJEODVDOUVBRjY3NTFGRDdGOTIyRUUwODA4RUNDNDJG MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgw OEVDQzQyRjE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACp6MsfKkaCGT8jWG2wCzEwOPxfeT4A2Gpwg ZUR5annP/aotH0anpqDdGyXUjjVQ7bzbUFZ094eBOmsK7SmxbO5PxMqilvR7Vnk8 plkipVMJfSHlp5AfGk0WEx0hyHf3lUl5qw5xzMUCy8kwoeAn5xrhTb0wEREVgO4u S0Zhv4cp4ENyHLi1OSUirI3TKhGwlGp2jLuCUCz7TysI0Kknyl8SOm+o3O+GWnaJ COIAjTEq3hQdxGA/J7wRst/jk0PNAs/ZRyt4HMZNbs4TKPl4R9nY1YKub1nInmLJ fGo+ray2y+EKpaXCwpwNBuXa+uYIGre/RbcWlMk3jDEh+MklKvg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:18 2026 by rpki-client