$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft File: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft (raw, json) Hash identifier: JKJlbgPqdqO7/588kVjK4mH7JVx0SixIf6O0fj5W2LI= Subject key identifier: C0:3C:B3:7C:4D:1C:08:2D:2B:BA:87:BC:DA:D1:83:CA:A6:28:DE:B5 Authority key identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 Certificate issuer: /CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Certificate serial: 2EF860F1B6B428A26A57EA72494868F33D748605 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 22:11:26 +0000 Manifest this update: Wed 16 Sep 2026 22:06:26 +0000 Manifest next update: Thu 17 Sep 2026 22:34:26 +0000 Files and hashes: 1: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl (hash: oyh7HrQy9dD/Dxsgr4UmkUX2yq3FJhTTCFHNXXZw2qI=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: fyKEzPeEJ4+E+32EaynXxqr/Ouql5hSrF2WTR5BFrF8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f8:60:f1:b6:b4:28:a2:6a:57:ea:72:49:48:68:f3:3d:74:86:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Validity Not Before: Sep 16 22:06:26 2026 GMT Not After : Sep 17 22:34:26 2026 GMT Subject: CN=C03CB37C4D1C082D2BBA87BCDAD183CAA628DEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:b6:d6:98:af:73:b4:74:d8:c6:52:ac:42: 25:e9:d8:d4:f4:92:59:b8:49:cd:e0:90:3b:da:0c: 73:10:14:43:8e:d1:dd:e7:64:f8:0c:06:c8:ba:de: 5d:e1:2d:1a:d0:f5:22:84:b9:b3:c3:04:d5:12:c4: c5:bb:0f:04:a8:7a:39:02:7f:a4:a0:f0:da:b5:9a: 3c:84:00:18:27:6a:1a:d1:0b:43:73:7f:82:a1:e6: 1f:7e:6e:c1:44:e2:8b:04:3f:c3:f9:96:f9:c5:1e: 86:8a:be:f9:eb:99:ab:82:35:73:f1:1c:eb:08:3a: 62:f5:83:9b:ba:80:8e:eb:a7:f7:c3:a8:b1:de:d4: 04:a0:2c:62:5a:92:3e:10:da:ca:3d:f4:63:5f:2d: 16:9b:8b:60:23:2e:1b:49:a3:c9:40:8e:2f:8b:e5: d4:60:2e:a3:f5:8d:e0:42:24:c4:00:f5:5a:64:53: 5b:f6:e2:bf:88:f9:00:45:7d:8f:cd:83:e8:53:c2: f3:ec:41:54:dd:cf:7f:f2:13:2e:c3:26:49:e1:fd: d5:9b:38:42:74:26:ce:4e:15:7e:00:3f:03:15:50: c1:fe:45:0b:87:45:4f:3e:7b:8e:52:48:04:14:fc: d7:48:0b:fd:58:21:8d:03:e7:5e:a0:d8:bf:b4:3e: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3C:B3:7C:4D:1C:08:2D:2B:BA:87:BC:DA:D1:83:CA:A6:28:DE:B5 X509v3 Authority Key Identifier: keyid:4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c9:59:cf:9e:4a:2d:a6:a1:54:34:af:13:12:0a:fa:00:aa: fd:51:be:8f:28:bc:f4:5a:32:df:6e:6e:63:7d:ca:65:23:f8: 9e:08:f5:83:43:8f:a4:4f:e5:ad:3c:5d:e0:8d:08:0d:f3:f2: b0:33:fe:cb:b5:7f:dd:84:a6:be:9d:d2:42:31:69:b3:ad:a0: 27:39:5c:5f:db:11:38:cf:88:bb:c9:67:21:17:7a:d7:aa:a7: 36:fc:99:4c:df:db:4b:c5:b0:77:6c:19:07:2b:87:17:39:e7: 64:00:20:aa:43:6b:bc:1f:7c:b4:76:10:b4:98:39:b7:66:6c: 34:6b:a0:15:69:fa:95:15:66:93:7a:c5:3d:93:f8:6e:e3:30: 56:5e:74:6c:a8:b6:0f:13:83:6a:1c:23:f7:9a:ad:5d:12:f5: a6:68:54:81:d2:f8:f2:f7:ed:f5:e6:19:79:c1:f3:45:a2:44: 3b:57:7b:c3:d8:99:f9:40:02:12:09:c6:ce:20:e7:a2:e6:b8: 51:e2:d9:c3:89:61:29:63:a6:98:5a:9d:33:6a:d0:4b:fc:76: 4a:a2:31:42:64:da:c8:32:84:88:b9:48:29:57:06:68:00:e6: 03:50:98:1c:fa:e4:bd:31:2c:46:c7:4e:b7:ce:87:b1:c7:f1: 34:cb:11:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvhg8ba0KKJqV+pySUho8z10hgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0 RkI0RTFCMDAeFw0yNjA5MTYyMjA2MjZaFw0yNjA5MTcyMjM0MjZaMDMxMTAvBgNV BAMTKEMwM0NCMzdDNEQxQzA4MkQyQkJBODdCQ0RBRDE4M0NBQTYyOERFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nrbWmK9ztHTYxlKsQiXp2NT0 klm4Sc3gkDvaDHMQFEOO0d3nZPgMBsi63l3hLRrQ9SKEubPDBNUSxMW7DwSoejkC f6Sg8Nq1mjyEABgnahrRC0Nzf4Kh5h9+bsFE4osEP8P5lvnFHoaKvvnrmauCNXPx HOsIOmL1g5u6gI7rp/fDqLHe1ASgLGJakj4Q2so99GNfLRabi2AjLhtJo8lAji+L 5dRgLqP1jeBCJMQA9VpkU1v24r+I+QBFfY/Ng+hTwvPsQVTdz3/yEy7DJknh/dWb OEJ0Js5OFX4APwMVUMH+RQuHRU8+e45SSAQU/NdIC/1YIY0D516g2L+0PgS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwDyzfE0cCC0ruoe82tGDyqYo3rUwHwYDVR0j BBgwFoAUS+bBu/Dp9TCXGVVoreoiJk+04bAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQzOGMxOTUtNDk0YS00NmEyLWI5M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJG MEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0RkI0RTFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkU2QzFCQkYwRTlGNTMwOTcxOTU1NjhBREVBMjIyNjRGQjRF MUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIy MjY0RkI0RTFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHJWc+eSi2moVQ0rxMSCvoAqv1Rvo8ovPRa Mt9ubmN9ymUj+J4I9YNDj6RP5a08XeCNCA3z8rAz/su1f92Epr6d0kIxabOtoCc5 XF/bETjPiLvJZyEXeteqpzb8mUzf20vFsHdsGQcrhxc552QAIKpDa7wffLR2ELSY ObdmbDRroBVp+pUVZpN6xT2T+G7jMFZedGyotg8Tg2ocI/earV0S9aZoVIHS+PL3 7fXmGXnB80WiRDtXe8PYmflAAhIJxs4g56LmuFHi2cOJYSljpphanTNq0Ev8dkqi MUJk2sgyhIi5SClXBmgA5gNQmBz65L0xLEbHTrfOh7HH8TTLEUI= -----END CERTIFICATE-----Generated at Thu Sep 17 06:40:04 2026 by rpki-client