$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft File: 4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft (raw, json) Hash identifier: 8Bo2qB//3494322OtZ+826tg7HjB8a8XQBd6h3tlpYM= Subject key identifier: 99:6A:71:10:B9:96:5B:6D:22:66:AE:38:8A:9D:0D:7B:DF:A7:6B:27 Authority key identifier: 4A:BE:5E:2C:04:73:48:84:D2:DB:57:7A:34:C0:A9:99:FB:B3:26:9C Certificate issuer: /CN=4ABE5E2C04734884D2DB577A34C0A999FBB3269C Certificate serial: 1E0538DD24573986738BDCDB71A069F2E2A7A77F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft Manifest number: BA Signing time: Thu 17 Sep 2026 20:54:16 +0000 Manifest this update: Thu 17 Sep 2026 20:49:16 +0000 Manifest next update: Fri 18 Sep 2026 23:19:16 +0000 Files and hashes: 1: 4ABE5E2C04734884D2DB577A34C0A999FBB3269C.crl (hash: g5e1tA6UUQLlGu0m+nHVZGFel0WfQHvPEEzOkxs7eVI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.crl rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 23:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:05:38:dd:24:57:39:86:73:8b:dc:db:71:a0:69:f2:e2:a7:a7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ABE5E2C04734884D2DB577A34C0A999FBB3269C Validity Not Before: Sep 17 20:49:16 2026 GMT Not After : Sep 18 23:19:16 2026 GMT Subject: CN=996A7110B9965B6D2266AE388A9D0D7BDFA76B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:c6:13:8b:78:8e:b2:90:54:38:20:77:8f: db:df:f3:95:22:6c:80:fc:ca:aa:27:cf:65:89:03: 10:ee:bb:7c:70:c5:f6:d1:50:b2:ed:6f:77:ac:40: 5e:77:cc:c1:1f:a6:0b:f4:0e:36:b0:92:da:3b:35: e5:23:f5:5a:5e:72:1b:7c:e5:47:6c:59:e2:5c:8a: e0:9a:2d:22:16:22:be:3e:e3:7e:be:9e:43:47:8f: 01:35:f3:54:ba:89:89:8d:7e:43:5f:55:46:9e:35: d1:e0:0f:37:5d:fa:a5:12:df:f3:dd:88:b9:f8:b1: e8:20:c2:4c:59:84:ab:8f:67:c4:92:f2:35:40:51: e6:55:a2:8c:e8:cd:b5:e9:b0:e2:f8:95:57:60:1e: 0a:f0:8d:03:93:d0:5a:52:fe:ad:0d:cc:7d:07:b0: 69:d9:18:2d:c4:38:b1:a4:b1:62:04:75:9f:5c:e8: 0f:a6:f5:a8:ef:1f:aa:e7:b0:a6:c2:14:a6:75:dc: 05:c3:b3:02:b0:38:fb:48:80:7e:2a:ed:a0:2d:37: dd:95:c6:c7:70:81:20:7e:52:55:21:0d:b6:a5:ef: 62:37:8f:d3:e7:97:28:0e:b7:a8:6e:af:d7:9a:8f: 64:86:e2:04:9a:6c:ed:c6:ea:62:81:1b:66:c8:54: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:71:10:B9:96:5B:6D:22:66:AE:38:8A:9D:0D:7B:DF:A7:6B:27 X509v3 Authority Key Identifier: keyid:4A:BE:5E:2C:04:73:48:84:D2:DB:57:7A:34:C0:A9:99:FB:B3:26:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/4ABE5E2C04734884D2DB577A34C0A999FBB3269C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:77:c1:0e:db:8d:84:fd:e2:1e:40:97:25:8a:20:7e:2c:7f: 41:f8:3a:a4:9b:d6:b4:f5:46:31:76:00:1b:61:8e:5c:df:82: e1:93:5b:af:b7:34:01:96:74:bc:1a:d4:02:c3:4f:cd:0e:be: f3:53:d7:25:17:cd:e5:c0:20:30:66:14:df:18:6c:22:11:30: ef:70:9f:d3:23:56:25:c3:25:95:33:a5:13:d1:71:aa:38:2f: 48:44:36:2b:a2:57:73:00:c1:bc:48:15:0a:81:4c:d7:ae:89: 16:c9:00:9d:c8:0b:f7:be:ef:0b:a2:7a:d0:99:f9:9c:e6:58: b5:31:96:16:b3:9a:10:36:bf:eb:00:bb:1b:4e:68:77:d5:34: af:a2:00:5a:0a:5a:85:79:6e:17:6c:2a:6e:de:2c:84:54:d3: b1:b3:e8:79:db:75:40:75:bc:0f:a6:c5:fd:a5:85:f7:e6:e1: e7:ac:88:c7:31:b9:c1:73:b0:81:99:45:12:af:4f:72:2a:06: ae:75:eb:34:df:d8:ea:d6:59:65:13:4c:7c:b1:44:96:24:42: 51:04:0a:0f:18:b1:af:a8:45:d5:6d:1f:e1:91:22:73:01:7e: ea:f5:cb:51:eb:56:f7:39:22:62:32:ee:54:7c:58:19:33:6c: 5a:b2:e9:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgU43SRXOYZzi9zbcaBp8uKnp38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCRTVFMkMwNDczNDg4NEQyREI1NzdBMzRDMEE5OTlG QkIzMjY5QzAeFw0yNjA5MTcyMDQ5MTZaFw0yNjA5MTgyMzE5MTZaMDMxMTAvBgNV BAMTKDk5NkE3MTEwQjk5NjVCNkQyMjY2QUUzODhBOUQwRDdCREZBNzZCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/w8YTi3iOspBUOCB3j9vf85Ui bID8yqonz2WJAxDuu3xwxfbRULLtb3esQF53zMEfpgv0Djawkto7NeUj9Vpecht8 5UdsWeJciuCaLSIWIr4+436+nkNHjwE181S6iYmNfkNfVUaeNdHgDzdd+qUS3/Pd iLn4seggwkxZhKuPZ8SS8jVAUeZVoozozbXpsOL4lVdgHgrwjQOT0FpS/q0NzH0H sGnZGC3EOLGksWIEdZ9c6A+m9ajvH6rnsKbCFKZ13AXDswKwOPtIgH4q7aAtN92V xsdwgSB+UlUhDbal72I3j9PnlygOt6hur9eaj2SG4gSabO3G6mKBG2bIVAb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmWpxELmWW20iZq44ip0Ne9+naycwHwYDVR0j BBgwFoAUSr5eLARzSITS21d6NMCpmfuzJpwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg4NGM5MzUtM2UzMy00NDU2LWFjYTctMjRmMzNhMTdhMWE0LzAvNEFCRTVFMkMw NDczNDg4NEQyREI1NzdBMzRDMEE5OTlGQkIzMjY5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUJFNUUyQzA0NzM0ODg0RDJEQjU3N0EzNEMwQTk5OUZCQjMy NjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg4NGM5MzUtM2UzMy00NDU2LWFj YTctMjRmMzNhMTdhMWE0LzAvNEFCRTVFMkMwNDczNDg4NEQyREI1NzdBMzRDMEE5 OTlGQkIzMjY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB3wQ7bjYT94h5AlyWKIH4sf0H4OqSb1rT1 RjF2ABthjlzfguGTW6+3NAGWdLwa1ALDT80OvvNT1yUXzeXAIDBmFN8YbCIRMO9w n9MjViXDJZUzpRPRcao4L0hENiuiV3MAwbxIFQqBTNeuiRbJAJ3IC/e+7wuietCZ +ZzmWLUxlhazmhA2v+sAuxtOaHfVNK+iAFoKWoV5bhdsKm7eLIRU07Gz6HnbdUB1 vA+mxf2lhffm4eesiMcxucFzsIGZRRKvT3IqBq516zTf2OrWWWUTTHyxRJYkQlEE Cg8Ysa+oRdVtH+GRInMBfur1y1HrVvc5ImIy7lR8WBkzbFqy6bg= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:32 2026 by rpki-client