$ rpki-client -vvf rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft File: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft (raw, json) Hash identifier: IIZfDYHlkTfytGrzEGbt/+F5KLQ0ZEgPPafHbuePdRY= Subject key identifier: 44:F8:33:B7:47:5B:DC:8B:9A:B2:D6:A2:1C:87:8E:8D:03:48:84:07 Authority key identifier: 4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 Certificate issuer: /CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Certificate serial: 4C4A91117CB929B235835CB3B99CD5AAD649B188 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:44:27 +0000 Manifest this update: Tue 12 May 2026 14:39:27 +0000 Manifest next update: Wed 13 May 2026 14:57:27 +0000 Files and hashes: 1: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl (hash: 4TUwiRl+TjGf3F/f77L6ltnlnFAIutnF3hB6MfRWxqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4a:91:11:7c:b9:29:b2:35:83:5c:b3:b9:9c:d5:aa:d6:49:b1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Validity Not Before: May 12 14:39:27 2026 GMT Not After : May 13 14:57:27 2026 GMT Subject: CN=44F833B7475BDC8B9AB2D6A21C878E8D03488407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:2d:c7:fc:3e:b2:91:84:47:43:13:40:cf: a6:d8:cf:70:85:e2:b0:0a:fb:3a:e5:ed:83:84:72: 1d:ab:89:13:39:77:70:f0:e6:d5:c9:58:51:f1:41: 4f:18:6c:14:e7:41:ea:79:f7:ea:55:f2:16:72:79: 09:80:bf:de:50:3c:6c:77:48:da:3b:77:a2:c2:a4: 34:34:cf:45:b6:5b:50:c7:89:db:84:93:ac:68:5b: 6f:b7:37:0e:95:f6:46:9c:9c:47:d6:71:36:8f:6c: 1c:16:04:63:6e:be:dc:aa:98:ba:2c:ee:c0:ec:65: 1b:e8:35:2b:dd:e0:20:cd:2d:6e:30:cc:8c:03:ca: 94:76:06:b7:33:f5:e0:c1:f6:b5:48:f3:1f:cc:05: 24:08:de:17:b1:c8:57:5b:cc:71:70:1f:fe:1c:a2: dc:5e:c1:e3:ee:eb:30:64:bc:59:28:df:06:2b:a3: b4:61:65:75:2b:ee:b1:ec:93:da:f8:72:b5:13:9a: f3:35:70:a0:d6:9c:e1:66:74:9e:7d:66:91:ef:a2: 3e:3b:b6:58:8d:eb:1c:8d:3c:eb:1e:ae:63:14:7d: 5d:4e:71:97:75:d3:a8:1b:a3:dd:17:a6:0a:0e:e3: b4:a9:8f:f3:ba:19:18:bb:41:4a:ba:a5:15:16:9e: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F8:33:B7:47:5B:DC:8B:9A:B2:D6:A2:1C:87:8E:8D:03:48:84:07 X509v3 Authority Key Identifier: keyid:4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b8:e5:f3:46:23:9c:28:53:70:5b:de:b4:23:c1:af:9e:d8: 9d:54:ab:86:9c:51:b2:d0:98:27:51:c3:ee:41:17:53:7b:8e: 69:59:79:ae:c5:e9:b5:11:30:71:e2:03:7d:4f:d7:e8:a2:34: 8f:fe:7c:4e:93:29:66:75:94:8d:6f:76:2d:16:96:0a:23:9a: ab:a5:88:3f:cb:6d:09:95:b9:ec:87:82:4f:c3:07:6e:3a:03: e2:c0:28:34:24:7b:79:87:95:98:47:07:c4:47:08:14:d6:c5: c1:94:1e:83:8e:bc:80:14:0a:fc:03:77:e0:00:d9:09:42:a2: ab:33:e5:60:6e:ec:b9:05:29:9e:bf:ac:dc:8b:71:4d:31:50: df:bc:aa:4b:8a:94:5b:c3:9c:19:c2:ba:42:33:8c:22:39:6e: b3:3e:9f:a1:86:c6:ce:53:8e:1f:b3:a9:29:58:2b:71:08:07: e0:00:c7:03:8e:d5:f8:a0:03:0d:69:4f:11:c9:55:8a:ed:15: 36:f2:93:45:0a:48:2a:02:e5:13:c6:7e:14:21:ed:d8:d5:2f: 3c:03:23:a6:67:f0:da:b3:ba:14:07:85:ea:08:af:84:1d:21: b9:0d:02:d6:06:e0:8a:49:99:69:57:63:dd:33:c6:3a:d8:f4: dd:39:fe:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEqREXy5KbI1g1yzuZzVqtZJsYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0 NjY5RTFGMDAeFw0yNjA1MTIxNDM5MjdaFw0yNjA1MTMxNDU3MjdaMDMxMTAvBgNV BAMTKDQ0RjgzM0I3NDc1QkRDOEI5QUIyRDZBMjFDODc4RThEMDM0ODg0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSOy3H/D6ykYRHQxNAz6bYz3CF 4rAK+zrl7YOEch2riRM5d3Dw5tXJWFHxQU8YbBTnQep59+pV8hZyeQmAv95QPGx3 SNo7d6LCpDQ0z0W2W1DHiduEk6xoW2+3Nw6V9kacnEfWcTaPbBwWBGNuvtyqmLos 7sDsZRvoNSvd4CDNLW4wzIwDypR2Brcz9eDB9rVI8x/MBSQI3hexyFdbzHFwH/4c otxewePu6zBkvFko3wYro7RhZXUr7rHsk9r4crUTmvM1cKDWnOFmdJ59ZpHvoj47 tliN6xyNPOsermMUfV1OcZd106gbo90XpgoO47Spj/O6GRi7QUq6pRUWnnU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPgzt0db3IuastaiHIeOjQNIhAcwHwYDVR0j BBgwFoAUS+EwB+j//HwseDoTctt0tEZp4fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM0ZjEzZTgtZGVlZi00OGE4LWEyZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdF OEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0NjY5RTFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkUxMzAwN0U4RkZGQzdDMkM3ODNBMTM3MkRCNzRCNDQ2NjlF MUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0 QjQ0NjY5RTFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS45fNGI5woU3Bb3rQjwa+e2J1Uq4acUbLQ mCdRw+5BF1N7jmlZea7F6bURMHHiA31P1+iiNI/+fE6TKWZ1lI1vdi0Wlgojmqul iD/LbQmVueyHgk/DB246A+LAKDQke3mHlZhHB8RHCBTWxcGUHoOOvIAUCvwDd+AA 2QlCoqsz5WBu7LkFKZ6/rNyLcU0xUN+8qkuKlFvDnBnCukIzjCI5brM+n6GGxs5T jh+zqSlYK3EIB+AAxwOO1figAw1pTxHJVYrtFTbyk0UKSCoC5RPGfhQh7djVLzwD I6Zn8NqzuhQHheoIr4QdIbkNAtYG4IpJmWlXY90zxjrY9N05/n0= -----END CERTIFICATE-----Generated at Wed May 13 01:10:53 2026 by rpki-client