$ rpki-client -vvvf rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft File: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft (raw, json) Hash identifier: CK/WvgmFomSLBuLFVCyhsUEltaA4vF85yNe77ixBwXs= Subject key identifier: 57:33:1C:92:21:52:66:15:D1:C3:A0:08:32:0F:2B:8E:95:BA:53:1C Authority key identifier: 4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 Certificate issuer: /CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Certificate serial: 58E193EAC33BA6DD37977646396FAA70895EC475 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 02:33:19 +0000 Manifest this update: Sat 26 Sep 2026 02:28:19 +0000 Manifest next update: Sun 27 Sep 2026 05:17:19 +0000 Files and hashes: 1: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl (hash: myrX0/Vo63EYZXDfHmF+DAlsmsv9sNtft3dt9e2A+lE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 05:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e1:93:ea:c3:3b:a6:dd:37:97:76:46:39:6f:aa:70:89:5e:c4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Validity Not Before: Sep 26 02:28:19 2026 GMT Not After : Sep 27 05:17:19 2026 GMT Subject: CN=57331C9221526615D1C3A008320F2B8E95BA531C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:46:5b:ac:94:f8:6b:b9:2e:bc:75:c9:12: e5:7b:8a:dd:61:63:2a:b7:07:da:8e:0a:62:c2:39: e4:a1:dc:a2:45:95:fd:e4:05:ab:95:6e:65:fd:0b: 1e:3a:a2:89:5c:87:b1:86:8c:ce:0a:af:f8:4c:42: 82:c2:3f:3f:13:06:21:aa:8b:ab:17:c3:a7:0f:a0: 51:e6:5a:72:72:32:a8:68:e1:d4:04:f6:ff:a7:50: 38:48:87:3f:41:d2:bb:e0:12:fb:e5:5b:1b:a1:d0: b1:fe:18:f7:b2:62:4a:26:3b:f4:16:4e:2d:71:aa: 49:48:c1:e8:75:5b:e0:ac:b3:aa:88:c1:de:ff:36: 7c:48:d6:7a:59:58:80:c4:fa:16:96:39:15:63:ac: 17:ba:7e:22:bf:9e:63:93:bb:57:ac:e3:8d:c2:1f: 48:6d:66:bc:81:9f:8e:25:e0:ad:4d:2e:70:fa:9c: 60:3a:d2:3e:e2:26:6c:3e:41:2c:32:9d:4c:73:fc: b9:3f:5b:3e:06:77:82:5e:37:4b:3f:9a:b4:0b:c4: 05:df:88:01:fa:c7:95:47:4c:ea:5b:2a:ae:6a:65: da:ce:c8:5f:15:67:c2:8a:af:de:e5:54:52:19:8c: 47:e4:b1:35:6f:e3:82:ad:b8:f7:24:7a:11:b6:17: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:33:1C:92:21:52:66:15:D1:C3:A0:08:32:0F:2B:8E:95:BA:53:1C X509v3 Authority Key Identifier: keyid:4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f3:f7:9c:ec:a3:d5:e2:33:a8:7c:ac:e9:0d:b1:d7:7f:05: 32:63:f0:a5:0f:07:b1:0f:a3:ef:ed:01:5b:0b:c5:78:0e:7f: 52:0c:1f:ec:9d:6c:ec:91:d3:71:1a:c3:00:d4:ab:6d:2e:bb: a7:c8:b4:a2:39:64:f7:86:b7:be:0d:f3:90:f8:d9:f6:be:3a: 79:48:8c:dc:59:4f:75:28:27:e9:53:4c:07:b8:bf:3d:ca:12: 01:86:cc:82:68:34:ab:70:27:5a:16:0a:b6:f0:10:37:be:98: 3d:09:1e:71:1a:06:17:47:85:d1:5d:4b:dd:79:07:f6:c3:85: e7:46:20:d7:93:be:20:7f:bc:73:6e:be:0e:12:fb:d8:15:38: a0:e4:db:4c:ee:dc:98:25:da:22:0d:66:ad:df:2c:c9:15:cb: 12:a0:fc:7b:75:e1:9d:22:9d:7f:84:2e:15:d5:56:79:d8:01: 24:a8:4b:62:9c:17:ea:cf:6c:d7:ca:32:d6:90:5a:11:1c:28: 69:af:7e:27:54:d9:ac:81:22:89:65:76:cb:e0:16:7b:ce:e1: c0:7c:5a:bc:2c:9f:e7:3c:1f:c2:be:5c:6f:48:26:df:b8:89: 00:d1:e6:72:7b:60:a5:4a:e1:79:a8:d4:0b:48:a6:b8:4b:24: db:64:1f:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOGT6sM7pt03l3ZGOW+qcIlexHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0 NjY5RTFGMDAeFw0yNjA5MjYwMjI4MTlaFw0yNjA5MjcwNTE3MTlaMDMxMTAvBgNV BAMTKDU3MzMxQzkyMjE1MjY2MTVEMUMzQTAwODMyMEYyQjhFOTVCQTUzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEUZbrJT4a7kuvHXJEuV7it1h Yyq3B9qOCmLCOeSh3KJFlf3kBauVbmX9Cx46oolch7GGjM4Kr/hMQoLCPz8TBiGq i6sXw6cPoFHmWnJyMqho4dQE9v+nUDhIhz9B0rvgEvvlWxuh0LH+GPeyYkomO/QW Ti1xqklIweh1W+Css6qIwd7/NnxI1npZWIDE+haWORVjrBe6fiK/nmOTu1es443C H0htZryBn44l4K1NLnD6nGA60j7iJmw+QSwynUxz/Lk/Wz4Gd4JeN0s/mrQLxAXf iAH6x5VHTOpbKq5qZdrOyF8VZ8KKr97lVFIZjEfksTVv44KtuPckehG2F7+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVzMckiFSZhXRw6AIMg8rjpW6UxwwHwYDVR0j BBgwFoAUS+EwB+j//HwseDoTctt0tEZp4fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM0ZjEzZTgtZGVlZi00OGE4LWEyZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdF OEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0NjY5RTFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkUxMzAwN0U4RkZGQzdDMkM3ODNBMTM3MkRCNzRCNDQ2NjlF MUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0 QjQ0NjY5RTFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzz95zso9XiM6h8rOkNsdd/BTJj8KUPB7EP o+/tAVsLxXgOf1IMH+ydbOyR03EawwDUq20uu6fItKI5ZPeGt74N85D42fa+OnlI jNxZT3UoJ+lTTAe4vz3KEgGGzIJoNKtwJ1oWCrbwEDe+mD0JHnEaBhdHhdFdS915 B/bDhedGINeTviB/vHNuvg4S+9gVOKDk20zu3Jgl2iINZq3fLMkVyxKg/Ht14Z0i nX+ELhXVVnnYASSoS2KcF+rPbNfKMtaQWhEcKGmvfidU2ayBIolldsvgFnvO4cB8 Wrwsn+c8H8K+XG9IJt+4iQDR5nJ7YKVK4Xmo1AtIprhLJNtkH6I= -----END CERTIFICATE-----Generated at Sat Sep 26 14:46:36 2026 by rpki-client