$ rpki-client -vvf rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft File: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft (raw, json) Hash identifier: Q5MigKiSXcyvWfgTUgXDzY/14HBmkbxlnfLbr7CRVzk= Subject key identifier: B0:F1:CF:85:3E:BC:E6:20:BB:B1:F5:F3:7C:DD:FE:97:89:2F:2B:F8 Authority key identifier: 4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 Certificate issuer: /CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Certificate serial: 10DE6BEF86ABF4F52A4B8DAEEC4405477484AED6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:03:00 +0000 Manifest this update: Thu 23 Jul 2026 22:58:00 +0000 Manifest next update: Fri 24 Jul 2026 23:15:00 +0000 Files and hashes: 1: 4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl (hash: ah3F4WfPGPL2X1i/N3cQVCeemfGwxlzH0WGb3YcoLGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:de:6b:ef:86:ab:f4:f5:2a:4b:8d:ae:ec:44:05:47:74:84:ae:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE13007E8FFFC7C2C783A1372DB74B44669E1F0 Validity Not Before: Jul 23 22:58:00 2026 GMT Not After : Jul 24 23:15:00 2026 GMT Subject: CN=B0F1CF853EBCE620BBB1F5F37CDDFE97892F2BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:68:ea:56:7c:20:92:2e:8a:09:26:e3:99: 64:0f:3b:37:51:3b:67:3e:33:be:6e:1d:0f:b9:a6: 02:6e:d0:b2:ce:39:69:28:70:fd:ca:71:a4:51:ff: ca:53:1f:50:5a:f4:3a:7d:26:97:a0:07:f9:cf:50: ac:ba:5b:aa:b8:10:39:ba:46:3e:71:2b:71:31:8a: 28:e8:c1:8f:8b:83:db:97:23:1d:eb:04:6e:8e:1b: f3:38:3d:75:2b:7b:2e:4c:10:8b:66:37:9b:b2:90: 46:95:e3:e7:3a:ad:ee:a9:44:1a:f6:fa:d3:61:a9: 90:36:df:b5:f6:0b:b4:a8:5c:e3:af:50:5f:d2:cb: ee:8f:50:07:d0:49:83:8e:60:67:21:42:1c:f4:d4: c3:f7:7f:f0:8b:52:35:5a:26:ca:d2:e8:f8:a6:c1: 52:6f:7d:9a:23:b1:09:b5:e7:43:45:4a:18:0b:d1: a8:83:fb:a8:c1:97:dc:53:ab:2f:20:92:12:87:f0: 45:6f:3c:f9:bc:7d:73:e3:56:b7:8b:6c:be:e3:56: 76:cc:a1:a7:6e:38:12:3f:37:19:0b:95:97:0f:c0: 0b:81:c1:58:48:14:a6:3d:d9:ac:70:bd:8f:6d:aa: 1c:6d:a5:4b:8d:31:d2:95:48:b0:f0:7e:b4:6c:d0: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F1:CF:85:3E:BC:E6:20:BB:B1:F5:F3:7C:DD:FE:97:89:2F:2B:F8 X509v3 Authority Key Identifier: keyid:4B:E1:30:07:E8:FF:FC:7C:2C:78:3A:13:72:DB:74:B4:46:69:E1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/4BE13007E8FFFC7C2C783A1372DB74B44669E1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:21:92:7f:fc:95:84:56:7b:50:b1:98:7f:9e:67:ca:1b:91: 47:92:48:06:02:1e:e9:f3:03:1f:78:2c:62:44:23:48:b5:a3: 86:1a:db:b6:79:dc:d8:94:d5:d6:d3:67:2d:78:55:d5:a5:fc: c2:2f:37:f7:b8:9b:ba:d0:2f:5b:f0:78:d1:a0:c7:7d:5e:3c: e9:ae:69:24:1e:f8:25:d9:5b:5c:1d:27:72:3c:a2:7f:db:09: b5:8a:69:92:99:36:80:0b:a3:f0:df:06:28:6d:e1:5b:36:e8: a2:55:67:62:36:d9:13:98:ca:45:28:77:b1:f8:be:54:fe:00: 7d:8a:0a:4d:99:b4:77:2b:6b:ad:80:2b:20:99:63:52:af:0f: 3a:46:af:fe:e4:d6:0c:40:0f:1f:51:1a:e2:03:53:7c:69:1b: ad:e6:18:e4:73:f7:e2:85:49:ec:d8:80:98:71:d6:47:34:c2: c9:9e:ca:cb:45:c5:88:0e:e0:42:9a:cc:f7:b3:b4:e4:8b:a0: 23:0c:17:56:c1:58:c2:be:a6:b2:75:ea:1e:f9:c7:90:48:db: 72:65:3b:61:3c:27:5a:ef:5d:3a:67:d9:c4:22:38:eb:72:fd: 55:16:3e:ae:1c:6b:76:a8:c6:2a:6a:0c:bd:4c:70:e1:83:f2: 26:0d:b5:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEN5r74ar9PUqS42u7EQFR3SErtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0 NjY5RTFGMDAeFw0yNjA3MjMyMjU4MDBaFw0yNjA3MjQyMzE1MDBaMDMxMTAvBgNV BAMTKEIwRjFDRjg1M0VCQ0U2MjBCQkIxRjVGMzdDRERGRTk3ODkyRjJCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiWjqVnwgki6KCSbjmWQPOzdR O2c+M75uHQ+5pgJu0LLOOWkocP3KcaRR/8pTH1Ba9Dp9JpegB/nPUKy6W6q4EDm6 Rj5xK3ExiijowY+Lg9uXIx3rBG6OG/M4PXUrey5MEItmN5uykEaV4+c6re6pRBr2 +tNhqZA237X2C7SoXOOvUF/Sy+6PUAfQSYOOYGchQhz01MP3f/CLUjVaJsrS6Pim wVJvfZojsQm150NFShgL0aiD+6jBl9xTqy8gkhKH8EVvPPm8fXPjVreLbL7jVnbM oaduOBI/NxkLlZcPwAuBwVhIFKY92axwvY9tqhxtpUuNMdKVSLDwfrRs0AkzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsPHPhT685iC7sfXzfN3+l4kvK/gwHwYDVR0j BBgwFoAUS+EwB+j//HwseDoTctt0tEZp4fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM0ZjEzZTgtZGVlZi00OGE4LWEyZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdF OEZGRkM3QzJDNzgzQTEzNzJEQjc0QjQ0NjY5RTFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkUxMzAwN0U4RkZGQzdDMkM3ODNBMTM3MkRCNzRCNDQ2NjlF MUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNEJFMTMwMDdFOEZGRkM3QzJDNzgzQTEzNzJEQjc0 QjQ0NjY5RTFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQhkn/8lYRWe1CxmH+eZ8obkUeSSAYCHunz Ax94LGJEI0i1o4Ya27Z53NiU1dbTZy14VdWl/MIvN/e4m7rQL1vweNGgx31ePOmu aSQe+CXZW1wdJ3I8on/bCbWKaZKZNoALo/DfBiht4Vs26KJVZ2I22ROYykUod7H4 vlT+AH2KCk2ZtHcra62AKyCZY1KvDzpGr/7k1gxADx9RGuIDU3xpG63mGORz9+KF SezYgJhx1kc0wsmeystFxYgO4EKazPeztOSLoCMMF1bBWMK+prJ16h75x5BI23Jl O2E8J1rvXTpn2cQiOOty/VUWPq4ca3aoxipqDL1McOGD8iYNteU= -----END CERTIFICATE-----Generated at Fri Jul 24 01:23:03 2026 by rpki-client