$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft File: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft (raw, json) Hash identifier: 79sxfxlevy+vWWOZb03d20SHlhCYKkZi5qYXkRWFIuY= Subject key identifier: B5:E5:AA:C7:B7:64:24:33:D3:87:A7:31:B0:2C:59:E5:7B:04:A5:9C Authority key identifier: B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 Certificate issuer: /CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Certificate serial: 2CD370BC57DFD3C19E04E578461BF395D2B654BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:42:39 +0000 Manifest this update: Tue 12 May 2026 17:37:39 +0000 Manifest next update: Wed 13 May 2026 20:38:39 +0000 Files and hashes: 1: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl (hash: D8DkYmSMkZW7EOv40cMo4jP0E8CxjIo22OT1yWQGsuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d3:70:bc:57:df:d3:c1:9e:04:e5:78:46:1b:f3:95:d2:b6:54:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Validity Not Before: May 12 17:37:39 2026 GMT Not After : May 13 20:38:39 2026 GMT Subject: CN=B5E5AAC7B7642433D387A731B02C59E57B04A59C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:ad:2c:de:f0:c0:2e:06:20:b0:52:71:3a: f9:63:b0:ce:f0:12:7b:ed:c2:da:f5:8c:46:b8:c8: 58:05:58:c1:1b:8b:f2:37:0b:63:b4:50:83:c2:41: a1:85:31:31:45:1c:72:c7:4b:af:7d:08:7a:71:4d: 4d:03:1f:8c:0f:dc:01:dc:14:5c:c6:f4:14:c8:f9: 4a:f9:9a:7f:3a:3d:db:4a:79:74:0a:df:ce:21:a0: 57:1b:eb:2b:4c:48:c9:f4:b0:bf:5d:fb:24:89:b5: 98:86:6f:62:51:45:20:07:b3:cd:40:6a:79:cd:37: b7:89:de:b8:73:ef:3f:9e:02:2a:3e:5f:11:08:8e: 65:27:d1:59:d3:d7:bf:5b:6f:fc:fd:df:64:9f:6d: 8a:cf:64:e1:7b:c1:e9:3e:e3:21:91:b7:5f:19:02: e1:92:e7:e6:4a:ca:76:a3:5c:b7:3c:c5:99:5d:fa: c1:4b:e2:0e:d4:6c:52:47:06:28:a5:18:3d:3c:56: f5:29:ba:df:06:c5:07:5b:27:1b:b4:c2:90:8a:b2: f2:f5:0f:8f:83:9c:5b:47:86:59:98:15:71:2c:f1: 4c:e3:30:bc:4a:f1:74:dd:14:50:dd:13:54:76:c6: 1b:d3:8d:d3:27:86:ce:e0:23:e2:cd:a3:04:16:70: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E5:AA:C7:B7:64:24:33:D3:87:A7:31:B0:2C:59:E5:7B:04:A5:9C X509v3 Authority Key Identifier: keyid:B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3f:1d:0b:db:fb:d6:32:2d:8f:be:55:93:27:35:37:7a:1c: d5:4f:c1:29:23:e3:06:30:2a:61:bf:fc:25:8d:16:50:48:c5: ae:02:a8:a9:91:ba:d4:35:8d:07:92:21:bd:60:ba:49:ab:68: 0b:9b:78:72:aa:33:b8:53:45:53:2b:38:7f:21:7b:24:0b:1e: 23:87:a6:a9:84:e3:47:e0:42:3e:8b:05:87:fa:dd:97:6c:76: b7:1f:56:9f:81:25:c2:94:ad:48:e1:da:a9:70:78:71:76:71: 9e:08:ae:6d:01:e5:db:0b:06:72:bb:7d:f0:02:d6:cd:7e:06: fc:e4:cb:a5:b2:a1:8b:8e:cb:dd:a5:f7:b9:b7:c7:3b:34:ca: 13:f6:d8:a0:86:d5:1d:43:96:c3:f3:a7:b0:96:93:0e:05:ed: 10:9f:23:58:eb:25:b9:6e:10:f2:01:55:a7:30:c7:bd:d5:86: 09:3b:dd:41:32:ad:fd:0d:a0:83:3e:bd:b0:2d:b7:27:78:82: 38:c3:20:85:91:d6:a6:ca:4c:32:87:ab:84:6f:ed:1b:b6:4d: 60:71:a4:f1:85:9f:83:13:1f:a5:2f:f8:5a:6b:bc:9b:12:cc: 92:9c:45:53:4e:5a:c6:fd:74:0b:f8:9d:f9:df:69:ca:e0:44: 54:71:ea:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNNwvFff08GeBOV4RhvzldK2VLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVD QzQyRjE0NDAeFw0yNjA1MTIxNzM3MzlaFw0yNjA1MTMyMDM4MzlaMDMxMTAvBgNV BAMTKEI1RTVBQUM3Qjc2NDI0MzNEMzg3QTczMUIwMkM1OUU1N0IwNEE1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOq0s3vDALgYgsFJxOvljsM7w Envtwtr1jEa4yFgFWMEbi/I3C2O0UIPCQaGFMTFFHHLHS699CHpxTU0DH4wP3AHc FFzG9BTI+Ur5mn86PdtKeXQK384hoFcb6ytMSMn0sL9d+ySJtZiGb2JRRSAHs81A annNN7eJ3rhz7z+eAio+XxEIjmUn0VnT179bb/z932SfbYrPZOF7wek+4yGRt18Z AuGS5+ZKynajXLc8xZld+sFL4g7UbFJHBiilGD08VvUput8GxQdbJxu0wpCKsvL1 D4+DnFtHhlmYFXEs8UzjMLxK8XTdFFDdE1R2xhvTjdMnhs7gI+LNowQWcGj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUteWqx7dkJDPTh6cxsCxZ5XsEpZwwHwYDVR0j BBgwFoAUtMmy2Fyer2dR/X+SLuCAjsxC8UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzYjIzMGEtZmZmMS00N2YwLWJmOTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1 QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVDQzQyRjE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM5QjJEODVDOUVBRjY3NTFGRDdGOTIyRUUwODA4RUNDNDJG MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgw OEVDQzQyRjE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk/HQvb+9YyLY++VZMnNTd6HNVPwSkj4wYw KmG//CWNFlBIxa4CqKmRutQ1jQeSIb1gukmraAubeHKqM7hTRVMrOH8heyQLHiOH pqmE40fgQj6LBYf63ZdsdrcfVp+BJcKUrUjh2qlweHF2cZ4Irm0B5dsLBnK7ffAC 1s1+Bvzky6WyoYuOy92l97m3xzs0yhP22KCG1R1DlsPzp7CWkw4F7RCfI1jrJblu EPIBVacwx73Vhgk73UEyrf0NoIM+vbAttyd4gjjDIIWR1qbKTDKHq4Rv7Ru2TWBx pPGFn4MTH6Uv+FprvJsSzJKcRVNOWsb9dAv4nfnfacrgRFRx6sw= -----END CERTIFICATE-----Generated at Wed May 13 01:14:22 2026 by rpki-client