$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft File: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft (raw, json) Hash identifier: yr2riG20hZuC+vStgMWVTq2DK7jSJQpTjeTLYjvcZN0= Subject key identifier: 3E:4D:CD:9D:2D:EB:3A:9D:24:CF:EF:A3:3C:AC:86:D0:1A:57:6A:1E Authority key identifier: B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 Certificate issuer: /CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Certificate serial: 3B497742470D7D443588F6CADB5B2385B5448F15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft Manifest number: BF Signing time: Wed 23 Sep 2026 11:35:23 +0000 Manifest this update: Wed 23 Sep 2026 11:30:23 +0000 Manifest next update: Thu 24 Sep 2026 11:50:23 +0000 Files and hashes: 1: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl (hash: N2Ri9JLxJNfd8mb1+mQv4/GBviWk6ARrvKQ1tipXuwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:49:77:42:47:0d:7d:44:35:88:f6:ca:db:5b:23:85:b5:44:8f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Validity Not Before: Sep 23 11:30:23 2026 GMT Not After : Sep 24 11:50:23 2026 GMT Subject: CN=3E4DCD9D2DEB3A9D24CFEFA33CAC86D01A576A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:1c:6b:cd:6c:de:63:a9:04:0a:d2:a2:f2: 56:9a:79:70:72:23:7c:64:ea:b3:fa:b9:a0:12:8e: d0:8e:dd:f9:0f:bc:fd:db:db:0e:00:be:de:57:bb: 40:22:02:fc:95:30:b8:9e:5c:e8:3a:13:a9:48:5c: 3a:4f:15:dd:44:78:e3:36:58:7a:5b:82:99:08:a5: 77:22:b6:79:9e:ec:23:94:e0:c6:80:3d:0f:87:61: 06:61:dc:52:39:2f:96:00:48:3a:3c:8c:be:fb:a2: 17:f8:bf:d9:47:fa:23:b3:01:ce:61:ce:85:92:f5: 0c:5f:9d:62:46:54:c3:3d:9b:4e:d5:12:72:d2:3c: e8:97:fc:0b:3f:e0:ad:3f:6c:fd:47:d3:fb:0c:df: be:26:d9:a3:71:65:2c:21:76:7b:20:bf:ad:3c:5b: d9:05:61:ab:ea:a4:3d:64:9f:4f:fe:0d:71:16:6a: 9d:bb:ea:57:fb:02:5e:8f:06:b4:2a:21:63:6c:e0: 43:9b:7d:98:bf:94:fd:d2:f4:81:3d:f8:5a:23:d0: 36:27:20:2a:90:63:3b:41:58:3a:b3:7e:cc:b8:f3: 0f:2a:ad:82:f1:7e:22:c5:e7:2c:2a:e1:4d:75:c5: 23:57:53:32:34:a8:16:2c:6c:93:98:70:85:21:00: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4D:CD:9D:2D:EB:3A:9D:24:CF:EF:A3:3C:AC:86:D0:1A:57:6A:1E X509v3 Authority Key Identifier: keyid:B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:53:8c:b0:76:3b:0f:29:6b:3e:d5:3e:52:49:1c:4e:a8:9b: e4:25:db:36:74:c2:cb:13:ba:a7:72:2a:ee:6f:9e:15:26:c4: e5:46:40:27:1a:67:62:22:08:08:9a:12:68:bd:06:22:82:a8: d0:da:10:94:1b:44:7b:1d:68:6c:18:aa:38:a2:94:4a:a8:f8: cf:8a:63:6a:2b:a4:39:c0:68:26:dd:92:2d:64:c7:41:16:6e: ff:b9:93:da:da:ed:2f:95:18:c6:89:9c:6c:ab:d5:a7:f9:8a: 32:6c:ff:f8:2f:67:af:18:1a:3e:f6:32:dd:ad:2c:f3:a3:bd: b8:37:7b:e2:b4:0c:4b:47:0b:26:fc:b6:62:89:7e:cd:da:41: 7b:e5:d2:0c:a3:73:aa:35:7e:e0:60:21:fc:fc:da:9a:5e:ed: 5a:15:40:e4:bf:d6:c8:a5:67:74:19:23:9d:cc:7f:58:ab:d8: 1a:45:51:5b:44:76:bc:b3:f9:0b:7a:c8:41:34:c3:34:6a:a1: 05:d1:10:32:14:de:89:da:c1:11:40:9b:dc:45:9f:96:bc:a9: 39:0c:02:e1:f0:7c:68:a0:31:3d:05:e6:88:76:cf:6b:1d:99: 81:0e:3a:e3:b3:19:86:ab:63:9b:f5:3e:32:5e:b3:24:67:ea: 9a:28:ce:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0l3QkcNfUQ1iPbK21sjhbVEjxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVD QzQyRjE0NDAeFw0yNjA5MjMxMTMwMjNaFw0yNjA5MjQxMTUwMjNaMDMxMTAvBgNV BAMTKDNFNERDRDlEMkRFQjNBOUQyNENGRUZBMzNDQUM4NkQwMUE1NzZBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlhxrzWzeY6kECtKi8laaeXBy I3xk6rP6uaASjtCO3fkPvP3b2w4Avt5Xu0AiAvyVMLieXOg6E6lIXDpPFd1EeOM2 WHpbgpkIpXcitnme7COU4MaAPQ+HYQZh3FI5L5YASDo8jL77ohf4v9lH+iOzAc5h zoWS9QxfnWJGVMM9m07VEnLSPOiX/As/4K0/bP1H0/sM374m2aNxZSwhdnsgv608 W9kFYavqpD1kn0/+DXEWap276lf7Al6PBrQqIWNs4EObfZi/lP3S9IE9+Foj0DYn ICqQYztBWDqzfsy48w8qrYLxfiLF5ywq4U11xSNXUzI0qBYsbJOYcIUhAPyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPk3NnS3rOp0kz++jPKyG0BpXah4wHwYDVR0j BBgwFoAUtMmy2Fyer2dR/X+SLuCAjsxC8UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzYjIzMGEtZmZmMS00N2YwLWJmOTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1 QzlFQUY2NzUxRkQ3RjkyMkVFMDgwOEVDQzQyRjE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM5QjJEODVDOUVBRjY3NTFGRDdGOTIyRUUwODA4RUNDNDJG MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvQjRDOUIyRDg1QzlFQUY2NzUxRkQ3RjkyMkVFMDgw OEVDQzQyRjE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFTjLB2Ow8paz7VPlJJHE6om+Ql2zZ0wssT uqdyKu5vnhUmxOVGQCcaZ2IiCAiaEmi9BiKCqNDaEJQbRHsdaGwYqjiilEqo+M+K Y2orpDnAaCbdki1kx0EWbv+5k9ra7S+VGMaJnGyr1af5ijJs//gvZ68YGj72Mt2t LPOjvbg3e+K0DEtHCyb8tmKJfs3aQXvl0gyjc6o1fuBgIfz82ppe7VoVQOS/1sil Z3QZI53Mf1ir2BpFUVtEdryz+Qt6yEE0wzRqoQXREDIU3onawRFAm9xFn5a8qTkM AuHwfGigMT0F5oh2z2sdmYEOOuOzGYarY5v1PjJesyRn6poozr4= -----END CERTIFICATE-----Generated at Thu Sep 24 03:04:30 2026 by rpki-client