$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: SF6gqWZ0RksXn4vJmAtryl2xRsoDL5XZRE7Yq4ydbpE= Subject key identifier: B5:FF:B9:4C:97:63:72:68:67:D4:58:4D:58:49:B2:9C:3B:E5:6A:39 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 31816FBEFC034A10B0057AEBCF566145EA4BCFDD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 07:40:15 +0000 Manifest this update: Fri 25 Sep 2026 07:35:15 +0000 Manifest next update: Sat 26 Sep 2026 08:19:15 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: HfhJdX5Y0uRA0BrF5P+ncR8v3bHWpqiAU/I86+aLf/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:81:6f:be:fc:03:4a:10:b0:05:7a:eb:cf:56:61:45:ea:4b:cf:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Sep 25 07:35:15 2026 GMT Not After : Sep 26 08:19:15 2026 GMT Subject: CN=B5FFB94C9763726867D4584D5849B29C3BE56A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:02:20:6d:08:36:23:f7:a8:2a:1d:bc:fc: e0:a5:18:b4:58:aa:72:72:b9:a6:df:8b:87:5d:9b: 12:67:fd:14:8b:a6:f6:58:53:39:8a:8d:0b:a9:09: ac:58:bd:c4:36:43:e9:33:e4:63:ee:0f:36:89:30: a1:4d:44:66:a9:b8:8f:8b:71:56:d5:b1:43:a8:1c: d4:80:b4:67:d2:7c:e1:93:de:df:16:a2:60:22:c2: 30:c0:a6:fb:6b:4f:b6:7e:c1:a7:4d:e1:50:95:6f: 2d:18:11:8e:78:22:c4:ca:e1:a7:12:b5:8f:45:61: e9:7c:26:1b:69:48:de:78:c2:4e:e6:a3:be:49:49: 2c:98:93:aa:25:22:08:3e:fa:ad:42:20:51:7d:d1: c4:c9:e8:34:5c:2d:ce:34:3e:72:93:87:4f:9e:70: 9c:c7:e2:ba:5a:44:d1:a6:33:b5:16:2c:ad:ab:7b: a3:95:df:0e:fc:be:7d:a5:89:85:aa:2d:fd:d3:87: cd:bc:76:53:4e:ec:ad:ce:ba:d5:21:17:ed:4b:c3: 84:87:40:39:97:a7:2d:db:40:67:d1:57:32:eb:0a: 1c:5e:4c:1e:28:4c:cf:98:d7:bc:33:bb:71:6e:cf: 3d:2c:86:a0:0a:2e:7d:76:1b:79:e4:3d:ac:de:53: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FF:B9:4C:97:63:72:68:67:D4:58:4D:58:49:B2:9C:3B:E5:6A:39 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:42:e1:ea:6c:0b:a9:70:cb:e3:f4:50:ba:0f:f1:4d:4f:2f: a0:5d:8f:ab:0d:c3:43:32:81:07:4a:9c:a9:f2:b7:c4:f3:db: dc:1e:6c:89:a6:9f:da:28:f4:d1:7b:73:44:44:ff:33:47:3d: c3:f3:32:90:36:01:f6:04:f0:34:15:39:e5:d7:a0:b7:fa:56: 78:c7:07:08:94:82:5e:40:b8:fa:74:d5:7a:5d:7b:8a:76:2a: da:be:a4:b7:52:4e:1a:74:bf:3f:27:bd:26:f8:90:e9:fa:f8: 5c:47:55:53:4d:f8:24:31:a6:5e:39:75:17:4f:e2:90:d3:2a: 9e:18:c0:ff:e3:16:81:5b:f3:29:11:fd:98:21:90:07:57:b1: 19:95:fa:b7:fe:90:bb:88:25:2a:c9:69:82:9b:59:d5:1b:fa: bf:24:2a:45:7c:16:05:72:1d:47:d3:dc:71:25:02:75:ba:65: ad:04:90:19:30:96:24:78:c6:ef:73:8d:d3:87:34:c6:77:87: 0c:89:c2:a1:a6:66:31:98:6d:c0:36:c3:f3:3a:02:68:ed:dd: 46:1f:c5:a1:00:4d:c3:1d:20:d5:6a:f1:b6:9c:d1:24:87:27: 60:11:68:72:57:50:8f:3c:24:8e:51:fe:69:79:86:53:62:df: 37:a9:2a:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYFvvvwDShCwBXrrz1ZhRepLz90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA5MjUwNzM1MTVaFw0yNjA5MjYwODE5MTVaMDMxMTAvBgNV BAMTKEI1RkZCOTRDOTc2MzcyNjg2N0Q0NTg0RDU4NDlCMjlDM0JFNTZBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLAIgbQg2I/eoKh28/OClGLRY qnJyuabfi4ddmxJn/RSLpvZYUzmKjQupCaxYvcQ2Q+kz5GPuDzaJMKFNRGapuI+L cVbVsUOoHNSAtGfSfOGT3t8WomAiwjDApvtrT7Z+wadN4VCVby0YEY54IsTK4acS tY9FYel8JhtpSN54wk7mo75JSSyYk6olIgg++q1CIFF90cTJ6DRcLc40PnKTh0+e cJzH4rpaRNGmM7UWLK2re6OV3w78vn2liYWqLf3Th828dlNO7K3OutUhF+1Lw4SH QDmXpy3bQGfRVzLrChxeTB4oTM+Y17wzu3Fuzz0shqAKLn12G3nkPazeUzizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtf+5TJdjcmhn1FhNWEmynDvlajkwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1C4epsC6lwy+P0ULoP8U1PL6Bdj6sNw0My gQdKnKnyt8Tz29webImmn9oo9NF7c0RE/zNHPcPzMpA2AfYE8DQVOeXXoLf6VnjH BwiUgl5AuPp01Xpde4p2Ktq+pLdSThp0vz8nvSb4kOn6+FxHVVNN+CQxpl45dRdP 4pDTKp4YwP/jFoFb8ykR/ZghkAdXsRmV+rf+kLuIJSrJaYKbWdUb+r8kKkV8FgVy HUfT3HElAnW6Za0EkBkwliR4xu9zjdOHNMZ3hwyJwqGmZjGYbcA2w/M6Amjt3UYf xaEATcMdINVq8bac0SSHJ2ARaHJXUI88JI5R/ml5hlNi3zepKqY= -----END CERTIFICATE-----Generated at Fri Sep 25 23:48:33 2026 by rpki-client