$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: 3mC5IZjDstCX92b5qovZfWJLDP+b0hW07ZU9wpWWue4= Subject key identifier: 35:11:4D:A8:F2:CD:3C:88:33:07:AD:FB:9C:61:1E:77:81:24:6D:CE Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 751918ADB213004F9C81B05F1FBB87E72319F43E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 11:03:33 +0000 Manifest this update: Thu 23 Jul 2026 10:58:33 +0000 Manifest next update: Fri 24 Jul 2026 14:45:33 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: 52x5ENPxeQT25A+9x1Jbhmw1RGOOFnp4MMgpWSYYTuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:19:18:ad:b2:13:00:4f:9c:81:b0:5f:1f:bb:87:e7:23:19:f4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Jul 23 10:58:33 2026 GMT Not After : Jul 24 14:45:33 2026 GMT Subject: CN=35114DA8F2CD3C883307ADFB9C611E7781246DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:9a:07:ac:b7:d5:47:01:5a:19:4f:f0:7c: f0:b8:95:87:1d:d3:05:27:32:d0:84:f1:9d:71:5b: 3f:b5:5e:47:fb:6e:ff:b7:2b:e1:26:65:b4:78:2d: 33:cc:ab:1d:a3:dd:f4:3c:ec:c9:27:d5:a5:e3:85: 84:36:f4:1f:af:50:6e:65:5e:65:1b:3d:b4:f8:4c: 0f:8d:ee:d7:e5:05:7e:09:04:78:03:03:0d:df:4a: 65:65:f7:dc:7b:30:8f:e0:75:ce:81:74:fb:29:ea: bb:db:a5:0e:29:63:c0:9c:f4:22:a5:5a:ec:df:53: ef:ac:f0:7e:ac:ee:c2:f0:a4:20:ac:f4:a1:b5:86: 4f:78:a7:01:ef:51:e4:ab:97:6b:cb:69:93:1c:59: 4c:99:5e:de:a3:5c:8a:21:8e:22:53:42:3a:ef:8a: 1b:8d:82:16:94:4b:3e:5b:a9:70:7c:b6:7b:38:e6: 3f:e3:a6:0e:c6:99:c5:e3:47:f6:81:60:33:1c:44: d5:9f:da:96:de:36:9b:71:2e:e0:87:93:9e:29:f1: 30:e5:e6:73:0c:33:1b:83:b2:fa:ab:63:24:0c:9e: 30:85:9e:99:10:1b:30:87:04:db:ab:83:92:40:1b: 56:fb:58:76:d9:e0:d7:34:a8:3c:ba:81:54:de:3b: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:11:4D:A8:F2:CD:3C:88:33:07:AD:FB:9C:61:1E:77:81:24:6D:CE X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8c:76:e9:f6:a2:56:0d:03:76:85:99:bf:08:a7:b3:ce:fd: 1f:20:57:75:5e:76:9b:b2:fe:a9:a6:95:54:d4:d5:f4:1b:1b: 8b:5f:4e:66:b5:96:96:7e:17:b5:bc:db:cd:02:ff:96:a8:a9: 0c:01:32:f1:8e:79:b8:8c:19:95:44:f5:c8:a6:38:d0:b8:26: f9:eb:ba:bb:11:d4:bd:c8:27:46:b5:e3:92:cc:95:60:e0:8d: 3a:9d:66:a6:bd:49:a1:41:bc:ca:a8:31:44:04:b2:16:8b:46: d8:8e:0f:b3:2e:84:ff:d7:0a:b3:40:d3:07:7d:1d:42:52:e1: 04:51:9c:b2:0c:f2:c4:97:f4:f8:13:2f:75:e9:56:5f:d5:74: 20:9c:84:b8:76:1d:5e:9b:f4:76:60:3f:99:a6:e4:86:5b:af: 1f:bf:34:05:66:03:ab:66:02:1c:a1:ff:8a:ce:63:0a:ef:cb: a4:de:12:f4:ce:b1:56:98:d0:89:5e:87:bf:99:40:6d:62:ea: e6:ab:e3:e3:13:d7:53:f0:fb:f2:68:c5:b5:67:89:1f:72:1e: eb:29:b6:b5:20:33:b3:b1:9f:9a:98:9e:fd:bb:9d:6d:98:e5: d7:1b:04:c3:18:55:5a:8a:0b:2e:48:41:c2:61:ea:dd:bb:8f: c1:84:41:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRkYrbITAE+cgbBfH7uH5yMZ9D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA3MjMxMDU4MzNaFw0yNjA3MjQxNDQ1MzNaMDMxMTAvBgNV BAMTKDM1MTE0REE4RjJDRDNDODgzMzA3QURGQjlDNjExRTc3ODEyNDZEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndpoHrLfVRwFaGU/wfPC4lYcd 0wUnMtCE8Z1xWz+1Xkf7bv+3K+EmZbR4LTPMqx2j3fQ87Mkn1aXjhYQ29B+vUG5l XmUbPbT4TA+N7tflBX4JBHgDAw3fSmVl99x7MI/gdc6BdPsp6rvbpQ4pY8Cc9CKl WuzfU++s8H6s7sLwpCCs9KG1hk94pwHvUeSrl2vLaZMcWUyZXt6jXIohjiJTQjrv ihuNghaUSz5bqXB8tns45j/jpg7GmcXjR/aBYDMcRNWf2pbeNptxLuCHk54p8TDl 5nMMMxuDsvqrYyQMnjCFnpkQGzCHBNurg5JAG1b7WHbZ4Nc0qDy6gVTeO8ybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRFNqPLNPIgzB637nGEed4Ekbc4wHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuMdun2olYNA3aFmb8Ip7PO/R8gV3Vedpuy /qmmlVTU1fQbG4tfTma1lpZ+F7W8280C/5aoqQwBMvGOebiMGZVE9cimONC4Jvnr ursR1L3IJ0a145LMlWDgjTqdZqa9SaFBvMqoMUQEshaLRtiOD7MuhP/XCrNA0wd9 HUJS4QRRnLIM8sSX9PgTL3XpVl/VdCCchLh2HV6b9HZgP5mm5IZbrx+/NAVmA6tm Ahyh/4rOYwrvy6TeEvTOsVaY0Ileh7+ZQG1i6uar4+MT11Pw+/JoxbVniR9yHusp trUgM7Oxn5qYnv27nW2Y5dcbBMMYVVqKCy5IQcJh6t27j8GEQSE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:16:17 2026 by rpki-client