$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: 2f4PxLBAgNSjD96JXf4fFxLrUal1M9FxPcdsRtUY8do= Subject key identifier: 98:49:ED:C4:67:4A:99:92:6C:7B:7A:92:D1:E7:80:9A:17:B2:BF:61 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 7571B79DCB2BD328187DFF3795E89E6E197104C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 06:42:33 +0000 Manifest this update: Sun 15 Nov 2026 06:37:33 +0000 Manifest next update: Mon 16 Nov 2026 07:34:33 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: 36/H7vDi7+9uFt5CQRwQwPhBRXGp/cOLpE82nWd3UqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:71:b7:9d:cb:2b:d3:28:18:7d:ff:37:95:e8:9e:6e:19:71:04:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Nov 15 06:37:33 2026 GMT Not After : Nov 16 07:34:33 2026 GMT Subject: CN=9849EDC4674A99926C7B7A92D1E7809A17B2BF61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:57:cd:aa:0d:19:d2:5c:1b:3e:a3:aa:c6: 91:8e:9a:e9:f7:52:60:b1:06:af:47:cf:8e:6a:e7: 76:59:ec:89:94:bf:ed:7f:8f:7f:df:65:fe:d0:31: 9d:21:67:e9:f9:05:4b:60:ac:ae:76:2a:24:0a:ce: ab:49:b9:07:f9:6a:9d:8a:7b:13:49:20:85:6a:28: 05:34:02:50:a1:f4:43:a2:19:54:24:82:50:a3:3c: d8:b8:2a:31:32:7f:84:bc:61:46:f1:04:8e:75:24: a6:08:60:e8:af:06:6a:bd:a3:0d:1a:78:ef:a7:30: 03:00:cb:49:dc:3c:16:61:2c:0f:61:f7:4f:cf:9d: d0:ff:96:fb:ce:c2:a3:f8:98:4e:b7:55:c7:fb:a6: 3e:91:80:87:a4:45:9f:47:2e:10:71:37:32:da:28: 28:a9:ac:52:b4:2f:f2:3c:85:7b:0f:06:8d:a6:cd: e0:81:8b:65:8f:9c:da:ac:dc:b3:8b:8c:97:0d:93: f5:b3:5a:4c:f8:d1:f9:7c:85:69:3f:88:f6:0a:f8: 2d:dd:3d:9a:b4:e1:12:a1:64:a3:53:14:20:29:4f: 2c:84:ed:75:34:07:44:59:85:9a:f9:bd:ad:f2:97: 5d:45:01:31:9a:55:0c:b1:3e:6e:5c:7d:a1:f4:05: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:49:ED:C4:67:4A:99:92:6C:7B:7A:92:D1:E7:80:9A:17:B2:BF:61 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:57:be:1f:e1:63:08:f6:8b:9b:94:13:4b:cf:59:f2:5b:2e: e1:0b:bc:53:fd:1b:25:10:cc:39:71:70:8c:22:ce:5e:19:76: f9:5d:ca:b8:23:a9:72:1a:29:7a:04:84:e1:30:41:92:92:39: 37:62:11:b9:05:e0:62:c7:2b:a5:20:0e:30:db:77:a6:2f:2b: 03:c5:ba:93:90:fb:51:e3:9b:83:8e:19:58:27:d1:1e:ea:19: c7:11:a1:99:20:ca:d7:34:d0:7b:6a:44:68:91:1a:76:66:66: d9:16:f4:70:45:1f:77:60:de:ea:ec:93:ba:3d:4d:0f:85:ca: cd:47:b5:61:2c:99:4a:54:81:dd:84:ea:49:5a:2c:5e:b7:f5: 6e:ea:fd:1b:3f:e0:85:00:1b:a2:08:38:57:be:60:ed:c8:22: 33:3b:e3:13:aa:9d:7b:0f:45:97:17:f4:b0:df:e7:51:ba:d5: 23:f4:4d:d4:01:28:22:29:e4:e7:16:61:ee:48:bb:55:e7:83: 4b:5f:75:3d:7a:6e:17:a7:34:21:aa:17:8c:73:2c:aa:be:a6: 2f:1a:78:24:e2:f7:31:fc:35:a9:6c:15:9d:20:0c:50:d8:f1: 12:ea:4a:02:5f:85:60:ac:00:4c:dd:9d:1e:bc:58:c5:4a:07: 95:c7:22:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXG3ncsr0ygYff83leiebhlxBMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjExMTUwNjM3MzNaFw0yNjExMTYwNzM0MzNaMDMxMTAvBgNV BAMTKDk4NDlFREM0Njc0QTk5OTI2QzdCN0E5MkQxRTc4MDlBMTdCMkJGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvVfNqg0Z0lwbPqOqxpGOmun3 UmCxBq9Hz45q53ZZ7ImUv+1/j3/fZf7QMZ0hZ+n5BUtgrK52KiQKzqtJuQf5ap2K exNJIIVqKAU0AlCh9EOiGVQkglCjPNi4KjEyf4S8YUbxBI51JKYIYOivBmq9ow0a eO+nMAMAy0ncPBZhLA9h90/PndD/lvvOwqP4mE63Vcf7pj6RgIekRZ9HLhBxNzLa KCiprFK0L/I8hXsPBo2mzeCBi2WPnNqs3LOLjJcNk/WzWkz40fl8hWk/iPYK+C3d PZq04RKhZKNTFCApTyyE7XU0B0RZhZr5va3yl11FATGaVQyxPm5cfaH0BQ0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmEntxGdKmZJse3qS0eeAmheyv2EwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVXvh/hYwj2i5uUE0vPWfJbLuELvFP9GyUQ zDlxcIwizl4ZdvldyrgjqXIaKXoEhOEwQZKSOTdiEbkF4GLHK6UgDjDbd6YvKwPF upOQ+1Hjm4OOGVgn0R7qGccRoZkgytc00HtqRGiRGnZmZtkW9HBFH3dg3ursk7o9 TQ+Fys1HtWEsmUpUgd2E6klaLF639W7q/Rs/4IUAG6IIOFe+YO3IIjM74xOqnXsP RZcX9LDf51G61SP0TdQBKCIp5OcWYe5Iu1Xng0tfdT16bhenNCGqF4xzLKq+pi8a eCTi9zH8NalsFZ0gDFDY8RLqSgJfhWCsAEzdnR68WMVKB5XHIis= -----END CERTIFICATE-----Generated at Sun Nov 15 10:29:16 2026 by rpki-client