$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: EMBcID91hSc8NcpZs0oYcaoOJn44iqSxfynzm54tBTk= Subject key identifier: A5:E6:A2:8D:B0:37:2F:A5:C0:0C:B5:FC:53:02:B0:86:B9:E5:0A:03 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: C57931C63034463366D67D650A9D05C82BD81A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:23:40 +0000 Manifest this update: Tue 12 May 2026 18:18:40 +0000 Manifest next update: Wed 13 May 2026 19:06:40 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: o5cl51Te0UUU54NZA9+YrvNCR/3QOT6Eo3J+MH3zuE0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c5:79:31:c6:30:34:46:33:66:d6:7d:65:0a:9d:05:c8:2b:d8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: May 12 18:18:40 2026 GMT Not After : May 13 19:06:40 2026 GMT Subject: CN=A5E6A28DB0372FA5C00CB5FC5302B086B9E50A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:30:7e:d3:54:3c:12:00:0d:58:9d:86:d9:20: 1e:50:ba:61:cf:69:8a:f1:05:0b:9f:3f:5f:f6:a3: c5:bb:48:cf:f0:da:77:93:21:6e:c0:15:67:04:26: e3:c0:52:d2:7e:6b:04:9f:62:95:82:f8:56:28:e1: f5:df:22:cb:8c:4f:f7:10:eb:43:fd:17:c4:f7:95: b4:14:fa:49:02:ce:57:27:3b:f7:05:33:11:f8:dc: 28:b7:d1:67:33:59:e7:68:ee:ae:79:43:f6:5c:2d: 92:a9:df:4b:d5:ef:47:f6:54:2e:be:9c:c2:26:31: 47:7e:9f:3c:3c:5d:d7:53:0d:2c:dd:9f:d6:ee:35: 77:68:d4:74:27:39:25:1c:1c:b7:a1:7d:68:e4:db: cc:87:0b:9a:53:0a:6f:d0:0b:64:b7:ff:53:91:b1: a6:fe:28:11:1d:ea:de:37:94:ee:d6:6f:e1:ca:95: 9a:65:2c:b1:a3:98:66:61:0b:75:35:11:f8:fd:3f: 33:cd:7e:59:e3:17:8a:71:08:ee:59:5e:5f:35:5a: e8:08:b6:df:28:61:20:e2:31:47:30:98:7f:42:c2: 2d:56:ab:07:0e:e9:ef:c7:c2:2d:ca:1e:ea:9a:12: b3:75:79:c1:b3:89:4b:2c:0c:ac:26:99:61:8f:f5: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E6:A2:8D:B0:37:2F:A5:C0:0C:B5:FC:53:02:B0:86:B9:E5:0A:03 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9b:31:49:fb:ff:a7:44:1d:64:55:60:2b:cd:7f:23:1a:58: 89:a7:ab:a9:76:a2:a5:b5:fa:b1:e1:60:fa:54:1b:26:f1:05: f1:97:b0:f8:d1:03:49:53:3d:1e:6f:31:e6:2c:e3:15:d6:e6: 17:41:eb:bc:9e:c9:ee:62:b5:8f:41:66:35:af:31:bd:b5:6d: e2:3a:1c:75:5f:56:18:a8:b8:94:d7:0c:77:37:42:35:66:ad: 57:71:d6:b8:1b:a7:81:44:cd:b0:37:f1:36:3d:76:c4:99:c1: c0:88:96:c0:21:fc:10:bb:01:aa:70:a4:72:f3:b5:14:6e:6a: 0a:1e:d1:4c:bd:fd:f0:7c:6c:f8:a7:d2:cb:06:6d:a6:46:13: 58:20:48:8c:1e:0f:12:6f:95:34:44:d7:1b:ca:53:3c:69:0d: 55:17:e1:6d:51:9c:c0:02:52:3a:b3:7f:5f:cd:35:71:ea:43: f5:98:62:0c:8f:d8:c3:48:b6:8e:1a:c4:65:c1:80:44:8f:6f: d5:b4:55:c3:e0:87:0c:73:e0:7b:81:07:6b:ae:f8:70:e9:fd: 19:38:ba:6e:aa:ae:78:69:c0:5a:f0:d7:aa:1b:17:a6:d5:a2: 5d:4e:4c:7e:97:39:62:07:86:b9:19:3c:1c:f9:ad:8a:30:e1: f0:a7:0e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMV5McYwNEYzZtZ9ZQqdBcgr2BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA1MTIxODE4NDBaFw0yNjA1MTMxOTA2NDBaMDMxMTAvBgNV BAMTKEE1RTZBMjhEQjAzNzJGQTVDMDBDQjVGQzUzMDJCMDg2QjlFNTBBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFMH7TVDwSAA1YnYbZIB5QumHP aYrxBQufP1/2o8W7SM/w2neTIW7AFWcEJuPAUtJ+awSfYpWC+FYo4fXfIsuMT/cQ 60P9F8T3lbQU+kkCzlcnO/cFMxH43Ci30WczWedo7q55Q/ZcLZKp30vV70f2VC6+ nMImMUd+nzw8XddTDSzdn9buNXdo1HQnOSUcHLehfWjk28yHC5pTCm/QC2S3/1OR sab+KBEd6t43lO7Wb+HKlZplLLGjmGZhC3U1Efj9PzPNflnjF4pxCO5ZXl81WugI tt8oYSDiMUcwmH9Cwi1WqwcO6e/Hwi3KHuqaErN1ecGziUssDKwmmWGP9ZonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpeaijbA3L6XADLX8UwKwhrnlCgMwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIabMUn7/6dEHWRVYCvNfyMaWImnq6l2oqW1 +rHhYPpUGybxBfGXsPjRA0lTPR5vMeYs4xXW5hdB67yeye5itY9BZjWvMb21beI6 HHVfVhiouJTXDHc3QjVmrVdx1rgbp4FEzbA38TY9dsSZwcCIlsAh/BC7AapwpHLz tRRuagoe0Uy9/fB8bPin0ssGbaZGE1ggSIweDxJvlTRE1xvKUzxpDVUX4W1RnMAC Ujqzf1/NNXHqQ/WYYgyP2MNIto4axGXBgESPb9W0VcPghwxz4HuBB2uu+HDp/Rk4 um6qrnhpwFrw16obF6bVol1OTH6XOWIHhrkZPBz5rYow4fCnDv4= -----END CERTIFICATE-----Generated at Wed May 13 01:44:37 2026 by rpki-client