$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft File: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft (raw, json) Hash identifier: bTTmaD+ZBl5oI40GkiD0XrlZSfI3VxJL8sBm9LBsQdo= Subject key identifier: F9:08:0E:27:6D:BB:C4:19:D9:3C:EC:5A:AE:33:C2:94:FB:18:3A:E6 Authority key identifier: 54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 Certificate issuer: /CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Certificate serial: 4B160971AB66CDCE6F7F924FF9807550CBA8A8B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 12:20:11 +0000 Manifest this update: Thu 23 Jul 2026 12:15:11 +0000 Manifest next update: Fri 24 Jul 2026 14:08:11 +0000 Files and hashes: 1: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl (hash: PmqWWRode6MAiWC31OIHJ6n9mDcuzsVC3xxRCLIXJXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:16:09:71:ab:66:cd:ce:6f:7f:92:4f:f9:80:75:50:cb:a8:a8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Validity Not Before: Jul 23 12:15:11 2026 GMT Not After : Jul 24 14:08:11 2026 GMT Subject: CN=F9080E276DBBC419D93CEC5AAE33C294FB183AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:6b:c8:dc:f8:8d:85:1e:66:b8:c8:63:ec: 8f:5b:c4:2f:b3:fd:f4:ff:83:da:c8:f7:c6:67:12: cf:b5:fb:21:05:27:d5:58:ca:c6:dd:fa:83:97:8c: 84:d8:df:a2:5e:2b:41:76:01:1c:d2:c3:18:2b:63: 2f:7c:88:6b:40:17:b7:ac:45:9c:cc:ed:dc:56:3d: 29:c0:9e:8f:de:30:81:4a:ff:df:fd:70:f1:72:18: a9:70:62:d6:9f:14:2a:f4:f4:28:96:54:be:cb:17: f4:6f:ca:b6:c9:81:5b:9e:9a:3e:d7:5e:98:2c:58: ae:b4:a5:2d:12:87:be:c3:cd:20:10:c9:3d:4c:19: d2:13:b1:65:b5:84:52:37:5e:52:03:0e:0d:b6:ac: 9d:c1:6f:21:55:db:b1:db:de:ac:af:b5:7e:fc:41: 95:d3:75:c0:47:22:4c:88:bd:7f:bd:e4:63:d7:e1: dc:bb:f6:7b:fe:ec:5b:9f:c7:89:7e:9d:d9:99:17: de:7a:f5:c5:16:c4:a9:b6:6f:67:67:83:d4:06:d7: 17:4d:dd:8c:bc:fa:38:3e:de:05:a2:c3:fe:61:50: 7a:71:28:02:b6:86:f8:02:1c:71:5d:a6:26:8f:db: 49:5a:72:07:40:1b:7a:f8:ae:3a:9f:ec:a9:d6:f4: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:08:0E:27:6D:BB:C4:19:D9:3C:EC:5A:AE:33:C2:94:FB:18:3A:E6 X509v3 Authority Key Identifier: keyid:54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:11:37:b7:c3:98:6e:a7:af:3b:71:d6:f6:b3:77:fa:1e:ea: 37:94:e9:9e:ad:ce:c9:53:6f:ff:60:e2:24:7a:34:cd:f0:72: e7:2c:0d:f1:31:d0:e9:1f:3a:92:84:75:d0:b5:3f:55:a6:74: be:96:d8:83:1e:5d:93:bc:63:f8:18:cc:ec:a3:e9:5d:cb:8c: 0c:14:d9:6d:51:36:45:67:8a:fb:ac:a6:ad:4d:6d:96:e6:10: 71:99:27:7d:68:2d:cb:a9:06:c8:83:ef:f7:7f:44:a6:76:97: f3:11:b4:51:81:52:06:08:98:7d:e1:b9:77:70:f9:01:e5:41: b1:7b:d8:4f:ee:84:0c:ae:e0:70:db:ea:d8:0b:2d:ac:a8:79: e1:d8:6b:fd:c3:36:9b:cd:5c:76:3e:23:7d:ba:2f:ad:32:90: 51:78:38:56:4c:bd:8c:e1:cb:91:00:c8:c8:a0:6b:b1:7a:48: 29:c6:3a:fe:c5:b6:0c:f3:f1:ca:5d:5b:4c:79:e3:70:3b:e1: 9a:08:50:7d:69:22:99:1d:55:61:bf:4e:29:49:ec:96:9b:19: 43:01:59:7a:e9:9a:ed:8d:de:4c:86:35:65:45:6b:c1:09:84: 60:13:7c:54:e0:0f:bf:29:e2:c0:60:04:11:2e:d8:02:8f:29: 97:ce:86:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxYJcatmzc5vf5JP+YB1UMuoqLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FG Q0I5RUI4MjAeFw0yNjA3MjMxMjE1MTFaFw0yNjA3MjQxNDA4MTFaMDMxMTAvBgNV BAMTKEY5MDgwRTI3NkRCQkM0MTlEOTNDRUM1QUFFMzNDMjk0RkIxODNBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrWvI3PiNhR5muMhj7I9bxC+z /fT/g9rI98ZnEs+1+yEFJ9VYysbd+oOXjITY36JeK0F2ARzSwxgrYy98iGtAF7es RZzM7dxWPSnAno/eMIFK/9/9cPFyGKlwYtafFCr09CiWVL7LF/RvyrbJgVuemj7X XpgsWK60pS0Sh77DzSAQyT1MGdITsWW1hFI3XlIDDg22rJ3BbyFV27Hb3qyvtX78 QZXTdcBHIkyIvX+95GPX4dy79nv+7Fufx4l+ndmZF9569cUWxKm2b2dng9QG1xdN 3Yy8+jg+3gWiw/5hUHpxKAK2hvgCHHFdpiaP20lacgdAG3r4rjqf7KnW9FK/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+QgOJ227xBnZPOxarjPClPsYOuYwHwYDVR0j BBgwFoAUVDUi0XY3WxuZvdkW57PZevy564IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmZTE2M2MtMTRkNS00ZTMxLWFjMjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3 NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FGQ0I5RUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDM1MjJEMTc2Mzc1QjFCOTlCREQ5MTZFN0IzRDk3QUZDQjlF QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5 N0FGQ0I5RUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgRN7fDmG6nrztx1vazd/oe6jeU6Z6tzslT b/9g4iR6NM3wcucsDfEx0OkfOpKEddC1P1WmdL6W2IMeXZO8Y/gYzOyj6V3LjAwU 2W1RNkVnivuspq1NbZbmEHGZJ31oLcupBsiD7/d/RKZ2l/MRtFGBUgYImH3huXdw +QHlQbF72E/uhAyu4HDb6tgLLayoeeHYa/3DNpvNXHY+I326L60ykFF4OFZMvYzh y5EAyMiga7F6SCnGOv7Ftgzz8cpdW0x543A74ZoIUH1pIpkdVWG/TilJ7JabGUMB WXrpmu2N3kyGNWVFa8EJhGATfFTgD78p4sBgBBEu2AKPKZfOhsc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:08:12 2026 by rpki-client