$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft File: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft (raw, json) Hash identifier: Mq8ATYrS+Uk0LQitZLd9GEOrWtNEfIjb/QBfXyj0tnA= Subject key identifier: 63:C3:44:2C:97:85:14:CB:5F:07:62:91:1E:FF:46:33:93:D6:D8:16 Authority key identifier: 54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 Certificate issuer: /CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Certificate serial: 2510B1F1FE70299234F9C2D75E2E75B1795EE51A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 15:29:32 +0000 Manifest this update: Fri 25 Sep 2026 15:24:32 +0000 Manifest next update: Sat 26 Sep 2026 17:29:32 +0000 Files and hashes: 1: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl (hash: ++D7E0dRwT3WbdIqzz0+sGE9IDmuVrzPeZh9ORzsxBY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:10:b1:f1:fe:70:29:92:34:f9:c2:d7:5e:2e:75:b1:79:5e:e5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Validity Not Before: Sep 25 15:24:32 2026 GMT Not After : Sep 26 17:29:32 2026 GMT Subject: CN=63C3442C978514CB5F0762911EFF463393D6D816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:a6:96:aa:e6:3a:ad:ac:16:39:34:49:40: d5:15:a8:86:a8:8f:7b:a0:36:64:19:52:f3:e9:0d: 70:79:db:a4:c9:6d:78:9c:cf:25:69:a5:17:56:0a: f9:e3:f8:90:89:e5:e1:61:e3:e5:9e:ff:03:2f:b2: b1:1d:5a:c6:7b:fa:c8:bd:f8:4e:7f:8e:9d:50:ec: dd:1e:1d:46:71:71:24:54:d9:9f:0a:7d:83:ce:18: f0:8f:99:a8:b9:6c:31:e1:d0:b2:8a:1a:32:7c:cd: 1b:3d:60:3f:6b:cc:d1:56:bb:90:e8:e1:e3:72:e2: 79:c5:be:c0:00:3f:06:c6:16:18:45:08:c1:23:22: f2:69:2a:9e:0a:02:b1:31:ad:5c:14:13:45:b6:c0: 23:a7:32:11:3f:93:a0:02:6a:b5:20:59:0f:4a:9e: 2c:52:d5:ea:4f:75:6c:12:2a:e7:0a:9c:73:bf:18: ff:2f:73:5d:a0:f9:f0:1d:9b:93:79:ca:f8:8c:c9: 69:77:2d:36:09:c5:0b:c2:02:e3:78:e9:57:60:8a: fe:ae:de:ed:03:f8:25:49:ff:8b:6f:03:52:4c:d5: 58:2f:dd:a4:5f:bc:97:d3:f3:af:4a:c3:7e:4f:5b: 56:ef:47:e5:ad:30:1d:47:94:b1:f5:7c:9a:9f:13: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C3:44:2C:97:85:14:CB:5F:07:62:91:1E:FF:46:33:93:D6:D8:16 X509v3 Authority Key Identifier: keyid:54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f5:89:a9:96:e5:51:6d:28:77:b2:4d:79:cf:60:ba:d8:47: 6a:c1:4c:0d:0a:3e:3b:d2:ea:44:5f:e6:0d:e9:1f:6b:2e:f3: ec:3d:ec:83:03:6b:5b:22:7b:b2:77:53:db:59:87:ac:91:3a: c6:aa:79:3d:d7:5b:42:11:5a:3d:d9:76:1f:f5:1e:cc:1a:15: 4b:9d:8f:70:d4:4f:8d:ea:94:c9:1f:53:7b:69:23:2f:8d:b2: 23:7a:df:81:1f:e4:3c:f1:42:eb:b4:68:2f:c7:be:ee:a1:3d: f8:57:41:a7:f6:34:ff:52:89:a9:34:89:6d:2a:f9:0c:e2:56: e7:43:46:9c:65:93:99:9b:92:f3:9b:32:fc:a7:cf:13:4d:05: 78:86:e0:28:d1:fb:8e:07:74:20:70:9e:a9:6b:82:74:13:f9: 41:5f:e9:23:3c:db:a6:8f:de:77:95:9f:70:b9:da:c3:79:d8: 53:79:f7:0e:eb:85:46:1f:c3:b2:99:7e:fb:8c:86:d9:46:ef: 2a:41:8c:4a:97:b2:8d:66:49:21:58:d9:a2:e9:03:84:43:ed: 91:8e:93:25:50:7c:09:ea:7a:55:63:57:c5:a5:89:2e:0e:f7: ea:3e:bd:29:5f:16:99:8f:83:97:bb:5f:85:71:34:b2:14:c2: d3:d3:0d:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRCx8f5wKZI0+cLXXi51sXle5RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FG Q0I5RUI4MjAeFw0yNjA5MjUxNTI0MzJaFw0yNjA5MjYxNzI5MzJaMDMxMTAvBgNV BAMTKDYzQzM0NDJDOTc4NTE0Q0I1RjA3NjI5MTFFRkY0NjMzOTNENkQ4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zaaWquY6rawWOTRJQNUVqIao j3ugNmQZUvPpDXB526TJbXiczyVppRdWCvnj+JCJ5eFh4+We/wMvsrEdWsZ7+si9 +E5/jp1Q7N0eHUZxcSRU2Z8KfYPOGPCPmai5bDHh0LKKGjJ8zRs9YD9rzNFWu5Do 4eNy4nnFvsAAPwbGFhhFCMEjIvJpKp4KArExrVwUE0W2wCOnMhE/k6ACarUgWQ9K nixS1epPdWwSKucKnHO/GP8vc12g+fAdm5N5yviMyWl3LTYJxQvCAuN46Vdgiv6u 3u0D+CVJ/4tvA1JM1Vgv3aRfvJfT869Kw35PW1bvR+WtMB1HlLH1fJqfEzhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8NELJeFFMtfB2KRHv9GM5PW2BYwHwYDVR0j BBgwFoAUVDUi0XY3WxuZvdkW57PZevy564IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmZTE2M2MtMTRkNS00ZTMxLWFjMjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3 NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FGQ0I5RUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDM1MjJEMTc2Mzc1QjFCOTlCREQ5MTZFN0IzRDk3QUZDQjlF QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5 N0FGQ0I5RUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE71iamW5VFtKHeyTXnPYLrYR2rBTA0KPjvS 6kRf5g3pH2su8+w97IMDa1sie7J3U9tZh6yROsaqeT3XW0IRWj3Zdh/1HswaFUud j3DUT43qlMkfU3tpIy+NsiN634Ef5DzxQuu0aC/Hvu6hPfhXQaf2NP9Siak0iW0q +QziVudDRpxlk5mbkvObMvynzxNNBXiG4CjR+44HdCBwnqlrgnQT+UFf6SM826aP 3neVn3C52sN52FN59w7rhUYfw7KZfvuMhtlG7ypBjEqXso1mSSFY2aLpA4RD7ZGO kyVQfAnqelVjV8WliS4O9+o+vSlfFpmPg5e7X4VxNLIUwtPTDbw= -----END CERTIFICATE-----Generated at Sat Sep 26 11:38:37 2026 by rpki-client