$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft File: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft (raw, json) Hash identifier: goKMJUvgzl7/93nQIAEBJ1cOkdyc+Rq4nl8e+2Pzpvs= Subject key identifier: B3:38:30:02:D5:8D:A7:1A:59:35:67:17:26:49:F2:E7:40:29:E8:72 Authority key identifier: 54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 Certificate issuer: /CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Certificate serial: 0CCB90D5AFDC46E7791B3527DA67E459F22C3BBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:42:40 +0000 Manifest this update: Tue 12 May 2026 17:37:40 +0000 Manifest next update: Wed 13 May 2026 18:58:40 +0000 Files and hashes: 1: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl (hash: JUIeEgkYNCsQtMuxKBqbbihGh1+kXqK0bt/mXSYENV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cb:90:d5:af:dc:46:e7:79:1b:35:27:da:67:e4:59:f2:2c:3b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Validity Not Before: May 12 17:37:40 2026 GMT Not After : May 13 18:58:40 2026 GMT Subject: CN=B3383002D58DA71A593567172649F2E74029E872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:d6:da:a8:23:e8:be:da:59:8e:48:b4:48: d1:8a:1d:2d:54:c3:49:3e:6d:21:19:49:72:9d:7b: 4d:40:31:48:5c:f4:16:9e:f2:e4:b8:e9:3e:db:17: b5:02:e3:07:e0:7e:ff:56:49:e6:bd:c1:3f:ec:63: 39:17:b9:ff:41:95:91:a0:95:17:d3:f3:0c:ff:46: cd:bd:c5:cf:8d:c7:da:ae:e3:04:10:80:09:e2:95: 43:74:7e:85:9d:9e:e3:c3:5b:c2:4c:91:30:02:a4: 8a:25:86:fa:31:b5:fa:20:59:26:84:1f:14:d4:ef: 45:ae:87:f7:e8:42:ee:f8:4b:fe:72:18:42:34:ac: 50:b4:53:da:6c:25:00:dd:21:bc:87:49:4e:30:78: a8:a8:ea:4b:29:c6:cf:77:a2:96:78:53:10:f7:ae: 62:cd:37:69:9c:7f:30:da:67:d6:b3:cf:c1:d7:8d: 2c:1f:69:33:37:6c:ba:17:09:c6:8b:50:f5:69:01: db:ce:e7:bd:3a:9d:f9:e7:bf:ab:d5:ad:06:88:fe: 6c:8d:0b:84:95:06:bc:fd:65:d6:90:68:e9:0a:17: 69:ca:47:d6:0f:80:ca:3a:8f:78:e6:91:84:a9:26: 6b:1f:67:68:27:35:1b:10:e1:cb:d5:ca:27:59:85: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:38:30:02:D5:8D:A7:1A:59:35:67:17:26:49:F2:E7:40:29:E8:72 X509v3 Authority Key Identifier: keyid:54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:22:2b:ec:b8:3f:99:97:93:14:2b:92:60:74:f5:82:64:a0: 8e:3d:c6:76:9f:76:f4:b8:32:0e:93:b8:1d:67:46:dd:6f:e6: ba:c8:c5:40:45:ba:ad:0f:10:21:b1:98:f8:f9:4f:d8:c6:71: 9b:c6:83:a4:b2:5e:ac:2a:73:a8:3b:ea:26:ac:ba:fe:a9:65: 3b:4a:87:2b:7a:b4:5e:c1:76:7e:5a:42:1b:70:f1:e7:34:bb: 59:e2:cb:4f:5c:72:8c:5e:3e:f0:bb:13:46:30:ed:c1:07:2e: 57:fb:3c:9b:14:82:b6:90:b8:76:78:e5:1b:74:7f:32:ad:41: 9b:38:18:1a:20:a1:8d:22:61:78:a5:6b:a8:f5:41:40:b9:f5: 19:c7:0a:fa:06:9d:1c:2a:cf:cf:48:18:e5:6c:29:41:c0:40: 59:11:86:8a:f5:9f:88:ef:de:38:4b:ab:2c:01:46:27:df:ab: 3d:ca:c3:b5:d8:47:e4:c6:7e:61:e5:1f:0d:bf:65:cd:9b:46: 1d:f0:49:e3:6c:68:5c:ad:1f:9d:16:d9:f8:77:64:67:08:ea: 9e:3c:40:2a:fd:c5:a8:bf:25:f0:96:6c:29:e1:24:a7:1a:d8: b5:dd:a1:ef:76:a3:12:03:1c:ed:97:ac:fa:8b:7f:71:e6:54: 10:36:54:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMuQ1a/cRud5GzUn2mfkWfIsO70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FG Q0I5RUI4MjAeFw0yNjA1MTIxNzM3NDBaFw0yNjA1MTMxODU4NDBaMDMxMTAvBgNV BAMTKEIzMzgzMDAyRDU4REE3MUE1OTM1NjcxNzI2NDlGMkU3NDAyOUU4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFtbaqCPovtpZjki0SNGKHS1U w0k+bSEZSXKde01AMUhc9Bae8uS46T7bF7UC4wfgfv9WSea9wT/sYzkXuf9BlZGg lRfT8wz/Rs29xc+Nx9qu4wQQgAnilUN0foWdnuPDW8JMkTACpIolhvoxtfogWSaE HxTU70Wuh/foQu74S/5yGEI0rFC0U9psJQDdIbyHSU4weKio6kspxs93opZ4UxD3 rmLNN2mcfzDaZ9azz8HXjSwfaTM3bLoXCcaLUPVpAdvO5706nfnnv6vVrQaI/myN C4SVBrz9ZdaQaOkKF2nKR9YPgMo6j3jmkYSpJmsfZ2gnNRsQ4cvVyidZhckzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUszgwAtWNpxpZNWcXJkny50Ap6HIwHwYDVR0j BBgwFoAUVDUi0XY3WxuZvdkW57PZevy564IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmZTE2M2MtMTRkNS00ZTMxLWFjMjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3 NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FGQ0I5RUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDM1MjJEMTc2Mzc1QjFCOTlCREQ5MTZFN0IzRDk3QUZDQjlF QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5 N0FGQ0I5RUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMiK+y4P5mXkxQrkmB09YJkoI49xnafdvS4 Mg6TuB1nRt1v5rrIxUBFuq0PECGxmPj5T9jGcZvGg6SyXqwqc6g76iasuv6pZTtK hyt6tF7Bdn5aQhtw8ec0u1niy09ccoxePvC7E0Yw7cEHLlf7PJsUgraQuHZ45Rt0 fzKtQZs4GBogoY0iYXila6j1QUC59RnHCvoGnRwqz89IGOVsKUHAQFkRhor1n4jv 3jhLqywBRiffqz3Kw7XYR+TGfmHlHw2/Zc2bRh3wSeNsaFytH50W2fh3ZGcI6p48 QCr9xai/JfCWbCnhJKca2LXdoe92oxIDHO2XrPqLf3HmVBA2VHw= -----END CERTIFICATE-----Generated at Wed May 13 02:58:54 2026 by rpki-client