$ rpki-client -vvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json) Hash identifier: nr+Xaz8ls5rn7JB2k/o3mNv1/mViDmoVSn5U1c4IGXM= Subject key identifier: 0E:5B:A5:12:D7:3D:6C:E2:5F:F7:FB:29:C0:6F:41:F3:92:6E:C7:CE Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 Certificate issuer: /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Certificate serial: 5A4355D3A9F634F234B09E5B0B3358E0C8637347 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:37:29 +0000 Manifest this update: Fri 24 Jul 2026 02:32:29 +0000 Manifest next update: Sat 25 Jul 2026 04:52:29 +0000 Files and hashes: 1: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: Sal+NAIalDwK7c2dCWacqkac4WNyl3Er5X8Eg4+Rx3E=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:43:55:d3:a9:f6:34:f2:34:b0:9e:5b:0b:33:58:e0:c8:63:73:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Validity Not Before: Jul 24 02:32:29 2026 GMT Not After : Jul 25 04:52:29 2026 GMT Subject: CN=0E5BA512D73D6CE25FF7FB29C06F41F3926EC7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b7:9a:60:b3:0f:ef:bd:9d:38:fe:db:56:9a: 41:d0:43:66:9a:28:71:16:ba:ee:d1:2b:96:04:ff: fb:0e:b7:3b:0f:50:5c:0c:b1:3f:04:8e:c7:7e:65: 0d:10:1c:b1:ae:de:d2:62:cc:f0:0e:3c:39:4d:bb: e0:be:a8:fe:ce:ab:8b:7e:be:50:69:7b:3c:f2:a3: 25:6c:af:6a:7b:45:75:cc:24:d2:b5:e1:36:bc:9e: a3:4a:98:43:c7:15:d5:93:14:9b:fa:13:06:7c:4f: e9:4a:9e:79:dd:81:4c:82:13:02:2b:37:50:a2:3c: 16:22:3b:a5:d5:05:5d:8b:89:a6:cf:c7:c6:4e:8f: 8d:33:2d:8a:ce:cd:eb:d6:6d:3c:cb:28:17:14:a0: 1b:75:3f:80:12:a6:3e:75:56:02:23:0c:c0:2a:9d: c7:da:4b:48:a0:56:80:4b:78:fe:77:bc:fd:d5:57: 68:88:6f:f0:5d:13:85:8a:ea:dc:d7:6d:84:9d:1d: 6c:dc:85:07:7b:07:10:ac:a5:1b:31:6b:0d:44:6e: 3d:d1:77:a6:0e:22:30:c8:df:48:11:d1:0e:1f:2d: 75:45:92:d6:e5:17:db:88:2f:f2:ea:f9:58:16:c7: e5:ba:10:40:27:10:10:f0:e2:fc:11:3b:09:b1:0f: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5B:A5:12:D7:3D:6C:E2:5F:F7:FB:29:C0:6F:41:F3:92:6E:C7:CE X509v3 Authority Key Identifier: keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:34:b9:34:cb:6e:46:3f:dd:41:2c:c7:84:f3:07:bd:17:b7: bc:19:4a:63:ce:7b:2b:1b:12:fb:e2:b2:ea:b5:f0:1d:01:0a: 9a:a1:f0:6a:a6:b4:f3:d0:c4:11:c4:b8:d4:b4:98:cf:47:3b: 37:c3:f5:93:53:5d:bc:6b:67:0d:15:9b:09:77:a0:05:77:10: 01:3c:4b:01:55:4e:fc:9a:56:e0:5b:f2:da:a6:e1:94:85:c1: 4a:5a:53:69:90:c0:cd:86:2e:48:10:b0:d1:76:83:0a:d3:dc: ad:5c:7e:5e:ad:7d:92:f2:f3:57:36:21:b7:27:ac:31:2a:93: e4:82:ad:0c:93:f2:84:1f:c5:c5:32:ad:e2:8e:5b:d9:29:93: 33:d7:68:c0:26:de:f9:9d:2b:3a:92:ec:44:fb:a9:2d:8f:bd: cb:5d:36:f7:2b:ce:56:6e:74:58:e2:28:06:e7:10:40:8e:c3: 77:4a:44:9d:58:ce:04:e8:0f:fa:35:71:4b:f9:49:1c:d6:af: 98:53:b7:47:ca:f2:4c:66:bd:57:57:07:61:9f:bb:86:77:23: fb:fa:d4:c4:aa:00:8f:96:f1:ab:cc:5e:c5:46:37:35:2e:49: 08:17:8b:a6:9a:5b:16:91:ec:51:c6:84:af:a0:07:3a:98:cf: 10:de:22:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkNV06n2NPI0sJ5bCzNY4Mhjc0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVD NEEyRTk1MTAeFw0yNjA3MjQwMjMyMjlaFw0yNjA3MjUwNDUyMjlaMDMxMTAvBgNV BAMTKDBFNUJBNTEyRDczRDZDRTI1RkY3RkIyOUMwNkY0MUYzOTI2RUM3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpt5pgsw/vvZ04/ttWmkHQQ2aa KHEWuu7RK5YE//sOtzsPUFwMsT8Ejsd+ZQ0QHLGu3tJizPAOPDlNu+C+qP7Oq4t+ vlBpezzyoyVsr2p7RXXMJNK14Ta8nqNKmEPHFdWTFJv6EwZ8T+lKnnndgUyCEwIr N1CiPBYiO6XVBV2LiabPx8ZOj40zLYrOzevWbTzLKBcUoBt1P4ASpj51VgIjDMAq ncfaS0igVoBLeP53vP3VV2iIb/BdE4WK6tzXbYSdHWzchQd7BxCspRsxaw1Ebj3R d6YOIjDI30gR0Q4fLXVFktblF9uIL/Lq+VgWx+W6EEAnEBDw4vwROwmxD+9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDlulEtc9bOJf9/spwG9B85Jux84wHwYDVR0j BBgwFoAUVEwgpvxjT7Zf6RKfOIOeNcSi6VEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM3MWRiOWItN2M0MC00OTY2LTk5MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZG QzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVDNEEyRTk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDRDMjBBNkZDNjM0RkI2NUZFOTEyOUYzODgzOUUzNUM0QTJF OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlF MzVDNEEyRTk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABM0uTTLbkY/3UEsx4TzB70Xt7wZSmPOeysb Evvisuq18B0BCpqh8GqmtPPQxBHEuNS0mM9HOzfD9ZNTXbxrZw0Vmwl3oAV3EAE8 SwFVTvyaVuBb8tqm4ZSFwUpaU2mQwM2GLkgQsNF2gwrT3K1cfl6tfZLy81c2Ibcn rDEqk+SCrQyT8oQfxcUyreKOW9kpkzPXaMAm3vmdKzqS7ET7qS2PvctdNvcrzlZu dFjiKAbnEECOw3dKRJ1YzgToD/o1cUv5SRzWr5hTt0fK8kxmvVdXB2Gfu4Z3I/v6 1MSqAI+W8avMXsVGNzUuSQgXi6aaWxaR7FHGhK+gBzqYzxDeIjY= -----END CERTIFICATE-----Generated at Fri Jul 24 06:43:47 2026 by rpki-client