$ rpki-client -vvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json) Hash identifier: IqE95/9aZqg/isPpXvQIsfKA9KTr2Hn37EK6LRf7Qts= Subject key identifier: C7:C3:84:B6:69:74:F2:29:58:62:91:CB:A8:61:4C:FD:F0:D5:FE:21 Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 Certificate issuer: /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Certificate serial: 09AB2BC0804075787F380773DCA51BBB29B5AC2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:32:21 +0000 Manifest this update: Tue 12 May 2026 17:27:21 +0000 Manifest next update: Wed 13 May 2026 17:52:21 +0000 Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=) 2: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: DY3ZVmWMR0JghX/6AC7R/FDFa5+6pPplARd9KInJtO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ab:2b:c0:80:40:75:78:7f:38:07:73:dc:a5:1b:bb:29:b5:ac:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Validity Not Before: May 12 17:27:21 2026 GMT Not After : May 13 17:52:21 2026 GMT Subject: CN=C7C384B66974F229586291CBA8614CFDF0D5FE21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:d5:97:77:11:df:3b:7a:56:72:2e:1a:8c: 61:79:a9:c1:ab:16:3c:2e:d4:62:f0:a8:04:c6:e3: 13:2f:f1:a2:73:3b:58:df:d2:99:1c:d5:f9:8b:d8: 84:b8:90:90:00:6c:11:eb:c1:1c:1e:3a:c6:79:37: f0:6f:62:30:65:75:2d:aa:5f:5b:7c:a0:d9:64:af: 0d:24:3d:bf:39:2e:4b:4c:83:2a:44:39:44:25:81: 19:9f:2e:1c:1c:b8:55:a9:0a:6a:7e:db:46:14:ab: 04:e9:a3:58:4a:92:de:4b:28:ae:ed:75:f5:af:76: 4e:60:6a:bf:10:cc:16:43:21:55:4d:21:5e:7a:c6: 4e:4f:0b:40:4a:f6:69:c2:b7:a4:74:19:2a:6c:26: df:64:ed:95:12:2f:86:b4:dd:08:a5:d7:16:7a:d9: 17:2a:ac:87:56:d4:93:a1:8c:8b:ea:89:f1:44:82: 14:79:17:07:63:34:72:e6:39:7b:65:7d:5d:06:2a: 57:14:20:29:93:6f:3f:58:47:8e:e5:bf:32:f9:9b: e2:52:73:e1:b8:83:32:31:7b:db:bb:db:da:5f:f1: 0f:bf:d9:50:2c:d3:1e:05:db:8d:ab:8c:40:63:4b: 48:d0:80:53:9d:db:59:86:aa:6e:53:af:d1:1f:db: 89:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C3:84:B6:69:74:F2:29:58:62:91:CB:A8:61:4C:FD:F0:D5:FE:21 X509v3 Authority Key Identifier: keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:86:be:ec:5c:10:2e:a6:70:59:32:54:f3:7d:dc:cc:0c:28: 5e:47:32:53:72:42:9d:55:f0:ec:1b:3a:31:bb:4f:dd:ca:a6: ca:a3:93:cd:1a:cc:45:95:70:fe:c1:5b:ae:57:89:cb:a2:9f: 16:09:91:7b:34:20:5a:79:2d:c7:6b:de:ad:50:11:3a:e3:f0: ea:d8:3b:b4:14:58:ca:e6:9a:eb:1b:43:42:6f:dd:9b:3f:b1: 59:ef:e0:47:69:41:e2:3a:15:54:8b:da:59:bf:6b:94:81:d3: bf:04:cd:ff:b9:1b:ef:34:a3:76:06:82:cf:f1:40:0a:dd:f2: 7c:32:da:89:37:2e:83:6c:d3:27:f9:d1:b4:c8:20:34:3c:87: cc:9a:bb:46:19:1f:2f:63:36:b6:b2:db:e9:10:9b:21:a9:ae: b6:65:98:74:72:4a:97:ac:c8:b1:eb:2f:4e:16:65:9e:81:a9: e0:ca:fc:c8:f0:1e:5a:16:20:fb:12:87:09:dd:e4:93:66:3d: b9:ff:e1:a6:3c:48:75:68:58:dd:3e:da:95:ad:1a:4d:c5:31: ff:91:cd:eb:68:a5:40:bb:2c:3c:32:a3:99:4f:18:41:1e:48: 8f:82:f5:4c:5f:1a:ab:a0:bd:3d:76:9a:90:bc:43:81:09:55: 88:d4:9d:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCasrwIBAdXh/OAdz3KUbuym1rCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVD NEEyRTk1MTAeFw0yNjA1MTIxNzI3MjFaFw0yNjA1MTMxNzUyMjFaMDMxMTAvBgNV BAMTKEM3QzM4NEI2Njk3NEYyMjk1ODYyOTFDQkE4NjE0Q0ZERjBENUZFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9V9WXdxHfO3pWci4ajGF5qcGr Fjwu1GLwqATG4xMv8aJzO1jf0pkc1fmL2IS4kJAAbBHrwRweOsZ5N/BvYjBldS2q X1t8oNlkrw0kPb85LktMgypEOUQlgRmfLhwcuFWpCmp+20YUqwTpo1hKkt5LKK7t dfWvdk5gar8QzBZDIVVNIV56xk5PC0BK9mnCt6R0GSpsJt9k7ZUSL4a03Qil1xZ6 2RcqrIdW1JOhjIvqifFEghR5FwdjNHLmOXtlfV0GKlcUICmTbz9YR47lvzL5m+JS c+G4gzIxe9u729pf8Q+/2VAs0x4F242rjEBjS0jQgFOd21mGqm5Tr9Ef24mdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx8OEtml08ilYYpHLqGFM/fDV/iEwHwYDVR0j BBgwFoAUVEwgpvxjT7Zf6RKfOIOeNcSi6VEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM3MWRiOWItN2M0MC00OTY2LTk5MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZG QzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVDNEEyRTk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDRDMjBBNkZDNjM0RkI2NUZFOTEyOUYzODgzOUUzNUM0QTJF OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlF MzVDNEEyRTk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWGvuxcEC6mcFkyVPN93MwMKF5HMlNyQp1V 8OwbOjG7T93Kpsqjk80azEWVcP7BW65XicuinxYJkXs0IFp5Lcdr3q1QETrj8OrY O7QUWMrmmusbQ0Jv3Zs/sVnv4EdpQeI6FVSL2lm/a5SB078Ezf+5G+80o3YGgs/x QArd8nwy2ok3LoNs0yf50bTIIDQ8h8yau0YZHy9jNray2+kQmyGprrZlmHRySpes yLHrL04WZZ6BqeDK/MjwHloWIPsShwnd5JNmPbn/4aY8SHVoWN0+2pWtGk3FMf+R zetopUC7LDwyo5lPGEEeSI+C9UxfGqugvT12mpC8Q4EJVYjUnQA= -----END CERTIFICATE-----Generated at Wed May 13 07:52:45 2026 by rpki-client