$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json) Hash identifier: MwPK5ZJKmpJgjuhBU1cfqYUt5BqPPkpNEZpMA/lOekU= Subject key identifier: 53:4E:F5:AD:83:6C:C2:61:97:01:FE:BB:D0:8D:21:28:50:EE:E6:01 Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 Certificate issuer: /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Certificate serial: 6D6BD6B8D1C62E6C00181715DEE9AD4D1CC2A07B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:55:18 +0000 Manifest this update: Thu 24 Sep 2026 11:50:18 +0000 Manifest next update: Fri 25 Sep 2026 13:14:18 +0000 Files and hashes: 1: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: XQzE9nZKipaKMgj0T/K7fjueiL4vWWpMQ9wIBgHet5s=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6b:d6:b8:d1:c6:2e:6c:00:18:17:15:de:e9:ad:4d:1c:c2:a0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Validity Not Before: Sep 24 11:50:18 2026 GMT Not After : Sep 25 13:14:18 2026 GMT Subject: CN=534EF5AD836CC2619701FEBBD08D212850EEE601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:0f:9f:91:b2:15:76:74:70:c3:f6:8e:91: 82:a8:8d:e8:94:25:97:96:e8:15:23:c5:59:54:1b: 1e:60:21:e3:ac:10:94:d5:1b:03:08:b0:a6:55:f1: 33:02:56:5b:11:55:e6:21:0f:4e:57:87:9f:fb:c3: 3f:30:d4:d9:5a:10:9e:e4:66:dd:c1:d5:81:28:7b: 77:50:d5:c6:d4:d6:3d:67:70:37:a3:1f:51:16:73: 13:6b:5e:16:31:ec:4c:1e:a2:53:1e:2e:15:8f:1d: 60:18:fa:ad:35:8f:be:fb:5e:c5:60:7e:52:76:3b: 47:20:4e:03:9e:2e:90:35:24:a3:5a:87:30:8b:97: f7:4d:d8:cb:4a:08:23:8e:a4:6a:fb:4d:1a:47:7c: a4:b3:82:83:8b:42:06:29:4c:13:3a:75:6c:66:bb: a3:21:65:02:b2:00:01:66:71:4d:a2:51:39:b8:7a: 25:ff:0c:4d:eb:2c:1d:41:c7:98:bc:6b:f9:69:ac: 1b:5e:4e:25:b9:6d:cb:a2:20:2a:f3:ca:8e:d4:71: c0:80:4e:bc:eb:2a:ea:70:46:a0:cd:4a:11:57:93: 7a:e0:23:af:ed:fa:dc:6f:eb:e4:f4:c9:c6:16:1f: b9:de:45:ff:31:cc:75:94:ec:77:35:38:2c:18:df: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4E:F5:AD:83:6C:C2:61:97:01:FE:BB:D0:8D:21:28:50:EE:E6:01 X509v3 Authority Key Identifier: keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:59:67:f3:cf:65:eb:a0:ad:8c:f2:3c:c3:5d:69:1c:e9:88: 53:f8:9a:1e:b9:ae:8c:e5:df:01:37:c0:05:04:0e:85:4b:86: 83:b1:c6:f6:73:11:01:a3:5a:68:c3:0b:d3:d3:d7:31:c1:58: ec:1f:7d:19:10:37:9a:6e:19:4c:8a:da:95:17:fa:31:75:96: 39:cb:8c:43:67:5c:8c:ca:01:1f:a0:f7:98:fc:a7:98:95:b9: 0d:da:18:0b:41:02:53:90:e7:ad:4b:af:32:35:17:3e:47:5f: 21:05:a9:7a:8e:e0:6d:1b:93:7d:5f:26:6b:32:a7:df:3a:db: fb:17:c0:71:5c:f4:04:30:ab:c3:92:97:9a:88:3e:69:e4:0b: c6:5c:d8:64:63:dc:fd:f3:5e:dc:56:fd:e7:b1:44:5d:21:f3: 06:aa:cc:8e:51:ea:2e:97:f0:93:1e:bd:33:d5:98:8a:39:72: f2:2d:1e:a0:63:02:81:15:ef:36:b5:f5:e6:ed:75:c5:39:04: 1b:08:a9:0b:d9:36:16:47:c6:35:21:37:b3:e4:e8:ec:90:05: b9:77:6c:dc:66:68:11:8f:a0:1c:09:d5:43:96:e6:dd:04:75: 4e:da:71:26:6d:25:fd:51:ab:1c:59:5c:29:bc:cc:81:8c:30: 5e:c8:de:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWvWuNHGLmwAGBcV3umtTRzCoHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVD NEEyRTk1MTAeFw0yNjA5MjQxMTUwMThaFw0yNjA5MjUxMzE0MThaMDMxMTAvBgNV BAMTKDUzNEVGNUFEODM2Q0MyNjE5NzAxRkVCQkQwOEQyMTI4NTBFRUU2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fQ+fkbIVdnRww/aOkYKojeiU JZeW6BUjxVlUGx5gIeOsEJTVGwMIsKZV8TMCVlsRVeYhD05Xh5/7wz8w1NlaEJ7k Zt3B1YEoe3dQ1cbU1j1ncDejH1EWcxNrXhYx7EweolMeLhWPHWAY+q01j777XsVg flJ2O0cgTgOeLpA1JKNahzCLl/dN2MtKCCOOpGr7TRpHfKSzgoOLQgYpTBM6dWxm u6MhZQKyAAFmcU2iUTm4eiX/DE3rLB1Bx5i8a/lprBteTiW5bcuiICrzyo7UccCA TrzrKupwRqDNShFXk3rgI6/t+txv6+T0ycYWH7neRf8xzHWU7Hc1OCwY3ysPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU071rYNswmGXAf670I0hKFDu5gEwHwYDVR0j BBgwFoAUVEwgpvxjT7Zf6RKfOIOeNcSi6VEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM3MWRiOWItN2M0MC00OTY2LTk5MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZG QzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVDNEEyRTk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDRDMjBBNkZDNjM0RkI2NUZFOTEyOUYzODgzOUUzNUM0QTJF OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlF MzVDNEEyRTk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1ZZ/PPZeugrYzyPMNdaRzpiFP4mh65rozl 3wE3wAUEDoVLhoOxxvZzEQGjWmjDC9PT1zHBWOwffRkQN5puGUyK2pUX+jF1ljnL jENnXIzKAR+g95j8p5iVuQ3aGAtBAlOQ561LrzI1Fz5HXyEFqXqO4G0bk31fJmsy p9862/sXwHFc9AQwq8OSl5qIPmnkC8Zc2GRj3P3zXtxW/eexRF0h8waqzI5R6i6X 8JMevTPVmIo5cvItHqBjAoEV7za19ebtdcU5BBsIqQvZNhZHxjUhN7Pk6OyQBbl3 bNxmaBGPoBwJ1UOW5t0EdU7acSZtJf1RqxxZXCm8zIGMMF7I3u0= -----END CERTIFICATE-----Generated at Thu Sep 24 21:57:32 2026 by rpki-client