$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: FsfwrdM30qGIs55LCMapK5q/VSEpR1bZzbTQJdAJ7t0= Subject key identifier: B9:74:8F:A6:9B:9A:BA:37:AB:E2:5C:E5:D4:D0:A6:2F:89:3F:6C:65 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 466311BB3561B0EE643D87833CBD2C1C826F5FBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 16:11:34 +0000 Manifest this update: Tue 28 Jul 2026 16:06:34 +0000 Manifest next update: Wed 29 Jul 2026 16:31:34 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: Q81w4yDWv7wiEdYcUUgK6UBqyHv8h6U2hL9voQAFnJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:63:11:bb:35:61:b0:ee:64:3d:87:83:3c:bd:2c:1c:82:6f:5f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Jul 28 16:06:34 2026 GMT Not After : Jul 29 16:31:34 2026 GMT Subject: CN=B9748FA69B9ABA37ABE25CE5D4D0A62F893F6C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:c5:fb:11:d3:61:73:33:f2:8d:6b:33:4b: 1b:43:06:6c:43:e2:37:c6:c9:0d:f6:6f:eb:09:6f: 67:03:4f:bb:3a:62:c0:06:cb:52:f0:c0:b7:f7:a8: 85:33:2f:ed:3d:92:cf:db:10:6c:58:5a:62:dc:0d: 80:af:11:03:8f:b8:65:26:50:0a:34:de:ee:d0:5c: b1:3f:a0:6c:ec:62:ec:7a:29:f2:63:3e:6a:b1:ba: c4:d3:a7:e4:75:5d:0b:e8:3a:7e:09:59:33:fc:f7: 5a:92:40:2e:59:71:9b:7b:28:9a:8c:8d:c5:2a:4f: 87:dc:6d:12:30:0c:2a:bc:aa:d4:40:9a:24:3b:8f: 6f:00:9c:fe:85:4e:4a:a6:e9:83:d7:2d:c0:4d:b9: 70:74:f1:49:eb:76:41:24:52:55:0b:1b:bf:f3:62: 92:6b:89:6b:67:e0:df:ed:40:68:ca:72:3b:6c:75: 29:40:e9:89:fc:37:eb:af:9f:17:73:b7:6d:50:66: d2:51:45:f1:02:31:25:0e:4a:a8:f5:b1:bc:48:80: cf:cb:57:a6:3b:09:d5:8d:c2:4b:b2:f9:85:60:7a: 3e:d3:a7:d4:29:3e:eb:47:3a:91:78:79:36:ae:f6: b5:6b:32:20:0f:c6:97:b9:3f:30:bf:66:a7:b6:1b: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:74:8F:A6:9B:9A:BA:37:AB:E2:5C:E5:D4:D0:A6:2F:89:3F:6C:65 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a8:cd:60:ef:95:39:cb:c9:42:88:ce:b4:8f:b5:bc:4d:f3: 21:9f:a9:fd:4c:4b:bd:93:ef:58:73:d6:1d:03:2c:8f:83:02: 45:34:e4:3c:34:df:43:55:e0:5f:b4:1d:85:cf:bf:6f:a2:d4: 70:ef:3e:98:ac:9f:6c:c9:c0:75:ac:2e:ce:b1:a4:7e:9d:e6: c1:03:f9:c1:05:6a:fd:59:08:cd:41:de:2a:0b:09:40:61:4a: 3d:f5:73:9c:be:40:33:1e:85:d5:7b:e0:76:e4:9d:a3:f5:41: a5:e7:4a:3b:93:1c:10:aa:b2:23:da:c6:2b:27:03:e4:cf:7d: 4a:2b:9d:8e:8e:44:01:cb:e4:ef:b2:44:1c:7d:c8:15:4c:1f: da:2c:63:ed:fb:63:ad:8a:b9:1a:96:43:97:68:87:08:59:7f: 72:6d:c1:8f:43:25:44:9e:36:7b:25:32:bc:f7:27:47:97:8a: 45:1c:fc:91:0b:4e:04:76:7b:fb:f0:40:e0:1d:81:05:9f:2b: c3:40:98:7a:31:f2:5c:c2:2d:f0:ab:1b:5f:a7:57:d8:13:85: 2b:e7:06:48:d8:18:b3:29:e6:70:a4:d8:57:2b:53:60:97:39: 23:b9:11:06:d6:87:a9:7e:be:cc:45:ed:f0:61:91:63:cd:3f: a3:36:e9:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmMRuzVhsO5kPYeDPL0sHIJvX74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA3MjgxNjA2MzRaFw0yNjA3MjkxNjMxMzRaMDMxMTAvBgNV BAMTKEI5NzQ4RkE2OUI5QUJBMzdBQkUyNUNFNUQ0RDBBNjJGODkzRjZDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOsX7EdNhczPyjWszSxtDBmxD 4jfGyQ32b+sJb2cDT7s6YsAGy1LwwLf3qIUzL+09ks/bEGxYWmLcDYCvEQOPuGUm UAo03u7QXLE/oGzsYux6KfJjPmqxusTTp+R1XQvoOn4JWTP891qSQC5ZcZt7KJqM jcUqT4fcbRIwDCq8qtRAmiQ7j28AnP6FTkqm6YPXLcBNuXB08UnrdkEkUlULG7/z YpJriWtn4N/tQGjKcjtsdSlA6Yn8N+uvnxdzt21QZtJRRfECMSUOSqj1sbxIgM/L V6Y7CdWNwkuy+YVgej7Tp9QpPutHOpF4eTau9rVrMiAPxpe5PzC/Zqe2G5abAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuXSPppuaujer4lzl1NCmL4k/bGUwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2ozWDvlTnLyUKIzrSPtbxN8yGfqf1MS72T 71hz1h0DLI+DAkU05Dw030NV4F+0HYXPv2+i1HDvPpisn2zJwHWsLs6xpH6d5sED +cEFav1ZCM1B3ioLCUBhSj31c5y+QDMehdV74HbknaP1QaXnSjuTHBCqsiPaxisn A+TPfUornY6ORAHL5O+yRBx9yBVMH9osY+37Y62KuRqWQ5dohwhZf3JtwY9DJUSe NnslMrz3J0eXikUc/JELTgR2e/vwQOAdgQWfK8NAmHox8lzCLfCrG1+nV9gThSvn BkjYGLMp5nCk2FcrU2CXOSO5EQbWh6l+vsxF7fBhkWPNP6M26RU= -----END CERTIFICATE-----Generated at Wed Jul 29 03:14:54 2026 by rpki-client