$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: bAe+cEa7ovdctFYEo1c6erNBd1o47rFASnSQrXFGJjc= Subject key identifier: 69:81:35:F4:F3:52:6E:62:7E:F6:CC:A9:99:5B:93:0A:22:08:82:66 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 25B64E70F58365334495E22336FE5EE6732A5DAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:23:07 +0000 Manifest this update: Mon 21 Sep 2026 09:18:07 +0000 Manifest next update: Tue 22 Sep 2026 13:04:07 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: HByj90I6KcKXvis//RH0e2OEhBqFWZRPl6KVngbHs1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b6:4e:70:f5:83:65:33:44:95:e2:23:36:fe:5e:e6:73:2a:5d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Sep 21 09:18:07 2026 GMT Not After : Sep 22 13:04:07 2026 GMT Subject: CN=698135F4F3526E627EF6CCA9995B930A22088266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:b2:39:ac:70:c2:84:25:df:98:07:89:41: 32:de:7d:93:60:33:28:82:8c:48:9f:1c:c3:d5:b3: d8:03:dc:e0:c7:4b:dd:a1:7d:0c:3c:6f:b8:4e:7b: a4:98:41:e9:96:88:81:4d:d5:47:8c:91:57:3b:f3: 60:f5:fb:70:b4:3c:94:39:47:e6:be:20:ad:bf:94: 44:31:df:0d:af:d9:db:ae:e6:b2:ff:c7:4c:00:0f: e8:64:86:da:ec:13:69:35:e3:10:26:d2:3e:c4:dc: d9:4d:98:8c:25:09:7d:df:d8:4e:b7:77:b4:08:87: 13:f5:7e:e1:d3:2e:16:c3:70:42:74:59:ec:7c:f5: f4:3f:51:37:39:46:39:50:11:fc:1f:27:98:9d:5d: 25:28:67:71:49:a0:8a:34:31:20:62:20:31:9d:31: da:34:00:3a:47:b9:c7:5d:92:99:38:04:89:7e:b5: 18:11:e6:b6:1b:f1:1a:b7:0f:a2:0e:ec:b7:16:89: cd:ba:4e:53:da:4c:e9:c7:fc:fe:f2:16:77:f4:ce: 4a:02:fd:20:4a:93:cc:14:9d:24:ee:3a:65:c1:7c: 12:1a:da:a8:21:71:f8:d2:48:1f:2d:2f:42:ff:fe: df:99:c3:9d:13:4d:91:a8:5f:e1:39:98:fc:13:75: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:35:F4:F3:52:6E:62:7E:F6:CC:A9:99:5B:93:0A:22:08:82:66 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a1:8e:1e:cd:08:43:5e:e7:1f:30:97:e8:3e:06:dd:63:9a: b1:11:0b:1c:e5:dc:b1:a5:27:ec:b7:37:dd:88:19:09:dc:e1: 1b:ac:cd:d8:d2:8c:41:db:a7:6d:0a:cf:b2:24:de:53:23:72: 21:61:42:b3:85:3c:e0:2a:dc:08:14:72:28:85:27:20:e4:9d: 1d:de:7d:5b:f8:88:23:2f:1f:10:4c:3e:9b:22:7c:c4:4b:cd: 6c:b8:9d:4e:b2:9d:7b:e4:d4:92:a5:d6:9d:e3:cb:41:52:72: 61:8b:1f:79:a5:9a:11:e9:df:75:1d:26:e6:41:85:ce:6a:ae: 54:99:fb:54:51:12:f6:dd:b3:a1:1a:ef:6c:3e:d9:2a:79:7d: 1f:7e:b4:b2:93:f6:0e:53:df:45:b0:5e:82:25:f5:e4:74:97: b0:ae:d5:eb:99:79:d5:d4:38:3f:f4:81:41:98:98:e8:1a:a5: 9f:93:b2:2e:b9:c9:26:59:34:0d:f0:d6:eb:41:3e:e8:a4:5e: d4:59:a9:56:3f:70:47:6e:2f:5a:8c:31:b8:0a:e6:ff:7c:c4: 69:89:21:4a:87:50:42:6d:ee:fc:d1:37:ba:51:a4:38:d7:cb: 64:c0:ae:2c:c1:30:03:0e:c1:05:8b:39:11:bd:b7:a6:bf:53: 70:92:aa:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbZOcPWDZTNEleIjNv5e5nMqXaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA5MjEwOTE4MDdaFw0yNjA5MjIxMzA0MDdaMDMxMTAvBgNV BAMTKDY5ODEzNUY0RjM1MjZFNjI3RUY2Q0NBOTk5NUI5MzBBMjIwODgyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMrI5rHDChCXfmAeJQTLefZNg MyiCjEifHMPVs9gD3ODHS92hfQw8b7hOe6SYQemWiIFN1UeMkVc782D1+3C0PJQ5 R+a+IK2/lEQx3w2v2duu5rL/x0wAD+hkhtrsE2k14xAm0j7E3NlNmIwlCX3f2E63 d7QIhxP1fuHTLhbDcEJ0Wex89fQ/UTc5RjlQEfwfJ5idXSUoZ3FJoIo0MSBiIDGd Mdo0ADpHucddkpk4BIl+tRgR5rYb8Rq3D6IO7LcWic26TlPaTOnH/P7yFnf0zkoC /SBKk8wUnSTuOmXBfBIa2qghcfjSSB8tL0L//t+Zw50TTZGoX+E5mPwTdXtBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYE19PNSbmJ+9sypmVuTCiIIgmYwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOhjh7NCENe5x8wl+g+Bt1jmrERCxzl3LGl J+y3N92IGQnc4RuszdjSjEHbp20Kz7Ik3lMjciFhQrOFPOAq3AgUciiFJyDknR3e fVv4iCMvHxBMPpsifMRLzWy4nU6ynXvk1JKl1p3jy0FScmGLH3mlmhHp33UdJuZB hc5qrlSZ+1RREvbds6Ea72w+2Sp5fR9+tLKT9g5T30WwXoIl9eR0l7Cu1euZedXU OD/0gUGYmOgapZ+Tsi65ySZZNA3w1utBPuikXtRZqVY/cEduL1qMMbgK5v98xGmJ IUqHUEJt7vzRN7pRpDjXy2TArizBMAMOwQWLORG9t6a/U3CSqn4= -----END CERTIFICATE-----Generated at Mon Sep 21 19:50:12 2026 by rpki-client