$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: HHZBb489cQnp30coT7NQeJB8TJMXE3kJLGPA8UBSLaE= Subject key identifier: D2:CE:E6:97:0C:A0:54:52:07:A9:C9:4C:AD:24:40:61:A3:42:5B:16 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 5FEF2CD95D2E71204877C36C9FDE74435A1E1EEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 09:25:15 +0000 Manifest this update: Sat 13 Jun 2026 09:20:15 +0000 Manifest next update: Sun 14 Jun 2026 10:05:15 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: A5huQxMELMkeNuQMl+fToqWewdEq+7rvypF4Loh9vUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ef:2c:d9:5d:2e:71:20:48:77:c3:6c:9f:de:74:43:5a:1e:1e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Jun 13 09:20:15 2026 GMT Not After : Jun 14 10:05:15 2026 GMT Subject: CN=D2CEE6970CA0545207A9C94CAD244061A3425B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:ca:e7:f1:2c:f0:56:ea:85:49:81:ca:4c: 62:d5:31:58:0b:89:c3:b7:14:5d:6d:e0:63:df:1b: 5e:6c:2e:19:df:7a:7e:34:d6:32:ab:e9:7d:8c:81: da:59:73:bb:b5:34:e8:8c:84:f3:45:d7:94:47:ad: 7e:8f:d7:be:41:75:fe:18:0f:ef:b6:97:cf:16:3b: d5:3c:9f:db:96:17:91:62:dc:a3:b7:4f:f6:be:f5: 04:06:cd:b1:9d:94:25:84:a3:f9:76:3d:ce:e2:82: 29:3f:42:e2:7b:f1:83:73:f7:22:a2:3b:73:e9:a7: 30:45:e6:26:cf:d1:b5:25:22:ce:f6:ae:3e:a8:85: 43:a2:ca:29:8e:58:dc:65:31:1d:a9:d4:7d:ee:ef: b6:88:04:2b:59:af:63:d5:3d:73:83:91:dc:38:60: 61:c3:37:a9:09:b5:ef:d7:94:96:2b:2b:98:c8:52: a7:91:02:89:a9:16:39:af:b5:26:6d:3a:d2:5a:57: 36:fa:c3:63:1b:c0:18:ff:66:78:9d:34:49:a7:c2: 26:5f:50:0d:a1:a3:62:0d:75:b4:93:52:4a:76:5d: 7c:ac:4b:aa:9e:4a:b7:bc:c7:27:cf:5c:e6:1f:82: 77:13:ed:c8:c9:1a:f6:1f:f9:e3:ac:c8:6f:ff:ff: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:E6:97:0C:A0:54:52:07:A9:C9:4C:AD:24:40:61:A3:42:5B:16 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ac:6c:83:a7:e8:6a:37:5b:ac:7d:7e:15:c3:a9:3b:cd:65: ef:71:3d:28:c4:28:7c:1d:d5:ff:7e:28:ed:0d:63:79:7f:34: 90:d7:af:52:a5:a0:f3:c8:d2:ad:e0:7b:2d:42:21:ee:09:92: 2d:28:93:fc:83:23:93:0b:42:7f:3d:ac:fa:a5:a4:36:ac:0e: f6:da:e2:ff:90:b7:c0:68:71:b5:aa:ad:61:1d:c2:b6:1b:f4: 95:fb:f5:59:28:84:14:6e:0f:d4:54:97:a0:82:28:a2:2d:3c: b6:6c:50:5a:c0:f6:ed:a1:ca:04:07:b9:a0:d2:52:d9:72:04: 1c:05:7c:f5:f6:32:77:7e:3d:10:a3:38:c6:51:db:8b:dd:0d: cc:c1:c9:a1:52:23:c3:30:0f:92:0e:80:07:67:3d:0f:48:6f: cf:81:56:92:19:82:2b:8e:f3:7d:c1:79:aa:02:31:c9:a3:fb: fa:69:91:33:f9:8a:4e:2a:e9:88:4a:91:31:5c:d1:ac:f5:f9: 8a:66:eb:9c:6c:df:de:0b:9c:2c:9c:7c:a6:ed:4e:55:29:40: de:4e:a8:e6:7f:69:05:58:07:77:71:09:99:cb:e6:86:95:90: 05:40:01:86:ea:61:83:30:36:09:7a:dd:c5:d8:fc:0c:4d:b7: 21:6b:72:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+8s2V0ucSBId8Nsn950Q1oeHuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA2MTMwOTIwMTVaFw0yNjA2MTQxMDA1MTVaMDMxMTAvBgNV BAMTKEQyQ0VFNjk3MENBMDU0NTIwN0E5Qzk0Q0FEMjQ0MDYxQTM0MjVCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHecrn8SzwVuqFSYHKTGLVMVgL icO3FF1t4GPfG15sLhnfen401jKr6X2MgdpZc7u1NOiMhPNF15RHrX6P175Bdf4Y D++2l88WO9U8n9uWF5Fi3KO3T/a+9QQGzbGdlCWEo/l2Pc7igik/QuJ78YNz9yKi O3PppzBF5ibP0bUlIs72rj6ohUOiyimOWNxlMR2p1H3u77aIBCtZr2PVPXODkdw4 YGHDN6kJte/XlJYrK5jIUqeRAompFjmvtSZtOtJaVzb6w2MbwBj/ZnidNEmnwiZf UA2ho2INdbSTUkp2XXysS6qeSre8xyfPXOYfgncT7cjJGvYf+eOsyG///4xHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0s7mlwygVFIHqclMrSRAYaNCWxYwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+sbIOn6Go3W6x9fhXDqTvNZe9xPSjEKHwd 1f9+KO0NY3l/NJDXr1KloPPI0q3gey1CIe4Jki0ok/yDI5MLQn89rPqlpDasDvba 4v+Qt8BocbWqrWEdwrYb9JX79VkohBRuD9RUl6CCKKItPLZsUFrA9u2hygQHuaDS UtlyBBwFfPX2Mnd+PRCjOMZR24vdDczByaFSI8MwD5IOgAdnPQ9Ib8+BVpIZgiuO 833BeaoCMcmj+/ppkTP5ik4q6YhKkTFc0az1+Ypm65xs394LnCycfKbtTlUpQN5O qOZ/aQVYB3dxCZnL5oaVkAVAAYbqYYMwNgl63cXY/AxNtyFrckw= -----END CERTIFICATE-----Generated at Sat Jun 13 12:54:55 2026 by rpki-client