$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft File: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft (raw, json) Hash identifier: jpOvp8CPpeKBlGHMGeFJqGOD0o0oHCMwDR2k5OjI23U= Subject key identifier: EC:9E:78:9C:1E:9B:80:5F:F8:AF:90:19:D6:15:01:B9:6F:A0:0A:36 Authority key identifier: 54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 Certificate issuer: /CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Certificate serial: 1CA5C7A5A6A3D82531C253EA12EB4B409C59B60D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft Manifest number: BE Signing time: Tue 22 Sep 2026 16:01:10 +0000 Manifest this update: Tue 22 Sep 2026 15:56:10 +0000 Manifest next update: Wed 23 Sep 2026 17:08:10 +0000 Files and hashes: 1: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl (hash: RmbZkSLCI7v9htK2nHcNYp8PfKONoGNiWHOHKb4E+kY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a5:c7:a5:a6:a3:d8:25:31:c2:53:ea:12:eb:4b:40:9c:59:b6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Validity Not Before: Sep 22 15:56:10 2026 GMT Not After : Sep 23 17:08:10 2026 GMT Subject: CN=EC9E789C1E9B805FF8AF9019D61501B96FA00A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:04:fe:44:8f:5c:a0:72:ba:29:03:d4:c8:4f: 8d:38:9d:17:a4:8b:48:64:16:c1:6b:4e:e0:1a:58: c5:72:f3:ef:18:26:1d:8c:99:f4:03:1c:70:54:a5: 71:b2:7b:27:ad:98:6e:f1:c6:32:96:1e:dc:97:35: cc:47:e4:89:f2:30:50:7e:ee:24:7e:f1:67:82:df: a5:56:38:85:2b:0a:b8:66:98:e2:1c:09:56:ca:de: 01:e3:fb:8c:ee:66:eb:e8:e6:c4:3a:ab:af:0b:7a: 71:80:39:ef:c0:9e:6f:ca:e1:0f:73:4a:16:3c:e7: f8:b9:ed:64:e5:8b:96:c1:26:d8:1b:a6:2d:13:93: 54:58:d6:93:a1:d6:d7:8d:2e:92:89:34:89:dc:f1: 86:3b:e2:e7:37:b3:43:1b:e6:7b:56:bb:92:62:13: 9b:49:60:7e:32:4c:dd:12:fc:bd:4e:07:72:1b:99: 67:bd:92:96:53:f4:34:32:ff:1a:8b:2b:f4:b7:fc: 8c:65:8c:d4:6b:da:41:f7:12:51:79:b5:c3:c9:3a: 31:40:aa:a5:4b:b1:41:07:cb:0e:df:88:f0:12:e0: 51:19:ed:b3:e3:84:c0:d4:ac:76:76:b4:e7:08:82: ae:00:16:42:32:cb:d2:9f:63:50:30:d5:25:2a:ad: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9E:78:9C:1E:9B:80:5F:F8:AF:90:19:D6:15:01:B9:6F:A0:0A:36 X509v3 Authority Key Identifier: keyid:54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:89:11:61:b6:db:81:03:6d:8a:15:a4:22:b3:e6:38:c8:cc: fd:7e:9a:8b:d4:01:a9:37:be:dd:58:1c:ad:f9:52:92:49:70: 83:ff:d3:7b:50:d9:37:d9:6c:f9:db:f5:0b:38:a8:dc:1b:d1: 40:42:fa:6f:86:04:dd:ca:55:e6:1f:b6:15:0d:ee:06:68:88: b8:05:0a:ac:b2:9b:a7:d0:46:50:c3:b0:04:40:8e:fc:f1:f0: 8d:dc:69:4c:04:d6:4b:de:78:b7:b5:ac:37:99:92:92:e1:3d: ed:68:74:e6:ea:d4:68:f2:51:c9:f4:33:4b:a1:c3:4f:d1:b7: 72:80:81:ad:c1:b8:d5:cc:10:98:f6:e3:3e:10:04:8b:fb:d7: bd:f2:00:3c:90:ff:11:cf:26:58:af:4c:02:36:82:87:bc:40: e1:44:22:72:07:f2:a2:7e:16:71:fa:48:59:51:4f:37:cc:98: 7e:0b:47:48:74:4d:1e:5f:46:ad:55:23:1a:b3:40:a0:4d:7e: b0:3c:a8:ec:14:e9:5f:55:80:1f:a1:42:54:15:29:c3:40:09: 86:fc:78:f1:65:a4:10:02:40:fe:3d:c6:fb:4c:2c:f9:79:6f: ac:7c:57:53:81:a2:05:8c:63:01:fe:a9:a6:4a:cf:34:98:de: 65:79:16:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKXHpaaj2CUxwlPqEutLQJxZtg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FG Q0I5RUI4MjAeFw0yNjA5MjIxNTU2MTBaFw0yNjA5MjMxNzA4MTBaMDMxMTAvBgNV BAMTKEVDOUU3ODlDMUU5QjgwNUZGOEFGOTAxOUQ2MTUwMUI5NkZBMDBBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBP5Ej1ygcropA9TIT404nRek i0hkFsFrTuAaWMVy8+8YJh2MmfQDHHBUpXGyeyetmG7xxjKWHtyXNcxH5InyMFB+ 7iR+8WeC36VWOIUrCrhmmOIcCVbK3gHj+4zuZuvo5sQ6q68LenGAOe/Anm/K4Q9z ShY85/i57WTli5bBJtgbpi0Tk1RY1pOh1teNLpKJNInc8YY74uc3s0Mb5ntWu5Ji E5tJYH4yTN0S/L1OB3IbmWe9kpZT9DQy/xqLK/S3/IxljNRr2kH3ElF5tcPJOjFA qqVLsUEHyw7fiPAS4FEZ7bPjhMDUrHZ2tOcIgq4AFkIyy9KfY1Aw1SUqrXUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7J54nB6bgF/4r5AZ1hUBuW+gCjYwHwYDVR0j BBgwFoAUVDUi0XY3WxuZvdkW57PZevy564IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmZTE2M2MtMTRkNS00ZTMxLWFjMjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3 NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FGQ0I5RUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDM1MjJEMTc2Mzc1QjFCOTlCREQ5MTZFN0IzRDk3QUZDQjlF QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5 N0FGQ0I5RUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuJEWG224EDbYoVpCKz5jjIzP1+movUAak3 vt1YHK35UpJJcIP/03tQ2TfZbPnb9Qs4qNwb0UBC+m+GBN3KVeYfthUN7gZoiLgF Cqyym6fQRlDDsARAjvzx8I3caUwE1kveeLe1rDeZkpLhPe1odObq1GjyUcn0M0uh w0/Rt3KAga3BuNXMEJj24z4QBIv7173yADyQ/xHPJlivTAI2goe8QOFEInIH8qJ+ FnH6SFlRTzfMmH4LR0h0TR5fRq1VIxqzQKBNfrA8qOwU6V9VgB+hQlQVKcNACYb8 ePFlpBACQP49xvtMLPl5b6x8V1OBogWMYwH+qaZKzzSY3mV5Flg= -----END CERTIFICATE-----Generated at Tue Sep 22 18:43:53 2026 by rpki-client