$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft File: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft (raw, json) Hash identifier: I5MQfly97Yc47WCKegRCxXqfRTvdf33uEUv2rEPsdQE= Subject key identifier: 27:4B:D6:4F:55:E4:77:C4:9B:00:FC:30:3F:08:54:BF:46:41:1F:91 Authority key identifier: 54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 Certificate issuer: /CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Certificate serial: 7C015E3CDF06395463E3945876EE8FD8C1A452C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:40:54 +0000 Manifest this update: Wed 17 Jun 2026 06:35:54 +0000 Manifest next update: Thu 18 Jun 2026 09:04:54 +0000 Files and hashes: 1: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl (hash: X46UnYWNfmf21K7oCwFKb5luVfcWbFazhQLKmfHws34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:01:5e:3c:df:06:39:54:63:e3:94:58:76:ee:8f:d8:c1:a4:52:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Validity Not Before: Jun 17 06:35:54 2026 GMT Not After : Jun 18 09:04:54 2026 GMT Subject: CN=274BD64F55E477C49B00FC303F0854BF46411F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:a2:f1:af:de:a7:7b:92:15:60:f1:61:88: 87:81:7b:07:5a:6d:4a:ee:47:60:8e:cc:3b:2f:a0: 3f:1f:bb:21:b0:64:98:84:8c:eb:54:59:c2:95:7a: f2:0c:bd:64:7a:0a:98:4d:c2:c2:cc:ae:1e:c5:77: 3c:28:01:6a:04:87:89:2e:cf:c2:27:fa:2b:c8:b5: d0:6a:3b:48:df:57:45:90:23:39:bf:4b:7c:c3:28: bb:f5:76:4b:3f:09:03:0b:97:6f:f6:63:ea:f9:28: bd:5a:93:84:11:eb:b0:c3:e3:63:cf:d0:f4:c6:ca: 71:1f:a9:ea:39:1d:28:4f:7a:3c:8b:8d:6c:06:79: 15:b0:31:18:df:b4:ce:70:23:cf:be:0d:8f:f1:06: 43:18:dc:05:a6:10:66:ee:23:19:12:bb:9a:ff:0a: c1:87:79:c2:18:7f:08:2a:b7:2a:52:73:46:15:35: 7c:de:24:82:73:69:73:08:ab:b5:fc:1b:24:a7:fd: 27:37:cd:2d:50:d0:6b:4d:ba:19:db:cf:80:42:ec: 1e:8f:91:cc:39:17:2d:31:7f:d7:f5:1c:09:fe:a8: a0:73:e8:7d:65:bf:6d:c8:73:f4:58:09:5c:0b:d8: db:57:33:01:c6:1a:6c:a1:7e:1f:0d:b2:45:66:f4: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4B:D6:4F:55:E4:77:C4:9B:00:FC:30:3F:08:54:BF:46:41:1F:91 X509v3 Authority Key Identifier: keyid:54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c1:e2:0e:ae:b1:c1:cd:b3:ce:c1:a1:07:1e:2f:7e:ce:ee: 80:89:b5:f3:5f:98:5a:4a:0a:f7:20:99:fc:8a:8d:ec:e8:0a: 1b:ea:e7:96:fb:18:fb:6a:08:62:64:6f:a2:b8:b5:17:65:ae: 6f:e8:14:43:d9:a2:c4:ea:ce:4b:1f:0d:c5:4f:ee:a0:8e:03: 9d:10:f2:0f:b7:2a:ca:a2:12:67:d2:2a:9b:37:fe:df:53:0a: 35:0e:bd:a2:d4:fb:d0:a2:90:9e:a8:3c:56:2f:8a:96:1a:78: 3f:f7:6a:a2:13:48:ab:1f:aa:87:ca:56:23:21:23:8c:26:85: b0:d2:e2:60:ed:b9:58:3f:7f:0b:50:6f:c2:1b:10:0a:43:84: 37:6d:19:3b:8b:b5:cc:72:3f:13:0a:73:10:0e:2a:9f:66:c1: 4b:da:c4:59:ac:16:ef:bf:49:3b:41:18:e0:90:04:3e:cc:ad: 01:fa:53:85:62:49:3d:9a:f7:5e:68:30:3c:77:98:a3:1c:c0: 64:36:a0:31:7f:f2:10:8e:84:d4:52:27:f3:24:af:cd:21:20: a1:1a:1b:42:33:08:68:96:36:99:22:8a:5c:2b:c5:05:45:6e: f4:5a:f7:52:2d:d0:20:a5:7a:c7:56:e0:ed:ad:fd:9b:21:6e: 5c:f0:dd:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAFePN8GOVRj45RYdu6P2MGkUsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FG Q0I5RUI4MjAeFw0yNjA2MTcwNjM1NTRaFw0yNjA2MTgwOTA0NTRaMDMxMTAvBgNV BAMTKDI3NEJENjRGNTVFNDc3QzQ5QjAwRkMzMDNGMDg1NEJGNDY0MTFGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbS6Lxr96ne5IVYPFhiIeBewda bUruR2COzDsvoD8fuyGwZJiEjOtUWcKVevIMvWR6CphNwsLMrh7FdzwoAWoEh4ku z8In+ivItdBqO0jfV0WQIzm/S3zDKLv1dks/CQMLl2/2Y+r5KL1ak4QR67DD42PP 0PTGynEfqeo5HShPejyLjWwGeRWwMRjftM5wI8++DY/xBkMY3AWmEGbuIxkSu5r/ CsGHecIYfwgqtypSc0YVNXzeJIJzaXMIq7X8GySn/Sc3zS1Q0GtNuhnbz4BC7B6P kcw5Fy0xf9f1HAn+qKBz6H1lv23Ic/RYCVwL2NtXMwHGGmyhfh8NskVm9D1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ0vWT1Xkd8SbAPwwPwhUv0ZBH5EwHwYDVR0j BBgwFoAUVDUi0XY3WxuZvdkW57PZevy564IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmZTE2M2MtMTRkNS00ZTMxLWFjMjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3 NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FGQ0I5RUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDM1MjJEMTc2Mzc1QjFCOTlCREQ5MTZFN0IzRDk3QUZDQjlF QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5 N0FGQ0I5RUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzB4g6uscHNs87BoQceL37O7oCJtfNfmFpK CvcgmfyKjezoChvq55b7GPtqCGJkb6K4tRdlrm/oFEPZosTqzksfDcVP7qCOA50Q 8g+3KsqiEmfSKps3/t9TCjUOvaLU+9CikJ6oPFYvipYaeD/3aqITSKsfqofKViMh I4wmhbDS4mDtuVg/fwtQb8IbEApDhDdtGTuLtcxyPxMKcxAOKp9mwUvaxFmsFu+/ STtBGOCQBD7MrQH6U4ViST2a915oMDx3mKMcwGQ2oDF/8hCOhNRSJ/Mkr80hIKEa G0IzCGiWNpkiilwrxQVFbvRa91It0CClesdW4O2t/Zshblzw3eA= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:50 2026 by rpki-client