$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json) Hash identifier: pFoJPoHajfsgbJ/sOYIXdM4yYVvJadlyORgzGwR9dr8= Subject key identifier: B4:E5:02:2A:80:FC:EA:8B:D6:9F:40:6A:8A:9E:6B:67:91:87:3A:66 Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 Certificate issuer: /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Certificate serial: 1EA6AA221ECEA5DC7D794D1A0610C0D49626D322 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:37:08 +0000 Manifest this update: Mon 21 Sep 2026 08:32:08 +0000 Manifest next update: Tue 22 Sep 2026 11:32:08 +0000 Files and hashes: 1: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: uKpeXaQ+Rq+CEKGhJFN7WZ7YkYEugzWQ+UFJ8RXgfng=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a6:aa:22:1e:ce:a5:dc:7d:79:4d:1a:06:10:c0:d4:96:26:d3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Validity Not Before: Sep 21 08:32:08 2026 GMT Not After : Sep 22 11:32:08 2026 GMT Subject: CN=B4E5022A80FCEA8BD69F406A8A9E6B6791873A66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:c7:d8:d1:a8:0b:33:a0:c5:b7:58:31:f2: e8:ab:ec:4f:0c:6c:58:72:83:23:ba:8d:c2:91:f9: ce:7f:52:b7:1b:a3:b4:2d:b8:9f:33:7f:24:d8:5d: 0c:d9:bc:20:e0:70:42:15:0c:53:2c:6e:9c:2f:0f: 08:76:b4:fd:67:af:4b:ae:56:18:12:65:80:8b:ae: 90:05:25:b5:f0:02:5b:d8:1e:60:77:c7:01:ef:9f: 03:c5:f6:ad:37:20:19:cb:ce:3e:ff:2f:fc:4d:d7: 70:88:5b:17:68:ef:e7:e0:cd:2e:f9:04:f2:97:b9: 67:ab:71:a3:d8:cb:e4:f7:4b:5c:c1:6b:5c:0f:2e: 98:11:2d:74:54:fb:ed:6f:3e:53:55:b7:27:9b:d2: 0a:3d:8b:07:59:29:f4:74:37:27:a9:92:08:f3:bc: 38:42:b2:9b:c2:03:cb:8a:ed:40:2a:21:ea:b1:5f: 5d:80:c5:d1:d0:aa:48:53:ea:c1:e3:13:43:6d:ef: 40:00:2e:d6:05:af:7d:13:8b:8b:0e:01:03:7b:2d: 67:f6:cf:8b:c0:06:7e:08:d5:e5:ce:02:66:01:4b: b6:db:f7:a6:a7:8c:35:86:1b:c2:40:27:7d:07:fd: 55:12:59:5b:ac:a3:a3:79:b5:b6:54:52:a2:63:dd: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E5:02:2A:80:FC:EA:8B:D6:9F:40:6A:8A:9E:6B:67:91:87:3A:66 X509v3 Authority Key Identifier: keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9a:10:56:be:9a:13:5e:86:b6:e7:6c:8d:c4:37:e6:31:7a: 21:75:e5:64:16:14:92:3a:7e:30:b7:dd:63:c1:6a:66:f8:73: 14:62:56:59:fa:e2:d2:1a:d2:8c:85:29:23:14:78:20:59:23: 38:bf:da:8a:9d:02:27:46:74:60:94:bf:69:a7:ba:13:11:88: 68:c2:1c:7c:a0:33:6e:cb:d6:07:52:d5:9b:77:6f:d2:c0:96: 0b:e1:7c:e9:52:6b:bd:ec:13:f4:81:2e:d3:6e:dd:d2:66:13: 3c:ab:36:a9:86:9c:65:b7:67:7d:3a:ba:7c:ec:7d:ce:fb:21: 70:85:51:66:8f:94:3c:6b:1e:fa:d3:97:1d:f3:b3:e8:4d:14: 53:97:92:c1:bd:3d:e9:ad:18:3d:0c:0d:25:00:d6:1d:30:39: 54:e6:07:b3:66:e4:b3:de:27:1e:0d:e8:2f:76:b7:b4:fc:7c: 0f:ed:5e:5a:b7:b5:cf:90:5c:01:51:54:64:20:71:2f:a2:bc: fa:09:53:0e:cf:0c:d0:b1:37:cd:4b:c7:4a:a9:3d:40:4c:d5: 29:29:3d:bd:48:51:b8:18:32:05:b3:a1:a2:30:21:9c:f3:f1: 80:a2:40:a9:b3:60:bb:4f:cf:10:0e:dc:4d:7c:16:27:a3:7f: 8e:84:c5:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqaqIh7Opdx9eU0aBhDA1JYm0yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVD NEEyRTk1MTAeFw0yNjA5MjEwODMyMDhaFw0yNjA5MjIxMTMyMDhaMDMxMTAvBgNV BAMTKEI0RTUwMjJBODBGQ0VBOEJENjlGNDA2QThBOUU2QjY3OTE4NzNBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIssfY0agLM6DFt1gx8uir7E8M bFhygyO6jcKR+c5/Urcbo7QtuJ8zfyTYXQzZvCDgcEIVDFMsbpwvDwh2tP1nr0uu VhgSZYCLrpAFJbXwAlvYHmB3xwHvnwPF9q03IBnLzj7/L/xN13CIWxdo7+fgzS75 BPKXuWercaPYy+T3S1zBa1wPLpgRLXRU++1vPlNVtyeb0go9iwdZKfR0Nyepkgjz vDhCspvCA8uK7UAqIeqxX12AxdHQqkhT6sHjE0Nt70AALtYFr30Ti4sOAQN7LWf2 z4vABn4I1eXOAmYBS7bb96anjDWGG8JAJ30H/VUSWVuso6N5tbZUUqJj3WT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtOUCKoD86ovWn0Bqip5rZ5GHOmYwHwYDVR0j BBgwFoAUVEwgpvxjT7Zf6RKfOIOeNcSi6VEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM3MWRiOWItN2M0MC00OTY2LTk5MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZG QzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVDNEEyRTk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDRDMjBBNkZDNjM0RkI2NUZFOTEyOUYzODgzOUUzNUM0QTJF OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlF MzVDNEEyRTk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6aEFa+mhNehrbnbI3EN+YxeiF15WQWFJI6 fjC33WPBamb4cxRiVln64tIa0oyFKSMUeCBZIzi/2oqdAidGdGCUv2mnuhMRiGjC HHygM27L1gdS1Zt3b9LAlgvhfOlSa73sE/SBLtNu3dJmEzyrNqmGnGW3Z306unzs fc77IXCFUWaPlDxrHvrTlx3zs+hNFFOXksG9PemtGD0MDSUA1h0wOVTmB7Nm5LPe Jx4N6C92t7T8fA/tXlq3tc+QXAFRVGQgcS+ivPoJUw7PDNCxN81Lx0qpPUBM1Skp Pb1IUbgYMgWzoaIwIZzz8YCiQKmzYLtPzxAO3E18Fiejf46ExY4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:39:57 2026 by rpki-client