$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: R9Vb1dJRdr9fs7evGmsKzsWy88s+spcT0gGng4XC6lk= Subject key identifier: ED:4D:9E:77:FD:8D:30:C2:8B:9B:B3:DF:14:C5:BC:FA:66:14:40:3C Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 160794334AF44B49413A4C79309E8CB20C354DA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 20:48:45 +0000 Manifest this update: Mon 02 Nov 2026 20:43:45 +0000 Manifest next update: Tue 03 Nov 2026 22:18:45 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: 8XXFrwgnjUg0CtkcGmPN2VT9DRIAmjYELvp+poneIfQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 22:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:07:94:33:4a:f4:4b:49:41:3a:4c:79:30:9e:8c:b2:0c:35:4d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Nov 2 20:43:45 2026 GMT Not After : Nov 3 22:18:45 2026 GMT Subject: CN=ED4D9E77FD8D30C28B9BB3DF14C5BCFA6614403C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:79:37:d2:cc:3f:07:a9:72:a9:ea:45:58: ab:6b:13:55:14:c2:08:56:8c:76:41:16:93:fe:42: ac:18:93:15:25:93:39:76:7c:03:99:9b:1b:53:e4: 0b:c1:5a:98:d7:58:ea:e2:59:4e:07:12:18:75:77: 5d:80:88:6f:f9:3e:62:b4:ae:4d:eb:8f:dd:1a:65: 60:3c:fa:84:a0:f7:bf:3a:d8:c3:26:ff:19:9d:4b: c4:92:af:cd:d4:9c:65:e1:d1:6c:d3:08:fb:1f:0d: 93:b1:78:7b:70:ea:7e:e2:e7:a8:11:57:07:9b:86: 2e:7c:8e:de:cc:3e:98:92:b3:29:2c:30:5d:60:ee: 63:31:6e:ee:e8:11:73:81:d5:18:87:fd:ea:a0:57: 7e:c8:dc:ce:58:33:63:a6:ac:fb:62:e2:e7:2d:3a: 8c:95:41:d1:0b:9e:fa:d6:dc:df:81:99:64:82:1c: d8:f7:b0:21:ce:18:2c:78:77:e8:bb:57:d6:45:3f: 79:7a:3d:5f:ff:97:76:50:3e:80:f5:0a:dd:98:4a: f4:74:86:ec:80:3d:9c:fb:f0:da:ae:0f:39:58:7b: d2:ed:a6:b7:b6:ce:dd:f8:8a:aa:60:6d:aa:a2:90: d8:13:10:4b:78:92:39:83:4b:b4:3a:c8:4a:71:ba: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4D:9E:77:FD:8D:30:C2:8B:9B:B3:DF:14:C5:BC:FA:66:14:40:3C X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:87:d0:80:5e:bc:65:9e:f6:96:c8:93:d4:6c:74:26:6c:8f: 50:04:67:e5:ac:39:bb:13:45:ff:8b:50:31:57:fd:b3:fa:6b: 87:57:b8:77:e3:2e:a4:13:cd:b0:53:ac:ec:24:30:33:0d:e2: 07:c2:7b:d0:cb:8b:44:88:61:8e:e1:c6:89:26:d4:c0:b4:09: ca:8b:69:fc:7c:d4:bb:5e:fc:11:29:18:78:24:d4:98:9c:61: b5:51:53:4a:05:61:38:7e:cb:3b:ff:b0:da:97:93:5f:32:08: 81:1e:b0:6b:c0:3f:c6:6a:59:64:76:bf:26:d3:cb:5c:eb:a1: 71:0c:13:3b:f7:9c:09:a0:3f:d9:cf:eb:de:f1:b0:e0:05:0f: d9:cb:e9:bd:f8:e0:ad:3a:ed:c6:91:10:a3:10:6e:09:ad:f5: 32:43:0f:62:60:9e:a1:e3:89:45:bf:b9:6b:aa:5d:c7:05:7a: a0:13:b7:3a:90:09:ad:16:ca:2a:4b:a5:ed:9b:67:fc:bf:fd: e6:31:32:36:5a:52:c8:c6:5e:d1:76:8c:4a:b5:b7:0e:49:30: 45:e7:bb:c0:9f:b5:5c:b4:9c:87:00:57:b5:ec:f3:22:da:8a: 69:2e:50:f4:5c:0a:d3:0b:a3:08:74:b2:fa:d0:61:d0:04:48: bd:89:87:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgeUM0r0S0lBOkx5MJ6Msgw1TaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjExMDIyMDQzNDVaFw0yNjExMDMyMjE4NDVaMDMxMTAvBgNV BAMTKEVENEQ5RTc3RkQ4RDMwQzI4QjlCQjNERjE0QzVCQ0ZBNjYxNDQwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3Hk30sw/B6lyqepFWKtrE1UU wghWjHZBFpP+QqwYkxUlkzl2fAOZmxtT5AvBWpjXWOriWU4HEhh1d12AiG/5PmK0 rk3rj90aZWA8+oSg97862MMm/xmdS8SSr83UnGXh0WzTCPsfDZOxeHtw6n7i56gR Vwebhi58jt7MPpiSsyksMF1g7mMxbu7oEXOB1RiH/eqgV37I3M5YM2OmrPti4uct OoyVQdELnvrW3N+BmWSCHNj3sCHOGCx4d+i7V9ZFP3l6PV//l3ZQPoD1Ct2YSvR0 huyAPZz78NquDzlYe9Ltpre2zt34iqpgbaqikNgTEEt4kjmDS7Q6yEpxuh2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7U2ed/2NMMKLm7PfFMW8+mYUQDwwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuH0IBevGWe9pbIk9RsdCZsj1AEZ+WsObsT Rf+LUDFX/bP6a4dXuHfjLqQTzbBTrOwkMDMN4gfCe9DLi0SIYY7hxokm1MC0CcqL afx81Lte/BEpGHgk1JicYbVRU0oFYTh+yzv/sNqXk18yCIEesGvAP8ZqWWR2vybT y1zroXEMEzv3nAmgP9nP697xsOAFD9nL6b344K067caREKMQbgmt9TJDD2JgnqHj iUW/uWuqXccFeqATtzqQCa0WyipLpe2bZ/y//eYxMjZaUsjGXtF2jEq1tw5JMEXn u8CftVy0nIcAV7Xs8yLaimkuUPRcCtMLowh0svrQYdAESL2Jh1c= -----END CERTIFICATE-----Generated at Tue Nov 3 15:56:57 2026 by rpki-client