$ rpki-client -vvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json) Hash identifier: mBj9nB9sEh/5zjl4mI38V8XyzNqSuViXBEeihzc0ie4= Subject key identifier: CE:50:25:21:67:95:9F:07:ED:EE:9A:89:CC:9C:ED:6F:89:13:A4:38 Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 Certificate issuer: /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Certificate serial: 2E70D623757094E1CD2F6971C1BB8F359FFB11EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft Manifest number: 09 Signing time: Fri 08 May 2026 05:20:39 +0000 Manifest this update: Fri 08 May 2026 05:15:39 +0000 Manifest next update: Sat 09 May 2026 07:51:39 +0000 Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=) 2: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: 6IX+n5m1J+t96s0e44qZ3B+KUIdxnYHNfWQnI4d8rMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:70:d6:23:75:70:94:e1:cd:2f:69:71:c1:bb:8f:35:9f:fb:11:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Validity Not Before: May 8 05:15:39 2026 GMT Not After : May 9 07:51:39 2026 GMT Subject: CN=CE50252167959F07EDEE9A89CC9CED6F8913A438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:17:a5:e1:30:9a:a4:eb:6c:2c:cd:fb:0f: 16:bd:26:99:c9:7f:2f:99:9f:76:0e:ca:51:48:c3: c5:9a:f4:70:5f:31:89:c4:4d:17:d1:31:38:45:38: 1e:bc:95:17:48:44:ea:7a:c8:b2:29:45:4e:54:26: 93:1d:cb:dc:f4:d1:94:7c:75:34:01:99:d2:e7:fd: e8:ec:12:27:03:f6:37:3a:5d:0f:24:83:53:e5:25: 6c:e7:9d:11:62:37:16:2d:8a:48:90:8a:82:3d:9e: 4f:94:d2:8e:73:ba:18:94:e7:99:a7:d0:c5:f6:d8: 5a:37:91:44:49:e0:05:25:48:92:2a:55:51:5a:e8: 37:f7:9c:5a:78:6a:69:9b:eb:07:21:a7:55:88:87: 81:f3:c0:55:6f:ed:c1:49:09:77:15:6c:27:0b:cc: a4:a8:fc:57:b9:35:79:47:d9:90:4f:91:9f:a5:63: 9c:eb:a8:9b:ed:56:8f:c9:7c:45:78:e8:ca:4e:4a: d5:84:a5:8a:e6:a4:bd:ea:d6:52:e7:d7:a0:a7:d4: a6:e1:67:cb:56:e0:d9:63:0f:9b:d6:f0:5f:f5:75: fb:49:ec:f6:fa:1e:2c:06:82:56:7c:03:c9:7d:61: dc:9d:73:6b:1a:3a:15:ea:7d:a7:7e:cc:7f:9d:9c: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:50:25:21:67:95:9F:07:ED:EE:9A:89:CC:9C:ED:6F:89:13:A4:38 X509v3 Authority Key Identifier: keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:60:8b:3a:ed:4b:ce:ae:aa:b0:23:55:7b:0e:9f:92:5c:95: d5:1f:d1:e4:4d:04:d8:c6:59:17:1a:e4:8a:b4:9d:da:80:a5: a7:43:e4:43:bf:ba:fa:9a:b0:cc:fb:7c:07:3e:c5:f4:c3:8e: 8c:1f:55:df:76:be:bc:53:ef:6b:61:45:48:3e:f5:09:6c:e2: b2:43:f1:f4:92:12:44:a6:74:97:81:70:ac:62:75:a2:b3:16: d5:53:9f:a5:43:ba:eb:3a:e8:1c:7e:9e:b8:6b:15:54:07:b5: fd:12:87:70:74:90:68:d1:17:13:f8:89:24:0e:5d:26:d0:05: a8:5c:91:da:97:31:1f:a7:ff:c5:4a:fc:0f:f7:64:d0:0d:2b: 51:90:d9:89:53:bb:45:6f:18:22:df:58:83:c0:41:ef:96:5a: 1c:c0:3b:8a:63:d4:aa:ed:f0:bd:13:33:48:3f:43:5a:99:20: 07:3f:f4:71:24:90:26:e2:52:af:84:d3:c7:75:cf:cd:13:4c: f5:c3:4c:a3:3b:92:07:c4:8a:ba:dc:ea:88:02:73:bb:fc:d3: e1:3b:b5:41:f6:79:87:3f:e3:74:c4:6f:56:7e:86:b3:34:e1: ee:25:2f:b6:3b:27:17:bc:7f:4a:d7:ec:cc:dc:5a:c3:12:bc: a6:54:13:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnDWI3VwlOHNL2lxwbuPNZ/7EeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVD NEEyRTk1MTAeFw0yNjA1MDgwNTE1MzlaFw0yNjA1MDkwNzUxMzlaMDMxMTAvBgNV BAMTKENFNTAyNTIxNjc5NTlGMDdFREVFOUE4OUNDOUNFRDZGODkxM0E0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+Bel4TCapOtsLM37Dxa9JpnJ fy+Zn3YOylFIw8Wa9HBfMYnETRfRMThFOB68lRdIROp6yLIpRU5UJpMdy9z00ZR8 dTQBmdLn/ejsEicD9jc6XQ8kg1PlJWznnRFiNxYtikiQioI9nk+U0o5zuhiU55mn 0MX22Fo3kURJ4AUlSJIqVVFa6Df3nFp4ammb6wchp1WIh4HzwFVv7cFJCXcVbCcL zKSo/Fe5NXlH2ZBPkZ+lY5zrqJvtVo/JfEV46MpOStWEpYrmpL3q1lLn16Cn1Kbh Z8tW4NljD5vW8F/1dftJ7Pb6HiwGglZ8A8l9Ydydc2saOhXqfad+zH+dnC8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzlAlIWeVnwft7pqJzJztb4kTpDgwHwYDVR0j BBgwFoAUVEwgpvxjT7Zf6RKfOIOeNcSi6VEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM3MWRiOWItN2M0MC00OTY2LTk5MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZG QzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVDNEEyRTk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDRDMjBBNkZDNjM0RkI2NUZFOTEyOUYzODgzOUUzNUM0QTJF OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlF MzVDNEEyRTk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxgizrtS86uqrAjVXsOn5JcldUf0eRNBNjG WRca5Iq0ndqApadD5EO/uvqasMz7fAc+xfTDjowfVd92vrxT72thRUg+9Qls4rJD 8fSSEkSmdJeBcKxidaKzFtVTn6VDuus66Bx+nrhrFVQHtf0Sh3B0kGjRFxP4iSQO XSbQBahckdqXMR+n/8VK/A/3ZNANK1GQ2YlTu0VvGCLfWIPAQe+WWhzAO4pj1Krt 8L0TM0g/Q1qZIAc/9HEkkCbiUq+E08d1z80TTPXDTKM7kgfEirrc6ogCc7v80+E7 tUH2eYc/43TEb1Z+hrM04e4lL7Y7Jxe8f0rX7MzcWsMSvKZUE5g= -----END CERTIFICATE-----Generated at Fri May 8 07:34:35 2026 by rpki-client