$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: XRjjPyGZyZyBPlJaKZasy9QiIJ37HtP+zfVCK6o9ZPk= Subject key identifier: 4E:07:E5:3E:57:5B:CD:23:8A:33:01:C2:B5:0D:E8:99:06:06:B6:24 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 5E1D3D1A9B39720CC09212C9EAAA1F1A89F0BB83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 09:18:28 +0000 Manifest this update: Thu 18 Jun 2026 09:13:28 +0000 Manifest next update: Fri 19 Jun 2026 09:37:28 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: S6rkRs4bjCQtJ9afngg0IXoLkwSUj7RWYHTwnrZmEOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1d:3d:1a:9b:39:72:0c:c0:92:12:c9:ea:aa:1f:1a:89:f0:bb:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Jun 18 09:13:28 2026 GMT Not After : Jun 19 09:37:28 2026 GMT Subject: CN=4E07E53E575BCD238A3301C2B50DE8990606B624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:62:54:d5:67:ed:26:a3:4a:7a:e1:b0:1d:14: 4f:1d:63:a3:f9:2e:c9:1f:02:ec:51:6f:ac:48:54: c4:0a:cd:dd:21:b3:64:a8:b3:2a:e2:47:41:3d:0a: bd:3b:ab:04:5d:62:da:f5:b2:9e:0e:39:30:ab:c1: 51:08:c8:3d:e2:13:21:17:93:be:6e:11:07:ce:d5: 62:9d:c5:d6:c6:e0:35:21:31:53:fd:c8:55:aa:0c: cb:7f:14:ac:4a:b9:5e:fb:8b:11:a2:4f:9a:92:62: 78:8e:cb:94:66:9b:1a:28:47:ab:df:c3:92:bd:74: 49:b1:a2:fa:72:9f:0f:0d:61:b9:5d:88:f2:7b:c2: d0:25:74:8b:47:73:1a:fa:17:05:4b:56:0c:71:1f: fb:15:68:04:a2:7f:ad:1f:1f:2d:f5:d5:1e:5f:72: 3a:1d:e7:ab:c2:3c:50:56:cc:ce:12:74:59:6b:14: 12:2a:df:cf:d3:5f:03:3b:57:a2:7e:9d:6a:cf:64: c1:ef:2a:ce:ed:53:cd:ea:d0:e1:77:b6:ff:8c:95: 83:36:51:ae:7b:89:52:6b:74:73:be:1e:9c:3c:ae: 07:4d:97:04:ca:ab:0f:bc:a8:b8:7b:5e:04:5e:9d: 51:46:e3:01:ba:a0:fb:7e:ba:81:ea:2c:5c:f2:26: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:07:E5:3E:57:5B:CD:23:8A:33:01:C2:B5:0D:E8:99:06:06:B6:24 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:54:80:da:c7:ec:d1:88:c2:67:13:4d:b1:05:b1:16:13:9d: 23:4a:b8:03:96:ea:d5:67:23:54:6f:20:bf:a6:08:d8:5d:82: 46:4a:2e:0b:0c:00:d2:56:96:1c:14:d8:a5:5b:68:a0:ef:7f: 5d:28:86:2e:37:e3:bf:13:43:b7:66:81:fb:e6:8e:8a:37:4f: 37:2f:bf:65:7a:55:61:b7:28:69:22:eb:e6:41:8f:8d:5b:93: a5:48:22:b4:02:44:0a:df:0d:1a:69:18:19:cd:c4:a2:79:ae: 94:f9:ae:d4:05:c5:64:38:3e:81:d8:aa:56:c7:e0:2a:46:5d: 2f:96:f6:43:15:18:47:2e:c8:7b:39:bc:6b:84:8f:fb:d1:5f: 61:be:6b:d4:16:9f:c8:a5:d8:d6:87:c8:af:75:d1:f2:9e:ab: 1b:f5:f1:80:ef:4f:d6:55:90:f7:93:f8:36:ab:b7:0b:1f:66: ab:66:27:6f:a3:58:80:31:48:33:a1:53:b4:54:78:3c:af:f1: 5b:93:61:96:5c:ba:21:91:ed:9b:63:e6:27:27:75:b6:3d:74: 4e:43:e0:aa:4a:b2:88:12:ca:0e:88:14:fb:f0:6c:01:81:6d: fb:f3:e0:97:d4:8e:2e:d0:bf:97:d9:5e:c7:fa:71:c1:5c:24: c2:01:ce:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXh09Gps5cgzAkhLJ6qofGonwu4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA2MTgwOTEzMjhaFw0yNjA2MTkwOTM3MjhaMDMxMTAvBgNV BAMTKDRFMDdFNTNFNTc1QkNEMjM4QTMzMDFDMkI1MERFODk5MDYwNkI2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtYlTVZ+0mo0p64bAdFE8dY6P5 LskfAuxRb6xIVMQKzd0hs2SosyriR0E9Cr07qwRdYtr1sp4OOTCrwVEIyD3iEyEX k75uEQfO1WKdxdbG4DUhMVP9yFWqDMt/FKxKuV77ixGiT5qSYniOy5RmmxooR6vf w5K9dEmxovpynw8NYbldiPJ7wtAldItHcxr6FwVLVgxxH/sVaASif60fHy311R5f cjod56vCPFBWzM4SdFlrFBIq38/TXwM7V6J+nWrPZMHvKs7tU83q0OF3tv+MlYM2 Ua57iVJrdHO+Hpw8rgdNlwTKqw+8qLh7XgRenVFG4wG6oPt+uoHqLFzyJofDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgflPldbzSOKMwHCtQ3omQYGtiQwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhUgNrH7NGIwmcTTbEFsRYTnSNKuAOW6tVn I1RvIL+mCNhdgkZKLgsMANJWlhwU2KVbaKDvf10ohi43478TQ7dmgfvmjoo3Tzcv v2V6VWG3KGki6+ZBj41bk6VIIrQCRArfDRppGBnNxKJ5rpT5rtQFxWQ4PoHYqlbH 4CpGXS+W9kMVGEcuyHs5vGuEj/vRX2G+a9QWn8il2NaHyK910fKeqxv18YDvT9ZV kPeT+DartwsfZqtmJ2+jWIAxSDOhU7RUeDyv8VuTYZZcuiGR7Ztj5icndbY9dE5D 4KpKsogSyg6IFPvwbAGBbfvz4JfUji7Qv5fZXsf6ccFcJMIBzlI= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:04 2026 by rpki-client