$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: cd+hZ67Vd9yRsF+w8qG6yRGg5XDcKVeo+d/aterRyNo= Subject key identifier: 37:21:CD:CB:40:F1:F3:10:43:2A:DB:1E:50:32:9D:F8:5A:8C:5D:52 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 56DDF4FFBC3398BF0094CA7ACA077F746EC9E5E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:06:07 +0000 Manifest this update: Thu 17 Sep 2026 10:01:07 +0000 Manifest next update: Fri 18 Sep 2026 11:54:07 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: I/6gfmEYlOKJaadjjZdwp3x66yhs3l/0IXIl/W6LMDY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:dd:f4:ff:bc:33:98:bf:00:94:ca:7a:ca:07:7f:74:6e:c9:e5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Sep 17 10:01:07 2026 GMT Not After : Sep 18 11:54:07 2026 GMT Subject: CN=3721CDCB40F1F310432ADB1E50329DF85A8C5D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:17:85:00:18:42:40:5f:f8:1c:9d:c4:15: a4:27:fc:bc:f9:8e:a2:9b:d5:bd:88:cd:ab:1e:c4: 19:cc:c1:67:8e:83:38:49:e8:bd:77:28:94:02:71: 82:b3:32:f5:67:de:ab:06:fb:90:30:ea:12:88:e0: 1c:3e:6e:8b:86:0b:34:7d:65:8a:3b:4f:17:e7:c7: cb:03:2f:81:a6:d9:99:ce:69:a2:ba:ef:bd:df:31: f6:49:ae:69:26:2b:9d:68:65:77:2d:d6:33:f7:b8: 7d:bf:f5:61:dc:8f:7e:0e:af:fe:fe:c5:d6:8a:88: 91:7a:ba:04:ac:14:f8:23:ef:d2:6f:fe:b5:77:d0: cc:7e:2a:d8:55:41:a8:07:74:fa:0a:97:8c:29:92: 84:a7:04:b0:d8:c8:0c:59:a5:48:23:29:52:30:74: dc:ef:76:07:42:b5:bd:fb:83:27:0c:93:b4:be:07: d2:2a:34:1b:f0:a8:d9:c3:fe:03:fd:df:ec:1e:e4: 80:47:bd:51:4e:99:49:b5:f1:a2:ec:db:d4:35:98: 22:86:7a:fe:3d:7c:79:c6:1f:b8:76:d0:24:d1:d0: 30:6d:20:88:f4:58:06:41:16:9e:d3:c9:bf:fa:f9: 55:d8:2c:a6:e0:b3:05:19:0f:a7:a8:0c:fc:25:cd: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:21:CD:CB:40:F1:F3:10:43:2A:DB:1E:50:32:9D:F8:5A:8C:5D:52 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a7:84:0f:5b:64:d0:fd:79:5a:eb:6c:8c:11:64:f6:16:f1: 33:13:26:a5:0f:07:24:7c:89:ca:13:da:d8:37:4c:bd:09:8d: 1d:ed:1f:b8:3f:83:56:55:73:6a:42:72:23:cd:e3:c6:a3:95: f0:65:e0:f6:b8:74:aa:e2:2f:19:9b:07:74:f9:43:62:20:70: 28:65:7e:79:81:5f:c7:d7:c0:a5:1f:c9:85:56:f2:88:16:d8: 04:09:8f:3c:1f:bd:71:69:bf:0b:a2:67:5c:bc:ba:53:af:96: 7a:42:09:f8:fb:52:df:9a:4d:cb:b6:35:6c:60:db:20:63:0a: 65:66:19:12:ad:84:42:0a:99:bd:d9:cd:05:cf:29:6f:2b:71: 17:62:25:ec:ce:62:7c:1b:e6:7c:1b:08:41:a8:33:15:93:e3: 0d:1f:65:9d:67:44:f0:9b:30:01:34:29:5e:27:08:e4:b0:33: a4:9a:5c:dd:5a:78:65:fc:a6:86:32:53:74:85:c1:82:fb:c7: 99:c9:08:94:37:99:b4:6b:14:0e:8b:b4:cf:64:d7:9d:98:fb: 98:b8:09:98:36:04:40:08:1d:cf:68:2e:ca:9d:be:c9:9d:27: 77:0e:34:c7:c6:01:d4:ff:1c:96:4c:34:f5:fb:1d:36:b5:2d: 2d:67:1d:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVt30/7wzmL8AlMp6ygd/dG7J5ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA5MTcxMDAxMDdaFw0yNjA5MTgxMTU0MDdaMDMxMTAvBgNV BAMTKDM3MjFDRENCNDBGMUYzMTA0MzJBREIxRTUwMzI5REY4NUE4QzVENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlBeFABhCQF/4HJ3EFaQn/Lz5 jqKb1b2IzasexBnMwWeOgzhJ6L13KJQCcYKzMvVn3qsG+5Aw6hKI4Bw+bouGCzR9 ZYo7Txfnx8sDL4Gm2ZnOaaK6773fMfZJrmkmK51oZXct1jP3uH2/9WHcj34Or/7+ xdaKiJF6ugSsFPgj79Jv/rV30Mx+KthVQagHdPoKl4wpkoSnBLDYyAxZpUgjKVIw dNzvdgdCtb37gycMk7S+B9IqNBvwqNnD/gP93+we5IBHvVFOmUm18aLs29Q1mCKG ev49fHnGH7h20CTR0DBtIIj0WAZBFp7Tyb/6+VXYLKbgswUZD6eoDPwlzf0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNyHNy0Dx8xBDKtseUDKd+FqMXVIwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWnhA9bZND9eVrrbIwRZPYW8TMTJqUPByR8 icoT2tg3TL0JjR3tH7g/g1ZVc2pCciPN48ajlfBl4Pa4dKriLxmbB3T5Q2IgcChl fnmBX8fXwKUfyYVW8ogW2AQJjzwfvXFpvwuiZ1y8ulOvlnpCCfj7Ut+aTcu2NWxg 2yBjCmVmGRKthEIKmb3ZzQXPKW8rcRdiJezOYnwb5nwbCEGoMxWT4w0fZZ1nRPCb MAE0KV4nCOSwM6SaXN1aeGX8poYyU3SFwYL7x5nJCJQ3mbRrFA6LtM9k152Y+5i4 CZg2BEAIHc9oLsqdvsmdJ3cONMfGAdT/HJZMNPX7HTa1LS1nHR0= -----END CERTIFICATE-----Generated at Thu Sep 17 14:27:24 2026 by rpki-client