$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft File: B541FB748CDF5380966403C9C7E8FA328AAC723A.mft (raw, json) Hash identifier: hSgP6HoHH0OGIcMTXl6A3KfiBP55w2rGhbi5M9chZm8= Subject key identifier: 8F:50:E8:71:F4:85:EF:9E:B5:2C:84:02:52:B7:6B:26:56:35:12:81 Authority key identifier: B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A Certificate issuer: /CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Certificate serial: 2F2935BD28F2594D9C85FF609ECC88419CEE0334 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 02:15:18 +0000 Manifest this update: Sun 02 Aug 2026 02:10:18 +0000 Manifest next update: Mon 03 Aug 2026 04:43:18 +0000 Files and hashes: 1: B541FB748CDF5380966403C9C7E8FA328AAC723A.crl (hash: QYAP/Q2UCxaM6imkoYTzsZ1gjYzaP3KDq387QlcmVLY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:29:35:bd:28:f2:59:4d:9c:85:ff:60:9e:cc:88:41:9c:ee:03:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B541FB748CDF5380966403C9C7E8FA328AAC723A Validity Not Before: Aug 2 02:10:18 2026 GMT Not After : Aug 3 04:43:18 2026 GMT Subject: CN=8F50E871F485EF9EB52C840252B76B2656351281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:ac:98:99:e0:79:a8:03:a2:0d:e2:01:f7: 68:f2:36:e2:21:5a:a1:80:fd:b9:08:79:43:c4:f5: f6:1a:c8:ef:c7:1a:85:d4:2b:81:8a:49:23:0e:76: 24:88:25:4b:4a:7e:7b:6d:a3:96:50:39:1d:a5:46: 55:29:82:fc:df:f0:c1:82:41:18:5a:88:89:0f:bc: ab:80:e9:15:12:b3:40:84:3c:44:6b:ea:98:ed:ba: d3:a0:e3:1b:71:a5:fa:41:ec:cb:f8:05:d3:d5:02: b8:a7:5a:0c:1a:47:9b:ff:13:c9:98:fc:75:cb:07: 25:01:d1:06:82:99:ec:53:61:f7:08:ce:62:61:ba: de:8a:85:0f:7d:95:38:bc:e0:bf:59:b9:a1:86:b3: 4b:4e:24:7c:4f:0a:63:cb:7c:ba:df:6d:15:d6:d9: d6:2c:f4:16:6d:e0:32:1c:c5:d4:25:57:8d:80:f8: 6e:5c:76:d2:c8:6a:36:25:84:1e:d5:27:21:2a:cc: e7:df:d9:6c:7d:3f:11:9a:b6:27:89:f0:13:ab:3f: 1f:b9:9f:08:e5:07:75:1a:d5:72:8a:83:a3:57:54: a4:83:1b:f4:7f:97:36:3d:42:e6:ff:c9:2f:c9:54: 68:28:f6:ce:af:6e:2e:20:a8:0b:c1:cc:30:48:e6: dd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:50:E8:71:F4:85:EF:9E:B5:2C:84:02:52:B7:6B:26:56:35:12:81 X509v3 Authority Key Identifier: keyid:B5:41:FB:74:8C:DF:53:80:96:64:03:C9:C7:E8:FA:32:8A:AC:72:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/B541FB748CDF5380966403C9C7E8FA328AAC723A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:59:4a:29:f8:15:01:ee:ab:86:ca:f7:1c:5d:e2:45:09:08: 3d:0b:2a:26:75:32:ee:f2:ab:7f:ea:4e:46:d7:1d:50:d8:05: 9c:b0:98:5e:87:31:71:59:f2:d1:3d:a0:ee:24:15:7d:8f:65: dc:f6:90:e2:f6:fb:87:aa:79:b5:57:20:67:7f:07:d6:71:8e: 44:5b:0c:2b:85:7f:0f:5d:c2:88:27:bc:16:56:eb:ef:48:12: df:1b:eb:87:18:d3:01:b2:00:f6:d3:e5:2d:97:89:47:36:fd: 4a:97:3a:4f:5e:11:7e:37:a3:32:30:88:70:dc:05:f2:c4:35: 9c:5a:b9:4e:7f:11:99:a4:00:9d:e0:1e:1c:88:c7:1c:c8:73: 0a:3e:54:ec:42:99:f8:67:6c:64:d3:84:82:ee:3c:26:0f:ea: a5:8f:ed:03:44:d5:01:d8:59:29:58:93:ff:3e:45:62:58:99: 4e:35:45:82:6a:67:3a:5a:36:b1:16:29:37:99:35:0a:5f:35: a1:80:e2:4b:03:96:fd:db:7f:86:2e:35:30:8f:26:f0:58:01: 0c:79:ee:e5:79:bf:e7:4c:c6:e9:b3:5b:09:64:d0:99:f6:f2: 5b:ad:79:73:54:20:c3:ff:43:31:aa:c3:14:77:d4:95:5c:ad: c3:82:74:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyk1vSjyWU2chf9gnsyIQZzuAzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4 QUFDNzIzQTAeFw0yNjA4MDIwMjEwMThaFw0yNjA4MDMwNDQzMThaMDMxMTAvBgNV BAMTKDhGNTBFODcxRjQ4NUVGOUVCNTJDODQwMjUyQjc2QjI2NTYzNTEyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVG6yYmeB5qAOiDeIB92jyNuIh WqGA/bkIeUPE9fYayO/HGoXUK4GKSSMOdiSIJUtKfntto5ZQOR2lRlUpgvzf8MGC QRhaiIkPvKuA6RUSs0CEPERr6pjtutOg4xtxpfpB7Mv4BdPVArinWgwaR5v/E8mY /HXLByUB0QaCmexTYfcIzmJhut6KhQ99lTi84L9ZuaGGs0tOJHxPCmPLfLrfbRXW 2dYs9BZt4DIcxdQlV42A+G5cdtLIajYlhB7VJyEqzOff2Wx9PxGatieJ8BOrPx+5 nwjlB3Ua1XKKg6NXVKSDG/R/lzY9Qub/yS/JVGgo9s6vbi4gqAvBzDBI5t2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1DocfSF7561LIQCUrdrJlY1EoEwHwYDVR0j BBgwFoAUtUH7dIzfU4CWZAPJx+j6MoqscjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4 Q0RGNTM4MDk2NjQwM0M5QzdFOEZBMzI4QUFDNzIzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTQxRkI3NDhDREY1MzgwOTY2NDAzQzlDN0U4RkEzMjhBQUM3 MjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvQjU0MUZCNzQ4Q0RGNTM4MDk2NjQwM0M5QzdFOEZB MzI4QUFDNzIzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1ZSin4FQHuq4bK9xxd4kUJCD0LKiZ1Mu7y q3/qTkbXHVDYBZywmF6HMXFZ8tE9oO4kFX2PZdz2kOL2+4eqebVXIGd/B9ZxjkRb DCuFfw9dwognvBZW6+9IEt8b64cY0wGyAPbT5S2XiUc2/UqXOk9eEX43ozIwiHDc BfLENZxauU5/EZmkAJ3gHhyIxxzIcwo+VOxCmfhnbGTThILuPCYP6qWP7QNE1QHY WSlYk/8+RWJYmU41RYJqZzpaNrEWKTeZNQpfNaGA4ksDlv3bf4YuNTCPJvBYAQx5 7uV5v+dMxumzWwlk0Jn28luteXNUIMP/QzGqwxR31JVcrcOCdII= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:54 2026 by rpki-client