$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft File: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft (raw, json) Hash identifier: +dR7qWDuzlHMEtnuEelFsHl4NW5+msmfUWObPlFEkhY= Subject key identifier: CA:C8:1D:02:76:64:4E:D5:E1:B0:CC:9C:C0:C3:89:83:42:65:37:A7 Authority key identifier: 54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 Certificate issuer: /CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Certificate serial: 56803E8B0948FD5C2D2B1FB5ABBEF5DEC426531F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 05:14:56 +0000 Manifest this update: Thu 17 Sep 2026 05:09:56 +0000 Manifest next update: Fri 18 Sep 2026 08:55:56 +0000 Files and hashes: 1: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl (hash: WrLhcmjpKibpR1Tai3WBgldJqzENeP/WEFNQUAPrdVI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:80:3e:8b:09:48:fd:5c:2d:2b:1f:b5:ab:be:f5:de:c4:26:53:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Validity Not Before: Sep 17 05:09:56 2026 GMT Not After : Sep 18 08:55:56 2026 GMT Subject: CN=CAC81D0276644ED5E1B0CC9CC0C38983426537A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:e9:af:b3:1e:55:91:25:92:c8:9e:3a:5d: 00:4f:80:cb:80:63:8c:de:ae:72:98:50:f8:7d:fa: ee:c9:cb:e5:a9:fe:d6:da:69:9a:c7:99:d2:0e:f3: ab:06:ad:5a:4c:47:30:aa:95:9b:af:cd:87:1b:2c: 9c:bf:ac:07:51:47:c6:a8:f2:b3:b3:54:3b:77:d3: 6d:5c:bc:a4:ff:9e:85:a3:64:97:bc:59:9b:b3:9f: ac:2a:b2:94:af:8f:f8:c5:8e:9e:07:69:be:d8:99: 25:c2:5f:9a:c5:cb:86:ae:71:bd:a9:01:97:db:04: cc:92:eb:9c:b0:e7:74:66:04:d9:46:34:cc:2e:fd: 37:49:47:a7:5c:cd:b3:3e:4c:98:e9:37:67:e2:ff: 91:d6:f3:c5:2c:f9:80:97:96:4b:12:7f:87:4c:89: f3:61:be:f9:f4:aa:01:f3:8d:ee:f5:35:21:dc:28: c5:3a:fe:61:ff:c1:63:7d:76:a4:a2:e1:05:97:af: 37:78:43:0a:1e:cf:0f:05:55:8e:88:24:61:e5:be: 5d:78:72:01:96:90:e3:aa:3c:4e:97:9b:71:23:74: b2:01:21:69:33:aa:dc:1f:ca:a2:f1:b7:7e:72:3b: 57:6d:01:ea:d4:db:dd:ba:84:bc:cd:f3:3c:a3:34: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C8:1D:02:76:64:4E:D5:E1:B0:CC:9C:C0:C3:89:83:42:65:37:A7 X509v3 Authority Key Identifier: keyid:54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0b:5d:8a:89:fe:94:dc:0a:b2:72:19:c6:45:cf:82:e7:e3: a3:5e:b5:25:d9:8a:b6:55:81:31:db:85:ca:7c:fa:81:fe:31: fa:85:9f:17:71:42:61:fe:20:12:93:d4:7e:fe:51:53:46:59: e9:b5:ea:aa:15:4d:69:cc:b2:70:c5:bd:20:d0:f5:84:1c:57: 50:02:5d:4c:3c:78:78:a9:60:8c:02:fc:22:50:e6:62:0e:9b: 19:f0:e7:4b:23:43:90:68:f1:aa:73:ec:c6:fd:f6:31:c3:ff: 94:7f:9f:b2:9d:a6:32:f9:d9:1d:42:7c:c0:22:4d:dc:e2:64: b9:8e:d3:7f:df:f8:a3:55:1a:b3:71:7c:5b:08:94:80:2e:93: 33:a1:f2:91:1d:dc:56:3c:a0:a0:b9:8b:43:bb:d9:b2:49:4b: ef:ce:e6:5c:89:90:9e:0c:c5:79:5c:73:f0:6d:1e:41:2a:15: a4:6d:48:c7:40:4e:77:34:ff:95:52:7c:4b:22:76:58:b4:b8: 9b:81:9b:34:d1:c5:23:0e:2a:92:5a:14:ad:b9:0d:3a:52:64: 1d:94:ca:72:67:3a:5d:f9:27:c7:8c:23:32:a4:a0:9e:b6:42: 7a:5b:4c:8a:8d:69:fb:4a:05:dc:f3:37:53:47:f1:05:08:73: 05:33:1c:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVoA+iwlI/VwtKx+1q7713sQmUx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FG Q0I5RUI4MjAeFw0yNjA5MTcwNTA5NTZaFw0yNjA5MTgwODU1NTZaMDMxMTAvBgNV BAMTKENBQzgxRDAyNzY2NDRFRDVFMUIwQ0M5Q0MwQzM4OTgzNDI2NTM3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7Omvsx5VkSWSyJ46XQBPgMuA Y4zernKYUPh9+u7Jy+Wp/tbaaZrHmdIO86sGrVpMRzCqlZuvzYcbLJy/rAdRR8ao 8rOzVDt3021cvKT/noWjZJe8WZuzn6wqspSvj/jFjp4Hab7YmSXCX5rFy4aucb2p AZfbBMyS65yw53RmBNlGNMwu/TdJR6dczbM+TJjpN2fi/5HW88Us+YCXlksSf4dM ifNhvvn0qgHzje71NSHcKMU6/mH/wWN9dqSi4QWXrzd4Qwoezw8FVY6IJGHlvl14 cgGWkOOqPE6Xm3EjdLIBIWkzqtwfyqLxt35yO1dtAerU2926hLzN8zyjNAU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUysgdAnZkTtXhsMycwMOJg0JlN6cwHwYDVR0j BBgwFoAUVDUi0XY3WxuZvdkW57PZevy564IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmZTE2M2MtMTRkNS00ZTMxLWFjMjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3 NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FGQ0I5RUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDM1MjJEMTc2Mzc1QjFCOTlCREQ5MTZFN0IzRDk3QUZDQjlF QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5 N0FGQ0I5RUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8LXYqJ/pTcCrJyGcZFz4Ln46NetSXZirZV gTHbhcp8+oH+MfqFnxdxQmH+IBKT1H7+UVNGWem16qoVTWnMsnDFvSDQ9YQcV1AC XUw8eHipYIwC/CJQ5mIOmxnw50sjQ5Bo8apz7Mb99jHD/5R/n7KdpjL52R1CfMAi TdziZLmO03/f+KNVGrNxfFsIlIAukzOh8pEd3FY8oKC5i0O72bJJS+/O5lyJkJ4M xXlcc/BtHkEqFaRtSMdATnc0/5VSfEsidli0uJuBmzTRxSMOKpJaFK25DTpSZB2U ynJnOl35J8eMIzKkoJ62QnpbTIqNaftKBdzzN1NH8QUIcwUzHFA= -----END CERTIFICATE-----Generated at Thu Sep 17 07:33:32 2026 by rpki-client