$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft File: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft (raw, json) Hash identifier: mYbsYysF61OTHg0qG23tinHp2oEt4yCZdIGrGCH4yDc= Subject key identifier: 7F:E5:18:32:A3:C1:97:9E:C9:C1:9F:F4:96:9E:9A:A4:85:8C:C0:CE Authority key identifier: 54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 Certificate issuer: /CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Certificate serial: 38A690E6E068DB282084410ED0F920E3F36F5C3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:59:37 +0000 Manifest this update: Sat 20 Jun 2026 03:54:37 +0000 Manifest next update: Sun 21 Jun 2026 05:48:37 +0000 Files and hashes: 1: 543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl (hash: BszFx4BrVLZUeviJIM9PSWpmYPFx66B8IDlFy6NKNYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a6:90:e6:e0:68:db:28:20:84:41:0e:d0:f9:20:e3:f3:6f:5c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543522D176375B1B99BDD916E7B3D97AFCB9EB82 Validity Not Before: Jun 20 03:54:37 2026 GMT Not After : Jun 21 05:48:37 2026 GMT Subject: CN=7FE51832A3C1979EC9C19FF4969E9AA4858CC0CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:da:ca:55:d3:a4:ce:fe:9c:45:d2:fd:8b: 3f:59:fc:29:e6:35:e2:06:83:75:a3:7e:3b:23:8a: 95:4e:29:b3:33:b3:c7:b4:79:3f:cb:5e:05:82:68: 8d:e7:0a:d8:1f:7e:31:a9:56:4f:1b:2a:06:80:61: a0:8c:ff:80:0a:0f:a9:da:12:a2:84:42:fb:15:8c: ea:52:69:ac:f8:aa:ce:68:83:cd:4b:9a:0b:b2:54: 8c:b2:fd:da:06:cd:4c:a9:7e:a1:3c:95:4b:b4:16: 64:c6:d5:10:f8:91:bd:34:6d:4c:63:a9:3f:47:dd: 30:da:36:fd:3f:c6:ca:7f:99:84:cf:42:4a:d9:bb: 65:ef:21:87:f4:f3:93:1d:ce:b1:d4:10:86:e8:dd: d9:62:69:16:74:8c:87:4e:d2:c8:f9:2f:b9:5d:e2: 66:cc:eb:8f:ca:81:43:b4:6f:fa:8a:47:8a:82:d3: 75:5a:9d:f9:35:7e:37:b6:0b:24:4e:49:dd:54:35: b8:34:6c:64:69:0c:84:22:71:0e:0d:f1:16:b9:03: 7d:ab:71:ee:62:bb:f4:0b:a1:9f:cf:38:4c:30:89: a3:a2:3a:ac:bf:4c:80:57:f0:36:69:a6:80:f5:12: 1b:b8:be:8f:78:f7:be:1c:e5:e8:c2:d2:48:b6:87: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:18:32:A3:C1:97:9E:C9:C1:9F:F4:96:9E:9A:A4:85:8C:C0:CE X509v3 Authority Key Identifier: keyid:54:35:22:D1:76:37:5B:1B:99:BD:D9:16:E7:B3:D9:7A:FC:B9:EB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/543522D176375B1B99BDD916E7B3D97AFCB9EB82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/543522D176375B1B99BDD916E7B3D97AFCB9EB82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:39:77:a0:6a:57:a2:b4:8c:3a:fc:49:b7:a1:c2:7c:05:18: 01:ce:d6:68:b1:44:58:a2:ca:e0:17:61:ca:e6:0c:8d:31:1d: 15:d9:cd:ed:88:46:14:d2:a5:dc:87:29:b8:f4:6d:15:7c:88: be:85:d6:a2:92:6d:a4:46:18:42:e4:86:23:3b:b4:bf:c7:f1: 60:46:5e:26:bb:ec:f4:e6:7b:46:af:b2:fd:78:ec:cd:a7:6d: de:0e:98:73:31:de:b3:03:6d:6b:75:e6:9c:19:9d:05:b7:68: a1:e1:7a:76:74:2e:5f:27:d8:81:d7:19:6f:68:ae:56:76:b9: 51:94:ba:bf:be:ab:d8:33:44:08:60:ba:6d:80:2d:0e:80:b2: 90:33:37:94:5c:14:72:db:d7:ab:ed:e6:a3:0e:5e:b9:68:a8: f1:76:60:46:bb:08:9b:d0:63:96:e2:07:bd:fc:58:62:21:93: dd:7d:3b:95:a7:5c:b8:c0:c8:8b:2f:1e:d1:22:dc:3e:19:bc: a2:15:a5:7e:68:1d:e2:5d:89:63:79:41:a3:9e:bc:f9:e5:74: 14:a5:61:f4:1e:a3:21:75:de:6a:f0:49:c9:3a:e9:72:8e:3f: 19:2e:d8:8e:89:6e:5f:ea:fb:dd:d4:5d:59:d5:e6:79:eb:0f: 26:78:63:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKaQ5uBo2ygghEEO0Pkg4/NvXDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FG Q0I5RUI4MjAeFw0yNjA2MjAwMzU0MzdaFw0yNjA2MjEwNTQ4MzdaMDMxMTAvBgNV BAMTKDdGRTUxODMyQTNDMTk3OUVDOUMxOUZGNDk2OUU5QUE0ODU4Q0MwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5trKVdOkzv6cRdL9iz9Z/Cnm NeIGg3WjfjsjipVOKbMzs8e0eT/LXgWCaI3nCtgffjGpVk8bKgaAYaCM/4AKD6na EqKEQvsVjOpSaaz4qs5og81LmguyVIyy/doGzUypfqE8lUu0FmTG1RD4kb00bUxj qT9H3TDaNv0/xsp/mYTPQkrZu2XvIYf085MdzrHUEIbo3dliaRZ0jIdO0sj5L7ld 4mbM64/KgUO0b/qKR4qC03Vanfk1fje2CyROSd1UNbg0bGRpDIQicQ4N8Ra5A32r ce5iu/QLoZ/POEwwiaOiOqy/TIBX8DZppoD1Ehu4vo94974c5ejC0ki2hzdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf+UYMqPBl57JwZ/0lp6apIWMwM4wHwYDVR0j BBgwFoAUVDUi0XY3WxuZvdkW57PZevy564IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmZTE2M2MtMTRkNS00ZTMxLWFjMjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3 NjM3NUIxQjk5QkREOTE2RTdCM0Q5N0FGQ0I5RUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDM1MjJEMTc2Mzc1QjFCOTlCREQ5MTZFN0IzRDk3QUZDQjlF QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTQzNTIyRDE3NjM3NUIxQjk5QkREOTE2RTdCM0Q5 N0FGQ0I5RUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA5d6BqV6K0jDr8SbehwnwFGAHO1mixRFii yuAXYcrmDI0xHRXZze2IRhTSpdyHKbj0bRV8iL6F1qKSbaRGGELkhiM7tL/H8WBG Xia77PTme0avsv147M2nbd4OmHMx3rMDbWt15pwZnQW3aKHhenZ0Ll8n2IHXGW9o rlZ2uVGUur++q9gzRAhgum2ALQ6AspAzN5RcFHLb16vt5qMOXrloqPF2YEa7CJvQ Y5biB738WGIhk919O5WnXLjAyIsvHtEi3D4ZvKIVpX5oHeJdiWN5QaOevPnldBSl YfQeoyF13mrwSck66XKOPxku2I6Jbl/q+93UXVnV5nnrDyZ4YxU= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:58 2026 by rpki-client