$ rpki-client -vvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json) Hash identifier: xCNood7d9z2MBTtNxKAJcPmLx3/OlfVsGbvLQtc48mE= Subject key identifier: 35:10:04:9F:70:81:CC:8E:8C:EB:46:2D:FD:BB:C6:4B:ED:81:C1:2D Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 Certificate issuer: /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Certificate serial: 17CBC19FB9D32D325A6438EEB068020A141C177D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft Manifest number: 48 Signing time: Wed 24 Jun 2026 15:08:41 +0000 Manifest this update: Wed 24 Jun 2026 15:03:41 +0000 Manifest next update: Thu 25 Jun 2026 17:43:41 +0000 Files and hashes: 1: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: K+PqpLkciHrPfb3m1S1JXA/dhJkbUNbssu4letNghsk=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 06:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cb:c1:9f:b9:d3:2d:32:5a:64:38:ee:b0:68:02:0a:14:1c:17:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Validity Not Before: Jun 24 15:03:41 2026 GMT Not After : Jun 25 17:43:41 2026 GMT Subject: CN=3510049F7081CC8E8CEB462DFDBBC64BED81C12D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:20:c9:25:af:d9:f5:ac:48:9b:76:04:01: ae:5f:33:a7:5a:4b:e5:ed:59:3d:23:87:92:aa:59: be:15:bf:13:0c:00:d5:c9:d7:4e:50:29:57:f4:a1: 6e:af:90:f9:f6:e3:62:15:e6:10:29:cf:f2:06:1e: 9b:28:79:e0:28:ec:6f:5d:3d:37:1b:ea:55:e8:73: b9:ee:96:52:d6:69:40:1d:a5:3b:cd:23:a8:3c:39: 94:e0:41:af:48:5f:b5:7c:8e:e7:60:12:1f:2b:0a: 33:80:93:d6:9b:d7:2b:c9:e2:c6:dd:01:d2:ef:d9: 5e:e9:96:9b:7f:58:95:9c:36:c6:9b:43:0e:dd:c5: 90:12:a8:d6:35:f9:41:b5:33:3e:8e:61:98:28:32: bc:c2:4f:d0:e1:72:eb:4d:6e:16:ad:d1:4a:7b:ed: af:0c:af:16:a0:5e:76:97:b6:5b:37:af:04:02:79: 47:f9:4b:9d:6a:8c:0b:e5:12:36:cc:c5:fa:d1:0e: 5c:b5:af:88:b4:4e:44:dc:40:03:3d:58:71:bd:34: 80:56:4c:3f:d0:f9:5d:0e:34:56:61:f8:97:65:c6: a4:6d:44:7e:95:40:42:ef:80:ce:8a:12:bf:fc:6d: 6c:43:c2:ba:20:ca:29:f9:21:3a:14:9c:42:d7:eb: 0a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:10:04:9F:70:81:CC:8E:8C:EB:46:2D:FD:BB:C6:4B:ED:81:C1:2D X509v3 Authority Key Identifier: keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d4:fd:dd:81:66:1d:b4:29:4f:36:70:31:67:bc:ed:89:7b: 53:2c:9a:6a:45:f7:4d:c4:14:86:96:12:68:af:03:8f:51:da: 13:cb:40:33:6e:79:92:d0:2a:24:68:ba:13:d0:cb:81:bf:4c: 0f:dc:68:a1:4d:d8:c4:f1:35:65:f3:f0:db:44:9d:60:ce:4e: fb:99:b7:fb:7a:64:1c:2c:92:db:6d:a9:34:98:d3:08:26:0c: 04:ba:2e:8b:92:ca:57:a0:eb:3a:50:28:6a:70:ff:b6:c4:88: 08:ff:73:68:42:c6:44:6d:02:ea:35:9b:fe:3f:44:f3:0f:ee: 34:44:12:f6:dd:ea:22:26:79:08:90:23:c5:3c:cf:21:b9:34: 32:70:30:c7:55:df:3b:90:51:69:8b:3b:99:6c:01:e0:27:44: da:50:1e:b6:80:7c:35:c8:5c:19:f0:22:aa:a1:d7:7d:bb:cc: bd:6d:27:69:50:45:86:c7:0c:3a:b9:1c:7a:fa:e5:4a:05:05: 49:21:6d:14:78:47:5f:9b:ea:81:36:76:3c:e4:be:84:8d:9a: 37:78:6e:7e:39:63:69:3f:5e:c9:4d:01:25:3d:91:77:98:8b: 70:b0:ed:ea:ea:44:84:fb:64:17:02:42:49:fa:55:5f:a1:f8: 19:b5:f8:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8vBn7nTLTJaZDjusGgCChQcF30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVD NEEyRTk1MTAeFw0yNjA2MjQxNTAzNDFaFw0yNjA2MjUxNzQzNDFaMDMxMTAvBgNV BAMTKDM1MTAwNDlGNzA4MUNDOEU4Q0VCNDYyREZEQkJDNjRCRUQ4MUMxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3SDJJa/Z9axIm3YEAa5fM6da S+XtWT0jh5KqWb4VvxMMANXJ105QKVf0oW6vkPn242IV5hApz/IGHpsoeeAo7G9d PTcb6lXoc7nullLWaUAdpTvNI6g8OZTgQa9IX7V8judgEh8rCjOAk9ab1yvJ4sbd AdLv2V7plpt/WJWcNsabQw7dxZASqNY1+UG1Mz6OYZgoMrzCT9DhcutNbhat0Up7 7a8MrxagXnaXtls3rwQCeUf5S51qjAvlEjbMxfrRDly1r4i0TkTcQAM9WHG9NIBW TD/Q+V0ONFZh+JdlxqRtRH6VQELvgM6KEr/8bWxDwrogyin5IToUnELX6wpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRAEn3CBzI6M60Yt/bvGS+2BwS0wHwYDVR0j BBgwFoAUVEwgpvxjT7Zf6RKfOIOeNcSi6VEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM3MWRiOWItN2M0MC00OTY2LTk5MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZG QzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVDNEEyRTk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDRDMjBBNkZDNjM0RkI2NUZFOTEyOUYzODgzOUUzNUM0QTJF OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlF MzVDNEEyRTk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/U/d2BZh20KU82cDFnvO2Je1MsmmpF903E FIaWEmivA49R2hPLQDNueZLQKiRouhPQy4G/TA/caKFN2MTxNWXz8NtEnWDOTvuZ t/t6ZBwsktttqTSY0wgmDAS6LouSyleg6zpQKGpw/7bEiAj/c2hCxkRtAuo1m/4/ RPMP7jREEvbd6iImeQiQI8U8zyG5NDJwMMdV3zuQUWmLO5lsAeAnRNpQHraAfDXI XBnwIqqh1327zL1tJ2lQRYbHDDq5HHr65UoFBUkhbRR4R1+b6oE2djzkvoSNmjd4 bn45Y2k/XslNASU9kXeYi3Cw7erqRIT7ZBcCQkn6VV+h+Bm1+Kg= -----END CERTIFICATE-----Generated at Wed Jun 24 16:43:14 2026 by rpki-client