$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json) Hash identifier: ASN9c8zX5ZdPNuAcBmVYx/+CiFSqsQokm1wdEBcPoAI= Subject key identifier: CE:95:AB:58:A1:7C:A0:74:95:4F:F9:73:62:6D:5C:78:5E:D5:0B:31 Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 Certificate issuer: /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Certificate serial: 3DC42F4DF1E63F2F50B99A5B7DBE715E7479796F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft Manifest number: D8 Signing time: Sun 11 Oct 2026 01:53:36 +0000 Manifest this update: Sun 11 Oct 2026 01:48:36 +0000 Manifest next update: Mon 12 Oct 2026 04:51:36 +0000 Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=) 2: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: OmUqXziDC012VYc4fu7OGeIX2j5+KKjXLvLb9XSLEb4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c4:2f:4d:f1:e6:3f:2f:50:b9:9a:5b:7d:be:71:5e:74:79:79:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951 Validity Not Before: Oct 11 01:48:36 2026 GMT Not After : Oct 12 04:51:36 2026 GMT Subject: CN=CE95AB58A17CA074954FF973626D5C785ED50B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3d:64:9b:99:d1:9c:2b:bb:c3:7a:74:3b:5a: b1:76:5d:41:7c:54:44:15:5d:9e:9c:34:5b:8b:ab: 3b:25:de:db:58:3f:03:86:6a:63:2d:8d:2d:f9:14: 1e:1a:eb:0a:f1:b2:da:20:41:e6:9a:f7:ef:88:ad: 4b:cc:88:d8:aa:9d:c6:88:ec:21:b0:30:00:40:37: 53:1b:9e:24:c6:72:72:54:dd:4f:9c:73:81:38:f3: b3:90:a1:03:e3:58:3f:b0:c9:67:92:76:b7:2e:56: ee:c6:75:66:b2:69:11:1b:2a:aa:90:0d:fc:21:ed: 5f:d1:a5:2f:d5:c0:61:fd:e4:09:35:11:57:de:db: 18:68:d8:33:d9:78:1b:88:97:d8:d8:bb:6d:58:a4: 53:40:fc:94:a9:b2:95:7d:1d:46:33:28:5e:a4:0c: 7b:98:50:da:20:e8:79:b8:76:5e:ff:cc:6f:e5:ec: c7:d2:2d:e9:e3:a7:20:73:e2:6c:cc:81:6d:ab:65: 72:e1:50:94:53:d7:cd:da:e3:61:78:86:c8:66:dc: 1b:39:1b:3a:a4:7a:d9:cd:9e:c4:75:e3:c3:c5:ba: 17:73:61:f0:c1:52:f9:ee:95:bf:78:e7:8f:02:81: 01:77:e3:16:1d:d1:bd:90:12:c0:8a:51:86:2e:da: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:95:AB:58:A1:7C:A0:74:95:4F:F9:73:62:6D:5C:78:5E:D5:0B:31 X509v3 Authority Key Identifier: keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f0:77:70:dc:1c:92:c6:ef:ba:a7:90:5a:aa:94:b4:f5:48: d0:ce:d9:1e:2c:59:b7:e2:9a:26:e7:75:53:dc:fc:f0:a5:c4: 0a:22:80:f3:49:2d:94:61:7e:59:7f:3d:c1:e1:32:4d:91:f2: 55:f6:8c:74:8e:da:06:18:c0:77:11:78:b4:5c:60:49:10:80: c4:e9:40:39:10:28:0e:3b:72:ff:40:e1:63:43:7b:08:a8:60: 90:e1:00:e1:f6:d5:8e:7e:98:9b:e3:6b:90:57:c3:32:9c:35: 3d:d5:ab:15:64:35:b5:26:65:37:8e:6b:53:1e:02:6c:fc:f6: a2:0e:00:45:60:52:95:3c:3c:d8:da:5d:a9:08:c8:83:de:52: d5:c3:25:7c:7d:55:19:db:b0:4b:6a:67:4f:50:59:98:7f:6b: 19:17:12:66:60:b2:c9:9a:52:74:6c:bd:a3:1f:05:79:35:08: ed:55:28:8f:fa:e8:bf:21:1f:4d:83:01:be:4e:ff:a1:b9:15: fd:91:a2:a4:b5:4f:96:6f:86:85:d9:6a:d3:56:09:6f:b3:fd: 90:33:8b:b3:67:36:9c:76:ba:f3:1d:7b:89:57:c6:2a:35:20: 4d:33:fa:ae:9f:de:a7:11:de:0e:37:8b:a4:22:f9:ea:70:28: a8:73:4c:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcQvTfHmPy9QuZpbfb5xXnR5eW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVD NEEyRTk1MTAeFw0yNjEwMTEwMTQ4MzZaFw0yNjEwMTIwNDUxMzZaMDMxMTAvBgNV BAMTKENFOTVBQjU4QTE3Q0EwNzQ5NTRGRjk3MzYyNkQ1Qzc4NUVENTBCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiPWSbmdGcK7vDenQ7WrF2XUF8 VEQVXZ6cNFuLqzsl3ttYPwOGamMtjS35FB4a6wrxstogQeaa9++IrUvMiNiqncaI 7CGwMABAN1MbniTGcnJU3U+cc4E487OQoQPjWD+wyWeSdrcuVu7GdWayaREbKqqQ Dfwh7V/RpS/VwGH95Ak1EVfe2xho2DPZeBuIl9jYu21YpFNA/JSpspV9HUYzKF6k DHuYUNog6Hm4dl7/zG/l7MfSLenjpyBz4mzMgW2rZXLhUJRT183a42F4hshm3Bs5 GzqketnNnsR148PFuhdzYfDBUvnulb94548CgQF34xYd0b2QEsCKUYYu2odPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpWrWKF8oHSVT/lzYm1ceF7VCzEwHwYDVR0j BBgwFoAUVEwgpvxjT7Zf6RKfOIOeNcSi6VEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM3MWRiOWItN2M0MC00OTY2LTk5MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZG QzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVDNEEyRTk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDRDMjBBNkZDNjM0RkI2NUZFOTEyOUYzODgzOUUzNUM0QTJF OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlF MzVDNEEyRTk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzwd3DcHJLG77qnkFqqlLT1SNDO2R4sWbfi mibndVPc/PClxAoigPNJLZRhfll/PcHhMk2R8lX2jHSO2gYYwHcReLRcYEkQgMTp QDkQKA47cv9A4WNDewioYJDhAOH21Y5+mJvja5BXwzKcNT3VqxVkNbUmZTeOa1Me Amz89qIOAEVgUpU8PNjaXakIyIPeUtXDJXx9VRnbsEtqZ09QWZh/axkXEmZgssma UnRsvaMfBXk1CO1VKI/66L8hH02DAb5O/6G5Ff2RoqS1T5ZvhoXZatNWCW+z/ZAz i7NnNpx2uvMde4lXxio1IE0z+q6f3qcR3g43i6Qi+epwKKhzTAk= -----END CERTIFICATE-----Generated at Sun Oct 11 06:21:26 2026 by rpki-client