$ rpki-client -vvf rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft File: 54AF61D322823AA9528CD145C400C58C1FA4526E.mft (raw, json) Hash identifier: ip0/7WzUxfLBRocoIT+y/lOuiGt9RBsk/UBARB4EiLA= Subject key identifier: 95:09:53:B3:FD:58:86:82:E0:93:2C:A3:66:5D:47:DC:B7:28:82:B9 Authority key identifier: 54:AF:61:D3:22:82:3A:A9:52:8C:D1:45:C4:00:C5:8C:1F:A4:52:6E Certificate issuer: /CN=54AF61D322823AA9528CD145C400C58C1FA4526E Certificate serial: 35F8E03189DA7FF6B9CD3BF7D94BDABEC9D63A71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 15:09:04 +0000 Manifest this update: Fri 19 Jun 2026 15:04:04 +0000 Manifest next update: Sat 20 Jun 2026 19:01:04 +0000 Files and hashes: 1: 54AF61D322823AA9528CD145C400C58C1FA4526E.crl (hash: MneVff4oMG3r2bAjVLe79970bh4ORkztViPL/DXEtUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.crl rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f8:e0:31:89:da:7f:f6:b9:cd:3b:f7:d9:4b:da:be:c9:d6:3a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AF61D322823AA9528CD145C400C58C1FA4526E Validity Not Before: Jun 19 15:04:04 2026 GMT Not After : Jun 20 19:01:04 2026 GMT Subject: CN=950953B3FD588682E0932CA3665D47DCB72882B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:00:85:60:22:4b:d6:70:b7:b8:f5:79:ef:bf: 80:11:51:58:71:5e:8d:87:d4:20:48:d6:50:42:4f: 95:88:79:e5:99:d2:e4:95:70:e1:9e:59:54:40:77: 83:82:1f:4a:50:28:2b:4f:49:7a:43:30:d5:e2:6b: 53:a2:79:4a:85:ff:10:07:65:4f:dc:2e:26:a8:f1: 7a:dc:5b:43:ee:13:01:9b:cf:c9:46:47:28:c9:49: b7:bf:d0:42:7b:ed:59:99:5a:44:20:af:75:fb:b9: 7e:b3:7c:1b:cd:56:b1:2b:6b:12:6d:fb:e1:dd:e5: d1:bf:74:1b:bf:64:73:1c:f8:7b:f7:98:ae:55:4a: 20:b7:1d:27:51:50:8d:75:70:58:91:44:71:88:3c: ba:76:f4:b7:ba:b8:fd:52:b4:6b:06:d4:92:c1:8a: 28:60:76:a4:bd:91:24:a4:51:1e:7b:39:c1:b0:1b: 67:3b:3f:f7:16:10:af:04:e7:27:22:0a:05:19:8b: a2:a6:16:32:9d:c4:ef:89:ca:e6:09:d0:ad:51:7b: a7:55:c0:c0:dd:ed:d0:5e:e9:58:a3:49:f5:3d:7a: 67:b7:8b:aa:88:0c:5e:d7:67:ce:64:6e:49:b0:e4: bb:5e:ce:b6:bf:ba:57:91:be:11:23:58:ae:d2:4d: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:09:53:B3:FD:58:86:82:E0:93:2C:A3:66:5D:47:DC:B7:28:82:B9 X509v3 Authority Key Identifier: keyid:54:AF:61:D3:22:82:3A:A9:52:8C:D1:45:C4:00:C5:8C:1F:A4:52:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:13:bb:bf:b8:93:c2:80:cd:bf:2d:95:fd:7d:b0:44:de:6e: 8d:ed:62:0a:f5:47:ab:ed:78:19:8b:86:aa:2e:e4:37:23:91: d3:f8:6b:3a:a1:b6:35:16:50:d5:66:62:c7:5d:8b:b6:60:07: 8c:71:3f:87:ff:67:a1:9e:7f:c6:e5:09:9c:23:e4:93:a7:11: 93:d5:6a:6e:d4:b6:2f:f2:4b:1d:75:ec:30:de:8e:cb:b0:42: 5d:33:45:a9:7f:ec:10:9b:46:3c:b5:bd:62:ee:92:93:2e:39: 7f:d3:7c:7f:be:21:57:51:46:52:4c:2b:45:3a:dd:eb:2d:74: d0:5b:41:7c:a5:c7:da:27:9d:c3:15:b2:3f:30:a5:ed:35:d3: 71:57:e3:62:29:d0:ed:4b:2b:e3:90:1a:49:6d:37:ba:0b:4c: b7:de:d6:ae:0e:05:8b:a8:ee:d3:ea:47:a3:ed:6a:38:b8:99: 81:6c:a5:ed:b0:09:12:64:38:9c:c3:50:40:3e:c8:15:0a:55: 25:b1:18:c8:20:c6:a9:eb:fc:bb:c5:5a:2a:89:2f:c7:74:79: 27:df:74:89:1b:7e:f3:42:e3:dd:dd:f5:82:65:98:5b:fc:c1: 8a:72:b7:8d:3d:77:33:19:5e:58:96:43:e6:e9:68:7c:32:c7: 30:37:7d:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfjgMYnaf/a5zTv32UvavsnWOnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBRjYxRDMyMjgyM0FBOTUyOENEMTQ1QzQwMEM1OEMx RkE0NTI2RTAeFw0yNjA2MTkxNTA0MDRaFw0yNjA2MjAxOTAxMDRaMDMxMTAvBgNV BAMTKDk1MDk1M0IzRkQ1ODg2ODJFMDkzMkNBMzY2NUQ0N0RDQjcyODgyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUAIVgIkvWcLe49Xnvv4ARUVhx Xo2H1CBI1lBCT5WIeeWZ0uSVcOGeWVRAd4OCH0pQKCtPSXpDMNXia1OieUqF/xAH ZU/cLiao8XrcW0PuEwGbz8lGRyjJSbe/0EJ77VmZWkQgr3X7uX6zfBvNVrEraxJt ++Hd5dG/dBu/ZHMc+Hv3mK5VSiC3HSdRUI11cFiRRHGIPLp29Le6uP1StGsG1JLB iihgdqS9kSSkUR57OcGwG2c7P/cWEK8E5yciCgUZi6KmFjKdxO+JyuYJ0K1Re6dV wMDd7dBe6VijSfU9eme3i6qIDF7XZ85kbkmw5Ltezra/uleRvhEjWK7STcI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQlTs/1YhoLgkyyjZl1H3LcogrkwHwYDVR0j BBgwFoAUVK9h0yKCOqlSjNFFxADFjB+kUm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTNmYzFkYTMtOGJmMy00ZmYyLTk3N2MtMjNjYjI3M2FkMjQ4LzAvNTRBRjYxRDMy MjgyM0FBOTUyOENEMTQ1QzQwMEM1OEMxRkE0NTI2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFGNjFEMzIyODIzQUE5NTI4Q0QxNDVDNDAwQzU4QzFGQTQ1 MjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvNTRBRjYxRDMyMjgyM0FBOTUyOENEMTQ1QzQwMEM1 OEMxRkE0NTI2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUTu7+4k8KAzb8tlf19sETebo3tYgr1R6vt eBmLhqou5DcjkdP4azqhtjUWUNVmYsddi7ZgB4xxP4f/Z6Gef8blCZwj5JOnEZPV am7Uti/ySx117DDejsuwQl0zRal/7BCbRjy1vWLukpMuOX/TfH++IVdRRlJMK0U6 3estdNBbQXylx9onncMVsj8wpe0103FX42Ip0O1LK+OQGkltN7oLTLfe1q4OBYuo 7tPqR6Ptaji4mYFspe2wCRJkOJzDUEA+yBUKVSWxGMggxqnr/LvFWiqJL8d0eSff dIkbfvNC493d9YJlmFv8wYpyt409dzMZXliWQ+bpaHwyxzA3fQQ= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:04 2026 by rpki-client