$ rpki-client -vvvf rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft File: A41E81A674D539D19E0045B0769140AE1C59B2A6.mft (raw, json) Hash identifier: 7QaOZF1zTxoT7FYUHiyn/+1A6ECSCXaTL4qTjBGaZQs= Subject key identifier: 6B:F0:9A:4E:1D:44:D1:92:54:11:8E:D1:C2:3D:C2:DC:64:36:0B:65 Authority key identifier: A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6 Certificate issuer: /CN=A41E81A674D539D19E0045B0769140AE1C59B2A6 Certificate serial: 39BEC1EE3C55606E1597312A06A2029B6B799ACE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 18:03:04 +0000 Manifest this update: Thu 24 Sep 2026 17:58:04 +0000 Manifest next update: Fri 25 Sep 2026 22:01:04 +0000 Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: A+RPn25HxKi9IyMz0fxzOncy7UdZahFmQBMwYHaLTLU=) 2: A41E81A674D539D19E0045B0769140AE1C59B2A6.crl (hash: cKw4coWUHcdotUyCuYhlV9bUOV0VtyNTgZOPZhLR0ZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:be:c1:ee:3c:55:60:6e:15:97:31:2a:06:a2:02:9b:6b:79:9a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41E81A674D539D19E0045B0769140AE1C59B2A6 Validity Not Before: Sep 24 17:58:04 2026 GMT Not After : Sep 25 22:01:04 2026 GMT Subject: CN=6BF09A4E1D44D19254118ED1C23DC2DC64360B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:01:bb:f4:f7:d8:ad:1e:e7:dd:75:5c:b1: bb:dd:1f:5e:c8:f4:6a:63:60:3c:95:cc:ae:7e:23: 9d:ed:88:b4:de:a0:f2:d4:d5:f6:24:af:e7:bd:25: 94:e0:32:fb:e4:0d:7f:e3:5a:89:4a:93:60:ed:71: 2f:08:a5:79:8a:7c:4a:36:b8:87:d0:76:87:f5:71: 88:6f:d6:92:4d:42:32:b9:e7:07:d5:3f:55:7f:f0: 21:d0:96:4a:4d:4c:99:f2:ea:20:85:25:48:29:ff: 3b:86:6d:ee:01:9a:62:e5:aa:48:6f:c7:29:8d:9d: cd:99:b2:0b:15:5a:be:cf:85:1d:11:19:0e:65:c9: 41:2c:d6:57:c0:2f:d1:30:92:38:c1:e3:a8:39:c2: 2b:bf:90:d5:19:d3:39:71:2f:c0:9b:91:21:8a:f9: 5a:eb:61:19:ba:e7:0f:6b:4f:bd:88:3d:16:d6:42: ef:73:28:c6:ae:bf:61:6c:2c:32:46:3c:2a:04:6c: 81:02:90:69:bd:8b:a9:bc:4b:01:a0:43:24:74:d4: d6:f4:81:df:76:8d:38:66:62:9d:76:29:82:67:c7: 7f:ee:6d:fb:a8:f3:84:08:ce:0f:c6:4f:c5:9a:1e: f0:6f:45:c2:dd:f9:54:fa:1d:df:e2:56:7b:67:42: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F0:9A:4E:1D:44:D1:92:54:11:8E:D1:C2:3D:C2:DC:64:36:0B:65 X509v3 Authority Key Identifier: keyid:A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:41:d6:5e:a9:d2:85:fe:8b:9f:2e:a0:e5:e3:19:ea:1f:11: 44:07:96:e7:6e:35:2e:26:73:34:ff:02:68:2f:fa:a8:82:4e: 31:23:3c:32:1d:12:7a:8e:d7:19:39:1e:da:06:c9:43:ae:df: 7a:2d:38:24:b6:ff:c6:e9:6c:ec:f5:f9:de:07:e0:ea:d6:af: 95:49:3d:c7:ee:28:c4:b6:74:49:b5:53:8c:e0:a6:21:e6:6c: 11:bc:5f:76:56:de:d5:e8:66:b0:44:77:6d:68:02:64:9c:17: f7:a3:6e:19:b9:4f:2c:7b:11:19:ff:2e:15:35:a2:bf:28:8a: 36:fc:0f:5c:9b:c9:52:17:f6:7b:98:b5:a8:ec:42:6f:04:63: 56:0b:3a:95:e0:e5:c2:4f:a2:9c:ab:da:e8:eb:9c:d9:5c:c4: 92:ee:2c:d0:c8:36:0f:19:14:45:be:2a:42:76:83:5c:5b:4a: 2a:cd:64:2a:20:50:65:0b:23:85:2c:85:08:08:13:98:29:d7: 7c:7c:64:82:d7:e1:f8:15:01:d0:15:1d:e3:d1:74:34:d4:f7: 0f:9e:5e:7d:e3:0d:8a:81:38:c9:b8:33:21:4c:ca:4b:f6:8a: ad:c7:b8:bc:6b:63:62:f6:6c:7d:a4:a7:1b:df:b0:66:7c:88: f8:b6:09:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOb7B7jxVYG4VlzEqBqICm2t5ms4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxRTgxQTY3NEQ1MzlEMTlFMDA0NUIwNzY5MTQwQUUx QzU5QjJBNjAeFw0yNjA5MjQxNzU4MDRaFw0yNjA5MjUyMjAxMDRaMDMxMTAvBgNV BAMTKDZCRjA5QTRFMUQ0NEQxOTI1NDExOEVEMUMyM0RDMkRDNjQzNjBCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNgG79PfYrR7n3XVcsbvdH17I 9GpjYDyVzK5+I53tiLTeoPLU1fYkr+e9JZTgMvvkDX/jWolKk2DtcS8IpXmKfEo2 uIfQdof1cYhv1pJNQjK55wfVP1V/8CHQlkpNTJny6iCFJUgp/zuGbe4BmmLlqkhv xymNnc2ZsgsVWr7PhR0RGQ5lyUEs1lfAL9EwkjjB46g5wiu/kNUZ0zlxL8CbkSGK +VrrYRm65w9rT72IPRbWQu9zKMauv2FsLDJGPCoEbIECkGm9i6m8SwGgQyR01Nb0 gd92jThmYp12KYJnx3/ubfuo84QIzg/GT8WaHvBvRcLd+VT6Hd/iVntnQivRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa/CaTh1E0ZJUEY7Rwj3C3GQ2C2UwHwYDVR0j BBgwFoAUpB6BpnTVOdGeAEWwdpFArhxZsqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY0ZmY3YzktZTkwNS00NGQ2LWJjMzUtYzdkYmIwNzBiNzU3LzAvQTQxRTgxQTY3 NEQ1MzlEMTlFMDA0NUIwNzY5MTQwQUUxQzU5QjJBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFFODFBNjc0RDUzOUQxOUUwMDQ1QjA3NjkxNDBBRTFDNTlC MkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvQTQxRTgxQTY3NEQ1MzlEMTlFMDA0NUIwNzY5MTQw QUUxQzU5QjJBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVB1l6p0oX+i58uoOXjGeofEUQHluduNS4m czT/Amgv+qiCTjEjPDIdEnqO1xk5HtoGyUOu33otOCS2/8bpbOz1+d4H4OrWr5VJ PcfuKMS2dEm1U4zgpiHmbBG8X3ZW3tXoZrBEd21oAmScF/ejbhm5Tyx7ERn/LhU1 or8oijb8D1ybyVIX9nuYtajsQm8EY1YLOpXg5cJPopyr2ujrnNlcxJLuLNDINg8Z FEW+KkJ2g1xbSirNZCogUGULI4UshQgIE5gp13x8ZILX4fgVAdAVHePRdDTU9w+e Xn3jDYqBOMm4MyFMykv2iq3HuLxrY2L2bH2kpxvfsGZ8iPi2CXc= -----END CERTIFICATE-----Generated at Fri Sep 25 05:12:33 2026 by rpki-client