$ rpki-client -vvf rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft File: A41E81A674D539D19E0045B0769140AE1C59B2A6.mft (raw, json) Hash identifier: KgUAMqJ7x+Bygf6MGRfWg7KReuJ/8kYa8o76Dp9kr6s= Subject key identifier: 3B:BD:42:93:75:F8:26:10:61:D5:00:09:B9:86:21:32:CA:8F:BE:3D Authority key identifier: A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6 Certificate issuer: /CN=A41E81A674D539D19E0045B0769140AE1C59B2A6 Certificate serial: 4DE154358463799FC1A7EA68755D0F167EB104D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:48:00 +0000 Manifest this update: Tue 12 May 2026 20:43:00 +0000 Manifest next update: Wed 13 May 2026 23:57:00 +0000 Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: A+RPn25HxKi9IyMz0fxzOncy7UdZahFmQBMwYHaLTLU=) 2: A41E81A674D539D19E0045B0769140AE1C59B2A6.crl (hash: xwGL9TpGXWrjPQwP1b13KbxMaf30yOmi/FfVgABlNVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e1:54:35:84:63:79:9f:c1:a7:ea:68:75:5d:0f:16:7e:b1:04:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41E81A674D539D19E0045B0769140AE1C59B2A6 Validity Not Before: May 12 20:43:00 2026 GMT Not After : May 13 23:57:00 2026 GMT Subject: CN=3BBD429375F8261061D50009B9862132CA8FBE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:5b:10:7e:07:c5:ac:b7:f6:c3:ef:0d:72: 4a:25:b9:a6:55:cf:27:19:4f:25:b8:af:5f:8d:6b: 73:c3:53:ae:e1:9e:43:46:bd:a0:60:82:55:59:44: 39:fa:02:dd:8b:48:7e:93:25:e9:fa:4b:ed:2c:11: fc:9a:01:c7:1f:3e:36:4d:2a:07:77:e7:ad:7e:ae: fb:48:36:83:30:d1:a7:73:08:35:b1:49:ea:55:a0: cd:6c:b8:12:80:75:14:fd:09:54:83:fb:a4:dd:16: 77:28:76:21:0f:4b:fd:6f:71:29:ba:d1:23:87:66: 09:61:40:f0:46:e2:f2:12:8d:47:9b:a7:45:cf:d6: 3e:bf:4e:d6:88:c2:c7:63:d5:fe:7d:88:0f:36:41: 87:77:40:b5:bc:db:1e:04:28:12:fa:20:a7:6b:78: 9c:17:a1:94:2a:c4:da:98:98:61:e7:f0:91:16:e1: 67:34:16:1b:9a:96:88:29:78:5d:d7:3f:d7:dd:25: c1:17:f8:8b:94:4d:f7:f4:8c:a3:07:2c:2f:e3:9b: f3:5f:a7:51:e1:7b:4d:67:38:5e:9c:49:78:50:25: a2:21:4d:48:31:33:2e:e5:78:d5:ef:01:88:52:f9: 13:ef:aa:9f:44:ad:b1:bc:1d:6f:55:16:49:54:11: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BD:42:93:75:F8:26:10:61:D5:00:09:B9:86:21:32:CA:8F:BE:3D X509v3 Authority Key Identifier: keyid:A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:49:bd:b1:8f:c7:01:3d:8c:5b:c6:74:34:75:f1:bf:67:00: e0:be:27:06:5a:c9:7b:1b:dc:dc:aa:ee:db:78:3c:12:ac:6f: 24:3b:95:68:f5:69:cb:0c:91:b9:38:ba:93:a4:54:19:6c:fe: fe:ec:64:76:fc:f4:f6:7e:97:b6:f1:e6:e3:73:8a:17:b9:a5: 3c:a9:f4:61:a4:0a:6c:41:a3:72:4d:23:4e:e7:7f:41:7e:7f: 81:d0:ea:1b:3a:27:3c:33:1e:0e:17:4f:2e:e6:91:88:84:e3: 76:4a:04:42:54:5e:1f:b3:d9:10:c8:0f:b7:8c:15:9d:5c:5d: 6f:c8:43:3f:79:88:56:1c:d8:7c:e7:66:d4:e6:94:66:87:9c: f6:73:cf:4a:2d:57:4e:bf:b7:eb:31:a0:3d:d5:c5:03:13:fc: a0:36:20:87:c3:77:37:59:f8:85:76:4c:58:c2:d9:cc:8e:87: a3:e2:2f:cb:79:ba:79:1c:a3:e2:e2:16:1f:54:91:e6:24:77: eb:39:5f:ae:25:f9:1d:f5:9d:5b:aa:98:87:44:9a:a6:ef:dc: 4b:72:b0:e8:92:b2:db:27:27:dc:e8:03:53:db:05:0f:29:ee: 51:2b:4d:41:8b:50:cb:84:a0:46:10:0e:39:08:fe:8b:6f:27: 0c:19:db:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeFUNYRjeZ/Bp+podV0PFn6xBNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxRTgxQTY3NEQ1MzlEMTlFMDA0NUIwNzY5MTQwQUUx QzU5QjJBNjAeFw0yNjA1MTIyMDQzMDBaFw0yNjA1MTMyMzU3MDBaMDMxMTAvBgNV BAMTKDNCQkQ0MjkzNzVGODI2MTA2MUQ1MDAwOUI5ODYyMTMyQ0E4RkJFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KlsQfgfFrLf2w+8NckoluaZV zycZTyW4r1+Na3PDU67hnkNGvaBgglVZRDn6At2LSH6TJen6S+0sEfyaAccfPjZN Kgd3561+rvtINoMw0adzCDWxSepVoM1suBKAdRT9CVSD+6TdFncodiEPS/1vcSm6 0SOHZglhQPBG4vISjUebp0XP1j6/TtaIwsdj1f59iA82QYd3QLW82x4EKBL6IKdr eJwXoZQqxNqYmGHn8JEW4Wc0FhualogpeF3XP9fdJcEX+IuUTff0jKMHLC/jm/Nf p1Hhe01nOF6cSXhQJaIhTUgxMy7leNXvAYhS+RPvqp9ErbG8HW9VFklUES+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO71Ck3X4JhBh1QAJuYYhMsqPvj0wHwYDVR0j BBgwFoAUpB6BpnTVOdGeAEWwdpFArhxZsqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY0ZmY3YzktZTkwNS00NGQ2LWJjMzUtYzdkYmIwNzBiNzU3LzAvQTQxRTgxQTY3 NEQ1MzlEMTlFMDA0NUIwNzY5MTQwQUUxQzU5QjJBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFFODFBNjc0RDUzOUQxOUUwMDQ1QjA3NjkxNDBBRTFDNTlC MkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvQTQxRTgxQTY3NEQ1MzlEMTlFMDA0NUIwNzY5MTQw QUUxQzU5QjJBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5JvbGPxwE9jFvGdDR18b9nAOC+JwZayXsb 3Nyq7tt4PBKsbyQ7lWj1acsMkbk4upOkVBls/v7sZHb89PZ+l7bx5uNzihe5pTyp 9GGkCmxBo3JNI07nf0F+f4HQ6hs6JzwzHg4XTy7mkYiE43ZKBEJUXh+z2RDID7eM FZ1cXW/IQz95iFYc2HznZtTmlGaHnPZzz0otV06/t+sxoD3VxQMT/KA2IIfDdzdZ +IV2TFjC2cyOh6PiL8t5unkco+LiFh9UkeYkd+s5X64l+R31nVuqmIdEmqbv3Ety sOiSstsnJ9zoA1PbBQ8p7lErTUGLUMuEoEYQDjkI/otvJwwZ2+M= -----END CERTIFICATE-----Generated at Wed May 13 03:16:57 2026 by rpki-client