$ rpki-client -vvf rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft File: A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft (raw, json) Hash identifier: VxPZMhzAU4xygWJXjThm3Cc1FDCgiku0fYg+8TNys6k= Subject key identifier: B7:A7:FF:6F:E1:68:9A:80:66:59:54:B8:DB:B0:5F:5A:74:AA:D3:B5 Authority key identifier: A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A Certificate issuer: /CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Certificate serial: 7F6EA868D3E753B1AFD14F7AB9E81029E53EF996 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:54:11 +0000 Manifest this update: Fri 24 Jul 2026 03:49:11 +0000 Manifest next update: Sat 25 Jul 2026 05:48:11 +0000 Files and hashes: 1: A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl (hash: ILPc5WkvelHkdEzJR+zWGV8+KxQ04LOdaTcbvzhCLK4=) 2: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: pKo3R747DDUIneHm99mAHqDIwYFklZR6NNCcsU54reo=) 3: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: eZlsFaLITxkPeJNSHzaVTJrd/LDOmMtodzgFU/hBW40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6e:a8:68:d3:e7:53:b1:af:d1:4f:7a:b9:e8:10:29:e5:3e:f9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Validity Not Before: Jul 24 03:49:11 2026 GMT Not After : Jul 25 05:48:11 2026 GMT Subject: CN=B7A7FF6FE1689A80665954B8DBB05F5A74AAD3B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:15:f7:ea:6f:89:a3:10:1c:46:dc:20:e8: e7:18:ed:b7:dd:77:bb:1a:20:4f:27:77:b8:76:73: 07:a6:65:05:cf:89:e1:5c:20:4c:e4:52:bb:e1:24: 86:a7:d9:b8:c8:5a:7b:a5:c0:00:e5:53:90:9e:18: 73:52:d2:65:1b:ee:c0:fd:e2:94:61:70:02:29:24: 1f:f8:f9:4a:c8:b7:62:12:29:f0:dd:bf:1c:a9:e9: e7:1b:2c:a1:17:be:3d:6d:d5:0a:7c:13:36:ca:41: af:d7:7e:7e:42:a0:8f:c3:a2:da:1d:6b:50:60:5b: 12:7a:81:50:06:dc:b5:71:38:a4:8d:07:38:80:92: 89:bb:0a:43:32:bb:d0:ac:e3:17:73:0a:90:d7:bc: b8:a9:43:0e:b3:e3:45:9e:9a:f1:78:1a:4d:99:11: 9b:c3:e8:a7:26:e1:27:c8:89:46:4d:63:65:f0:9f: ee:7d:2c:6f:90:76:d9:70:2d:09:20:d6:a8:32:f5: 18:34:b1:7d:0e:bd:38:94:a3:64:82:7d:f8:4e:69: 51:bb:3a:f1:da:89:25:18:87:92:e9:8c:18:7c:a0: 56:c9:9d:86:f9:b0:46:d3:67:ff:77:d2:2a:24:11: 02:3b:24:7b:01:f5:e4:8e:d2:29:76:23:ab:55:d6: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A7:FF:6F:E1:68:9A:80:66:59:54:B8:DB:B0:5F:5A:74:AA:D3:B5 X509v3 Authority Key Identifier: keyid:A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2a:79:8d:00:06:7b:bc:3c:37:de:7f:32:c2:fc:08:68:63: c7:83:d3:af:a2:48:12:c6:8b:8b:13:82:e1:04:10:a9:83:0b: ab:57:31:10:e8:d8:9c:fa:09:54:8e:7d:35:d6:7b:2b:fd:0b: be:b7:3f:22:cc:d8:d0:96:c0:f6:9b:53:c1:85:99:26:49:40: 10:ba:1c:51:a0:42:57:07:cd:da:84:78:f0:db:26:f0:cb:dd: 8a:86:21:5b:30:2e:53:a1:5a:ad:36:b2:ba:52:9d:f8:d8:d2: 5f:fe:73:06:5e:9b:59:a1:ea:3a:56:57:59:2e:56:e4:3e:1b: 9c:57:44:58:78:ba:6b:65:77:ab:b2:2e:2d:20:01:37:fb:53: bb:67:bf:da:f8:e0:d7:9f:de:50:01:e8:d3:52:49:8a:82:85: 92:4e:d4:89:8f:6c:16:ec:38:0d:48:51:b8:be:a4:46:4c:5a: d8:fa:3f:4a:c8:f4:9a:71:fe:63:41:7c:6d:83:c0:60:6c:96: 39:c9:4d:09:09:9f:9f:d0:76:b5:c2:55:24:33:8c:06:15:91: 6e:f5:dc:6e:0d:9b:63:5d:1f:d6:0d:3e:6f:a4:f2:90:43:8f: b8:b4:da:4a:1d:76:98:77:c1:91:14:30:f2:03:30:31:24:e7: 05:f0:f1:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf26oaNPnU7Gv0U96uegQKeU++ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1 QzcyRUE5QTAeFw0yNjA3MjQwMzQ5MTFaFw0yNjA3MjUwNTQ4MTFaMDMxMTAvBgNV BAMTKEI3QTdGRjZGRTE2ODlBODA2NjU5NTRCOERCQjA1RjVBNzRBQUQzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8hX36m+JoxAcRtwg6OcY7bfd d7saIE8nd7h2cwemZQXPieFcIEzkUrvhJIan2bjIWnulwADlU5CeGHNS0mUb7sD9 4pRhcAIpJB/4+UrIt2ISKfDdvxyp6ecbLKEXvj1t1Qp8EzbKQa/Xfn5CoI/Dotod a1BgWxJ6gVAG3LVxOKSNBziAkom7CkMyu9Cs4xdzCpDXvLipQw6z40WemvF4Gk2Z EZvD6Kcm4SfIiUZNY2Xwn+59LG+QdtlwLQkg1qgy9Rg0sX0OvTiUo2SCffhOaVG7 OvHaiSUYh5LpjBh8oFbJnYb5sEbTZ/930iokEQI7JHsB9eSO0il2I6tV1sINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt6f/b+FomoBmWVS427BfWnSq07UwHwYDVR0j BBgwFoAUpB0VKgRgoNoxEnsZFaBdpVxy6powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQ3YjAyNjQtOWEwYS00Y2U0LTkzY2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEw NDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1QzcyRUE5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFEMTUyQTA0NjBBMERBMzExMjdCMTkxNUEwNURBNTVDNzJF QTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVE QTU1QzcyRUE5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcqeY0ABnu8PDfefzLC/AhoY8eD06+iSBLG i4sTguEEEKmDC6tXMRDo2Jz6CVSOfTXWeyv9C763PyLM2NCWwPabU8GFmSZJQBC6 HFGgQlcHzdqEePDbJvDL3YqGIVswLlOhWq02srpSnfjY0l/+cwZem1mh6jpWV1ku VuQ+G5xXRFh4umtld6uyLi0gATf7U7tnv9r44Nef3lAB6NNSSYqChZJO1ImPbBbs OA1IUbi+pEZMWtj6P0rI9Jpx/mNBfG2DwGBsljnJTQkJn5/QdrXCVSQzjAYVkW71 3G4Nm2NdH9YNPm+k8pBDj7i02koddph3wZEUMPIDMDEk5wXw8X4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:55:07 2026 by rpki-client