$ rpki-client -vvf rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft File: A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft (raw, json) Hash identifier: LnlnmvQSatoSAzQDsjcDGyA2AJGWPV506lG5eoOuPn4= Subject key identifier: 80:5D:B6:67:D5:FE:55:78:22:6A:15:5C:12:21:DF:3D:83:96:CF:C1 Authority key identifier: A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A Certificate issuer: /CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Certificate serial: 2BA7DA4A3EDD12002483BB5300EF5BC2B2C53D4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:51:28 +0000 Manifest this update: Tue 12 May 2026 22:46:28 +0000 Manifest next update: Thu 14 May 2026 00:43:28 +0000 Files and hashes: 1: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: eZlsFaLITxkPeJNSHzaVTJrd/LDOmMtodzgFU/hBW40=) 2: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: pKo3R747DDUIneHm99mAHqDIwYFklZR6NNCcsU54reo=) 3: A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl (hash: t169j+4hZfA2Mk0QDRibhlibtOsGCjSZV2JRrSkgU24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a7:da:4a:3e:dd:12:00:24:83:bb:53:00:ef:5b:c2:b2:c5:3d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Validity Not Before: May 12 22:46:28 2026 GMT Not After : May 14 00:43:28 2026 GMT Subject: CN=805DB667D5FE5578226A155C1221DF3D8396CFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:eb:e6:dd:21:ac:a1:8e:02:3f:47:a5:e8:e5: 9f:35:f2:57:40:82:81:19:0d:b4:d3:08:9e:ac:bd: 39:0e:18:5d:0c:5a:3f:44:e7:80:09:fc:bb:b3:41: b2:13:bd:cf:56:ff:df:bf:f7:bc:fb:1a:95:85:89: c7:74:bb:80:91:54:63:cd:72:a1:19:ea:ce:06:50: 02:b9:63:f6:38:7f:4a:cf:52:8a:e1:11:c3:ca:51: 43:86:cd:25:2c:09:d7:69:ed:0a:01:fc:a8:20:fe: 14:72:27:32:bd:16:b1:5d:02:08:91:88:75:57:c5: 01:7d:4d:12:f9:ce:87:d7:73:96:ae:12:c6:ea:6f: 0b:4b:f9:37:d4:64:73:65:e7:c8:3e:91:c1:9b:f2: f4:35:f0:26:3b:a4:b0:c8:c8:34:89:00:5c:46:c4: 56:c4:6a:50:b1:01:f8:0d:96:f8:27:a0:bc:fc:76: 4a:bd:00:4a:e7:cd:ae:8f:da:d6:03:39:86:f2:2a: 1f:a2:1a:4d:c6:81:3a:93:a7:c2:6a:3b:85:c6:9e: 05:3f:4c:37:17:32:d6:d1:23:d2:a4:c3:63:8a:c7: d4:bf:cd:bb:c1:6a:b5:e4:a3:88:33:0d:cb:b9:1f: 72:04:75:df:f9:c0:7a:c7:58:71:ed:01:15:5f:1d: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:B6:67:D5:FE:55:78:22:6A:15:5C:12:21:DF:3D:83:96:CF:C1 X509v3 Authority Key Identifier: keyid:A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b3:b4:78:e6:81:40:cd:c1:b0:68:d8:28:b5:32:de:49:db: 64:94:5e:17:7b:43:b4:75:05:ed:d1:a1:3e:39:42:f0:67:8b: b7:d9:3f:51:be:ae:18:6f:54:8e:3e:17:38:56:69:7a:4e:20: 94:09:1e:6c:7f:1e:ba:ad:62:eb:7d:71:92:ba:54:24:0d:e1: ed:3b:d5:42:25:d3:d1:d1:09:bc:9f:e4:7c:55:89:8b:e1:54: fe:41:57:13:44:ba:ac:8d:cb:43:76:c8:68:69:9b:a0:f8:ef: 52:88:c9:59:8d:0f:cf:0d:a5:7e:86:8e:be:b1:3b:a0:65:c8: 84:0a:8a:e9:04:ed:ea:7a:59:7e:a2:98:74:50:ce:1d:ae:8a: 8d:e7:03:ee:31:26:ff:c3:e3:86:99:16:bd:da:2c:84:70:54: 63:3e:a6:74:ef:db:9c:5d:cd:98:7d:dc:74:c5:fd:37:1d:de: 06:27:88:0f:4f:74:e6:8d:dd:75:f9:e6:35:1b:e8:ea:3a:5a: 28:77:28:07:9e:42:9a:a7:b5:a5:cb:ab:f6:87:19:51:37:ed: 62:ba:56:97:13:77:9c:95:fc:69:d6:28:bd:7e:3f:88:db:68: 06:93:11:f0:39:e1:17:61:69:4f:0f:52:2f:bc:65:03:bb:e8: c0:d3:57:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6faSj7dEgAkg7tTAO9bwrLFPUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1 QzcyRUE5QTAeFw0yNjA1MTIyMjQ2MjhaFw0yNjA1MTQwMDQzMjhaMDMxMTAvBgNV BAMTKDgwNURCNjY3RDVGRTU1NzgyMjZBMTU1QzEyMjFERjNEODM5NkNGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6+bdIayhjgI/R6Xo5Z818ldA goEZDbTTCJ6svTkOGF0MWj9E54AJ/LuzQbITvc9W/9+/97z7GpWFicd0u4CRVGPN cqEZ6s4GUAK5Y/Y4f0rPUorhEcPKUUOGzSUsCddp7QoB/Kgg/hRyJzK9FrFdAgiR iHVXxQF9TRL5zofXc5auEsbqbwtL+TfUZHNl58g+kcGb8vQ18CY7pLDIyDSJAFxG xFbEalCxAfgNlvgnoLz8dkq9AErnza6P2tYDOYbyKh+iGk3GgTqTp8JqO4XGngU/ TDcXMtbRI9Kkw2OKx9S/zbvBarXko4gzDcu5H3IEdd/5wHrHWHHtARVfHXl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgF22Z9X+VXgiahVcEiHfPYOWz8EwHwYDVR0j BBgwFoAUpB0VKgRgoNoxEnsZFaBdpVxy6powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQ3YjAyNjQtOWEwYS00Y2U0LTkzY2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEw NDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1QzcyRUE5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFEMTUyQTA0NjBBMERBMzExMjdCMTkxNUEwNURBNTVDNzJF QTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVE QTU1QzcyRUE5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6ztHjmgUDNwbBo2Ci1Mt5J22SUXhd7Q7R1 Be3RoT45QvBni7fZP1G+rhhvVI4+FzhWaXpOIJQJHmx/HrqtYut9cZK6VCQN4e07 1UIl09HRCbyf5HxViYvhVP5BVxNEuqyNy0N2yGhpm6D471KIyVmND88NpX6Gjr6x O6BlyIQKiukE7ep6WX6imHRQzh2uio3nA+4xJv/D44aZFr3aLIRwVGM+pnTv25xd zZh93HTF/Tcd3gYniA9PdOaN3XX55jUb6Oo6Wih3KAeeQpqntaXLq/aHGVE37WK6 VpcTd5yV/GnWKL1+P4jbaAaTEfA54RdhaU8PUi+8ZQO76MDTV18= -----END CERTIFICATE-----Generated at Wed May 13 03:22:50 2026 by rpki-client