$ rpki-client -vvvf rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft File: A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft (raw, json) Hash identifier: aJh/Wktb0t8G1xI0lqeLuW9ISM5CHGPNgWgyyHtTQqA= Subject key identifier: 2E:07:08:61:08:0C:49:7E:E3:B2:9E:22:A3:05:AE:98:D4:C2:D8:84 Authority key identifier: A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A Certificate issuer: /CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Certificate serial: 3EC47F0D4FB2E208251BABAC30C04279E3AB5F6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:46:41 +0000 Manifest this update: Thu 24 Sep 2026 00:41:41 +0000 Manifest next update: Fri 25 Sep 2026 02:59:41 +0000 Files and hashes: 1: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: pKo3R747DDUIneHm99mAHqDIwYFklZR6NNCcsU54reo=) 2: A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl (hash: fRf5MaQwjqxFFlJ2zSlxW7Me6f4GoPZJ7pCfa/6bSBo=) 3: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: eZlsFaLITxkPeJNSHzaVTJrd/LDOmMtodzgFU/hBW40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c4:7f:0d:4f:b2:e2:08:25:1b:ab:ac:30:c0:42:79:e3:ab:5f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Validity Not Before: Sep 24 00:41:41 2026 GMT Not After : Sep 25 02:59:41 2026 GMT Subject: CN=2E070861080C497EE3B29E22A305AE98D4C2D884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e1:ac:67:d4:51:03:e7:53:06:70:7f:9f:ea: 48:74:06:33:da:43:6b:4e:ce:a0:1f:43:27:83:0b: ab:64:54:3f:9e:00:a2:c8:c3:7c:a2:07:9e:5d:c4: 42:1f:94:3b:44:b9:79:9a:a2:04:6d:66:1e:f8:8b: 22:49:ed:cc:00:0e:85:50:f7:b9:ee:37:fa:b7:a4: 6c:77:3b:d5:99:12:3c:a2:ad:ed:4d:41:24:60:bd: 31:2a:e1:80:ae:28:b4:58:64:71:14:43:5d:4e:94: be:5f:8c:a5:42:84:56:7c:12:2a:4b:30:3b:99:34: 3c:50:e3:66:59:7e:2a:54:1f:5f:49:03:35:d2:3d: c4:fe:22:44:f7:11:da:15:b7:9d:35:4e:c1:82:5e: 58:04:37:4f:9d:d7:46:a6:63:30:82:02:e6:fe:55: 55:c7:a5:86:f7:d0:72:c6:c7:a2:eb:1f:97:d2:cd: 1c:c5:9b:bf:39:b6:14:e1:08:04:44:c4:4c:f8:c3: 02:7d:95:35:ad:ed:81:03:7b:2b:ed:38:76:a8:06: cd:3a:c4:58:b4:37:e7:aa:b2:f5:63:83:fd:dc:22: 68:26:ad:68:68:4f:0a:85:50:8e:6e:4d:31:8a:8a: 7b:59:22:18:f7:97:cd:64:25:68:f5:63:d4:1f:f6: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:07:08:61:08:0C:49:7E:E3:B2:9E:22:A3:05:AE:98:D4:C2:D8:84 X509v3 Authority Key Identifier: keyid:A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3d:ee:94:e1:e0:e9:4c:52:43:3c:28:c0:41:d2:5d:e7:0a: 30:b9:c6:d3:5c:b7:fc:35:76:72:0a:0d:fa:fc:29:42:42:d2: b3:6e:17:1e:da:2b:b4:fa:61:3b:93:1d:2d:f9:7d:a3:7f:b2: 94:c3:e8:fe:1f:f3:8c:ab:2e:20:37:d0:3c:2b:0d:95:1a:37: fb:eb:e8:e8:5f:c1:19:6f:0e:8e:33:27:4d:bf:7a:1c:7b:9c: 4a:ce:12:55:9e:4b:4a:22:ff:12:66:37:a9:5e:01:68:11:04: 62:e3:64:ba:d5:41:99:cd:22:c2:56:5f:e4:f5:49:5d:f1:18: d8:d3:7c:3f:b7:5e:b1:fa:65:0d:3c:e6:a1:1d:83:e2:d0:dc: c3:8b:1e:4f:3b:8e:b9:2a:10:5b:15:52:ec:14:46:23:94:31: bd:29:b0:46:fc:7c:c0:99:21:4d:33:70:82:90:47:11:59:32: f8:6c:21:f3:f9:99:69:f2:dd:98:61:28:6c:3b:db:49:52:e5: 12:ab:c9:f4:33:b3:88:24:e7:b5:4c:a0:3a:de:98:9c:2b:b5: fa:f4:aa:30:a5:73:73:7c:f8:10:38:0e:c4:ab:e7:73:c9:11: 73:f7:55:6a:e7:7f:c2:ff:52:3b:10:42:71:65:ec:7b:e4:54: 86:87:b9:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsR/DU+y4gglG6usMMBCeeOrX24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1 QzcyRUE5QTAeFw0yNjA5MjQwMDQxNDFaFw0yNjA5MjUwMjU5NDFaMDMxMTAvBgNV BAMTKDJFMDcwODYxMDgwQzQ5N0VFM0IyOUUyMkEzMDVBRTk4RDRDMkQ4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe4axn1FED51MGcH+f6kh0BjPa Q2tOzqAfQyeDC6tkVD+eAKLIw3yiB55dxEIflDtEuXmaogRtZh74iyJJ7cwADoVQ 97nuN/q3pGx3O9WZEjyire1NQSRgvTEq4YCuKLRYZHEUQ11OlL5fjKVChFZ8EipL MDuZNDxQ42ZZfipUH19JAzXSPcT+IkT3EdoVt501TsGCXlgEN0+d10amYzCCAub+ VVXHpYb30HLGx6LrH5fSzRzFm785thThCARExEz4wwJ9lTWt7YEDeyvtOHaoBs06 xFi0N+eqsvVjg/3cImgmrWhoTwqFUI5uTTGKintZIhj3l81kJWj1Y9Qf9gprAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgcIYQgMSX7jsp4iowWumNTC2IQwHwYDVR0j BBgwFoAUpB0VKgRgoNoxEnsZFaBdpVxy6powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQ3YjAyNjQtOWEwYS00Y2U0LTkzY2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEw NDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1QzcyRUE5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFEMTUyQTA0NjBBMERBMzExMjdCMTkxNUEwNURBNTVDNzJF QTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVE QTU1QzcyRUE5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHk97pTh4OlMUkM8KMBB0l3nCjC5xtNct/w1 dnIKDfr8KUJC0rNuFx7aK7T6YTuTHS35faN/spTD6P4f84yrLiA30DwrDZUaN/vr 6OhfwRlvDo4zJ02/ehx7nErOElWeS0oi/xJmN6leAWgRBGLjZLrVQZnNIsJWX+T1 SV3xGNjTfD+3XrH6ZQ085qEdg+LQ3MOLHk87jrkqEFsVUuwURiOUMb0psEb8fMCZ IU0zcIKQRxFZMvhsIfP5mWny3ZhhKGw720lS5RKryfQzs4gk57VMoDremJwrtfr0 qjClc3N8+BA4DsSr53PJEXP3VWrnf8L/UjsQQnFl7HvkVIaHuVQ= -----END CERTIFICATE-----Generated at Thu Sep 24 18:58:26 2026 by rpki-client