$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: +ymXAHe4mYUMFF6JetmREwl8PwFRG94h+V/aeDzS8C0= Subject key identifier: 81:21:AD:81:9C:6F:A9:46:73:73:53:87:CE:26:3A:AD:24:4D:89:F1 Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 4BF178407D074D385DB1BC25FE5215DC4DC25E4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:05:41 +0000 Manifest this update: Fri 24 Jul 2026 05:00:41 +0000 Manifest next update: Sat 25 Jul 2026 08:23:41 +0000 Files and hashes: 1: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: QXsDZvdlWcvMIQKzKiRC+mwkgqg6vWhsMBeIJisGPrE=) 2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) 3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) 4: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f1:78:40:7d:07:4d:38:5d:b1:bc:25:fe:52:15:dc:4d:c2:5e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Jul 24 05:00:41 2026 GMT Not After : Jul 25 08:23:41 2026 GMT Subject: CN=8121AD819C6FA94673735387CE263AAD244D89F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:71:fc:f2:5e:89:67:6a:f9:9f:22:b4:50:55: 4c:b8:09:94:00:a4:79:2a:76:f8:86:9a:04:d2:a1: 38:64:bb:5d:29:99:7a:9d:d0:c8:a8:0b:ac:27:8f: a2:a7:e1:78:9d:1e:ae:33:2f:15:a2:6b:d2:27:92: c9:27:8f:db:d7:82:df:4e:03:b8:70:8e:6a:b7:f3: 1f:e3:9b:33:a6:8e:79:f0:c8:1d:ee:93:1b:f3:4f: ff:53:03:11:9d:bc:de:eb:f7:e4:ea:0b:32:55:5b: 5c:40:e4:ed:38:8a:84:b7:e5:2b:59:86:f1:53:8a: 15:cf:e1:7a:be:1e:c1:86:ef:da:c7:01:ff:fe:85: 13:55:bd:63:84:18:0a:e0:1f:de:6d:06:14:46:ab: b8:3b:fe:9c:41:43:79:3b:f2:46:a8:56:36:e0:a1: be:e2:a3:f2:db:a6:23:71:bb:c0:04:86:ce:2e:2f: 47:3e:b6:34:f9:22:46:1e:e5:8a:5f:90:bd:3d:d8: 14:21:c5:ae:43:be:14:4b:fb:7a:c9:f0:14:5a:71: 56:78:22:fe:e0:0e:14:5e:96:fa:db:23:c0:5b:37: b6:81:1f:53:0e:68:ee:0c:5f:10:04:3c:5c:dd:b3: 47:4c:57:77:5d:67:37:23:10:ea:9a:5b:00:01:64: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:21:AD:81:9C:6F:A9:46:73:73:53:87:CE:26:3A:AD:24:4D:89:F1 X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:cc:92:7e:6c:21:00:ea:79:6b:76:df:99:71:9c:ec:b7: 8f:8f:b1:59:e8:25:6a:7d:fc:ab:7b:9c:10:eb:cd:c6:78:36: 60:ae:f3:6d:5b:19:5e:08:ae:1b:79:ed:b0:65:6f:72:37:6e: 44:16:3a:15:46:16:8e:34:c7:d8:65:71:00:a8:6d:6b:df:9e: 29:f2:82:30:e3:a5:41:7f:87:f3:e5:eb:3d:f3:67:22:8e:6c: 27:f3:bd:db:d2:cb:7e:9f:3d:6c:3c:f5:63:73:a0:f5:f5:7c: 3f:42:41:84:d2:70:18:6d:26:a9:72:8d:b0:f6:99:36:a8:06: 61:bb:82:a8:35:b7:e8:1d:9a:cb:72:e2:aa:f8:b5:51:f5:06: c3:11:59:8b:73:af:e2:6d:90:4f:4d:a2:9c:c2:98:c0:1b:27: f5:09:4e:52:bf:38:31:38:d2:b4:aa:ea:0a:89:6c:d0:b6:3d: 51:e4:ba:28:3f:1d:21:0a:64:ce:a7:8b:aa:3c:d6:06:43:5b: 8b:1e:61:33:65:99:bd:9e:92:ec:8d:bd:f1:a8:fb:19:d9:70: 7e:43:77:f4:18:d7:b6:07:55:4f:cb:b5:13:4e:f7:8f:c4:50: fe:00:22:da:60:f6:83:c2:c5:33:60:df:3e:ea:88:c3:c5:bf: 9f:7a:1d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/F4QH0HTThdsbwl/lIV3E3CXk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjA3MjQwNTAwNDFaFw0yNjA3MjUwODIzNDFaMDMxMTAvBgNV BAMTKDgxMjFBRDgxOUM2RkE5NDY3MzczNTM4N0NFMjYzQUFEMjQ0RDg5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmcfzyXolnavmfIrRQVUy4CZQA pHkqdviGmgTSoThku10pmXqd0MioC6wnj6Kn4XidHq4zLxWia9Inksknj9vXgt9O A7hwjmq38x/jmzOmjnnwyB3ukxvzT/9TAxGdvN7r9+TqCzJVW1xA5O04ioS35StZ hvFTihXP4Xq+HsGG79rHAf/+hRNVvWOEGArgH95tBhRGq7g7/pxBQ3k78kaoVjbg ob7io/LbpiNxu8AEhs4uL0c+tjT5IkYe5YpfkL092BQhxa5DvhRL+3rJ8BRacVZ4 Iv7gDhRelvrbI8BbN7aBH1MOaO4MXxAEPFzds0dMV3ddZzcjEOqaWwABZLgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgSGtgZxvqUZzc1OHziY6rSRNifEwHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9izJJ+bCEA6nlrdt+ZcZzst4+PsVnoJWp9 /Kt7nBDrzcZ4NmCu821bGV4Irht57bBlb3I3bkQWOhVGFo40x9hlcQCobWvfniny gjDjpUF/h/Pl6z3zZyKObCfzvdvSy36fPWw89WNzoPX1fD9CQYTScBhtJqlyjbD2 mTaoBmG7gqg1t+gdmsty4qr4tVH1BsMRWYtzr+JtkE9NopzCmMAbJ/UJTlK/ODE4 0rSq6gqJbNC2PVHkuig/HSEKZM6ni6o81gZDW4seYTNlmb2ekuyNvfGo+xnZcH5D d/QY17YHVU/LtRNO94/EUP4AItpg9oPCxTNg3z7qiMPFv596HW0= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:39 2026 by rpki-client