$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: wa0XDboJimrHoByZh/OGm5E+g7sqPByGYDitrWfr+20= Subject key identifier: 09:A0:84:57:6C:13:0B:DD:1F:FC:D8:9F:A4:E0:20:C2:F5:77:64:24 Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 3A26F7F3D9561AA09B8D275892C876EC98586DD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 08:57:13 +0000 Manifest this update: Wed 23 Sep 2026 08:52:13 +0000 Manifest next update: Thu 24 Sep 2026 11:15:13 +0000 Files and hashes: 1: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: Cx+MF+ZaG8FA4xVLBoYp/sMfXLRsnsScJGe/g9H1Eeo=) 2: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) 3: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) 4: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:26:f7:f3:d9:56:1a:a0:9b:8d:27:58:92:c8:76:ec:98:58:6d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Sep 23 08:52:13 2026 GMT Not After : Sep 24 11:15:13 2026 GMT Subject: CN=09A084576C130BDD1FFCD89FA4E020C2F5776424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:fe:86:e7:02:64:aa:a1:96:8a:fe:2a:34: 68:a1:cc:dd:c8:e3:78:16:f6:d1:39:ba:b5:6a:5a: c9:ea:35:c6:d8:21:e2:c2:2b:4d:1d:e5:38:07:ef: 1b:de:08:c3:40:6b:80:0a:b2:05:27:91:5d:9b:0b: cb:f5:bf:fe:47:ba:ce:f1:77:99:fe:56:12:42:c0: 8a:2f:c5:4e:cb:8d:b3:bd:e5:e9:38:6b:25:28:65: 83:20:90:19:93:3b:74:89:0c:d8:7e:95:2d:75:f5: d7:80:e4:44:a7:f9:5e:c4:da:7f:e9:36:0f:c0:95: 89:f1:db:e8:1a:bf:3e:30:8f:6c:c9:cc:96:c7:85: b5:8c:0a:16:07:af:be:2b:d8:a0:64:34:76:40:ce: 40:6b:63:98:2e:f7:90:12:5d:29:3f:9b:24:bf:99: 3e:85:b8:01:00:44:1f:95:78:44:ce:b6:43:a2:46: b6:64:e8:c3:fe:e8:30:54:0f:74:b2:65:c3:1c:9d: a4:60:99:31:dd:c2:94:be:6b:8f:e6:03:56:5a:21: 49:48:f6:60:fa:e5:06:a2:bb:c1:69:17:a2:02:7f: 71:76:0e:96:2a:e6:88:13:65:df:ab:47:15:1c:ef: a0:c1:6d:23:3d:56:b4:cf:ab:36:f6:97:05:e1:3d: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A0:84:57:6C:13:0B:DD:1F:FC:D8:9F:A4:E0:20:C2:F5:77:64:24 X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b6:ce:f7:66:f1:e6:f0:d1:b3:33:17:73:c2:c2:ca:38:77: 29:a7:c4:13:14:43:19:9a:33:e3:12:c6:25:00:d5:ec:e6:f8: 8e:d6:8a:6c:40:0d:ce:af:bb:df:f1:13:b4:23:25:8f:ae:ca: 2c:07:7a:4c:29:42:a2:7b:3a:d8:f6:d1:e9:50:0d:56:84:5f: 14:f9:72:fa:9a:36:91:b7:bb:83:b1:f5:1e:01:5d:af:d3:b7: b7:45:90:6b:16:7c:62:dd:8e:6b:29:c5:f4:66:dc:51:9a:45: 87:4c:ce:0e:a6:ab:24:e5:08:e4:97:1d:33:ea:fd:c3:7f:b0: 5d:b8:57:a8:c7:ec:58:5c:9c:01:07:19:2c:4b:25:5a:21:36: 97:de:93:d0:93:45:a5:ae:2f:c7:b4:f7:fe:43:ca:80:05:5c: fc:a3:d6:2b:8e:ea:b9:b0:2e:34:69:c0:b3:a5:ba:7f:cd:25: 76:ad:6c:d8:f9:bf:de:96:50:95:06:e4:cf:88:36:7f:cc:47: 0b:4d:a6:07:33:3f:8b:b6:03:44:07:da:34:54:97:c1:40:7e: 83:16:25:75:39:26:47:c4:f6:7d:81:76:09:28:a7:44:45:54: ee:f0:12:44:bd:da:9a:e2:60:11:fb:3c:a4:ba:d7:50:3b:33: cf:a7:fa:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOib389lWGqCbjSdYksh27JhYbdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjA5MjMwODUyMTNaFw0yNjA5MjQxMTE1MTNaMDMxMTAvBgNV BAMTKDA5QTA4NDU3NkMxMzBCREQxRkZDRDg5RkE0RTAyMEMyRjU3NzY0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwx/6G5wJkqqGWiv4qNGihzN3I 43gW9tE5urVqWsnqNcbYIeLCK00d5TgH7xveCMNAa4AKsgUnkV2bC8v1v/5Hus7x d5n+VhJCwIovxU7LjbO95ek4ayUoZYMgkBmTO3SJDNh+lS119deA5ESn+V7E2n/p Ng/AlYnx2+gavz4wj2zJzJbHhbWMChYHr74r2KBkNHZAzkBrY5gu95ASXSk/myS/ mT6FuAEARB+VeETOtkOiRrZk6MP+6DBUD3SyZcMcnaRgmTHdwpS+a4/mA1ZaIUlI 9mD65Qaiu8FpF6ICf3F2DpYq5ogTZd+rRxUc76DBbSM9VrTPqzb2lwXhPcN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCaCEV2wTC90f/NifpOAgwvV3ZCQwHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH22zvdm8ebw0bMzF3PCwso4dymnxBMUQxma M+MSxiUA1ezm+I7WimxADc6vu9/xE7QjJY+uyiwHekwpQqJ7Otj20elQDVaEXxT5 cvqaNpG3u4Ox9R4BXa/Tt7dFkGsWfGLdjmspxfRm3FGaRYdMzg6mqyTlCOSXHTPq /cN/sF24V6jH7FhcnAEHGSxLJVohNpfek9CTRaWuL8e09/5DyoAFXPyj1iuO6rmw LjRpwLOlun/NJXatbNj5v96WUJUG5M+INn/MRwtNpgczP4u2A0QH2jRUl8FAfoMW JXU5JkfE9n2Bdgkop0RFVO7wEkS92priYBH7PKS611A7M8+n+go= -----END CERTIFICATE-----Generated at Thu Sep 24 02:20:20 2026 by rpki-client