$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft File: A241AC704BB26D3BB01102643E819AF4873EBFF4.mft (raw, json) Hash identifier: wHH8+nZaCqe68sCd3W3MoejtvPqItYM//QBqR6BgKgY= Subject key identifier: B4:07:C3:35:62:D9:AB:05:3D:C7:6E:04:EB:0E:C7:A4:41:73:AB:9B Authority key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4 Certificate issuer: /CN=A241AC704BB26D3BB01102643E819AF4873EBFF4 Certificate serial: 66BC30F30B2ED1F9154B59056F9AEAB9F3EC8FD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft Manifest number: D2 Signing time: Wed 07 Oct 2026 09:29:13 +0000 Manifest this update: Wed 07 Oct 2026 09:24:13 +0000 Manifest next update: Thu 08 Oct 2026 12:22:13 +0000 Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: A0dq7gCpUZizRlTZxmyyhDpzPzM9JT/yiUa6QfFC4Os=) 2: A241AC704BB26D3BB01102643E819AF4873EBFF4.crl (hash: VGWMa2z9z8ycTmQnZ3GTabAs6Fv/l94lAY8Gi824zM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 12:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:bc:30:f3:0b:2e:d1:f9:15:4b:59:05:6f:9a:ea:b9:f3:ec:8f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4 Validity Not Before: Oct 7 09:24:13 2026 GMT Not After : Oct 8 12:22:13 2026 GMT Subject: CN=B407C33562D9AB053DC76E04EB0EC7A44173AB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:c9:2a:47:01:78:77:46:c0:01:3e:cf:e4: fb:1f:7a:a2:96:9d:36:3c:0b:7d:11:35:7f:6e:7e: ef:a7:23:75:36:51:98:5c:3c:52:97:19:5a:ef:6c: 3e:6f:95:91:bd:17:f5:b2:53:27:24:3c:8d:67:99: 20:d6:f1:3a:8a:4e:66:d6:0e:36:b2:22:0f:8c:51: cb:9d:1d:53:05:fe:ed:5d:45:6c:5a:57:89:f9:88: 72:ac:2a:89:02:98:f7:59:86:1d:9a:67:0d:b7:bf: 98:aa:c8:64:cb:24:9c:cf:26:6e:10:a7:fe:d3:f1: 42:8b:02:f4:dc:b2:7f:87:05:5a:bc:4b:da:89:20: 86:eb:16:db:c6:32:e0:c9:c9:af:93:d0:25:12:6a: f5:3f:98:39:cb:20:ab:97:30:06:7d:d3:54:49:6b: bb:72:61:c4:b7:00:bc:e4:16:d8:08:5c:44:e1:f4: ad:be:f4:62:dc:df:2c:92:ed:a2:fa:05:b5:e3:52: 1c:40:2c:a3:dd:37:c5:b4:8d:e5:11:93:02:bb:5c: 48:53:17:96:8b:29:a8:fe:fb:1b:0e:67:ac:78:c6: 04:f0:06:f8:50:64:69:d1:9c:d0:23:9e:82:d8:f0: f4:b1:0b:a7:fa:8b:8c:a8:64:19:9f:e5:e3:be:ab: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:07:C3:35:62:D9:AB:05:3D:C7:6E:04:EB:0E:C7:A4:41:73:AB:9B X509v3 Authority Key Identifier: keyid:A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ea:32:06:3e:37:56:04:7c:c1:0a:94:f6:80:86:53:82:12: 2b:6e:50:4f:8c:34:85:17:20:8e:29:41:ed:03:f0:08:63:5a: 80:d4:bf:10:b4:3d:a5:53:21:7c:0a:8a:ce:a1:78:a9:5c:d0: 0d:48:c5:e2:6e:65:56:d1:53:1e:74:3c:d7:c2:9b:e0:08:7c: 98:5f:7b:a1:b5:98:5f:db:e4:89:87:ac:e6:e1:05:37:e1:af: 2d:b7:ef:de:4c:e1:4a:4b:7b:d6:a9:41:42:9b:5d:a7:0e:44: 45:02:97:e0:79:73:e4:73:84:b1:a7:99:bc:b1:80:76:e3:af: 2c:5d:00:a5:fa:62:5d:0c:c7:bf:57:f1:82:d3:01:fc:c4:66: 5a:eb:d5:75:67:8a:6a:71:59:78:f0:7d:28:35:e0:86:39:e4: 72:75:0d:7e:f3:b0:81:f4:40:48:1c:7c:b2:89:91:d8:8f:bb: 87:a2:1e:39:f9:72:f5:82:60:81:ff:63:a9:f2:64:89:a2:d4: a6:06:f1:06:26:bb:79:2d:32:c2:35:78:44:ba:c6:7f:56:ea: 0c:70:ce:75:33:e9:3e:da:15:0c:16:42:9e:6a:1b:cd:d1:e4: 46:0e:bc:43:40:7a:25:93:78:7f:3e:7b:6d:b1:a4:c8:ae:84: d2:c7:e3:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrww8wsu0fkVS1kFb5rqufPsj9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI0MUFDNzA0QkIyNkQzQkIwMTEwMjY0M0U4MTlBRjQ4 NzNFQkZGNDAeFw0yNjEwMDcwOTI0MTNaFw0yNjEwMDgxMjIyMTNaMDMxMTAvBgNV BAMTKEI0MDdDMzM1NjJEOUFCMDUzREM3NkUwNEVCMEVDN0E0NDE3M0FCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwMkqRwF4d0bAAT7P5PsfeqKW nTY8C30RNX9ufu+nI3U2UZhcPFKXGVrvbD5vlZG9F/WyUyckPI1nmSDW8TqKTmbW DjayIg+MUcudHVMF/u1dRWxaV4n5iHKsKokCmPdZhh2aZw23v5iqyGTLJJzPJm4Q p/7T8UKLAvTcsn+HBVq8S9qJIIbrFtvGMuDJya+T0CUSavU/mDnLIKuXMAZ901RJ a7tyYcS3ALzkFtgIXETh9K2+9GLc3yyS7aL6BbXjUhxALKPdN8W0jeURkwK7XEhT F5aLKaj++xsOZ6x4xgTwBvhQZGnRnNAjnoLY8PSxC6f6i4yoZBmf5eO+q7/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtAfDNWLZqwU9x24E6w7HpEFzq5swHwYDVR0j BBgwFoAUokGscEuybTuwEQJkPoGa9Ic+v/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhNGVmNzEtZjBlMC00MjUyLTgxNjAtNTA1MzIxZmE1MDg5LzAvQTI0MUFDNzA0 QkIyNkQzQkIwMTEwMjY0M0U4MTlBRjQ4NzNFQkZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjQxQUM3MDRCQjI2RDNCQjAxMTAyNjQzRTgxOUFGNDg3M0VC RkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQTI0MUFDNzA0QkIyNkQzQkIwMTEwMjY0M0U4MTlB RjQ4NzNFQkZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7qMgY+N1YEfMEKlPaAhlOCEituUE+MNIUX II4pQe0D8AhjWoDUvxC0PaVTIXwKis6heKlc0A1IxeJuZVbRUx50PNfCm+AIfJhf e6G1mF/b5ImHrObhBTfhry23795M4UpLe9apQUKbXacOREUCl+B5c+RzhLGnmbyx gHbjryxdAKX6Yl0Mx79X8YLTAfzEZlrr1XVnimpxWXjwfSg14IY55HJ1DX7zsIH0 QEgcfLKJkdiPu4eiHjn5cvWCYIH/Y6nyZImi1KYG8QYmu3ktMsI1eES6xn9W6gxw znUz6T7aFQwWQp5qG83R5EYOvENAeiWTeH8+e22xpMiuhNLH4xk= -----END CERTIFICATE-----Generated at Thu Oct 8 02:17:13 2026 by rpki-client