$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft File: 411E8C45894267DCEFA20514C89165EE7C17C4C4.mft (raw, json) Hash identifier: OWVkwWwnwlskdU4fLHWDmKc4aTl7zkQBPE0EYVHS9D4= Subject key identifier: DA:E7:0F:10:86:79:B3:A6:5C:F4:40:3E:10:2D:33:EB:E6:1F:34:0C Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 Certificate issuer: /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Certificate serial: 24B08E57D3D4DA7D666BBBA59132A4BD22D6C1D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 17:37:27 +0000 Manifest this update: Thu 24 Sep 2026 17:32:27 +0000 Manifest next update: Fri 25 Sep 2026 19:45:27 +0000 Files and hashes: 1: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: Gd2IM01O7z8fqk7GpG61d/HhlCVHlpL3rkOIOFXsAII=) 2: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=) 3: 411E8C45894267DCEFA20514C89165EE7C17C4C4.crl (hash: 2Xgjyl0eAWdqolcDl2lRshopZESu/45TnHOSp/IbgvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b0:8e:57:d3:d4:da:7d:66:6b:bb:a5:91:32:a4:bd:22:d6:c1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Validity Not Before: Sep 24 17:32:27 2026 GMT Not After : Sep 25 19:45:27 2026 GMT Subject: CN=DAE70F108679B3A65CF4403E102D33EBE61F340C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:a3:53:7b:42:ef:dd:c7:81:ca:85:47:5d: fc:17:47:30:57:41:c9:cb:27:72:0f:bd:2c:52:7a: e7:d2:e1:99:f5:00:96:57:2a:d0:6b:7f:c4:33:76: 05:f4:7e:60:4f:46:30:8a:f9:a5:c5:87:79:af:52: cf:f2:6c:ee:9a:55:14:25:3d:5b:42:34:77:b0:14: 9d:9f:95:cc:0f:32:22:6e:02:7e:45:2f:aa:8e:84: 93:ae:35:d4:c1:db:46:8c:c3:9a:0c:45:c1:f0:fb: cf:f9:53:a4:37:9e:f1:8a:cd:f4:df:62:5d:f5:54: 61:22:30:84:71:b1:de:25:7b:30:4f:ad:2b:c5:e0: 0d:cc:ce:3a:57:f5:30:f1:94:05:c7:c7:52:b4:f6: f0:33:81:2e:26:a3:19:d4:7b:46:07:73:26:89:49: db:52:dc:af:df:22:b0:f0:9c:0e:66:fb:8d:c9:cc: c2:86:e1:42:42:86:0d:ff:57:7d:de:f3:b2:95:b3: 97:99:03:a4:9e:72:db:a2:0b:f1:45:6b:d9:42:d3: 6a:66:4f:fb:33:f2:4f:f8:8e:7b:b5:2a:34:e8:d7: b5:a7:fe:15:e9:4c:8e:e0:72:96:bc:fa:72:d8:45: f9:4b:08:37:87:b5:be:5f:a6:fd:f2:32:7b:0f:87: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E7:0F:10:86:79:B3:A6:5C:F4:40:3E:10:2D:33:EB:E6:1F:34:0C X509v3 Authority Key Identifier: keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d4:31:90:21:40:0d:65:fd:1e:26:4e:be:1d:94:b2:18:a8: 8c:32:19:82:34:44:c9:da:17:df:6a:92:01:f8:e7:f5:d5:1e: 4a:db:4f:69:1c:5f:d6:41:bd:0a:c8:8a:73:9a:ec:38:84:d5: 5f:c3:ec:6e:fc:bb:07:81:03:4e:b4:87:72:8d:7c:7e:f7:cd: fe:6e:77:c4:e5:81:42:94:16:35:cb:56:93:cb:06:fd:1a:e5: 48:83:88:4f:43:34:26:bc:9a:2d:56:fa:a6:42:d0:89:95:e1: 43:58:ca:cf:f0:8c:2a:f3:3e:45:12:4d:cd:da:cc:e2:57:65: 91:38:b1:61:a8:11:ba:87:d2:51:cb:21:71:d4:48:52:4f:b1: 85:35:60:a9:b6:2a:b4:8b:e3:35:82:80:72:3f:11:aa:24:f6: 01:6b:b0:76:d3:d6:ab:08:51:3d:4a:81:d7:21:96:6e:fa:8d: a5:2c:86:a3:65:b8:3c:a8:95:c1:56:cf:45:a8:fa:59:81:ff: a6:59:78:56:00:13:64:ff:5d:02:da:ea:4d:2c:4c:85:aa:0c: e0:e5:c2:31:86:85:05:9e:f3:2c:d0:2e:a3:93:e3:7a:54:89: 6b:91:49:f5:3d:91:e7:d7:52:0a:0a:63:8b:02:87:40:ff:a0: ee:0a:09:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLCOV9PU2n1ma7ulkTKkvSLWwdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3 QzE3QzRDNDAeFw0yNjA5MjQxNzMyMjdaFw0yNjA5MjUxOTQ1MjdaMDMxMTAvBgNV BAMTKERBRTcwRjEwODY3OUIzQTY1Q0Y0NDAzRTEwMkQzM0VCRTYxRjM0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cqNTe0Lv3ceByoVHXfwXRzBX QcnLJ3IPvSxSeufS4Zn1AJZXKtBrf8QzdgX0fmBPRjCK+aXFh3mvUs/ybO6aVRQl PVtCNHewFJ2flcwPMiJuAn5FL6qOhJOuNdTB20aMw5oMRcHw+8/5U6Q3nvGKzfTf Yl31VGEiMIRxsd4lezBPrSvF4A3MzjpX9TDxlAXHx1K09vAzgS4moxnUe0YHcyaJ SdtS3K/fIrDwnA5m+43JzMKG4UJChg3/V33e87KVs5eZA6SectuiC/FFa9lC02pm T/sz8k/4jnu1KjTo17Wn/hXpTI7gcpa8+nLYRflLCDeHtb5fpv3yMnsPh4E3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ucPEIZ5s6Zc9EA+EC0z6+YfNAwwHwYDVR0j BBgwFoAUQR6MRYlCZ9zvogUUyJFl7nwXxMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGMwMjAxZTMtODc1ZC00OWM0LThlMTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4 OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3QzE3QzRDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTFFOEM0NTg5NDI2N0RDRUZBMjA1MTRDODkxNjVFRTdDMTdD NEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1 RUU3QzE3QzRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTUMZAhQA1l/R4mTr4dlLIYqIwyGYI0RMna F99qkgH45/XVHkrbT2kcX9ZBvQrIinOa7DiE1V/D7G78uweBA060h3KNfH73zf5u d8TlgUKUFjXLVpPLBv0a5UiDiE9DNCa8mi1W+qZC0ImV4UNYys/wjCrzPkUSTc3a zOJXZZE4sWGoEbqH0lHLIXHUSFJPsYU1YKm2KrSL4zWCgHI/Eaok9gFrsHbT1qsI UT1Kgdchlm76jaUshqNluDyolcFWz0Wo+lmB/6ZZeFYAE2T/XQLa6k0sTIWqDODl wjGGhQWe8yzQLqOT43pUiWuRSfU9kefXUgoKY4sCh0D/oO4KCSI= -----END CERTIFICATE-----Generated at Thu Sep 24 20:48:19 2026 by rpki-client