$ rpki-client -vvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft File: A041DA85A835517127145910FB36AAA5B7CA41F2.mft (raw, json) Hash identifier: TrRQTiJEvi2E+eL5lTKdo90lf/Hkp7BIfuqnTCvBCLM= Subject key identifier: C0:55:8D:90:82:1A:1E:D9:C8:63:0C:C6:99:D0:18:7B:5D:D4:61:2E Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Certificate serial: 08EDF34B24F97242116FE1521621A3F423549C47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:12:22 +0000 Manifest this update: Thu 23 Jul 2026 14:07:22 +0000 Manifest next update: Fri 24 Jul 2026 16:35:22 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: tY2P809Veb9qnVz+b5sj5T6oUhcFMFNmQj4vHbtiv9U=) 2: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: vmjqWZXe1WAW716qvYHn6H4tiVZPN9hJplwpeaEOs+c=) 3: A041DA85A835517127145910FB36AAA5B7CA41F2.crl (hash: e0auo4QOf7ANUY0eMALWWxGEpROo+75p0xyjVjNOE+0=) 4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: cvKGIujNKpn8r6a8rprf+PEz/toRdewoQzshB4q6X84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ed:f3:4b:24:f9:72:42:11:6f:e1:52:16:21:a3:f4:23:54:9c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Validity Not Before: Jul 23 14:07:22 2026 GMT Not After : Jul 24 16:35:22 2026 GMT Subject: CN=C0558D90821A1ED9C8630CC699D0187B5DD4612E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:d3:25:98:ce:df:69:71:26:84:9d:16:73: e1:6a:34:9b:8a:ae:be:86:02:a7:b5:30:26:cf:03: 97:20:c1:09:68:f9:c0:47:0f:a6:6b:71:90:b7:8a: cf:96:eb:fb:85:f9:a9:97:52:8e:f4:4f:8c:5d:12: 96:8c:e6:4a:e0:0f:39:2e:1f:5b:50:98:04:e9:db: 45:ae:19:68:1f:51:cc:12:3b:e4:ea:81:db:da:16: 95:19:c9:de:4a:a6:2f:61:9b:2f:fe:ab:3a:78:1e: 8c:a2:7c:a3:9e:05:b5:64:26:81:ea:f1:e9:b2:dc: 5c:ea:3a:4c:9f:d7:f5:cf:47:5c:00:af:50:75:e4: 49:bf:9c:33:d4:a4:c5:74:8c:2c:69:d9:41:fc:67: d4:53:b9:71:df:c7:09:d4:74:0e:8f:23:3a:13:af: d8:29:07:99:c3:25:07:37:e8:4e:4a:b2:93:9c:f0: 80:f4:3a:b7:e1:fc:0e:d5:7f:a1:c5:c7:59:dd:17: 9a:c6:6a:5c:99:76:31:33:d8:2c:bd:dd:37:c5:68: fa:07:08:b6:8d:9b:2b:55:19:15:c7:6e:09:37:a9: 74:6a:e1:a1:17:4e:e0:52:ac:73:fb:52:2d:98:e0: 5c:10:33:12:36:5d:0d:a4:97:d9:66:16:01:ee:03: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:55:8D:90:82:1A:1E:D9:C8:63:0C:C6:99:D0:18:7B:5D:D4:61:2E X509v3 Authority Key Identifier: keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:82:53:f8:80:5a:f3:95:05:3c:e9:d8:dc:5d:e0:b3:4e:69: 4f:6e:2d:a4:80:da:97:9b:be:b6:5d:f2:c5:9b:1d:6e:6b:22: d5:56:8c:62:bb:ef:2b:a7:66:df:53:25:cb:bf:2a:44:86:15: c1:4d:c5:60:ec:c5:6a:6e:79:fc:6b:26:01:13:94:72:3c:59: 3d:c2:ec:3a:5f:14:ca:45:4e:52:95:38:f4:8f:ac:ef:19:44: 41:8a:c6:e4:ef:7f:ac:cd:26:42:ae:49:f1:94:2b:5b:cc:3f: 2a:1d:c9:1f:66:e5:79:5b:f7:0b:c7:f4:0d:df:35:e8:b0:7b: 3c:03:39:98:f8:8d:e0:07:b8:86:80:e8:9c:28:f7:14:12:33: d4:f3:d7:13:40:55:6e:08:30:ff:fc:69:d9:de:db:b2:7e:76: 9b:70:9e:3f:3e:b2:75:6c:b9:39:04:ed:b6:8b:68:c8:03:76: 8d:95:10:b4:69:f7:10:81:6f:fe:23:3d:7e:54:59:77:56:42: 07:46:e1:e5:2c:ff:09:cf:35:6a:45:50:5f:73:fc:32:1d:8c: 8f:87:8d:be:e0:08:59:a2:86:84:ca:26:c9:9c:bd:99:75:24: 46:29:ed:56:2b:d8:a0:96:1c:43:1a:41:64:8f:38:47:66:05: 5b:13:14:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCO3zSyT5ckIRb+FSFiGj9CNUnEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC N0NBNDFGMjAeFw0yNjA3MjMxNDA3MjJaFw0yNjA3MjQxNjM1MjJaMDMxMTAvBgNV BAMTKEMwNTU4RDkwODIxQTFFRDlDODYzMENDNjk5RDAxODdCNURENDYxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqdMlmM7faXEmhJ0Wc+FqNJuK rr6GAqe1MCbPA5cgwQlo+cBHD6ZrcZC3is+W6/uF+amXUo70T4xdEpaM5krgDzku H1tQmATp20WuGWgfUcwSO+TqgdvaFpUZyd5Kpi9hmy/+qzp4HoyifKOeBbVkJoHq 8emy3FzqOkyf1/XPR1wAr1B15Em/nDPUpMV0jCxp2UH8Z9RTuXHfxwnUdA6PIzoT r9gpB5nDJQc36E5KspOc8ID0Orfh/A7Vf6HFx1ndF5rGalyZdjEz2Cy93TfFaPoH CLaNmytVGRXHbgk3qXRq4aEXTuBSrHP7Ui2Y4FwQMxI2XQ2kl9lmFgHuA8EhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwFWNkIIaHtnIYwzGmdAYe13UYS4wHwYDVR0j BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFB QTVCN0NBNDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2CU/iAWvOVBTzp2Nxd4LNOaU9uLaSA2peb vrZd8sWbHW5rItVWjGK77yunZt9TJcu/KkSGFcFNxWDsxWpuefxrJgETlHI8WT3C 7DpfFMpFTlKVOPSPrO8ZREGKxuTvf6zNJkKuSfGUK1vMPyodyR9m5Xlb9wvH9A3f NeiwezwDOZj4jeAHuIaA6Jwo9xQSM9Tz1xNAVW4IMP/8adne27J+dptwnj8+snVs uTkE7baLaMgDdo2VELRp9xCBb/4jPX5UWXdWQgdG4eUs/wnPNWpFUF9z/DIdjI+H jb7gCFmihoTKJsmcvZl1JEYp7VYr2KCWHEMaQWSPOEdmBVsTFEY= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:35 2026 by rpki-client