$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft File: A041DA85A835517127145910FB36AAA5B7CA41F2.mft (raw, json) Hash identifier: HrM3dGew47iZJdlzxNYyxO30+i0mS/3/7g5FFq34hsw= Subject key identifier: A9:C8:42:C4:D4:D8:A5:90:5F:69:38:BB:BC:56:1E:19:33:78:1B:39 Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Certificate serial: 52FC0997E4A02D16FBBB0383E7EFBE8BF31F1CDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 17:01:50 +0000 Manifest this update: Thu 24 Sep 2026 16:56:50 +0000 Manifest next update: Fri 25 Sep 2026 17:16:50 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: vmjqWZXe1WAW716qvYHn6H4tiVZPN9hJplwpeaEOs+c=) 2: A041DA85A835517127145910FB36AAA5B7CA41F2.crl (hash: hngKjzZD1hljggSWf4slTTPA6t1h0U7d24fZ7omdWlI=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: cvKGIujNKpn8r6a8rprf+PEz/toRdewoQzshB4q6X84=) 4: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: tY2P809Veb9qnVz+b5sj5T6oUhcFMFNmQj4vHbtiv9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fc:09:97:e4:a0:2d:16:fb:bb:03:83:e7:ef:be:8b:f3:1f:1c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Validity Not Before: Sep 24 16:56:50 2026 GMT Not After : Sep 25 17:16:50 2026 GMT Subject: CN=A9C842C4D4D8A5905F6938BBBC561E1933781B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:5f:14:42:41:24:00:31:e5:8d:90:6a:1a: 21:55:1d:2e:2b:11:e8:61:9d:4c:51:ec:1a:f2:b7: 49:1d:fe:5b:59:7a:d2:3a:47:19:4b:2c:0f:55:55: 0b:85:6a:70:5b:03:d4:3e:df:b3:7a:e3:ac:df:ce: 83:73:6b:bc:cf:b1:d7:36:d2:d0:04:85:75:f9:4d: 0b:29:25:e9:7c:3d:e3:5b:6f:0e:6e:7d:d9:fe:89: 2f:02:8f:d2:61:53:f2:90:9d:e0:2a:15:2c:68:5f: 18:0e:12:c2:23:aa:4e:53:56:46:91:43:13:f2:02: 83:15:c8:ca:62:dc:dd:4d:d3:7a:2e:92:05:be:2e: 7d:97:c6:a6:bc:9f:43:a2:ff:ce:78:12:d3:ff:d2: 8d:f3:72:9c:38:73:80:b8:f8:21:ac:57:2f:1c:88: 54:2c:bf:41:b7:5d:bf:2b:3d:7b:62:a8:c5:18:6a: 92:c5:02:dd:0e:02:8e:7f:00:12:4c:1e:bc:f0:3e: b2:45:86:c8:09:d6:b0:94:c5:12:44:6e:e3:b2:8a: c4:2e:35:fb:31:dd:8f:4d:b9:4c:d3:c5:45:01:74: 52:94:9c:d8:41:9e:a1:05:54:b9:5b:3d:05:40:73: 6a:69:6f:2b:c0:30:b2:4c:cc:a9:7c:b2:33:fe:35: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C8:42:C4:D4:D8:A5:90:5F:69:38:BB:BC:56:1E:19:33:78:1B:39 X509v3 Authority Key Identifier: keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b5:f8:94:d7:c2:b1:20:21:59:20:af:ba:25:bb:88:62:b6: 53:65:98:2b:fe:11:4f:fb:2f:7a:2f:bf:f1:2b:c9:14:85:b4: a4:8a:22:c7:b8:8c:cf:e3:3c:f8:ef:c3:ea:1c:ab:fc:5e:da: 31:89:de:ad:bc:aa:5a:20:c6:80:dd:a7:36:15:4b:25:9e:50: ef:57:ef:a8:17:e3:9c:4d:76:00:16:e8:b4:4c:ff:59:bc:64: b1:f0:70:52:cf:db:27:55:31:49:dc:06:28:61:44:4f:c4:82: 32:86:f5:f5:77:d4:b0:c9:93:cf:4a:41:0f:3a:cd:17:a9:80: 00:26:db:ae:bd:ce:20:36:0a:ba:e9:9a:2c:5b:bf:90:3f:4c: 33:61:f4:d0:93:39:58:00:e5:43:69:ce:24:20:42:5f:43:ad: 04:76:41:19:9c:68:74:d2:b5:50:2d:cf:eb:58:ef:9b:3d:56: 82:5a:ff:7c:f9:28:f2:cd:b3:dd:96:ae:61:77:a0:5d:c8:a5: 7b:6c:86:3a:b8:e5:81:74:5b:1e:de:f1:38:29:c4:19:63:0a: 09:4a:85:bf:e6:b4:d0:e6:5b:74:f7:3d:04:96:b8:af:16:f7: 5f:05:25:67:f5:1f:41:b7:44:95:8a:36:d8:49:50:87:4e:e8: d9:ab:cd:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvwJl+SgLRb7uwOD5+++i/MfHN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC N0NBNDFGMjAeFw0yNjA5MjQxNjU2NTBaFw0yNjA5MjUxNzE2NTBaMDMxMTAvBgNV BAMTKEE5Qzg0MkM0RDREOEE1OTA1RjY5MzhCQkJDNTYxRTE5MzM3ODFCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXl8UQkEkADHljZBqGiFVHS4r EehhnUxR7Bryt0kd/ltZetI6RxlLLA9VVQuFanBbA9Q+37N646zfzoNza7zPsdc2 0tAEhXX5TQspJel8PeNbbw5ufdn+iS8Cj9JhU/KQneAqFSxoXxgOEsIjqk5TVkaR QxPyAoMVyMpi3N1N03oukgW+Ln2Xxqa8n0Oi/854EtP/0o3zcpw4c4C4+CGsVy8c iFQsv0G3Xb8rPXtiqMUYapLFAt0OAo5/ABJMHrzwPrJFhsgJ1rCUxRJEbuOyisQu Nfsx3Y9NuUzTxUUBdFKUnNhBnqEFVLlbPQVAc2ppbyvAMLJMzKl8sjP+NRRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqchCxNTYpZBfaTi7vFYeGTN4GzkwHwYDVR0j BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFB QTVCN0NBNDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIS1+JTXwrEgIVkgr7olu4hitlNlmCv+EU/7 L3ovv/EryRSFtKSKIse4jM/jPPjvw+ocq/xe2jGJ3q28qlogxoDdpzYVSyWeUO9X 76gX45xNdgAW6LRM/1m8ZLHwcFLP2ydVMUncBihhRE/EgjKG9fV31LDJk89KQQ86 zRepgAAm2669ziA2Crrpmixbv5A/TDNh9NCTOVgA5UNpziQgQl9DrQR2QRmcaHTS tVAtz+tY75s9VoJa/3z5KPLNs92WrmF3oF3IpXtshjq45YF0Wx7e8TgpxBljCglK hb/mtNDmW3T3PQSWuK8W918FJWf1H0G3RJWKNthJUIdO6NmrzaU= -----END CERTIFICATE-----Generated at Fri Sep 25 03:12:40 2026 by rpki-client