$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft File: A041DA85A835517127145910FB36AAA5B7CA41F2.mft (raw, json) Hash identifier: KVIgVpvEKS43/Nf16QR5QG6fOCKcq8sDt17241In6Go= Subject key identifier: 64:6D:52:57:90:F8:D5:6E:55:DA:E1:A8:11:7F:9B:56:8E:41:29:12 Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Certificate serial: 78D4792679194EF819BEB9B401D09383DDA3EAA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 10:58:20 +0000 Manifest this update: Sat 14 Nov 2026 10:53:20 +0000 Manifest next update: Sun 15 Nov 2026 14:01:20 +0000 Files and hashes: 1: A041DA85A835517127145910FB36AAA5B7CA41F2.crl (hash: 2AJli4vo/2iTi/oeDEEIX4/GoxIIaZc0qNNaPB6rUGE=) 2: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: cvKGIujNKpn8r6a8rprf+PEz/toRdewoQzshB4q6X84=) 3: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: vmjqWZXe1WAW716qvYHn6H4tiVZPN9hJplwpeaEOs+c=) 4: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: tY2P809Veb9qnVz+b5sj5T6oUhcFMFNmQj4vHbtiv9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d4:79:26:79:19:4e:f8:19:be:b9:b4:01:d0:93:83:dd:a3:ea:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Validity Not Before: Nov 14 10:53:20 2026 GMT Not After : Nov 15 14:01:20 2026 GMT Subject: CN=646D525790F8D56E55DAE1A8117F9B568E412912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d2:0a:8b:35:8b:f3:e6:80:70:95:12:ab:bb: c7:e5:a9:19:af:2b:3e:8d:eb:9d:1a:75:c8:ce:cc: cd:42:99:46:6a:42:e0:18:31:38:1c:2a:3f:6f:8c: 84:31:34:b0:96:f9:67:b4:dc:47:76:0c:50:33:69: 4b:0a:14:f8:e5:70:87:d2:a5:aa:3c:91:9f:1e:67: 35:c7:62:2f:c4:cb:40:e5:3d:0e:2b:93:76:58:15: ab:e2:3f:8f:ec:84:76:cb:75:a4:a4:ba:55:9a:01: a3:4d:a0:95:db:88:df:f7:05:ef:0f:e1:3d:fe:cc: e8:5b:a1:a3:f4:37:e7:94:70:53:d9:94:c9:bd:b2: c9:6f:e7:7e:73:5e:ec:d9:24:db:3a:52:4e:0a:e2: 42:64:91:af:53:40:3c:50:dc:d1:c5:5e:b3:05:4b: 25:97:c6:40:f4:08:24:1f:8c:84:25:a9:fa:80:c6: a1:28:64:82:19:11:53:3b:7a:56:34:1a:13:02:8c: 28:32:65:97:5e:e3:76:75:5d:99:28:6e:a2:00:d1: 6b:f4:c6:a7:ff:80:d6:32:80:16:46:3d:46:b8:fd: 99:d9:f1:41:19:df:54:b1:b1:c1:45:63:54:f1:f7: df:1c:a9:d4:b6:89:a8:d4:2a:0c:23:90:f7:bc:6c: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6D:52:57:90:F8:D5:6E:55:DA:E1:A8:11:7F:9B:56:8E:41:29:12 X509v3 Authority Key Identifier: keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:a5:8f:10:5b:16:c1:cb:f9:8f:f6:47:93:40:6d:70:62:be: b4:a6:56:62:0f:97:f3:76:ef:8a:7d:ea:0d:1c:51:6b:52:ce: 96:ec:f7:e9:50:0d:d7:6c:4a:0a:fb:77:dc:c6:4f:e4:ee:86: 1e:5b:76:b8:ae:a4:a6:eb:f9:ab:7c:cb:b1:7b:ed:6a:05:e4: 24:ae:46:f4:e1:81:58:26:b9:15:43:e4:b4:bb:fd:55:e6:37: e2:bb:d2:e6:5f:30:c1:14:ec:35:88:64:13:f8:90:5c:35:7d: 55:6a:51:2e:20:5f:aa:bf:a6:62:44:2f:d3:55:a4:d1:25:35: f4:45:07:85:ee:0a:fb:ae:6d:61:ed:19:0b:67:a7:d7:0b:cd: 3a:01:3b:62:d2:4d:d4:f7:5e:da:ec:d9:e9:73:b8:05:34:7d: 15:04:1d:4f:0e:00:34:db:36:3c:86:28:89:d4:4c:f4:f5:ef: 0c:4b:b1:5d:78:fa:89:33:30:c4:a2:e0:f6:f6:bb:ae:92:3a: 7b:11:7c:65:e7:f5:d1:28:60:9e:1d:49:c3:43:7e:20:1b:7c: a7:2a:95:0a:96:a0:3f:7b:b3:e7:1d:01:51:01:4f:f8:d1:1a: e9:b9:a8:d3:da:2b:99:2a:09:37:90:9c:59:3e:ac:6d:24:65: 9f:56:0e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNR5JnkZTvgZvrm0AdCTg92j6qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC N0NBNDFGMjAeFw0yNjExMTQxMDUzMjBaFw0yNjExMTUxNDAxMjBaMDMxMTAvBgNV BAMTKDY0NkQ1MjU3OTBGOEQ1NkU1NURBRTFBODExN0Y5QjU2OEU0MTI5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ0gqLNYvz5oBwlRKru8flqRmv Kz6N650adcjOzM1CmUZqQuAYMTgcKj9vjIQxNLCW+We03Ed2DFAzaUsKFPjlcIfS pao8kZ8eZzXHYi/Ey0DlPQ4rk3ZYFaviP4/shHbLdaSkulWaAaNNoJXbiN/3Be8P 4T3+zOhboaP0N+eUcFPZlMm9sslv535zXuzZJNs6Uk4K4kJkka9TQDxQ3NHFXrMF SyWXxkD0CCQfjIQlqfqAxqEoZIIZEVM7elY0GhMCjCgyZZde43Z1XZkobqIA0Wv0 xqf/gNYygBZGPUa4/ZnZ8UEZ31SxscFFY1Tx998cqdS2iajUKgwjkPe8bIBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZG1SV5D41W5V2uGoEX+bVo5BKRIwHwYDVR0j BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFB QTVCN0NBNDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqljxBbFsHL+Y/2R5NAbXBivrSmVmIPl/N2 74p96g0cUWtSzpbs9+lQDddsSgr7d9zGT+Tuhh5bdriupKbr+at8y7F77WoF5CSu RvThgVgmuRVD5LS7/VXmN+K70uZfMMEU7DWIZBP4kFw1fVVqUS4gX6q/pmJEL9NV pNElNfRFB4XuCvuubWHtGQtnp9cLzToBO2LSTdT3Xtrs2elzuAU0fRUEHU8OADTb NjyGKInUTPT17wxLsV14+okzMMSi4Pb2u66SOnsRfGXn9dEoYJ4dScNDfiAbfKcq lQqWoD97s+cdAVEBT/jRGum5qNPaK5kqCTeQnFk+rG0kZZ9WDi8= -----END CERTIFICATE-----Generated at Sat Nov 14 22:34:52 2026 by rpki-client