$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.mft File: 413B918E0446ABBEFD82F3C84760F8A2EA857731.mft (raw, json) Hash identifier: YGcFwsN7mknGBc2gbZq8E3LDtc+I96PVuVBT16VFLBQ= Subject key identifier: 36:42:CA:A5:B9:25:DC:4D:E8:80:80:9E:95:1A:9A:F2:DA:6C:54:9F Authority key identifier: 41:3B:91:8E:04:46:AB:BE:FD:82:F3:C8:47:60:F8:A2:EA:85:77:31 Certificate issuer: /CN=413B918E0446ABBEFD82F3C84760F8A2EA857731 Certificate serial: 38B6179E2BACF38831AABFEA11946550FC2CA790 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/413B918E0446ABBEFD82F3C84760F8A2EA857731.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:45:36 +0000 Manifest this update: Wed 23 Sep 2026 15:40:36 +0000 Manifest next update: Thu 24 Sep 2026 18:14:36 +0000 Files and hashes: 1: 413B918E0446ABBEFD82F3C84760F8A2EA857731.crl (hash: VUrpAbrO6+SXUFQb+xo+wlodA3kWjw/g7xYIpG4Y2ig=) 2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: rg4ctx8xX6dAFUeBwVwtymFyHjkTy1MEtGpAlsjk8b8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.crl rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/413B918E0446ABBEFD82F3C84760F8A2EA857731.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b6:17:9e:2b:ac:f3:88:31:aa:bf:ea:11:94:65:50:fc:2c:a7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=413B918E0446ABBEFD82F3C84760F8A2EA857731 Validity Not Before: Sep 23 15:40:36 2026 GMT Not After : Sep 24 18:14:36 2026 GMT Subject: CN=3642CAA5B925DC4DE880809E951A9AF2DA6C549F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:4e:e9:95:b7:15:33:be:1c:c3:cb:e5:27: b3:90:e0:d8:d6:bc:35:c6:cb:16:a6:ff:5a:07:1d: cc:6b:6f:21:26:e5:1d:af:70:1a:4f:dc:63:00:d7: 04:0f:90:82:ad:78:d0:c2:39:c0:3a:4c:36:07:33: 65:2d:3c:10:60:8a:b8:a2:c7:22:2d:9d:37:1d:f2: 32:92:b7:24:57:c3:11:69:47:f8:92:7d:9b:b3:af: 40:88:94:96:b0:d9:4e:c1:0f:10:fb:c9:1b:67:14: 9e:24:e6:88:48:22:7b:53:28:e0:ac:62:3a:3e:fd: db:60:d1:40:6f:bf:2f:cb:ea:f8:19:15:dc:02:0f: 37:e9:86:13:ce:81:41:5a:97:08:1e:26:44:d9:eb: 1b:64:40:ec:ec:00:19:e9:d3:f7:86:d2:8c:32:c3: 33:4e:ab:c5:14:85:31:2e:5a:ef:69:e2:6d:66:4c: 69:f6:8d:ff:fe:62:d2:a5:a8:8e:3b:72:bd:00:c8: 4c:4c:e8:a5:ae:a9:58:65:6d:d4:95:1b:d7:c4:1d: 1f:27:35:9e:58:55:0a:0c:eb:11:f9:fa:3a:ef:eb: 36:d2:cd:25:40:7c:fc:22:09:46:14:fd:68:5f:2d: 4c:04:3d:f4:60:37:3b:40:0f:a8:a4:89:8f:1d:44: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:42:CA:A5:B9:25:DC:4D:E8:80:80:9E:95:1A:9A:F2:DA:6C:54:9F X509v3 Authority Key Identifier: keyid:41:3B:91:8E:04:46:AB:BE:FD:82:F3:C8:47:60:F8:A2:EA:85:77:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/413B918E0446ABBEFD82F3C84760F8A2EA857731.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:18:d9:98:c8:31:66:a1:15:d5:6b:f6:96:b7:6d:4d:0e:18: d6:c5:db:75:49:70:99:35:fc:9d:fb:79:06:83:0d:27:75:b3: 2a:f3:1e:35:53:1a:04:05:5d:f3:7f:58:15:b2:82:80:c6:ca: 5d:62:40:a4:eb:18:1f:37:39:db:d4:c8:e3:83:93:5f:8a:15: 23:10:32:9e:b8:f6:5e:58:13:de:2e:80:ff:09:ad:25:d9:f5: c1:03:78:12:89:2a:d4:6c:f1:63:37:10:5b:21:36:a7:c4:ce: fc:b4:81:02:b0:19:be:90:e4:00:bd:38:e4:05:77:d3:ee:cb: 28:9a:9e:16:23:5b:a1:4d:66:4d:78:72:45:b7:d9:a2:91:8e: 97:12:51:fd:fc:3f:98:9b:4f:67:aa:8d:bc:88:fa:f6:04:ec: 49:a7:21:85:23:2b:df:dd:24:e5:91:32:4e:73:87:67:2f:e5: c8:d3:8c:e1:be:3b:c0:ba:b7:6d:04:08:dc:e7:cf:6e:5d:62: 45:b4:5e:c4:4f:be:b7:90:57:77:8a:92:4a:07:d1:ee:a9:af: 0d:67:3c:58:7d:f2:3c:90:be:09:d3:20:ca:15:e8:bb:73:f5: fe:0d:c9:b0:8c:42:4d:be:25:45:82:88:57:b8:a6:a9:5c:71: e0:dd:03:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLYXnius84gxqr/qEZRlUPwsp5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzQjkxOEUwNDQ2QUJCRUZEODJGM0M4NDc2MEY4QTJF QTg1NzczMTAeFw0yNjA5MjMxNTQwMzZaFw0yNjA5MjQxODE0MzZaMDMxMTAvBgNV BAMTKDM2NDJDQUE1QjkyNURDNERFODgwODA5RTk1MUE5QUYyREE2QzU0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpk7plbcVM74cw8vlJ7OQ4NjW vDXGyxam/1oHHcxrbyEm5R2vcBpP3GMA1wQPkIKteNDCOcA6TDYHM2UtPBBgirii xyItnTcd8jKStyRXwxFpR/iSfZuzr0CIlJaw2U7BDxD7yRtnFJ4k5ohIIntTKOCs Yjo+/dtg0UBvvy/L6vgZFdwCDzfphhPOgUFalwgeJkTZ6xtkQOzsABnp0/eG0owy wzNOq8UUhTEuWu9p4m1mTGn2jf/+YtKlqI47cr0AyExM6KWuqVhlbdSVG9fEHR8n NZ5YVQoM6xH5+jrv6zbSzSVAfPwiCUYU/WhfLUwEPfRgNztAD6ikiY8dROwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNkLKpbkl3E3ogICelRqa8tpsVJ8wHwYDVR0j BBgwFoAUQTuRjgRGq779gvPIR2D4ouqFdzEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTEzZWVkMmItOTU1ZS00MDkzLTg4YTQtZjRkZTNjYzliOWNkLzAvNDEzQjkxOEUw NDQ2QUJCRUZEODJGM0M4NDc2MEY4QTJFQTg1NzczMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTNCOTE4RTA0NDZBQkJFRkQ4MkYzQzg0NzYwRjhBMkVBODU3 NzMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTEzZWVkMmItOTU1ZS00MDkzLTg4 YTQtZjRkZTNjYzliOWNkLzAvNDEzQjkxOEUwNDQ2QUJCRUZEODJGM0M4NDc2MEY4 QTJFQTg1NzczMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwY2ZjIMWahFdVr9pa3bU0OGNbF23VJcJk1 /J37eQaDDSd1syrzHjVTGgQFXfN/WBWygoDGyl1iQKTrGB83OdvUyOODk1+KFSMQ Mp649l5YE94ugP8JrSXZ9cEDeBKJKtRs8WM3EFshNqfEzvy0gQKwGb6Q5AC9OOQF d9PuyyianhYjW6FNZk14ckW32aKRjpcSUf38P5ibT2eqjbyI+vYE7EmnIYUjK9/d JOWRMk5zh2cv5cjTjOG+O8C6t20ECNznz25dYkW0XsRPvreQV3eKkkoH0e6prw1n PFh98jyQvgnTIMoV6Ltz9f4NybCMQk2+JUWCiFe4pqlcceDdA78= -----END CERTIFICATE-----Generated at Thu Sep 24 03:47:27 2026 by rpki-client