$ rpki-client -vvf rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft File: A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft (raw, json) Hash identifier: r0wO8u9R6R98/9c6sfFa0mMpLbM5bPTl/F7KfrAEBKs= Subject key identifier: 9D:A9:0A:9D:D5:42:3C:65:4E:29:99:CB:C7:D7:FD:9B:44:4F:96:EA Authority key identifier: A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A Certificate issuer: /CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Certificate serial: 4E85CA390EF41CFAB27BBB1EC2ABF979C05FCB49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:14:32 +0000 Manifest this update: Tue 02 Jun 2026 20:09:32 +0000 Manifest next update: Wed 03 Jun 2026 22:23:32 +0000 Files and hashes: 1: A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl (hash: efVlfg2UU0YEGFuuOvyV30GfpMpSUefRA3TNUF3TXjI=) 2: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: pKo3R747DDUIneHm99mAHqDIwYFklZR6NNCcsU54reo=) 3: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: eZlsFaLITxkPeJNSHzaVTJrd/LDOmMtodzgFU/hBW40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:85:ca:39:0e:f4:1c:fa:b2:7b:bb:1e:c2:ab:f9:79:c0:5f:cb:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Validity Not Before: Jun 2 20:09:32 2026 GMT Not After : Jun 3 22:23:32 2026 GMT Subject: CN=9DA90A9DD5423C654E2999CBC7D7FD9B444F96EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:76:7e:08:02:bb:fe:35:0a:7a:13:3e:ff: 52:16:06:34:52:ac:f7:7e:e7:95:fc:6c:66:97:44: b8:54:58:45:99:ae:38:db:79:a4:12:a7:9b:ed:6a: 90:25:68:e4:92:f0:97:da:6f:ae:64:1f:39:32:eb: d0:41:b9:54:30:51:b7:32:61:13:35:a7:aa:ac:a2: 33:c3:0c:19:90:4e:b7:83:2a:46:e4:5e:6d:35:3e: 1b:b1:ca:03:97:23:e6:96:fe:71:94:f3:8a:51:dc: 45:e5:58:12:5b:83:81:a2:d7:ad:3c:2a:ef:0b:3c: f7:a1:26:8a:db:be:10:51:dd:7f:c6:bd:76:79:cc: c0:3e:34:8d:08:24:96:5c:37:2d:d8:ef:9b:3f:26: c3:28:d3:08:9f:ed:d0:b8:ea:23:a3:b0:d7:f3:19: 0a:22:ac:8e:b8:3a:97:fe:4a:41:7b:51:47:89:34: de:67:52:c4:a6:51:9c:e7:07:3c:a2:61:c9:a3:04: 5e:de:39:2f:e0:0b:ec:07:80:ac:5d:30:06:8f:43: cd:c5:7d:53:8c:8e:1c:46:ae:9b:d4:de:e2:ce:52: 9b:2c:d5:3c:57:41:d7:9d:a3:96:99:5b:77:a8:db: 60:8a:ee:13:9a:91:77:fb:19:ab:0e:ef:be:df:51: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A9:0A:9D:D5:42:3C:65:4E:29:99:CB:C7:D7:FD:9B:44:4F:96:EA X509v3 Authority Key Identifier: keyid:A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:73:ac:4e:0f:4c:4b:b1:b8:c3:8f:79:86:52:6c:26:db:e8: dd:86:5a:7c:01:9f:28:fa:59:97:66:42:ae:59:69:cf:a9:96: d1:cd:41:15:cf:08:d7:7d:81:63:02:33:41:cd:99:e0:2d:0c: 95:01:67:c9:9c:06:fa:17:7b:ee:cd:2a:c9:95:6a:68:51:b3: 39:27:77:5b:09:b9:58:a8:80:d7:1d:3e:9f:8a:5f:4f:5e:27: 78:2e:cb:8c:33:ab:c7:65:12:2e:38:19:99:9c:01:4a:49:75: e3:a1:12:e7:f3:f6:f4:0a:31:85:96:ef:96:a1:b4:c1:1d:12: 2f:38:4b:ac:30:d5:61:e6:b0:e6:0c:5f:f9:cc:cf:f8:4c:82: 8c:43:5f:57:92:86:cc:4b:0d:d1:37:e9:6d:88:c5:6e:01:0d: 33:a7:19:7a:ca:6b:e6:bd:26:ab:54:1c:ff:3f:90:14:2f:9a: 76:51:31:60:0c:ad:cb:35:10:88:05:ec:c4:b8:68:5f:b3:1e: 50:99:1d:78:b3:e5:9c:d0:55:29:52:09:4b:ba:8c:c3:7d:d9: 5c:9e:1e:1a:59:e7:0c:8d:b3:44:73:01:e3:ea:3a:aa:df:85: 83:30:17:c1:a4:da:ae:2d:f8:44:1b:2c:16:9f:3e:38:7b:51: 49:66:71:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToXKOQ70HPqye7sewqv5ecBfy0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1 QzcyRUE5QTAeFw0yNjA2MDIyMDA5MzJaFw0yNjA2MDMyMjIzMzJaMDMxMTAvBgNV BAMTKDlEQTkwQTlERDU0MjNDNjU0RTI5OTlDQkM3RDdGRDlCNDQ0Rjk2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhXZ+CAK7/jUKehM+/1IWBjRS rPd+55X8bGaXRLhUWEWZrjjbeaQSp5vtapAlaOSS8Jfab65kHzky69BBuVQwUbcy YRM1p6qsojPDDBmQTreDKkbkXm01PhuxygOXI+aW/nGU84pR3EXlWBJbg4Gi1608 Ku8LPPehJorbvhBR3X/GvXZ5zMA+NI0IJJZcNy3Y75s/JsMo0wif7dC46iOjsNfz GQoirI64Opf+SkF7UUeJNN5nUsSmUZznBzyiYcmjBF7eOS/gC+wHgKxdMAaPQ83F fVOMjhxGrpvU3uLOUpss1TxXQdedo5aZW3eo22CK7hOakXf7GasO777fUf+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnakKndVCPGVOKZnLx9f9m0RPluowHwYDVR0j BBgwFoAUpB0VKgRgoNoxEnsZFaBdpVxy6powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQ3YjAyNjQtOWEwYS00Y2U0LTkzY2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEw NDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1QzcyRUE5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFEMTUyQTA0NjBBMERBMzExMjdCMTkxNUEwNURBNTVDNzJF QTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVE QTU1QzcyRUE5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBzrE4PTEuxuMOPeYZSbCbb6N2GWnwBnyj6 WZdmQq5Zac+pltHNQRXPCNd9gWMCM0HNmeAtDJUBZ8mcBvoXe+7NKsmVamhRszkn d1sJuViogNcdPp+KX09eJ3guy4wzq8dlEi44GZmcAUpJdeOhEufz9vQKMYWW75ah tMEdEi84S6ww1WHmsOYMX/nMz/hMgoxDX1eShsxLDdE36W2IxW4BDTOnGXrKa+a9 JqtUHP8/kBQvmnZRMWAMrcs1EIgF7MS4aF+zHlCZHXiz5ZzQVSlSCUu6jMN92Vye HhpZ5wyNs0RzAePqOqrfhYMwF8Gk2q4t+EQbLBafPjh7UUlmcVM= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:21 2026 by rpki-client