$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: /+JL/JMqasWEH6xzE5StaHBlUZL9N5rYqPkOAzBoV6I= Subject key identifier: 41:C4:6E:C2:14:79:FA:D4:6F:30:1B:1F:38:9C:F0:B1:08:AB:F5:B7 Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 1CD6246E1A22DA355DB0146292B31AC7C24B97B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:36:59 +0000 Manifest this update: Mon 20 Jul 2026 12:31:59 +0000 Manifest next update: Tue 21 Jul 2026 15:20:59 +0000 Files and hashes: 1: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) 2: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: qQ0DaZhiE35ESxYdLutu0hCpVaaJKOOs2S5hiiPEb6g=) 3: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d6:24:6e:1a:22:da:35:5d:b0:14:62:92:b3:1a:c7:c2:4b:97:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Jul 20 12:31:59 2026 GMT Not After : Jul 21 15:20:59 2026 GMT Subject: CN=41C46EC21479FAD46F301B1F389CF0B108ABF5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:69:e2:66:f2:4b:ca:0c:f6:a5:1b:35:a4: 6c:1d:04:e9:f9:41:f9:6e:08:35:da:f6:07:62:e3: 17:a0:65:ee:84:79:b6:3b:0f:fa:7f:ab:65:32:e1: 3f:0b:ae:c7:7d:17:85:28:9c:b4:e0:f5:8a:99:5c: fc:21:65:f9:5e:d4:24:35:1f:05:aa:8e:14:b3:36: 50:de:fe:5b:cd:b4:7e:d8:ff:1d:34:51:22:7a:7a: e1:b4:85:a8:b2:bf:72:c3:5a:34:7f:96:e2:11:6b: 86:7e:9e:dd:e2:03:e4:98:3a:25:83:43:4e:c6:ca: c5:ec:68:6c:9e:9c:38:d7:df:23:dc:a0:f3:d7:9a: 24:aa:55:61:e9:9c:95:0b:bf:09:20:d9:19:ef:a8: 44:db:ca:b7:22:51:52:2c:44:e3:7e:f3:1e:46:3e: 46:c8:40:2e:bb:39:b3:6e:bf:e9:1f:37:cc:dc:f4: 0d:f9:e2:ed:a8:d5:0a:2b:a4:87:0b:f8:0d:bf:55: 5f:3c:de:fc:4b:8a:74:f9:a8:ce:03:0b:28:1a:cb: fa:04:69:18:7b:00:c4:bd:97:44:7d:78:7a:a2:7e: 91:d2:1a:ac:40:4a:1c:54:04:e5:19:79:3c:42:ae: 48:7d:81:b2:70:13:c6:18:27:79:2b:d0:33:3f:e9: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:6E:C2:14:79:FA:D4:6F:30:1B:1F:38:9C:F0:B1:08:AB:F5:B7 X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7e:bf:9e:79:e9:4e:2b:27:ce:1e:9c:2d:80:89:7b:b0:01: a7:d2:ae:39:cf:ff:b8:b9:d2:0d:e6:2d:09:ae:3c:dc:2b:6d: 46:c1:6c:c5:3f:bd:bf:5d:42:ac:90:fc:fa:bc:5f:0b:8d:3b: 2f:ca:83:32:9e:04:b1:b9:db:fe:ba:1a:15:08:3d:f9:6b:b4: 12:41:e5:ab:12:55:b8:e5:69:ff:15:f1:1d:6e:c3:54:60:21: 83:50:53:06:50:9d:47:ec:fa:ac:a8:3e:73:4d:c5:98:63:58: 91:a0:f6:24:ed:5b:5a:4b:2d:eb:46:d1:be:66:03:1c:96:2a: a7:85:32:ac:f5:b3:b1:b6:78:3e:e1:1c:72:4e:39:1a:00:18: e6:f5:ab:ca:18:2a:e1:0b:80:05:55:f4:db:b0:36:d1:8d:d7: 9e:a6:1c:b0:c6:15:46:0f:6b:2e:a6:ac:e5:83:2d:f1:57:cc: 67:79:af:e6:df:e5:9a:17:2d:19:75:b1:c4:12:f3:6a:43:23: c3:34:79:8d:6e:8a:c5:17:f3:0d:79:73:88:0c:00:11:71:ed: bd:de:fc:20:30:9a:a9:be:96:0a:13:9c:f3:24:2a:7f:c1:9d: 95:e8:db:25:a4:9e:5d:48:b9:89:09:14:59:0f:b9:d1:59:35: f0:8c:07:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNYkbhoi2jVdsBRikrMax8JLl7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjA3MjAxMjMxNTlaFw0yNjA3MjExNTIwNTlaMDMxMTAvBgNV BAMTKDQxQzQ2RUMyMTQ3OUZBRDQ2RjMwMUIxRjM4OUNGMEIxMDhBQkY1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiWniZvJLygz2pRs1pGwdBOn5 QfluCDXa9gdi4xegZe6EebY7D/p/q2Uy4T8Lrsd9F4UonLTg9YqZXPwhZfle1CQ1 HwWqjhSzNlDe/lvNtH7Y/x00USJ6euG0haiyv3LDWjR/luIRa4Z+nt3iA+SYOiWD Q07GysXsaGyenDjX3yPcoPPXmiSqVWHpnJULvwkg2RnvqETbyrciUVIsRON+8x5G PkbIQC67ObNuv+kfN8zc9A354u2o1QorpIcL+A2/VV883vxLinT5qM4DCygay/oE aRh7AMS9l0R9eHqifpHSGqxAShxUBOUZeTxCrkh9gbJwE8YYJ3kr0DM/6e/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQcRuwhR5+tRvMBsfOJzwsQir9bcwHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEt+v5556U4rJ84enC2AiXuwAafSrjnP/7i5 0g3mLQmuPNwrbUbBbMU/vb9dQqyQ/Pq8XwuNOy/KgzKeBLG52/66GhUIPflrtBJB 5asSVbjlaf8V8R1uw1RgIYNQUwZQnUfs+qyoPnNNxZhjWJGg9iTtW1pLLetG0b5m AxyWKqeFMqz1s7G2eD7hHHJOORoAGOb1q8oYKuELgAVV9NuwNtGN156mHLDGFUYP ay6mrOWDLfFXzGd5r+bf5ZoXLRl1scQS82pDI8M0eY1uisUX8w15c4gMABFx7b3e /CAwmqm+lgoTnPMkKn/BnZXo2yWknl1IuYkJFFkPudFZNfCMB18= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:04 2026 by rpki-client