$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: cbjR2k9JCS0A1ciAfl+XyCzicTUiaq9vHMFcJnMuNO0= Subject key identifier: 2A:6A:5E:E4:69:D7:09:49:22:5B:A1:E3:FB:79:E3:6A:7B:57:C2:3A Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 115329D1D18BE860879A1B2DB50AF7083800BB9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: F6 Signing time: Sun 01 Nov 2026 16:53:38 +0000 Manifest this update: Sun 01 Nov 2026 16:48:38 +0000 Manifest next update: Mon 02 Nov 2026 18:59:38 +0000 Files and hashes: 1: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: 3EVItH/RHQw/9cXqj8WwZawM8wTSrgpMhSpc+262KIA=) 2: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) 3: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) 4: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:53:29:d1:d1:8b:e8:60:87:9a:1b:2d:b5:0a:f7:08:38:00:bb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Nov 1 16:48:38 2026 GMT Not After : Nov 2 18:59:38 2026 GMT Subject: CN=2A6A5EE469D70949225BA1E3FB79E36A7B57C23A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:93:05:ae:18:93:e5:55:4c:6e:9a:c4:20:b7: dd:24:a4:9b:b7:1a:1e:6c:5a:dd:c6:3a:67:b5:3d: c5:c1:6a:5b:11:a1:72:74:67:8e:d8:59:d5:ba:66: 6d:85:b5:4c:41:a7:b4:a9:6f:cb:7a:ea:cd:26:ed: f6:07:34:d8:53:39:7c:c2:5a:82:48:fa:96:46:08: 4c:c2:11:37:e5:fa:a2:70:83:f6:15:8f:95:7b:5c: 34:7a:13:84:20:e8:c4:00:c7:51:34:ac:69:50:2a: 0c:cf:5a:c8:7d:58:50:21:ee:ae:c6:91:a3:8f:6f: 3f:a2:e6:05:fa:51:dc:a5:49:a2:82:19:e9:e8:69: 06:be:5f:d2:c8:12:0c:7f:8e:5a:46:90:e9:3a:72: b6:2a:ae:ad:4c:78:e4:b8:17:5e:df:99:3b:aa:a5: e7:d6:10:6f:54:01:a3:bf:98:b1:ab:aa:61:e7:6b: b6:fa:dd:c4:42:63:4e:00:14:70:51:54:d0:b4:66: 80:38:45:63:09:66:b6:b3:b7:c1:43:90:63:77:04: ec:4a:77:2f:8d:2b:cb:d9:3e:9c:27:1e:1d:9f:3f: f6:a7:81:ca:f2:32:a5:b3:0e:97:94:ac:a5:c5:fd: a9:f7:16:74:89:41:55:e5:96:28:51:2e:f3:b9:61: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:5E:E4:69:D7:09:49:22:5B:A1:E3:FB:79:E3:6A:7B:57:C2:3A X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bc:0a:d2:64:3c:f0:88:31:7c:5e:c0:be:44:94:81:de:b9: 56:51:00:77:84:23:b7:37:fc:e0:87:f9:90:90:9d:52:06:ef: e4:eb:5d:42:de:6a:d5:e0:4f:9a:6a:56:e9:b4:d8:e5:2f:92: 53:3d:5c:0c:30:1e:cd:4b:87:3b:23:01:fc:57:8e:24:a3:f7: 56:b0:89:6a:23:4f:72:7e:ef:f9:26:ff:f2:54:d2:4c:55:85: 7f:ec:11:57:3c:fd:06:b1:06:65:cc:40:58:f8:36:39:67:95: fe:c4:5f:7f:64:42:6a:d4:8b:97:4e:27:c5:4e:aa:2b:12:2c: 60:11:06:88:67:84:56:21:15:d8:13:ff:59:1a:86:55:7a:df: c8:6a:e6:9d:d9:46:e4:11:17:50:ed:c2:98:46:c1:42:f7:43: 40:cd:69:72:21:be:ee:13:a4:9c:75:91:44:d4:b0:37:47:eb: 85:73:0c:39:9a:5c:ed:73:51:a5:cf:2a:77:a8:3e:91:cb:72: fd:c3:ce:69:59:e1:79:8a:c6:42:82:0d:c4:32:4f:ea:e2:d0: f1:a1:67:2e:48:b8:ac:72:69:2c:fa:82:8a:c9:2e:d3:6c:0c: 68:1a:12:e2:b7:a9:66:71:13:1b:da:a2:66:c3:58:99:27:0e: e9:1f:f5:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVMp0dGL6GCHmhsttQr3CDgAu5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjExMDExNjQ4MzhaFw0yNjExMDIxODU5MzhaMDMxMTAvBgNV BAMTKDJBNkE1RUU0NjlENzA5NDkyMjVCQTFFM0ZCNzlFMzZBN0I1N0MyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbkwWuGJPlVUxumsQgt90kpJu3 Gh5sWt3GOme1PcXBalsRoXJ0Z47YWdW6Zm2FtUxBp7Spb8t66s0m7fYHNNhTOXzC WoJI+pZGCEzCETfl+qJwg/YVj5V7XDR6E4Qg6MQAx1E0rGlQKgzPWsh9WFAh7q7G kaOPbz+i5gX6UdylSaKCGenoaQa+X9LIEgx/jlpGkOk6crYqrq1MeOS4F17fmTuq pefWEG9UAaO/mLGrqmHna7b63cRCY04AFHBRVNC0ZoA4RWMJZrazt8FDkGN3BOxK dy+NK8vZPpwnHh2fP/angcryMqWzDpeUrKXF/an3FnSJQVXllihRLvO5YQ8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKmpe5GnXCUkiW6Hj+3njantXwjowHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC28CtJkPPCIMXxewL5ElIHeuVZRAHeEI7c3 /OCH+ZCQnVIG7+TrXULeatXgT5pqVum02OUvklM9XAwwHs1LhzsjAfxXjiSj91aw iWojT3J+7/km//JU0kxVhX/sEVc8/QaxBmXMQFj4Njlnlf7EX39kQmrUi5dOJ8VO qisSLGARBohnhFYhFdgT/1kahlV638hq5p3ZRuQRF1DtwphGwUL3Q0DNaXIhvu4T pJx1kUTUsDdH64VzDDmaXO1zUaXPKneoPpHLcv3DzmlZ4XmKxkKCDcQyT+ri0PGh Zy5IuKxyaSz6gorJLtNsDGgaEuK3qWZxExvaombDWJknDukf9U4= -----END CERTIFICATE-----Generated at Sun Nov 1 19:42:59 2026 by rpki-client