$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: ikI2V/ORxSpbIUb55jlZLcHj2HvKiswMuQxoOMJKVsQ= Subject key identifier: 54:D8:46:E1:C8:F4:F7:B7:ED:63:ED:E1:FC:50:E0:9F:FE:62:8E:29 Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 69655A2B51122F3BB71E80BC5263777306E28EC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:07:31 +0000 Manifest this update: Tue 02 Jun 2026 10:02:31 +0000 Manifest next update: Wed 03 Jun 2026 13:57:31 +0000 Files and hashes: 1: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: 2Sbyv2TSNOGfgIe9vERsjMZdYiJgA0Yi6/Xd0miXAgk=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) 3: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:65:5a:2b:51:12:2f:3b:b7:1e:80:bc:52:63:77:73:06:e2:8e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Jun 2 10:02:31 2026 GMT Not After : Jun 3 13:57:31 2026 GMT Subject: CN=54D846E1C8F4F7B7ED63EDE1FC50E09FFE628E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9f:43:57:29:a1:d3:6d:9f:db:72:42:23:e9: 22:a8:01:ef:ff:da:d1:5c:f9:13:0a:48:b4:33:f4: 33:f6:40:97:43:ef:63:41:82:1a:7f:91:ba:de:d9: 5a:30:f1:d9:72:f4:61:f0:ea:e9:36:94:d8:dc:19: 64:c6:06:28:62:7d:f1:1f:d3:64:e6:0d:ae:56:47: 77:54:e8:65:c3:4b:2e:a4:2e:46:fd:85:24:0f:9e: 06:57:39:b8:75:bd:d1:73:6c:58:1b:eb:e1:a3:93: ef:30:55:ee:a7:7b:be:52:af:fc:41:c1:4b:69:f2: 2e:80:ae:f2:17:54:47:f0:ed:6e:69:6a:52:c0:f8: 46:42:53:08:23:54:3c:65:ab:41:0e:bb:ed:41:b4: 1f:61:48:87:80:be:09:f3:0f:22:a1:a7:4a:a6:28: 58:fa:21:e2:93:37:7f:6d:5a:09:53:73:a2:70:83: 51:68:7f:d1:f2:8f:0a:7b:21:86:fd:9e:e3:7e:3c: 20:90:77:4c:3f:69:2a:59:a7:a1:72:05:0e:b1:d6: 98:55:b8:4f:22:86:69:a8:f9:24:c7:5f:7c:dc:f3: 2a:d0:96:c6:f7:e6:3b:18:76:8c:fe:1e:d7:36:6f: 4e:55:10:48:59:eb:2c:7c:c1:8b:2b:7d:f4:c2:30: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D8:46:E1:C8:F4:F7:B7:ED:63:ED:E1:FC:50:E0:9F:FE:62:8E:29 X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3e:16:a4:89:0f:b9:50:26:8e:1f:46:3c:14:61:27:b8:6d: 79:9f:96:09:89:fd:7c:eb:b9:bd:5b:fb:ac:f7:f3:29:f2:ed: f8:9e:10:1c:e7:a7:e6:f4:fc:7b:0f:c9:da:b3:c1:5f:00:31: 55:56:50:07:25:83:f2:8e:48:24:65:45:83:62:4c:0d:ec:8d: 3b:a4:34:51:b9:aa:56:f7:c6:0f:59:b8:7d:7c:87:85:16:57: d5:42:58:f2:29:d9:c2:02:80:d6:1b:35:1e:69:55:ab:40:bb: 51:be:45:ea:ef:cb:56:68:f7:71:bf:94:75:91:c8:14:12:27: 0b:5e:e5:47:e1:f7:ad:a5:1c:d4:eb:69:57:8b:7e:c5:e5:a1: 61:54:e0:08:a2:56:15:bb:0a:10:48:0a:3f:11:46:ad:b4:85: 11:8a:15:06:3a:76:0b:51:11:42:31:ee:e6:c8:b9:11:99:7f: 43:01:1f:c7:8a:28:31:04:3e:93:cf:d6:83:dc:a8:75:27:5b: 33:6d:2e:e2:69:f2:7c:55:56:b5:86:f3:2d:38:24:3a:ac:ad: 7a:76:48:cd:df:7c:dc:9a:b9:e2:92:a6:a0:d7:81:44:12:31: d1:44:6a:48:e2:44:82:93:36:b3:8f:14:d7:d4:12:d9:74:ca: dd:46:2f:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWVaK1ESLzu3HoC8UmN3cwbijsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjA2MDIxMDAyMzFaFw0yNjA2MDMxMzU3MzFaMDMxMTAvBgNV BAMTKDU0RDg0NkUxQzhGNEY3QjdFRDYzRURFMUZDNTBFMDlGRkU2MjhFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRn0NXKaHTbZ/bckIj6SKoAe// 2tFc+RMKSLQz9DP2QJdD72NBghp/kbre2Vow8dly9GHw6uk2lNjcGWTGBihiffEf 02TmDa5WR3dU6GXDSy6kLkb9hSQPngZXObh1vdFzbFgb6+Gjk+8wVe6ne75Sr/xB wUtp8i6ArvIXVEfw7W5palLA+EZCUwgjVDxlq0EOu+1BtB9hSIeAvgnzDyKhp0qm KFj6IeKTN39tWglTc6Jwg1Fof9Hyjwp7IYb9nuN+PCCQd0w/aSpZp6FyBQ6x1phV uE8ihmmo+STHX3zc8yrQlsb35jsYdoz+Htc2b05VEEhZ6yx8wYsrffTCMPUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVNhG4cj097ftY+3h/FDgn/5ijikwHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo+FqSJD7lQJo4fRjwUYSe4bXmflgmJ/Xzr ub1b+6z38yny7fieEBznp+b0/HsPydqzwV8AMVVWUAclg/KOSCRlRYNiTA3sjTuk NFG5qlb3xg9ZuH18h4UWV9VCWPIp2cICgNYbNR5pVatAu1G+Rervy1Zo93G/lHWR yBQSJwte5Ufh962lHNTraVeLfsXloWFU4AiiVhW7ChBICj8RRq20hRGKFQY6dgtR EUIx7ubIuRGZf0MBH8eKKDEEPpPP1oPcqHUnWzNtLuJp8nxVVrWG8y04JDqsrXp2 SM3ffNyaueKSpqDXgUQSMdFEakjiRIKTNrOPFNfUEtl0yt1GL3g= -----END CERTIFICATE-----Generated at Wed Jun 3 04:44:32 2026 by rpki-client