$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft File: A041DA85A835517127145910FB36AAA5B7CA41F2.mft (raw, json) Hash identifier: PHlzSrY9RbkqUVH2m1szlioK6z0DQD2yAdDAMEiFchw= Subject key identifier: 74:09:9E:5F:74:FA:2C:50:AD:E0:34:E4:4B:73:01:33:C7:06:30:77 Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Certificate serial: 532D5115DAC6E7A46F4BB89F87F84EA25C119A62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 19:01:22 +0000 Manifest this update: Tue 03 Nov 2026 18:56:22 +0000 Manifest next update: Wed 04 Nov 2026 22:42:22 +0000 Files and hashes: 1: A041DA85A835517127145910FB36AAA5B7CA41F2.crl (hash: rvC5kz8M0rBWOseJP2wr/8Rx2avtGAJD/QnVjEgD7E4=) 2: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: vmjqWZXe1WAW716qvYHn6H4tiVZPN9hJplwpeaEOs+c=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: cvKGIujNKpn8r6a8rprf+PEz/toRdewoQzshB4q6X84=) 4: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: tY2P809Veb9qnVz+b5sj5T6oUhcFMFNmQj4vHbtiv9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2d:51:15:da:c6:e7:a4:6f:4b:b8:9f:87:f8:4e:a2:5c:11:9a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Validity Not Before: Nov 3 18:56:22 2026 GMT Not After : Nov 4 22:42:22 2026 GMT Subject: CN=74099E5F74FA2C50ADE034E44B730133C7063077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:b5:60:19:a9:2d:c2:59:57:88:ff:9a:b9: 61:00:12:91:3f:53:7a:52:c4:f9:7d:3c:13:92:7a: 82:4c:66:80:b9:5b:e5:eb:46:89:52:5c:b3:76:7c: f9:39:5b:b4:6f:85:68:32:01:1e:d7:1f:b6:44:e6: d5:7e:ff:dc:11:a3:b7:4b:32:14:f8:95:fc:c9:00: 2b:d9:c7:a8:68:1e:4c:79:15:17:39:11:9f:5f:da: 8d:5d:6f:a1:ea:42:87:3f:b2:71:d1:ac:1d:2d:58: 16:7c:52:7f:b4:8b:17:89:bd:e6:fe:e8:7d:b0:b5: 64:16:a4:bb:06:a1:99:f2:12:24:5d:2e:89:bd:7a: 6d:15:67:69:d1:ec:af:1b:12:99:be:2d:6c:14:8c: 87:ee:15:98:95:01:8e:f5:79:87:7d:db:96:7c:a6: 8c:64:0a:4b:a1:6a:ca:3c:b2:a8:b1:b1:a8:cb:fa: 2a:ba:04:60:66:4b:44:25:c9:74:86:b5:e8:c7:94: cb:59:5d:4f:3d:cd:33:c5:1a:cd:3b:7b:33:1b:86: c3:e0:12:b2:53:ad:96:f0:3c:2a:76:b5:83:e5:16: 51:f6:b3:ca:29:f1:1f:24:48:30:12:b6:f9:70:36: ed:42:62:e3:ca:80:d7:e7:22:f2:77:9f:50:78:8b: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:09:9E:5F:74:FA:2C:50:AD:E0:34:E4:4B:73:01:33:C7:06:30:77 X509v3 Authority Key Identifier: keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c8:f2:53:4f:95:91:61:24:c7:43:ce:63:61:60:f2:4e:4c: 65:bc:f7:67:1f:4b:9f:84:3f:9a:3e:3e:ee:24:97:d7:d5:1d: 28:33:67:4e:dc:79:75:2b:46:8f:53:71:9d:ad:f3:b8:93:1f: 9d:d7:06:e8:2e:28:b6:34:71:09:67:a4:ec:e2:c8:e3:f2:8a: 4d:35:33:32:9c:c4:be:90:ab:f8:1e:42:05:03:18:98:68:ed: 9b:e7:76:2c:87:e1:cc:ee:f5:dd:52:c1:4e:e9:2c:68:0a:d6: 87:8d:6f:6f:ad:c6:6f:5f:f5:36:28:26:ac:fb:d0:46:48:72: cb:ae:2b:be:47:c4:37:dc:23:60:46:54:9e:81:db:ae:ad:bc: 1e:d7:89:1a:00:a8:39:ff:05:3f:60:3c:1c:a4:28:dc:1c:28: c0:cb:e8:13:d6:2b:e8:da:96:c4:a5:41:d9:a0:77:51:35:2d: f1:b5:ed:e2:d0:da:27:7a:00:77:eb:d7:f2:55:1e:d3:c7:ad: 02:37:53:bd:ad:94:b1:17:f6:12:f0:b1:93:32:63:97:3e:53: a5:fe:3b:ba:c3:72:0a:99:0a:3a:2a:f2:09:fd:5e:3e:7e:b9: 38:62:7f:2e:ad:ff:79:05:2f:eb:43:4f:06:21:32:1c:8e:30: 67:28:11:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUy1RFdrG56RvS7ifh/hOolwRmmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC N0NBNDFGMjAeFw0yNjExMDMxODU2MjJaFw0yNjExMDQyMjQyMjJaMDMxMTAvBgNV BAMTKDc0MDk5RTVGNzRGQTJDNTBBREUwMzRFNDRCNzMwMTMzQzcwNjMwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSrVgGaktwllXiP+auWEAEpE/ U3pSxPl9PBOSeoJMZoC5W+XrRolSXLN2fPk5W7RvhWgyAR7XH7ZE5tV+/9wRo7dL MhT4lfzJACvZx6hoHkx5FRc5EZ9f2o1db6HqQoc/snHRrB0tWBZ8Un+0ixeJveb+ 6H2wtWQWpLsGoZnyEiRdLom9em0VZ2nR7K8bEpm+LWwUjIfuFZiVAY71eYd925Z8 poxkCkuhaso8sqixsajL+iq6BGBmS0QlyXSGtejHlMtZXU89zTPFGs07ezMbhsPg ErJTrZbwPCp2tYPlFlH2s8op8R8kSDAStvlwNu1CYuPKgNfnIvJ3n1B4ix2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdAmeX3T6LFCt4DTkS3MBM8cGMHcwHwYDVR0j BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFB QTVCN0NBNDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/I8lNPlZFhJMdDzmNhYPJOTGW892cfS5+E P5o+Pu4kl9fVHSgzZ07ceXUrRo9TcZ2t87iTH53XBuguKLY0cQlnpOziyOPyik01 MzKcxL6Qq/geQgUDGJho7ZvndiyH4czu9d1SwU7pLGgK1oeNb2+txm9f9TYoJqz7 0EZIcsuuK75HxDfcI2BGVJ6B266tvB7XiRoAqDn/BT9gPBykKNwcKMDL6BPWK+ja lsSlQdmgd1E1LfG17eLQ2id6AHfr1/JVHtPHrQI3U72tlLEX9hLwsZMyY5c+U6X+ O7rDcgqZCjoq8gn9Xj5+uThify6t/3kFL+tDTwYhMhyOMGcoESg= -----END CERTIFICATE-----Generated at Wed Nov 4 10:29:31 2026 by rpki-client