$ rpki-client -vvvf rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft File: A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft (raw, json) Hash identifier: IbwGw0MpnPFkU8oPhHWYOfEbLsHd3oRsKixTYtXoHIs= Subject key identifier: 1D:BB:A5:95:BC:A0:9E:1B:8B:F5:FA:22:67:82:99:2E:C6:DB:75:9F Authority key identifier: A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A Certificate issuer: /CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Certificate serial: 4EA6E249CD8F5FE2D42355E2769AED53C09A0235 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:20:42 +0000 Manifest this update: Wed 16 Sep 2026 17:15:42 +0000 Manifest next update: Thu 17 Sep 2026 20:43:42 +0000 Files and hashes: 1: A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl (hash: 4SEiaVUkXvqs5gyXUvS74fp78+NL6rBZfOuwcHziHEQ=) 2: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: pKo3R747DDUIneHm99mAHqDIwYFklZR6NNCcsU54reo=) 3: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: eZlsFaLITxkPeJNSHzaVTJrd/LDOmMtodzgFU/hBW40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a6:e2:49:cd:8f:5f:e2:d4:23:55:e2:76:9a:ed:53:c0:9a:02:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A Validity Not Before: Sep 16 17:15:42 2026 GMT Not After : Sep 17 20:43:42 2026 GMT Subject: CN=1DBBA595BCA09E1B8BF5FA226782992EC6DB759F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:01:cd:6d:9e:13:ef:94:60:a0:8a:bf:52: 6e:64:1f:35:e2:19:c1:a0:27:04:8a:0f:c6:4c:95: 50:56:59:41:e8:4c:60:6c:49:a6:a6:fa:d2:65:96: f1:3a:14:14:ae:2e:17:68:90:93:12:8d:57:fd:3e: 60:ae:13:ba:81:78:f4:d7:9a:e2:b5:96:5a:4b:8f: 22:31:e2:df:11:9e:a7:23:23:9e:80:d0:0a:85:25: a1:26:ea:8e:59:42:de:45:6a:94:ee:6c:44:d2:2f: 95:f9:2d:06:94:b4:bc:a2:32:df:8b:2f:73:07:20: e0:67:9b:c7:8d:ec:9d:80:b2:1d:21:9a:00:9b:21: 78:51:af:6e:b1:5f:a3:90:b3:cd:d4:41:0b:67:00: d0:db:b2:86:76:f1:4d:ff:16:80:60:23:82:fa:9d: 6a:a1:b9:58:8f:72:28:00:ae:5f:79:0f:4b:96:5d: 4d:40:7f:fe:49:50:7f:c2:67:6b:ff:a3:4c:10:c2: ad:ef:2b:93:d4:ec:66:dd:d8:b1:c1:ef:53:e4:2b: d2:fb:5e:f2:db:5a:f6:0b:96:c0:f8:67:48:23:fe: 78:84:65:9f:02:e4:10:7b:16:8a:85:74:aa:a6:2b: 15:76:30:2b:a9:c4:e4:06:3f:11:6d:16:c6:fa:a3: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BB:A5:95:BC:A0:9E:1B:8B:F5:FA:22:67:82:99:2E:C6:DB:75:9F X509v3 Authority Key Identifier: keyid:A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:be:9a:0a:3d:d0:12:7f:9a:ce:25:36:db:6a:97:05:63:b9: ae:8a:61:91:72:77:f2:0d:c7:ac:5e:41:63:0b:72:76:ee:84: 6f:00:4a:6b:bb:7e:4a:54:db:ab:8b:ad:b7:c2:fb:77:ef:d1: 21:34:22:8a:ff:d9:aa:9d:c5:99:e2:12:7b:e0:03:b2:de:44: f5:4a:b0:1d:85:ca:d5:9b:6f:7b:d4:3b:9e:78:7f:d4:3e:78: a3:a4:37:c2:99:98:b4:8a:75:ea:82:fe:c0:91:db:05:fd:38: 0f:4a:1c:12:ab:0d:cd:ee:44:80:68:31:13:1d:a0:64:74:a2: 45:d1:ed:ba:f8:21:bc:4b:20:69:95:9a:98:7c:b4:73:a4:0d: 85:48:e3:88:95:0e:b8:19:7f:a9:94:ec:00:0e:32:a6:1b:7d: d8:54:2d:9d:2b:0f:03:df:01:0e:79:9c:66:7e:63:61:46:79: 40:e5:e8:2a:a5:d8:53:94:36:64:24:82:b2:77:dc:d6:cb:73: 12:25:73:4f:26:3a:ff:89:9b:a5:86:d9:96:1d:c4:8c:a1:e0: 10:1d:10:95:c2:13:41:6a:a0:15:0e:2e:76:ee:a6:04:59:c8: 29:cd:c9:cc:6b:dd:a0:3b:fd:1a:ab:88:f9:e0:7c:3d:6f:36: cf:fc:ea:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqbiSc2PX+LUI1XidprtU8CaAjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1 QzcyRUE5QTAeFw0yNjA5MTYxNzE1NDJaFw0yNjA5MTcyMDQzNDJaMDMxMTAvBgNV BAMTKDFEQkJBNTk1QkNBMDlFMUI4QkY1RkEyMjY3ODI5OTJFQzZEQjc1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQcgHNbZ4T75RgoIq/Um5kHzXi GcGgJwSKD8ZMlVBWWUHoTGBsSaam+tJllvE6FBSuLhdokJMSjVf9PmCuE7qBePTX muK1llpLjyIx4t8RnqcjI56A0AqFJaEm6o5ZQt5FapTubETSL5X5LQaUtLyiMt+L L3MHIOBnm8eN7J2Ash0hmgCbIXhRr26xX6OQs83UQQtnANDbsoZ28U3/FoBgI4L6 nWqhuViPcigArl95D0uWXU1Af/5JUH/CZ2v/o0wQwq3vK5PU7Gbd2LHB71PkK9L7 XvLbWvYLlsD4Z0gj/niEZZ8C5BB7FoqFdKqmKxV2MCupxOQGPxFtFsb6owwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHbullbygnhuL9foiZ4KZLsbbdZ8wHwYDVR0j BBgwFoAUpB0VKgRgoNoxEnsZFaBdpVxy6powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQ3YjAyNjQtOWEwYS00Y2U0LTkzY2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEw NDYwQTBEQTMxMTI3QjE5MTVBMDVEQTU1QzcyRUE5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFEMTUyQTA0NjBBMERBMzExMjdCMTkxNUEwNURBNTVDNzJF QTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvQTQxRDE1MkEwNDYwQTBEQTMxMTI3QjE5MTVBMDVE QTU1QzcyRUE5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFG+mgo90BJ/ms4lNttqlwVjua6KYZFyd/IN x6xeQWMLcnbuhG8ASmu7fkpU26uLrbfC+3fv0SE0Ior/2aqdxZniEnvgA7LeRPVK sB2FytWbb3vUO554f9Q+eKOkN8KZmLSKdeqC/sCR2wX9OA9KHBKrDc3uRIBoMRMd oGR0okXR7br4IbxLIGmVmph8tHOkDYVI44iVDrgZf6mU7AAOMqYbfdhULZ0rDwPf AQ55nGZ+Y2FGeUDl6Cql2FOUNmQkgrJ33NbLcxIlc08mOv+Jm6WG2ZYdxIyh4BAd EJXCE0FqoBUOLnbupgRZyCnNycxr3aA7/RqriPngfD1vNs/86i8= -----END CERTIFICATE-----Generated at Thu Sep 17 06:36:27 2026 by rpki-client