$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: 0P9NY9bhk0dh7MXSpPopDzR/Qq1DbsJZkfBU40pNPMA= Subject key identifier: 20:6C:1E:5F:A1:00:B4:CE:6D:72:27:8F:0F:5A:27:35:3C:B3:1A:52 Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 40F9219567796DA0B4860EF98A5D5C8A03C2BE86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: B7 Signing time: Tue 15 Sep 2026 05:01:21 +0000 Manifest this update: Tue 15 Sep 2026 04:56:21 +0000 Manifest next update: Wed 16 Sep 2026 06:08:21 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) 3: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) 4: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: FxkMyBCeqb1xeWAXx7V2WU87/oXr3FCLlvJSHwWA/78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 06:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f9:21:95:67:79:6d:a0:b4:86:0e:f9:8a:5d:5c:8a:03:c2:be:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Sep 15 04:56:21 2026 GMT Not After : Sep 16 06:08:21 2026 GMT Subject: CN=206C1E5FA100B4CE6D72278F0F5A27353CB31A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:23:fc:4a:d6:75:79:dd:c7:6c:46:89:c2: 76:8c:6c:cb:03:3f:0d:29:20:07:df:43:a0:4d:8d: 3b:18:35:ad:69:de:0f:42:8e:47:ff:7c:97:40:63: b2:91:07:e9:8c:a0:22:56:ea:75:31:aa:b9:b6:cb: 8e:75:0b:94:4d:e6:1d:ca:3a:4e:ec:11:f1:54:72: f5:b7:ee:8f:ea:b4:3a:16:06:76:3f:7c:61:4c:28: bc:53:d6:82:d7:0a:6c:c5:cd:0d:c0:af:7f:a9:35: d3:c0:c1:c9:26:4d:5e:83:f7:66:f9:b6:60:e4:14: 92:9c:e2:3d:b3:16:51:07:96:a5:3b:55:53:39:ea: e1:65:12:16:6d:4e:f4:8c:8c:4e:6f:bd:c3:4d:91: 36:69:bc:41:07:65:9e:28:b0:a2:55:67:1e:4c:d1: bc:c9:2a:68:b5:a6:98:7c:22:0c:4f:3e:56:f9:b6: 4c:f0:88:83:15:81:37:ca:b2:45:89:ac:1a:da:61: 23:e3:64:3e:46:f5:4d:98:05:c2:b4:49:71:35:f1: 91:6a:a0:90:ab:1e:f6:48:6f:bf:a2:19:93:95:1f: 43:d1:54:d8:d8:6a:8f:ea:44:92:a0:29:73:97:5c: 98:75:c5:b4:8d:e3:18:b8:37:e8:bf:ba:57:5a:12: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6C:1E:5F:A1:00:B4:CE:6D:72:27:8F:0F:5A:27:35:3C:B3:1A:52 X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1b:91:69:e8:3a:db:d3:67:95:fb:81:f9:22:03:bb:67:62: b8:dc:10:73:57:a2:de:e0:c5:0d:ce:14:c6:d9:4f:88:26:2f: 36:12:89:7d:90:68:35:ed:ef:d8:80:db:ea:02:0c:1e:3f:b0: 25:9a:07:75:5f:16:d1:93:85:da:88:a2:44:ba:c9:1c:f2:a3: e8:ec:3b:ea:1a:df:b5:6a:67:3f:60:9c:9c:de:51:97:f3:63: f6:c1:be:16:15:a1:6c:2c:62:51:1e:85:ac:dc:82:bb:49:79: b2:f1:15:9c:83:b6:c7:ab:fe:61:76:ca:3d:e7:aa:c8:9e:b1: c3:2c:e1:34:20:17:a7:d6:e5:58:14:d9:1c:4b:61:67:0b:14: b4:78:f5:3d:03:f7:7e:ca:8d:6f:29:e4:1b:13:b5:bb:d3:b2: 5d:1a:45:aa:40:cb:50:c2:18:37:6f:30:45:1d:3d:d7:cd:2d: f5:3d:8f:6b:ea:28:46:2d:a6:5c:7e:41:d2:37:76:4d:7f:25: 33:11:23:43:5a:df:53:d1:c4:85:5e:f8:55:0b:88:19:5b:b9: 1e:99:83:82:0b:e9:2a:a2:c6:bd:9b:9a:7a:20:3a:26:ed:4f: f1:d6:d6:f9:ec:cc:bb:6d:81:46:30:bd:66:8d:c1:96:90:00: d9:56:54:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPkhlWd5baC0hg75il1cigPCvoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjA5MTUwNDU2MjFaFw0yNjA5MTYwNjA4MjFaMDMxMTAvBgNV BAMTKDIwNkMxRTVGQTEwMEI0Q0U2RDcyMjc4RjBGNUEyNzM1M0NCMzFBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CiP8StZ1ed3HbEaJwnaMbMsD Pw0pIAffQ6BNjTsYNa1p3g9Cjkf/fJdAY7KRB+mMoCJW6nUxqrm2y451C5RN5h3K Ok7sEfFUcvW37o/qtDoWBnY/fGFMKLxT1oLXCmzFzQ3Ar3+pNdPAwckmTV6D92b5 tmDkFJKc4j2zFlEHlqU7VVM56uFlEhZtTvSMjE5vvcNNkTZpvEEHZZ4osKJVZx5M 0bzJKmi1pph8IgxPPlb5tkzwiIMVgTfKskWJrBraYSPjZD5G9U2YBcK0SXE18ZFq oJCrHvZIb7+iGZOVH0PRVNjYao/qRJKgKXOXXJh1xbSN4xi4N+i/uldaEmOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIGweX6EAtM5tciePD1onNTyzGlIwHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIbkWnoOtvTZ5X7gfkiA7tnYrjcEHNXot7g xQ3OFMbZT4gmLzYSiX2QaDXt79iA2+oCDB4/sCWaB3VfFtGThdqIokS6yRzyo+js O+oa37VqZz9gnJzeUZfzY/bBvhYVoWwsYlEehazcgrtJebLxFZyDtser/mF2yj3n qsiescMs4TQgF6fW5VgU2RxLYWcLFLR49T0D937KjW8p5BsTtbvTsl0aRapAy1DC GDdvMEUdPdfNLfU9j2vqKEYtplx+QdI3dk1/JTMRI0Na31PRxIVe+FULiBlbuR6Z g4IL6Sqixr2bmnogOibtT/HW1vnszLttgUYwvWaNwZaQANlWVEk= -----END CERTIFICATE-----Generated at Tue Sep 15 09:32:33 2026 by rpki-client