$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft File: 041E78A186856FDDB2C0EC51D0234F297B0694FB.mft (raw, json) Hash identifier: XMULdjBUnK1yZwZinIyvIMuBDsBEH4ngAUM0H25yld4= Subject key identifier: 8E:58:E9:F1:CB:3A:6F:7C:ED:B6:20:8E:64:C5:68:EC:72:2C:6B:37 Authority key identifier: 04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB Certificate issuer: /CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Certificate serial: 7D64ED45BB235B5C8A1145C17F15686584856C51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:48:21 +0000 Manifest this update: Wed 16 Sep 2026 23:43:21 +0000 Manifest next update: Fri 18 Sep 2026 00:28:21 +0000 Files and hashes: 1: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: jFMQqts/Xb/kIK8tDhB7Inx5c23uykyP37ClMnrRbng=) 2: 041E78A186856FDDB2C0EC51D0234F297B0694FB.crl (hash: gfU04dnaLDLqnxAo5VYflfhdkv4stT9kqg/0k6bNIQU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:64:ed:45:bb:23:5b:5c:8a:11:45:c1:7f:15:68:65:84:85:6c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Validity Not Before: Sep 16 23:43:21 2026 GMT Not After : Sep 18 00:28:21 2026 GMT Subject: CN=8E58E9F1CB3A6F7CEDB6208E64C568EC722C6B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:a1:5a:df:04:34:2c:44:36:3a:f5:07:78: a8:ee:20:7d:84:3d:10:4e:3b:61:5c:f7:5b:31:0c: 57:4d:2e:31:0b:93:4e:3b:94:84:fc:29:ca:bc:08: 8a:c1:a7:50:e9:ac:82:1f:55:72:d6:b2:ea:d6:5c: 5b:06:29:3f:2e:e0:b0:3f:03:e0:0d:c6:6d:0e:1f: 06:27:15:87:e2:c8:6e:05:6e:eb:99:e0:08:ac:8a: 3d:92:ce:3f:44:8f:d5:dd:eb:d6:53:a8:73:79:3e: 52:e2:31:97:4b:7a:66:07:c0:fd:ba:f5:67:02:5d: b8:a5:12:62:fd:e0:58:60:27:d6:a9:62:07:4f:47: 0b:33:e0:d5:65:91:1b:45:1c:c1:02:89:48:41:59: 0f:19:d2:f2:d9:86:3d:66:f7:17:72:d3:2d:a3:5f: 06:09:eb:d0:3e:43:e4:c9:4c:33:84:3d:94:5e:92: b6:02:97:7c:05:25:16:ad:90:bd:c5:f3:8f:9a:64: 98:ed:e8:52:99:bb:9c:ae:ea:ec:ff:d9:61:cd:f3: 3a:e5:40:37:f8:03:ff:da:89:ce:ed:a4:34:61:1c: 89:44:1f:4d:76:6b:f5:0c:e7:76:73:ff:43:d8:a4: 94:56:25:89:7d:ff:fb:2d:09:53:c4:5a:c8:7e:44: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:E9:F1:CB:3A:6F:7C:ED:B6:20:8E:64:C5:68:EC:72:2C:6B:37 X509v3 Authority Key Identifier: keyid:04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3e:5d:b8:c7:6c:7d:e7:f1:ee:7d:24:0a:9d:8b:08:69:f6: 15:77:91:e9:94:b0:16:f2:55:49:f5:7d:68:c8:72:7b:2f:74: 01:50:5a:fc:ef:63:fd:03:b2:3b:78:43:25:4d:72:45:c8:2c: 2a:89:45:df:66:33:6b:21:a8:f5:5d:95:4a:fd:2b:8c:73:31: 66:16:ef:1c:c4:99:44:21:c9:ac:75:31:34:cb:72:19:c1:e5: 2b:33:50:98:8e:89:1f:9c:35:59:fb:0f:f1:ac:4a:64:a5:86: 5b:6c:c4:97:5d:45:bf:4d:dc:7d:78:37:4f:d5:0a:73:7a:f2: f9:34:81:59:41:60:d0:54:e9:ac:4d:37:d9:96:40:5e:38:29: c7:8c:b1:88:53:35:db:fa:20:ca:15:c9:14:a1:39:25:47:d5: c4:57:7c:8c:46:69:8b:ee:e5:39:e0:d9:1f:c6:b2:28:eb:fc: 4b:26:a4:67:d3:b9:70:ce:53:36:e6:d7:4b:b1:de:01:18:97: 8d:ff:db:25:78:94:0f:36:9a:03:84:a6:7f:a1:fa:62:58:01: f9:b2:f0:63:61:a8:39:2c:c4:5f:f0:a0:01:01:fc:b5:de:84: 1d:fc:94:e5:9b:63:ec:60:79:fb:32:12:b3:01:d3:7c:15:e5: fa:10:dd:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWTtRbsjW1yKEUXBfxVoZYSFbFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3 QjA2OTRGQjAeFw0yNjA5MTYyMzQzMjFaFw0yNjA5MTgwMDI4MjFaMDMxMTAvBgNV BAMTKDhFNThFOUYxQ0IzQTZGN0NFREI2MjA4RTY0QzU2OEVDNzIyQzZCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClY6Fa3wQ0LEQ2OvUHeKjuIH2E PRBOO2Fc91sxDFdNLjELk047lIT8Kcq8CIrBp1DprIIfVXLWsurWXFsGKT8u4LA/ A+ANxm0OHwYnFYfiyG4FbuuZ4Aisij2Szj9Ej9Xd69ZTqHN5PlLiMZdLemYHwP26 9WcCXbilEmL94FhgJ9apYgdPRwsz4NVlkRtFHMECiUhBWQ8Z0vLZhj1m9xdy0y2j XwYJ69A+Q+TJTDOEPZRekrYCl3wFJRatkL3F84+aZJjt6FKZu5yu6uz/2WHN8zrl QDf4A//aic7tpDRhHIlEH012a/UM53Zz/0PYpJRWJYl9//stCVPEWsh+RFKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjljp8cs6b3zttiCOZMVo7HIsazcwHwYDVR0j BBgwFoAUBB54oYaFb92ywOxR0CNPKXsGlPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJhZWJmYjMtZTI5Yi00N2M0LWJkMjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4 Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3QjA2OTRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDFFNzhBMTg2ODU2RkREQjJDMEVDNTFEMDIzNEYyOTdCMDY5 NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRG Mjk3QjA2OTRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI+XbjHbH3n8e59JAqdiwhp9hV3kemUsBby VUn1fWjIcnsvdAFQWvzvY/0Dsjt4QyVNckXILCqJRd9mM2shqPVdlUr9K4xzMWYW 7xzEmUQhyax1MTTLchnB5SszUJiOiR+cNVn7D/GsSmSlhltsxJddRb9N3H14N0/V CnN68vk0gVlBYNBU6axNN9mWQF44KceMsYhTNdv6IMoVyRShOSVH1cRXfIxGaYvu 5Tng2R/Gsijr/EsmpGfTuXDOUzbm10ux3gEYl43/2yV4lA82mgOEpn+h+mJYAfmy 8GNhqDksxF/woAEB/LXehB38lOWbY+xgefsyErMB03wV5foQ3Rk= -----END CERTIFICATE-----Generated at Thu Sep 17 10:48:52 2026 by rpki-client