$ rpki-client -vvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft File: A041DA85A835517127145910FB36AAA5B7CA41F2.mft (raw, json) Hash identifier: +7zcKRaQYYDIzMPN8RXpZHhhznr79AZWM75CPxjnzCU= Subject key identifier: 52:D8:E9:1D:29:31:DA:4B:C8:31:03:6B:B0:65:5F:C7:A3:4A:AB:EB Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Certificate serial: 660565B562DE0519A19101A96D5AC7964E7EB066 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 06:30:09 +0000 Manifest this update: Thu 18 Jun 2026 06:25:09 +0000 Manifest next update: Fri 19 Jun 2026 08:20:09 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: vmjqWZXe1WAW716qvYHn6H4tiVZPN9hJplwpeaEOs+c=) 2: A041DA85A835517127145910FB36AAA5B7CA41F2.crl (hash: MP4/jod/SNhDZbDeoRtXC7PC/crPBzOgEC7oVnpYsTc=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: cvKGIujNKpn8r6a8rprf+PEz/toRdewoQzshB4q6X84=) 4: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: tY2P809Veb9qnVz+b5sj5T6oUhcFMFNmQj4vHbtiv9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:05:65:b5:62:de:05:19:a1:91:01:a9:6d:5a:c7:96:4e:7e:b0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Validity Not Before: Jun 18 06:25:09 2026 GMT Not After : Jun 19 08:20:09 2026 GMT Subject: CN=52D8E91D2931DA4BC831036BB0655FC7A34AABEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:96:52:42:46:d4:76:b7:c3:e2:f4:d2:5d: f1:25:f7:7c:6c:f6:ed:73:ea:98:e1:9c:c5:6e:b2: f9:e8:71:3b:a4:9a:06:0c:71:74:f1:60:e3:46:64: ea:30:04:34:26:70:b2:cb:65:46:3f:57:83:d1:eb: 3d:be:82:54:ce:ab:ce:4f:f5:fe:df:76:44:65:e6: 33:c2:15:8f:39:cd:a3:e3:29:43:1f:0b:56:30:8d: 8a:82:96:79:62:ef:c2:cf:3a:35:da:d5:bd:9f:09: 31:0b:e1:f1:84:50:65:ba:98:ff:d8:b1:2b:59:97: a3:8c:bd:bd:f2:ee:55:dc:f8:d9:d3:72:5f:fc:1a: 9b:63:05:cd:b8:12:01:1d:f4:9b:8d:65:a3:87:63: 46:53:1a:19:b5:49:56:23:1f:12:6b:74:7a:33:e3: d7:5b:9c:42:1c:17:3f:12:a1:e5:74:78:d9:8e:40: e3:aa:4b:ab:35:c2:cc:8e:d7:e4:6d:09:93:47:0a: 0c:4f:81:fd:0e:24:68:62:39:2a:73:22:0b:cb:d0: da:e6:e2:cd:6d:87:59:e3:3a:47:69:2f:93:e6:44: 34:87:f6:1e:9f:8f:08:e7:76:62:ce:98:1b:8b:c2: 16:08:72:77:83:fa:71:2b:46:23:41:19:b5:7f:10: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:E9:1D:29:31:DA:4B:C8:31:03:6B:B0:65:5F:C7:A3:4A:AB:EB X509v3 Authority Key Identifier: keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:68:63:e5:56:80:3a:ec:23:72:84:13:ea:ae:f4:cd:0f:c9: 66:d7:32:8b:51:0b:b8:d5:3a:f7:2f:85:e6:50:20:6c:bc:2f: 4c:20:c5:58:17:98:82:5a:b9:b7:af:6a:9b:e3:69:40:ba:5c: 88:e6:6c:0f:2d:d5:bd:d6:91:62:9c:a4:34:d7:70:06:de:ec: 1b:93:0d:86:78:8d:db:cb:b4:bd:0a:3d:59:83:7e:75:c7:cd: 9a:c5:28:cd:7e:c6:f6:9c:c9:8e:80:97:5d:dc:ba:28:ce:bd: 73:49:e2:f8:bc:67:2e:79:d9:f2:cc:25:46:02:87:c7:8c:98: c3:2d:a6:66:37:bf:ff:fb:a7:7d:a1:bb:65:8a:45:68:c5:2b: bf:a6:bd:f4:15:75:f6:27:39:ab:0a:83:2d:9b:f6:40:a0:53: 9c:93:6f:bf:31:ee:ff:f5:67:9e:88:61:1f:39:51:c8:ca:24: 9c:d6:8a:ba:52:97:31:c1:dc:c1:e5:f1:3b:82:c2:17:d8:4e: 08:7b:f8:10:a2:84:c4:15:47:01:a4:a1:d8:2d:68:04:c2:67: 69:8e:ec:57:80:be:5c:ab:30:c6:24:be:c3:c8:41:5c:d1:26: 08:11:f3:7c:ed:df:40:f5:43:a0:59:94:f7:11:4e:7d:f6:77: f9:03:7f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgVltWLeBRmhkQGpbVrHlk5+sGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC N0NBNDFGMjAeFw0yNjA2MTgwNjI1MDlaFw0yNjA2MTkwODIwMDlaMDMxMTAvBgNV BAMTKDUyRDhFOTFEMjkzMURBNEJDODMxMDM2QkIwNjU1RkM3QTM0QUFCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT2pZSQkbUdrfD4vTSXfEl93xs 9u1z6pjhnMVusvnocTukmgYMcXTxYONGZOowBDQmcLLLZUY/V4PR6z2+glTOq85P 9f7fdkRl5jPCFY85zaPjKUMfC1YwjYqClnli78LPOjXa1b2fCTEL4fGEUGW6mP/Y sStZl6OMvb3y7lXc+NnTcl/8GptjBc24EgEd9JuNZaOHY0ZTGhm1SVYjHxJrdHoz 49dbnEIcFz8SoeV0eNmOQOOqS6s1wsyO1+RtCZNHCgxPgf0OJGhiOSpzIgvL0Nrm 4s1th1njOkdpL5PmRDSH9h6fjwjndmLOmBuLwhYIcneD+nErRiNBGbV/EFk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUtjpHSkx2kvIMQNrsGVfx6NKq+swHwYDVR0j BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFB QTVCN0NBNDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOtoY+VWgDrsI3KEE+qu9M0PyWbXMotRC7jV OvcvheZQIGy8L0wgxVgXmIJaubevapvjaUC6XIjmbA8t1b3WkWKcpDTXcAbe7BuT DYZ4jdvLtL0KPVmDfnXHzZrFKM1+xvacyY6Al13cuijOvXNJ4vi8Zy552fLMJUYC h8eMmMMtpmY3v//7p32hu2WKRWjFK7+mvfQVdfYnOasKgy2b9kCgU5yTb78x7v/1 Z56IYR85UcjKJJzWirpSlzHB3MHl8TuCwhfYTgh7+BCihMQVRwGkodgtaATCZ2mO 7FeAvlyrMMYkvsPIQVzRJggR83zt30D1Q6BZlPcRTn32d/kDf6c= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:33 2026 by rpki-client