$ rpki-client -vvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft File: A041DA85A835517127145910FB36AAA5B7CA41F2.mft (raw, json) Hash identifier: wUZyrpwRY4HlYJjH6ohpD3G4T7z9gBOMyXNsMpBcqAE= Subject key identifier: 63:97:40:6F:C8:9E:66:EE:A2:39:9E:D1:D9:DB:5F:06:E8:27:18:6E Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Certificate serial: 56F1BAE303395EDC265F82C100682DF8A69AA400 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 07:21:38 +0000 Manifest this update: Sun 02 Aug 2026 07:16:38 +0000 Manifest next update: Mon 03 Aug 2026 10:58:38 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: vmjqWZXe1WAW716qvYHn6H4tiVZPN9hJplwpeaEOs+c=) 2: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: tY2P809Veb9qnVz+b5sj5T6oUhcFMFNmQj4vHbtiv9U=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: cvKGIujNKpn8r6a8rprf+PEz/toRdewoQzshB4q6X84=) 4: A041DA85A835517127145910FB36AAA5B7CA41F2.crl (hash: 8xlXJe69S7at9Vcsn6hqKBg+boGWjuS1Ul64zdXe5Cc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f1:ba:e3:03:39:5e:dc:26:5f:82:c1:00:68:2d:f8:a6:9a:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Validity Not Before: Aug 2 07:16:38 2026 GMT Not After : Aug 3 10:58:38 2026 GMT Subject: CN=6397406FC89E66EEA2399ED1D9DB5F06E827186E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:48:13:2e:49:28:98:08:00:59:2e:9a:57: 31:e0:a3:51:8e:07:9e:ce:a1:cc:dd:88:83:ea:10: b3:aa:b6:16:b5:65:10:fa:a6:b5:7a:47:74:db:e5: 97:c8:5b:5d:83:10:0f:f6:9b:3d:1a:ca:14:c2:df: de:ce:bd:04:b4:00:49:e5:d0:49:c9:e2:29:a0:2e: f2:51:cd:44:8d:24:a8:e9:d7:9d:87:f0:04:09:75: 8e:91:8a:f0:24:bd:8b:5d:bf:80:23:65:ab:47:36: 24:ac:53:49:63:33:ea:c3:fb:b2:df:98:b3:6e:49: 22:84:27:79:60:76:6c:ca:5a:ef:11:e4:c1:27:ab: 93:a0:8b:15:12:ff:70:ad:d1:ca:78:c9:29:4d:cc: f4:f9:f9:51:f9:32:db:06:8e:7e:5c:7b:30:26:62: 18:a1:58:db:3c:03:ac:11:3f:6e:85:2e:d5:75:ea: 42:44:a5:d6:73:aa:93:53:4d:a2:5f:72:d1:0f:df: ec:f4:a6:7c:ab:5d:da:fe:ea:8e:91:0f:6c:16:04: a3:98:51:91:87:71:7e:fa:ee:57:16:9e:eb:ae:e5: 8c:d4:62:08:4e:3f:b2:50:f8:5f:4f:a4:39:2e:44: 77:de:70:d2:85:c6:e6:28:80:bf:7c:47:10:cb:0b: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:40:6F:C8:9E:66:EE:A2:39:9E:D1:D9:DB:5F:06:E8:27:18:6E X509v3 Authority Key Identifier: keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4f:a6:bb:78:42:de:4f:0a:bd:58:74:10:78:23:f3:7f:69: 8c:e7:28:35:c6:e2:40:7e:b0:6d:3b:6e:1b:41:9c:92:bb:b2: 31:6c:6e:2f:db:01:bc:7d:f6:9c:38:5a:14:10:b3:71:a1:48: d4:ee:d2:6d:0c:1d:dd:c3:a6:25:9c:77:7e:49:e4:f2:e6:9f: da:6e:db:c7:e1:aa:11:5f:fb:fc:99:ec:bb:2c:e2:02:79:25: 9c:5d:83:c0:a1:f1:ca:a1:51:f0:95:ec:58:eb:15:5b:8f:26: e7:78:18:36:7e:44:16:ea:08:d1:92:9d:35:6d:c9:03:98:ad: 57:89:8a:03:e4:9f:ea:1f:7f:a0:67:6e:e5:05:dd:2e:1e:a1: 2c:29:ce:17:23:c3:d4:fd:38:d1:d9:b8:cc:9e:db:63:be:0d: ad:21:e2:a6:18:66:67:a8:0a:b6:d2:f7:18:a0:6a:7f:7d:9d: e8:fb:a7:3f:ac:3a:35:af:4e:08:21:ac:01:ec:27:5f:4a:2f: 14:7d:07:62:3a:29:c5:76:34:04:42:9c:94:1a:ed:c4:7a:c1: 76:90:b7:a7:3d:b4:78:2d:7c:1c:d4:58:3e:25:e0:66:15:96: 49:c0:66:ad:39:d3:ad:fa:a2:d8:b5:05:4a:ee:74:cc:2b:78: a9:3c:97:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvG64wM5XtwmX4LBAGgt+KaapAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC N0NBNDFGMjAeFw0yNjA4MDIwNzE2MzhaFw0yNjA4MDMxMDU4MzhaMDMxMTAvBgNV BAMTKDYzOTc0MDZGQzg5RTY2RUVBMjM5OUVEMUQ5REI1RjA2RTgyNzE4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQkgTLkkomAgAWS6aVzHgo1GO B57OoczdiIPqELOqtha1ZRD6prV6R3Tb5ZfIW12DEA/2mz0ayhTC397OvQS0AEnl 0EnJ4imgLvJRzUSNJKjp152H8AQJdY6RivAkvYtdv4AjZatHNiSsU0ljM+rD+7Lf mLNuSSKEJ3lgdmzKWu8R5MEnq5OgixUS/3Ct0cp4ySlNzPT5+VH5MtsGjn5cezAm YhihWNs8A6wRP26FLtV16kJEpdZzqpNTTaJfctEP3+z0pnyrXdr+6o6RD2wWBKOY UZGHcX767lcWnuuu5YzUYghOP7JQ+F9PpDkuRHfecNKFxuYogL98RxDLC2zFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5dAb8ieZu6iOZ7R2dtfBugnGG4wHwYDVR0j BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFB QTVCN0NBNDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFPprt4Qt5PCr1YdBB4I/N/aYznKDXG4kB+ sG07bhtBnJK7sjFsbi/bAbx99pw4WhQQs3GhSNTu0m0MHd3DpiWcd35J5PLmn9pu 28fhqhFf+/yZ7Lss4gJ5JZxdg8Ch8cqhUfCV7FjrFVuPJud4GDZ+RBbqCNGSnTVt yQOYrVeJigPkn+off6BnbuUF3S4eoSwpzhcjw9T9ONHZuMye22O+Da0h4qYYZmeo CrbS9xigan99nej7pz+sOjWvTgghrAHsJ19KLxR9B2I6KcV2NARCnJQa7cR6wXaQ t6c9tHgtfBzUWD4l4GYVlknAZq050636oti1BUrudMwreKk8l14= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:32 2026 by rpki-client