$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: RqGc25bTYO6/7ekORx0rTlQpeTrebJu7aCIswjDf0rU= Subject key identifier: CB:45:87:10:83:2C:21:5F:57:03:ED:B3:17:D2:0B:66:4D:21:1D:9D Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 70DF96462AFAC811FEBB98144A363BFB9E83D3EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 10:05:05 +0000 Manifest this update: Wed 17 Jun 2026 10:00:05 +0000 Manifest next update: Thu 18 Jun 2026 10:55:05 +0000 Files and hashes: 1: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: ZcNrF952rJqBWLf8KQ1PUHJH6y3GKypy3fWZp7BqzMA=) 2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) 3: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) 4: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:df:96:46:2a:fa:c8:11:fe:bb:98:14:4a:36:3b:fb:9e:83:d3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Jun 17 10:00:05 2026 GMT Not After : Jun 18 10:55:05 2026 GMT Subject: CN=CB458710832C215F5703EDB317D20B664D211D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:43:68:a0:74:6e:f2:ad:4f:b8:3d:60:d6: 38:16:36:41:3a:58:1a:92:4a:6b:40:09:2d:8c:b4: 08:f5:f9:f4:f3:54:53:95:99:67:75:4e:e6:68:f1: cf:b3:03:c1:85:42:6e:d4:4a:a4:39:0a:b7:ab:c5: 86:27:67:8a:ad:e0:2f:00:20:8f:98:27:f6:b1:b0: 68:cd:13:29:b5:df:d6:4b:16:2c:c0:c0:aa:24:59: 45:59:39:83:34:ec:b0:f2:b9:6f:52:c2:1a:01:76: 6f:00:6d:df:68:db:16:14:08:0b:e9:37:51:8b:c3: 57:39:e6:78:cc:58:df:34:5b:43:08:3f:68:3b:ec: b7:76:c1:69:77:11:c5:88:fd:3e:e1:39:4a:41:76: b8:1c:4b:bf:aa:9e:49:37:d4:42:63:85:c5:0d:fb: 3b:96:31:d2:2d:9a:e5:62:03:49:82:65:d6:dc:e4: a8:44:6f:ab:7e:a5:77:b5:ae:76:3c:95:db:59:ef: 47:7e:ff:42:dd:b5:95:93:3d:a3:ba:ed:ec:b5:fc: 1e:c1:74:da:d8:32:ce:f2:7a:53:39:46:61:73:9f: bd:53:5d:cf:a3:f5:f3:a1:b9:e2:2f:e3:41:f7:e7: f4:71:d2:05:ea:5c:a5:96:48:79:3b:cc:f8:52:dc: fe:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:45:87:10:83:2C:21:5F:57:03:ED:B3:17:D2:0B:66:4D:21:1D:9D X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:19:8b:2f:22:ed:c2:09:e4:31:53:dc:d7:5a:0b:7e:01:ce: b6:3f:31:f7:44:06:44:99:af:e5:1a:aa:87:0b:a5:02:2f:68: 42:f3:18:65:ff:02:c5:05:e4:c5:6d:ff:6d:21:a8:ee:93:5e: 18:9f:5a:6b:43:11:a6:d2:d7:01:32:02:99:72:ff:bb:ca:40: 65:46:e8:5b:e1:89:52:d8:5f:a2:8b:ac:00:c8:70:ef:23:ad: 8c:fe:73:e6:50:ec:92:99:44:66:60:eb:4e:54:1b:bf:68:df: 29:b3:36:87:e7:80:c4:29:01:ea:df:bc:06:bc:2b:93:29:16: 52:5b:28:79:49:61:0b:27:0d:b7:bc:dd:1e:a6:60:a8:7f:4f: c4:62:26:ac:e3:60:68:02:a9:44:9c:b7:48:fe:9b:8e:37:d5: 7f:97:1a:52:f5:05:d3:8e:86:bd:34:53:b3:c2:33:a4:4a:eb: 8a:7a:2b:7c:e3:73:8b:67:63:7e:7d:21:ec:24:46:07:7d:c3: 7a:fe:96:3a:22:ef:1a:79:a8:6c:8c:db:65:5b:2b:7c:81:5a: ea:e4:68:58:b6:18:7a:a4:44:44:06:8e:c7:61:e0:dd:70:76: e2:96:80:21:51:13:c3:ea:57:04:34:20:ae:ec:02:56:b4:e2: 44:e4:7a:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcN+WRir6yBH+u5gUSjY7+56D0+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjA2MTcxMDAwMDVaFw0yNjA2MTgxMDU1MDVaMDMxMTAvBgNV BAMTKENCNDU4NzEwODMyQzIxNUY1NzAzRURCMzE3RDIwQjY2NEQyMTFEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bkNooHRu8q1PuD1g1jgWNkE6 WBqSSmtACS2MtAj1+fTzVFOVmWd1TuZo8c+zA8GFQm7USqQ5CrerxYYnZ4qt4C8A II+YJ/axsGjNEym139ZLFizAwKokWUVZOYM07LDyuW9SwhoBdm8Abd9o2xYUCAvp N1GLw1c55njMWN80W0MIP2g77Ld2wWl3EcWI/T7hOUpBdrgcS7+qnkk31EJjhcUN +zuWMdItmuViA0mCZdbc5KhEb6t+pXe1rnY8ldtZ70d+/0LdtZWTPaO67ey1/B7B dNrYMs7yelM5RmFzn71TXc+j9fOhueIv40H35/Rx0gXqXKWWSHk7zPhS3P4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy0WHEIMsIV9XA+2zF9ILZk0hHZ0wHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8Ziy8i7cIJ5DFT3NdaC34BzrY/MfdEBkSZ r+UaqocLpQIvaELzGGX/AsUF5MVt/20hqO6TXhifWmtDEabS1wEyAply/7vKQGVG 6FvhiVLYX6KLrADIcO8jrYz+c+ZQ7JKZRGZg605UG79o3ymzNofngMQpAerfvAa8 K5MpFlJbKHlJYQsnDbe83R6mYKh/T8RiJqzjYGgCqUSct0j+m4431X+XGlL1BdOO hr00U7PCM6RK64p6K3zjc4tnY359IewkRgd9w3r+ljoi7xp5qGyM22VbK3yBWurk aFi2GHqkREQGjsdh4N1wduKWgCFRE8PqVwQ0IK7sAla04kTkeuk= -----END CERTIFICATE-----Generated at Wed Jun 17 12:37:43 2026 by rpki-client