$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: AuRlDIfTeNAKeqmOPYBJogT4eKAP/zXJdkwYfnvHrZ0= Subject key identifier: 5B:6F:A5:83:86:A3:73:4E:B9:2E:54:82:58:76:09:A8:EA:E7:60:C6 Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 77D12B0F77F3E45EB44ED192152136B3184E9F37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 13:27:57 +0000 Manifest this update: Tue 22 Sep 2026 13:22:57 +0000 Manifest next update: Wed 23 Sep 2026 16:54:57 +0000 Files and hashes: 1: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) 2: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: VtFTT3lmHK4k0z7o60YEWXnytKFzoEteYTeyn69m7o8=) 3: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 16:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d1:2b:0f:77:f3:e4:5e:b4:4e:d1:92:15:21:36:b3:18:4e:9f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Sep 22 13:22:57 2026 GMT Not After : Sep 23 16:54:57 2026 GMT Subject: CN=5B6FA58386A3734EB92E5482587609A8EAE760C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:1e:25:73:36:7b:46:98:80:e2:7f:8e:73: 13:ad:e2:1c:fb:71:be:df:4b:2e:f7:b6:26:76:eb: a3:c4:2c:20:75:29:f5:3b:50:a8:2c:06:14:84:3f: 92:17:ff:5f:91:df:c6:f9:cf:0a:9b:bb:05:37:5a: 87:61:32:4d:50:b6:49:36:05:6f:ba:53:8c:0c:78: e1:36:eb:d2:4d:e0:61:09:97:3e:10:6f:67:55:04: 7c:2e:d0:f2:30:89:fc:b1:cc:21:09:a5:b6:0e:4d: 82:c9:60:e6:a8:9c:ba:c2:43:e4:e5:ce:26:11:7d: a9:be:9e:c2:12:9a:7b:e7:59:e9:eb:1e:75:3b:5f: 37:f2:ec:cb:51:b6:92:55:4c:a7:42:bd:ac:c4:ad: cd:ff:16:34:5a:88:ef:44:ed:34:6e:d8:d3:30:5f: 02:7f:64:19:55:ce:54:2b:9f:d1:aa:81:4f:e2:b9: 8b:97:d7:a4:f9:1f:60:61:b9:b4:1e:4f:30:e0:6b: c0:fb:37:15:e7:ee:88:ce:27:94:03:c1:e1:3a:77: d1:8d:b5:49:8b:62:f4:1d:9f:11:fc:ef:46:93:ce: 01:c7:fa:46:21:83:7c:d9:5a:a4:c5:bd:44:ce:b0: f9:41:c4:7e:7e:49:d1:6f:80:34:bb:e3:f4:15:ec: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6F:A5:83:86:A3:73:4E:B9:2E:54:82:58:76:09:A8:EA:E7:60:C6 X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:42:fa:de:1c:27:c1:6c:59:fe:1b:4b:0f:da:9f:3b:34:b0: 96:b0:e1:35:65:eb:c2:26:da:dd:40:5e:20:b8:d3:fd:22:34: 18:5b:40:35:c7:18:9d:9c:c1:a8:ce:c3:5a:9e:4f:64:f2:7a: 53:03:16:74:82:3b:11:ab:dc:6e:d3:99:08:ff:08:5d:4f:02: af:a0:af:6c:d3:1c:96:b4:0e:85:09:bf:72:3b:38:49:31:6a: 79:9b:14:17:42:0b:8d:ec:e5:d0:df:d9:44:b3:da:91:65:89: af:8e:08:f2:22:05:04:c5:17:f0:12:05:7f:f7:fb:93:08:af: a5:99:e9:20:a6:2d:9f:78:dd:3c:7a:a8:6a:06:44:5b:d1:4d: 03:76:31:91:d0:be:0b:25:77:30:bb:18:32:3f:3d:89:09:a6: 15:4d:28:07:41:bc:bf:9f:f4:80:2b:1f:04:8e:be:ca:6a:49: d1:3a:93:2b:89:4a:6b:7a:ec:a6:cc:f3:fd:b4:c8:d2:a4:0d: 8b:ff:19:ba:c3:c2:f5:d5:fc:5d:65:d9:02:ae:9d:c8:9a:c0: 54:aa:b5:a3:79:23:9f:05:8e:ae:f2:d3:de:35:dd:55:10:d5: 5a:5e:8a:6a:71:6f:00:6c:67:45:9c:81:ad:1d:3f:ba:42:e7: 77:76:fa:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9ErD3fz5F60TtGSFSE2sxhOnzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjA5MjIxMzIyNTdaFw0yNjA5MjMxNjU0NTdaMDMxMTAvBgNV BAMTKDVCNkZBNTgzODZBMzczNEVCOTJFNTQ4MjU4NzYwOUE4RUFFNzYwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIHB4lczZ7RpiA4n+OcxOt4hz7 cb7fSy73tiZ266PELCB1KfU7UKgsBhSEP5IX/1+R38b5zwqbuwU3WodhMk1Qtkk2 BW+6U4wMeOE269JN4GEJlz4Qb2dVBHwu0PIwifyxzCEJpbYOTYLJYOaonLrCQ+Tl ziYRfam+nsISmnvnWenrHnU7Xzfy7MtRtpJVTKdCvazErc3/FjRaiO9E7TRu2NMw XwJ/ZBlVzlQrn9GqgU/iuYuX16T5H2BhubQeTzDga8D7NxXn7ojOJ5QDweE6d9GN tUmLYvQdnxH870aTzgHH+kYhg3zZWqTFvUTOsPlBxH5+SdFvgDS74/QV7BcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW2+lg4ajc065LlSCWHYJqOrnYMYwHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBC+t4cJ8FsWf4bSw/anzs0sJaw4TVl68Im 2t1AXiC40/0iNBhbQDXHGJ2cwajOw1qeT2TyelMDFnSCOxGr3G7TmQj/CF1PAq+g r2zTHJa0DoUJv3I7OEkxanmbFBdCC43s5dDf2USz2pFlia+OCPIiBQTFF/ASBX/3 +5MIr6WZ6SCmLZ943Tx6qGoGRFvRTQN2MZHQvgsldzC7GDI/PYkJphVNKAdBvL+f 9IArHwSOvspqSdE6kyuJSmt67KbM8/20yNKkDYv/GbrDwvXV/F1l2QKunciawFSq taN5I58Fjq7y09413VUQ1VpeimpxbwBsZ0Wcga0dP7pC53d2+kc= -----END CERTIFICATE-----Generated at Wed Sep 23 01:24:45 2026 by rpki-client