$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json) Hash identifier: dyscnK0m/HQ9Veq/ZrQM7nyDTV9IrYS6nFrOunFXk6c= Subject key identifier: C7:5D:3F:6B:51:0D:92:C3:5E:53:9E:72:13:6F:A0:DC:D8:08:BA:01 Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Certificate serial: 3578042D571B3622A9D1F44C22C873FBCA704033 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft Manifest number: BF Signing time: Mon 21 Sep 2026 03:00:11 +0000 Manifest this update: Mon 21 Sep 2026 02:55:11 +0000 Manifest next update: Tue 22 Sep 2026 05:07:11 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=) 3: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=) 4: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: ywk+3UNbWu0gE9gvjyiDwbz2ffS5+lJ8FRM4vpeaBsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:78:04:2d:57:1b:36:22:a9:d1:f4:4c:22:c8:73:fb:ca:70:40:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B Validity Not Before: Sep 21 02:55:11 2026 GMT Not After : Sep 22 05:07:11 2026 GMT Subject: CN=C75D3F6B510D92C35E539E72136FA0DCD808BA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:7d:b1:d1:ee:da:b0:e8:44:38:76:83:81: 65:65:95:05:1a:d8:61:c7:b7:17:61:ac:a0:a5:e2: 3e:da:1c:c4:58:37:fe:80:46:96:21:af:48:e3:cb: df:84:5f:ec:ff:22:ae:97:ce:64:76:40:60:40:71: 56:9b:13:8f:e6:4e:42:b7:a1:0b:83:a5:d7:76:5b: e7:8b:c1:67:35:e7:6b:fa:1f:8c:7c:9c:cb:55:f5: 5c:6b:cc:30:35:95:80:cf:ad:75:fe:b2:57:20:07: 64:92:41:d3:d2:fb:65:1e:e8:07:d0:8e:95:92:ab: e6:19:47:4d:12:b5:af:91:50:72:6a:6b:19:fe:75: d1:f2:42:57:20:47:cb:25:b0:86:f0:c9:3d:3b:ed: a1:b0:5f:30:eb:f8:73:43:9d:c3:b3:66:e0:24:6c: aa:9e:42:1a:57:4c:06:9f:06:81:c9:73:03:be:2f: 26:3b:44:60:9f:53:d0:42:7c:4a:1f:f9:81:16:1e: 36:28:a5:6f:33:df:b1:73:de:4d:f7:4a:c3:ab:4f: fe:94:67:18:cb:ce:88:46:36:4f:41:30:ef:c9:cc: bb:90:e5:ce:4a:2b:71:3d:8f:d1:f9:ac:61:a9:f4: ca:0e:c3:e3:99:a2:af:76:aa:dd:04:a3:3c:3b:b2: 08:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5D:3F:6B:51:0D:92:C3:5E:53:9E:72:13:6F:A0:DC:D8:08:BA:01 X509v3 Authority Key Identifier: keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b9:cd:2b:3f:79:0e:a3:22:42:5a:13:49:5c:77:c5:89:2a: dc:a0:e3:13:c9:37:21:25:73:a5:ea:32:5a:63:e5:26:98:05: 31:3d:58:37:29:d8:8b:ca:73:07:52:66:cc:c4:65:af:a1:c0: 62:22:ac:68:f7:ba:5c:2c:d0:41:1e:23:c4:ba:d3:69:b9:8f: b7:99:b7:9f:9b:91:67:45:43:1d:66:bb:a8:67:8c:5f:e2:4f: 80:35:1a:91:17:41:e4:36:7e:f8:96:d0:54:15:5b:5c:3e:3b: 0f:6b:80:ff:39:25:25:da:ce:d7:1e:dc:c7:da:15:26:87:2d: 50:4c:74:a3:83:c0:aa:b4:01:ac:62:e6:a7:6e:86:21:07:b5: cf:03:15:d9:6d:eb:5d:3d:ed:9e:5b:03:cb:3b:07:f3:a9:aa: e0:00:1e:2e:c3:5b:8c:91:01:d7:71:5b:86:df:fa:1c:56:43: 8e:b2:4e:84:e5:cf:10:8c:0c:5d:d0:82:52:d8:0d:91:26:4c: c3:1c:db:42:6a:31:cf:e3:55:13:48:b5:9b:47:b6:7f:7d:05: 76:48:37:43:4c:77:cf:a5:7a:70:9c:4d:78:5c:7e:68:f6:d1: 7c:62:88:55:3f:80:50:f5:6b:60:20:44:da:cd:23:d3:e6:91: 40:e0:8c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXgELVcbNiKp0fRMIshz+8pwQDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0 MzdFODg1QjAeFw0yNjA5MjEwMjU1MTFaFw0yNjA5MjIwNTA3MTFaMDMxMTAvBgNV BAMTKEM3NUQzRjZCNTEwRDkyQzM1RTUzOUU3MjEzNkZBMERDRDgwOEJBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrh32x0e7asOhEOHaDgWVllQUa 2GHHtxdhrKCl4j7aHMRYN/6ARpYhr0jjy9+EX+z/Iq6XzmR2QGBAcVabE4/mTkK3 oQuDpdd2W+eLwWc152v6H4x8nMtV9VxrzDA1lYDPrXX+slcgB2SSQdPS+2Ue6AfQ jpWSq+YZR00Sta+RUHJqaxn+ddHyQlcgR8slsIbwyT077aGwXzDr+HNDncOzZuAk bKqeQhpXTAafBoHJcwO+LyY7RGCfU9BCfEof+YEWHjYopW8z37Fz3k33SsOrT/6U ZxjLzohGNk9BMO/JzLuQ5c5KK3E9j9H5rGGp9MoOw+OZoq92qt0Eozw7sghdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx10/a1ENksNeU55yE2+g3NgIugEwHwYDVR0j BBgwFoAUpBvLy1CDebfnDXf02ufeCkN+iFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZmYjc3NjctM2RlOS00ODMzLWI0ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1 MDgzNzlCN0U3MEQ3N0Y0REFFN0RFMEE0MzdFODg1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDFCQ0JDQjUwODM3OUI3RTcwRDc3RjREQUU3REUwQTQzN0U4 ODVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQTQxQkNCQ0I1MDgzNzlCN0U3MEQ3N0Y0REFFN0RF MEE0MzdFODg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFu5zSs/eQ6jIkJaE0lcd8WJKtyg4xPJNyEl c6XqMlpj5SaYBTE9WDcp2IvKcwdSZszEZa+hwGIirGj3ulws0EEeI8S602m5j7eZ t5+bkWdFQx1mu6hnjF/iT4A1GpEXQeQ2fviW0FQVW1w+Ow9rgP85JSXaztce3Mfa FSaHLVBMdKODwKq0Aaxi5qduhiEHtc8DFdlt61097Z5bA8s7B/OpquAAHi7DW4yR AddxW4bf+hxWQ46yToTlzxCMDF3QglLYDZEmTMMc20JqMc/jVRNItZtHtn99BXZI N0NMd8+lenCcTXhcfmj20XxiiFU/gFD1a2AgRNrNI9PmkUDgjGI= -----END CERTIFICATE-----Generated at Mon Sep 21 21:29:11 2026 by rpki-client