$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft File: 041E78A186856FDDB2C0EC51D0234F297B0694FB.mft (raw, json) Hash identifier: 2tULCPvy4U5vD1c3WWKP4CNNvfbqegk3paMRWw7nZp4= Subject key identifier: 11:55:D5:10:B9:0A:2C:63:27:36:8C:6F:00:BA:26:46:B8:97:FC:28 Authority key identifier: 04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB Certificate issuer: /CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Certificate serial: 48647FCA0C51D8742AD0C00465CEB4498C01E261 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:52:24 +0000 Manifest this update: Mon 21 Sep 2026 12:47:24 +0000 Manifest next update: Tue 22 Sep 2026 15:13:24 +0000 Files and hashes: 1: 041E78A186856FDDB2C0EC51D0234F297B0694FB.crl (hash: Ud0J7ELCp0mqjBYT+FN/74dHp5AVTFKmWwoJnWLyhpo=) 2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: jFMQqts/Xb/kIK8tDhB7Inx5c23uykyP37ClMnrRbng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:64:7f:ca:0c:51:d8:74:2a:d0:c0:04:65:ce:b4:49:8c:01:e2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Validity Not Before: Sep 21 12:47:24 2026 GMT Not After : Sep 22 15:13:24 2026 GMT Subject: CN=1155D510B90A2C6327368C6F00BA2646B897FC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:d2:76:e8:4f:28:d0:3d:79:47:f2:1a:8e: 34:97:e3:6b:40:1a:95:94:56:c4:64:c1:0c:f1:bd: e5:a5:e9:63:1b:2b:81:74:e7:73:01:62:ec:69:1b: f7:16:d0:dc:d4:e8:ed:f8:c6:92:68:a4:a3:47:3c: 50:70:de:8c:9c:6d:7a:9e:60:9c:41:8b:1d:88:76: 2e:47:cb:5c:7d:63:df:9f:bc:b8:72:16:ed:5e:f4: 36:fd:b8:35:1f:9d:7a:c8:fb:37:9f:86:38:e0:d1: ae:1d:1c:d9:2c:36:4b:50:a0:23:c3:8f:07:60:a7: db:93:d7:a9:3e:b9:2b:10:34:21:b8:b5:76:d5:37: 8b:0f:ed:0d:24:40:66:a4:5a:dd:3d:7b:e3:7d:e8: ce:00:cf:34:77:7d:7c:20:60:47:4c:33:b6:6c:77: 6a:db:48:d9:34:bc:00:76:8c:db:f4:f5:b2:06:38: bf:11:84:34:bc:bd:35:b6:2d:2a:9c:7a:12:85:04: 19:70:01:19:98:fa:f3:30:e4:2b:0a:40:ad:06:6b: 53:e1:a2:46:ae:db:d9:c4:7b:16:77:d6:bb:5b:ca: 46:fb:83:38:e1:11:09:e6:a4:9a:2c:70:b1:74:a6: 29:fc:76:5a:dc:85:23:fd:21:c4:8b:8f:e2:7e:b5: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:55:D5:10:B9:0A:2C:63:27:36:8C:6F:00:BA:26:46:B8:97:FC:28 X509v3 Authority Key Identifier: keyid:04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3f:d8:a0:0b:8a:9e:f3:bb:14:e2:5a:43:59:fe:7f:d8:98: e3:f4:33:ed:4e:c4:77:0d:ea:73:a5:b7:a0:36:c8:c9:a7:d7: 9f:17:ea:bc:2a:7e:00:3a:e0:bc:f4:36:64:bf:1b:8e:ad:0e: c3:93:b2:b7:b5:66:7b:ae:0a:b7:44:48:de:43:35:83:ba:92: 75:1f:b1:78:1f:95:96:f8:93:74:4a:8f:fd:9d:19:63:17:c2: dd:23:f8:69:e1:98:a5:31:00:db:64:4d:a5:11:a7:92:7a:47: e8:32:b1:85:61:66:f1:b2:0d:d6:6c:bc:0e:35:a2:87:c0:f3: 24:c7:af:d1:66:56:f7:4d:10:c4:00:ef:65:0b:2b:cc:04:b8: 89:28:d6:2a:2b:a1:33:57:10:0a:4c:66:b8:92:4e:f1:9f:52: c9:c1:39:2c:b9:df:73:ad:77:7b:f1:8c:67:e0:94:73:83:6e: 52:13:1e:3c:d2:75:5f:b3:ad:eb:9a:b1:ad:3c:72:9b:14:03: db:31:ba:bf:b4:5d:e4:cc:fc:df:98:2a:e4:b4:7a:94:52:02: c3:8c:b8:9f:02:52:a2:ab:da:c7:6a:da:be:ef:42:15:9b:87: 90:f2:3c:02:f7:01:39:8c:c0:1c:29:52:b0:b3:fd:34:55:57: c2:ef:01:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGR/ygxR2HQq0MAEZc60SYwB4mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3 QjA2OTRGQjAeFw0yNjA5MjExMjQ3MjRaFw0yNjA5MjIxNTEzMjRaMDMxMTAvBgNV BAMTKDExNTVENTEwQjkwQTJDNjMyNzM2OEM2RjAwQkEyNjQ2Qjg5N0ZDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfdJ26E8o0D15R/IajjSX42tA GpWUVsRkwQzxveWl6WMbK4F053MBYuxpG/cW0NzU6O34xpJopKNHPFBw3oycbXqe YJxBix2Idi5Hy1x9Y9+fvLhyFu1e9Db9uDUfnXrI+zefhjjg0a4dHNksNktQoCPD jwdgp9uT16k+uSsQNCG4tXbVN4sP7Q0kQGakWt09e+N96M4AzzR3fXwgYEdMM7Zs d2rbSNk0vAB2jNv09bIGOL8RhDS8vTW2LSqcehKFBBlwARmY+vMw5CsKQK0Ga1Ph okau29nEexZ31rtbykb7gzjhEQnmpJoscLF0pin8dlrchSP9IcSLj+J+tSrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVXVELkKLGMnNoxvALomRriX/CgwHwYDVR0j BBgwFoAUBB54oYaFb92ywOxR0CNPKXsGlPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJhZWJmYjMtZTI5Yi00N2M0LWJkMjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4 Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3QjA2OTRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDFFNzhBMTg2ODU2RkREQjJDMEVDNTFEMDIzNEYyOTdCMDY5 NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRG Mjk3QjA2OTRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY/2KALip7zuxTiWkNZ/n/YmOP0M+1OxHcN 6nOlt6A2yMmn158X6rwqfgA64Lz0NmS/G46tDsOTsre1ZnuuCrdESN5DNYO6knUf sXgflZb4k3RKj/2dGWMXwt0j+GnhmKUxANtkTaURp5J6R+gysYVhZvGyDdZsvA41 oofA8yTHr9FmVvdNEMQA72ULK8wEuIko1ioroTNXEApMZriSTvGfUsnBOSy533Ot d3vxjGfglHODblITHjzSdV+zreuasa08cpsUA9sxur+0XeTM/N+YKuS0epRSAsOM uJ8CUqKr2sdq2r7vQhWbh5DyPAL3ATmMwBwpUrCz/TRVV8LvAXU= -----END CERTIFICATE-----Generated at Mon Sep 21 15:32:37 2026 by rpki-client