$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft File: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft (raw, json) Hash identifier: 0IXzsnHFdqAVLCOn73tujezXfW4emrGG4YVNEjD3rec= Subject key identifier: 5C:63:23:87:F7:07:C2:59:3E:BE:FA:A1:B4:B6:EC:2B:A8:D9:50:E8 Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Certificate serial: 581CE389A4F239ECCBC9A3D1B390710802E9F6F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft Manifest number: BF Signing time: Tue 22 Sep 2026 08:37:15 +0000 Manifest this update: Tue 22 Sep 2026 08:32:15 +0000 Manifest next update: Wed 23 Sep 2026 12:23:15 +0000 Files and hashes: 1: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: chcA0La2Ovm9yQOvdpAAt2EqYZMflbdwEaNV+8DJqdc=) 2: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=) 3: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl (hash: 0pMS+7dul/NDEDXTH5Z1OJqb5XYDGb6GCt2UJpsVTAU=) 4: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: dMqa0oYO4c22L7uxBboRe6E/5z9CmS2c9aynUToZXQs=) 5: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: ATgc6Id4lihO/sLAGAO1j7xGe/4awMhi2w1w0ztaLuU=) 6: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1c:e3:89:a4:f2:39:ec:cb:c9:a3:d1:b3:90:71:08:02:e9:f6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Validity Not Before: Sep 22 08:32:15 2026 GMT Not After : Sep 23 12:23:15 2026 GMT Subject: CN=5C632387F707C2593EBEFAA1B4B6EC2BA8D950E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:74:2c:0a:83:1d:b5:30:41:07:a2:20:5c: 66:14:fe:b1:8f:85:b2:fd:13:48:6e:d7:88:1c:8b: 39:be:0c:e0:00:9b:cf:61:1e:a2:87:a4:0c:34:85: 80:e4:2a:c0:31:f4:d8:29:11:1f:58:b1:39:45:d4: 41:fb:74:9d:90:db:e2:29:e7:a6:23:0b:eb:87:f8: 74:97:79:4a:7a:58:c1:0f:51:71:6f:8a:b9:22:56: d0:b7:41:d4:25:63:f9:9f:09:1c:89:70:3a:5b:08: e5:ce:3b:b4:b8:73:de:38:33:65:00:98:3a:80:63: 6e:61:c7:c2:94:38:ce:96:71:e8:d8:0e:ba:11:91: b0:45:2d:c5:b5:03:d9:eb:ff:9e:d1:c7:fd:97:95: 86:05:44:75:06:29:b1:a3:43:4d:4d:e2:62:fc:57: 41:51:4f:7a:2a:14:46:ad:ae:9d:ed:8b:d1:b6:ca: 6f:80:92:4b:f4:99:bb:21:bb:c5:a0:74:f9:59:68: 54:f3:bb:6f:d0:82:10:1f:aa:9f:8f:8d:81:c9:26: 0f:8f:9e:c3:8c:4b:36:f0:52:46:0e:c9:0f:63:10: a4:e5:ad:8a:ef:0a:33:dd:5d:f2:e2:54:43:60:a7: b7:98:48:55:d8:3e:bc:a7:98:4d:6e:74:78:0b:85: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:23:87:F7:07:C2:59:3E:BE:FA:A1:B4:B6:EC:2B:A8:D9:50:E8 X509v3 Authority Key Identifier: keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5e:32:3b:22:b0:ee:24:64:ad:3a:5e:db:71:c8:01:cc:30: 66:35:1b:ea:c0:3b:49:65:83:64:dc:df:1d:b7:5a:4b:1b:c7: 48:38:ed:1d:b7:56:0e:86:39:45:1e:95:9d:93:97:3b:c1:65: 74:82:a3:25:4b:2c:5f:e6:b7:09:73:0d:3f:a8:e0:cb:62:54: 3a:19:88:38:ff:26:bb:7e:0a:67:89:ff:eb:32:99:fd:62:58: bf:25:03:2c:30:5f:51:37:a2:f8:2c:57:a7:71:14:a3:75:c6: a7:79:e4:ef:f2:5c:37:98:e6:9b:d4:f5:2d:33:7e:1d:1b:24: 4c:dd:7c:59:d1:cb:0f:27:22:f9:a3:86:dc:82:d9:6c:e6:eb: 81:1b:74:df:21:f4:d2:cf:6c:d5:59:5f:6d:84:f6:e4:93:db: 89:ba:4d:88:75:97:84:74:38:29:d6:a6:1f:6d:db:d6:b2:2f: ac:49:54:c9:02:5f:53:3a:f1:42:bd:30:3f:20:e6:dd:d9:09: d1:f5:91:c2:fb:cf:82:84:e6:62:a8:2a:4f:65:17:f2:73:c8: 82:ce:bd:68:c7:6c:2c:38:e3:c3:c0:dc:5e:e7:bf:83:8c:14: 56:e8:b6:7b:26:6c:2f:04:4a:94:5b:4b:d3:17:04:20:3d:45: 15:e8:26:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBzjiaTyOezLyaPRs5BxCALp9vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3 QzVBQzRBNTAeFw0yNjA5MjIwODMyMTVaFw0yNjA5MjMxMjIzMTVaMDMxMTAvBgNV BAMTKDVDNjMyMzg3RjcwN0MyNTkzRUJFRkFBMUI0QjZFQzJCQThEOTUwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KXQsCoMdtTBBB6IgXGYU/rGP hbL9E0hu14gcizm+DOAAm89hHqKHpAw0hYDkKsAx9NgpER9YsTlF1EH7dJ2Q2+Ip 56YjC+uH+HSXeUp6WMEPUXFvirkiVtC3QdQlY/mfCRyJcDpbCOXOO7S4c944M2UA mDqAY25hx8KUOM6WcejYDroRkbBFLcW1A9nr/57Rx/2XlYYFRHUGKbGjQ01N4mL8 V0FRT3oqFEatrp3ti9G2ym+Akkv0mbshu8WgdPlZaFTzu2/QghAfqp+PjYHJJg+P nsOMSzbwUkYOyQ9jEKTlrYrvCjPdXfLiVENgp7eYSFXYPrynmE1udHgLhdFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXGMjh/cHwlk+vvqhtLbsK6jZUOgwHwYDVR0j BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0 NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUy RUM3QzVBQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADReMjsisO4kZK06XttxyAHMMGY1G+rAO0ll g2Tc3x23Wksbx0g47R23Vg6GOUUelZ2TlzvBZXSCoyVLLF/mtwlzDT+o4MtiVDoZ iDj/Jrt+CmeJ/+symf1iWL8lAywwX1E3ovgsV6dxFKN1xqd55O/yXDeY5pvU9S0z fh0bJEzdfFnRyw8nIvmjhtyC2Wzm64EbdN8h9NLPbNVZX22E9uST24m6TYh1l4R0 OCnWph9t29ayL6xJVMkCX1M68UK9MD8g5t3ZCdH1kcL7z4KE5mKoKk9lF/JzyILO vWjHbCw448PA3F7nv4OMFFbotnsmbC8ESpRbS9MXBCA9RRXoJlw= -----END CERTIFICATE-----Generated at Tue Sep 22 13:35:10 2026 by rpki-client