$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft File: 411E8C45894267DCEFA20514C89165EE7C17C4C4.mft (raw, json) Hash identifier: g3kTUNrjRkEaILcuzAxDdg49F2/SmV5Ldtqngq0sIgg= Subject key identifier: 74:68:ED:EA:27:AC:00:0B:BE:ED:8A:7E:E0:7F:20:5C:14:13:2A:32 Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 Certificate issuer: /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Certificate serial: 0365B403A17F605689491D1D811CC7FD5B8002F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:54:55 +0000 Manifest this update: Mon 21 Sep 2026 14:49:55 +0000 Manifest next update: Tue 22 Sep 2026 17:57:55 +0000 Files and hashes: 1: 411E8C45894267DCEFA20514C89165EE7C17C4C4.crl (hash: uiCgNbyoq3feP3hGKahnCxNWUYS27MY2/3JQE0iNQic=) 2: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: Gd2IM01O7z8fqk7GpG61d/HhlCVHlpL3rkOIOFXsAII=) 3: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:65:b4:03:a1:7f:60:56:89:49:1d:1d:81:1c:c7:fd:5b:80:02:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Validity Not Before: Sep 21 14:49:55 2026 GMT Not After : Sep 22 17:57:55 2026 GMT Subject: CN=7468EDEA27AC000BBEED8A7EE07F205C14132A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:7f:ef:95:d7:82:a5:ee:c4:94:af:63:0a: 23:66:e9:45:ca:e3:bb:1f:0e:3d:e8:c9:af:c3:02: da:0a:9d:64:68:9f:c7:e4:de:ab:5f:5b:0b:8e:fa: c8:a0:8e:3f:67:f2:06:b1:58:e7:11:5d:b7:25:b1: c9:69:2b:1e:a4:7c:29:29:8b:32:ed:9f:94:64:5e: 76:7b:84:63:92:c4:6b:c6:0e:6f:ed:fa:23:29:4c: b9:13:57:39:b8:3f:f9:e6:c8:d7:4d:d7:1e:50:f9: 5a:cd:a4:8e:4a:d2:ac:fc:0a:42:7c:43:87:e5:0f: b7:c4:e0:21:79:a1:5a:f7:52:77:63:24:65:ae:ec: 96:77:fc:06:5d:25:3d:35:54:18:55:4e:d2:63:d6: 86:fa:9e:2c:cd:7a:fa:88:dc:68:88:2b:a1:d1:7d: 1b:5f:26:a7:e3:86:ca:0f:cd:37:ec:da:bb:e1:d0: 13:a1:59:6a:24:5b:b7:84:44:44:18:f4:f2:ba:f0: eb:e1:28:c3:d2:88:96:d1:5a:25:6b:65:54:b0:81: 2b:e4:bc:7f:51:a3:5a:2a:37:d9:ba:be:c2:15:1c: 46:a4:98:75:0d:70:ec:53:f3:83:6f:62:26:ab:d9: b4:43:15:d5:c5:ba:d4:f1:75:f6:93:d5:d9:5b:4c: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:68:ED:EA:27:AC:00:0B:BE:ED:8A:7E:E0:7F:20:5C:14:13:2A:32 X509v3 Authority Key Identifier: keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:82:5a:84:6f:af:48:5a:00:58:dd:d8:c7:29:e5:77:f7:d7: 12:aa:9f:58:d7:86:20:e9:30:20:f6:ce:e1:9a:0b:08:08:26: 6c:a0:97:9c:9e:cc:50:6f:57:8d:74:a4:1a:23:8c:31:6d:26: 76:d1:b2:f3:c9:ee:1f:2f:36:3e:03:89:ed:f9:36:0c:f8:17: 17:7b:09:8c:7e:96:73:93:ac:71:55:bd:ba:0d:5a:a0:02:87: d3:61:d5:e4:db:07:7e:0f:41:1d:20:df:d0:a4:19:be:17:c5: f4:60:ab:81:d2:db:4a:fa:d1:44:9e:12:8b:b2:78:ac:13:7c: 9c:f6:18:f0:fc:7f:ad:ea:40:61:0c:b9:7f:75:8a:0b:98:df: a0:25:af:ed:22:8a:58:94:e4:e3:99:47:65:ba:31:b0:64:fd: da:6a:59:0c:6d:01:60:48:c2:d9:3f:20:39:cd:4a:ca:8a:f3: 7a:9d:ec:fd:ab:f9:6f:00:76:08:17:02:e1:02:ed:57:63:18: 5f:5a:2d:f6:71:55:3d:c7:35:76:b1:8e:7f:28:79:3f:ad:55: 77:0f:9a:68:12:3f:ca:3f:b6:db:58:e0:86:a1:86:08:df:25: 06:ce:40:58:bb:a4:16:c0:83:8a:be:f8:ec:ab:bd:d2:f7:55: 0d:13:40:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2W0A6F/YFaJSR0dgRzH/VuAAvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3 QzE3QzRDNDAeFw0yNjA5MjExNDQ5NTVaFw0yNjA5MjIxNzU3NTVaMDMxMTAvBgNV BAMTKDc0NjhFREVBMjdBQzAwMEJCRUVEOEE3RUUwN0YyMDVDMTQxMzJBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChen/vldeCpe7ElK9jCiNm6UXK 47sfDj3oya/DAtoKnWRon8fk3qtfWwuO+sigjj9n8gaxWOcRXbclsclpKx6kfCkp izLtn5RkXnZ7hGOSxGvGDm/t+iMpTLkTVzm4P/nmyNdN1x5Q+VrNpI5K0qz8CkJ8 Q4flD7fE4CF5oVr3UndjJGWu7JZ3/AZdJT01VBhVTtJj1ob6nizNevqI3GiIK6HR fRtfJqfjhsoPzTfs2rvh0BOhWWokW7eEREQY9PK68OvhKMPSiJbRWiVrZVSwgSvk vH9Ro1oqN9m6vsIVHEakmHUNcOxT84NvYiar2bRDFdXFutTxdfaT1dlbTA8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdGjt6iesAAu+7Yp+4H8gXBQTKjIwHwYDVR0j BBgwFoAUQR6MRYlCZ9zvogUUyJFl7nwXxMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGMwMjAxZTMtODc1ZC00OWM0LThlMTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4 OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3QzE3QzRDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTFFOEM0NTg5NDI2N0RDRUZBMjA1MTRDODkxNjVFRTdDMTdD NEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1 RUU3QzE3QzRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKCWoRvr0haAFjd2Mcp5Xf31xKqn1jXhiDp MCD2zuGaCwgIJmygl5yezFBvV410pBojjDFtJnbRsvPJ7h8vNj4Die35Ngz4Fxd7 CYx+lnOTrHFVvboNWqACh9Nh1eTbB34PQR0g39CkGb4XxfRgq4HS20r60USeEouy eKwTfJz2GPD8f63qQGEMuX91iguY36Alr+0iiliU5OOZR2W6MbBk/dpqWQxtAWBI wtk/IDnNSsqK83qd7P2r+W8AdggXAuEC7VdjGF9aLfZxVT3HNXaxjn8oeT+tVXcP mmgSP8o/tttY4IahhgjfJQbOQFi7pBbAg4q++OyrvdL3VQ0TQJQ= -----END CERTIFICATE-----Generated at Tue Sep 22 10:27:29 2026 by rpki-client