$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft File: A041DA85A835517127145910FB36AAA5B7CA41F2.mft (raw, json) Hash identifier: SImhP14MuZFuGw4Oyk04w9L+yddpwvLqlawTlZSEAaQ= Subject key identifier: 63:30:21:0F:C4:D3:7B:82:45:69:14:FF:88:A5:11:2D:31:AA:E6:B0 Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Certificate serial: 1D1BD16DC4BF494A96DEFC2240B9BB85CEA55BD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 12:16:40 +0000 Manifest this update: Tue 22 Sep 2026 12:11:40 +0000 Manifest next update: Wed 23 Sep 2026 15:33:40 +0000 Files and hashes: 1: A041DA85A835517127145910FB36AAA5B7CA41F2.crl (hash: 0RkDOtr9RhjHHOu1FL3iyxaTITic0dkYq6fkjVD/WDg=) 2: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: vmjqWZXe1WAW716qvYHn6H4tiVZPN9hJplwpeaEOs+c=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: cvKGIujNKpn8r6a8rprf+PEz/toRdewoQzshB4q6X84=) 4: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: tY2P809Veb9qnVz+b5sj5T6oUhcFMFNmQj4vHbtiv9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1b:d1:6d:c4:bf:49:4a:96:de:fc:22:40:b9:bb:85:ce:a5:5b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Validity Not Before: Sep 22 12:11:40 2026 GMT Not After : Sep 23 15:33:40 2026 GMT Subject: CN=6330210FC4D37B82456914FF88A5112D31AAE6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:c9:a1:c0:0a:88:e6:e1:07:45:dc:dc:e2: 69:63:0c:b8:2a:c4:2d:da:76:e1:85:3b:80:34:73: 43:74:59:82:48:97:68:a3:04:f0:6a:24:08:ab:27: 8f:f4:f3:1f:98:47:31:65:30:dc:f6:42:78:5c:ff: e1:38:fc:c7:7d:26:26:e2:4f:f4:07:7a:3d:b4:69: 6a:08:27:19:99:1a:55:c8:c8:ac:29:52:1b:d3:f5: 1b:60:94:78:3a:b3:c7:c9:d0:ff:6b:17:e5:76:42: 26:9d:e6:52:bc:71:9e:5c:57:44:32:65:1b:9f:cc: b4:fc:bc:91:b0:8b:a2:2a:d6:4a:ad:0c:cd:63:fe: eb:4e:0f:f8:38:c9:71:75:ee:96:57:27:1c:37:26: 01:0c:38:a3:cf:17:7d:82:68:47:e0:95:d9:5a:bd: cc:28:0c:36:f3:f9:f9:b9:b8:18:cc:d7:57:cf:8c: cc:76:17:0e:ff:69:51:17:17:ad:f9:6d:48:cd:84: aa:5f:5b:ff:3c:45:83:f2:13:d5:5b:71:bc:0a:fe: a3:11:b8:cb:43:8f:e7:25:52:52:1a:be:07:98:e4: 7b:c3:d1:0e:e8:c2:1e:b2:06:bc:87:7c:fd:d5:0a: 4f:c6:06:df:3a:3b:ab:ba:c3:04:6f:83:eb:00:1a: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:30:21:0F:C4:D3:7B:82:45:69:14:FF:88:A5:11:2D:31:AA:E6:B0 X509v3 Authority Key Identifier: keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:86:33:07:36:fe:60:7c:52:da:00:6f:d9:75:0e:96:06:c0: 36:fa:ed:d5:b0:96:71:69:22:c5:26:8b:e2:a4:c4:a4:8d:a2: 9f:b1:11:80:23:51:d5:23:ca:b2:5f:b8:bf:d2:84:30:96:1e: 4f:56:d4:ae:13:29:88:16:23:37:8b:be:49:5f:b6:6d:72:79: 44:dc:19:45:0f:37:0e:21:2e:0a:ca:71:fb:bd:02:c6:3d:fd: 8a:73:08:96:1e:5a:5e:af:42:2f:cc:81:71:a0:15:ac:36:27: ab:bb:2b:f0:9a:69:c2:1f:ed:09:09:19:55:06:98:cf:2f:b1: c9:d0:33:db:56:fe:47:7e:ae:87:53:d4:ce:81:12:1d:a5:69: 27:10:a3:84:da:51:5b:68:a9:06:1b:7e:a4:df:e7:62:50:bf: cd:3c:0a:7f:95:9a:57:39:60:04:e5:2a:a1:05:64:ae:17:7a: 87:9b:b8:aa:4e:ae:27:d8:5f:fb:1c:7c:50:33:84:e1:83:a5: 16:ed:12:48:95:fd:ec:51:5e:fb:2f:a2:44:c5:fa:7d:1b:08: aa:82:09:63:46:03:c5:b8:51:4a:11:2a:a9:6a:e5:b0:d7:4d: d7:c6:35:59:6d:92:26:40:f4:aa:85:f7:1b:01:89:7f:3b:d6: eb:39:4f:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRvRbcS/SUqW3vwiQLm7hc6lW9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC N0NBNDFGMjAeFw0yNjA5MjIxMjExNDBaFw0yNjA5MjMxNTMzNDBaMDMxMTAvBgNV BAMTKDYzMzAyMTBGQzREMzdCODI0NTY5MTRGRjg4QTUxMTJEMzFBQUU2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrR8mhwAqI5uEHRdzc4mljDLgq xC3aduGFO4A0c0N0WYJIl2ijBPBqJAirJ4/08x+YRzFlMNz2Qnhc/+E4/Md9Jibi T/QHej20aWoIJxmZGlXIyKwpUhvT9RtglHg6s8fJ0P9rF+V2Qiad5lK8cZ5cV0Qy ZRufzLT8vJGwi6Iq1kqtDM1j/utOD/g4yXF17pZXJxw3JgEMOKPPF32CaEfgldla vcwoDDbz+fm5uBjM11fPjMx2Fw7/aVEXF635bUjNhKpfW/88RYPyE9VbcbwK/qMR uMtDj+clUlIavgeY5HvD0Q7owh6yBryHfP3VCk/GBt86O6u6wwRvg+sAGkJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzAhD8TTe4JFaRT/iKURLTGq5rAwHwYDVR0j BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFB QTVCN0NBNDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqGMwc2/mB8UtoAb9l1DpYGwDb67dWwlnFp IsUmi+KkxKSNop+xEYAjUdUjyrJfuL/ShDCWHk9W1K4TKYgWIzeLvklftm1yeUTc GUUPNw4hLgrKcfu9AsY9/YpzCJYeWl6vQi/MgXGgFaw2J6u7K/CaacIf7QkJGVUG mM8vscnQM9tW/kd+rodT1M6BEh2laScQo4TaUVtoqQYbfqTf52JQv808Cn+Vmlc5 YATlKqEFZK4XeoebuKpOrifYX/scfFAzhOGDpRbtEkiV/exRXvsvokTF+n0bCKqC CWNGA8W4UUoRKqlq5bDXTdfGNVltkiZA9KqF9xsBiX871us5T4U= -----END CERTIFICATE-----Generated at Wed Sep 23 01:16:18 2026 by rpki-client