$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: 8kv2pwVIIKCg6B9JXEZ8tb+9ix/W9N0V4ynJkyNBdIk= Subject key identifier: 79:19:16:89:D2:7E:A2:95:DB:C4:58:50:06:C7:82:89:F5:31:2A:85 Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 35D82F616A917C4C634582896E085CC5128D7293 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 0141 Signing time: Sun 01 Mar 2026 23:30:40 +0000 Manifest this update: Sun 01 Mar 2026 23:25:40 +0000 Manifest next update: Thu 05 Mar 2026 03:05:40 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: aIHodB1nz1DhifH6iuPw3Hsr0XqaD481RG1+0C9lrxQ=) 2: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: lSqWcnnOpyI2TbcIB819jdudsYpsvYSNPICny9oxmFk=) 3: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: JrpOhdiy+mBFESSL7rD9ukXYen5fXGnMpvaEHRT8ihU=) 4: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: qz1dXSjmkF1AA5Ei88d+aInM4zHfe9p4wjNpf+FYrqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d8:2f:61:6a:91:7c:4c:63:45:82:89:6e:08:5c:c5:12:8d:72:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Mar 1 23:25:40 2026 GMT Not After : Mar 5 03:05:40 2026 GMT Subject: CN=79191689D27EA295DBC4585006C78289F5312A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:34:1c:7c:be:87:da:60:c3:2c:b2:33:27: cc:b0:6b:48:04:09:f2:9b:a2:e1:ed:f0:ed:dd:04: 47:7e:ab:98:6c:ba:70:45:c1:be:ac:3c:43:0e:ff: 87:c6:88:b9:4c:b7:02:72:0b:76:37:f4:2c:56:1d: ea:37:ac:47:14:04:58:75:9e:c9:64:1d:d1:ee:e5: c9:4f:3e:97:35:58:39:90:34:02:8a:cc:c2:40:d4: b9:fe:89:01:0c:80:f0:3d:89:dd:72:3c:c3:8f:b2: 6d:b4:fd:1c:ae:af:36:ef:84:50:82:6f:fe:cd:72: 88:33:57:0b:9f:1a:46:62:14:bf:4b:5d:17:3e:4d: 7a:63:bc:f3:dd:02:c5:a1:f6:b1:16:ba:a6:1f:50: 2a:e9:a3:4f:33:08:e0:37:74:0b:bd:6d:cc:6b:0d: 7d:de:11:d4:8a:f5:0c:ea:63:37:12:c3:21:e0:d1: 03:69:40:2e:0d:3b:0f:20:0b:ee:12:fa:36:46:8a: 3b:38:1c:69:26:0f:41:f5:3f:d5:af:3d:55:eb:a0: 26:92:69:8a:38:06:bb:62:0e:5e:c5:3d:ab:57:e6: 84:ae:53:d0:51:c1:51:d5:e5:b9:a6:b7:f2:ec:62: a2:a1:b6:d2:ce:93:57:f4:05:44:85:fc:b1:15:3c: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:19:16:89:D2:7E:A2:95:DB:C4:58:50:06:C7:82:89:F5:31:2A:85 X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d1:b9:a7:97:31:cc:6e:18:50:29:e3:74:86:8e:85:4c:4e: f4:e6:1e:12:c4:da:c2:96:ea:1c:e0:50:95:8c:9b:9b:a1:52: c4:73:36:c3:3f:1e:f3:d9:cb:0f:f4:3b:5d:75:54:0a:ee:37: e4:76:11:2b:da:77:3c:db:6e:9e:80:2e:59:d5:01:1a:7b:5f: 67:c9:60:73:6f:26:9d:65:c6:53:e5:cc:e1:9e:a4:c2:ba:8e: b8:32:51:1a:09:40:c9:a7:8b:aa:97:e5:52:9e:42:23:eb:8e: b4:8c:99:a1:4b:7b:ba:4e:5c:31:5f:6a:87:29:ba:a2:08:f7: dd:bb:8f:50:70:48:f9:ae:a5:fb:76:a3:9b:3e:f8:11:79:60: 6a:b4:b4:e5:7d:16:23:5a:c1:07:db:e3:15:bd:8f:d7:db:b1: b3:41:e0:58:8e:18:eb:3b:07:9a:59:0d:a3:ee:4d:1a:85:0e: ee:a6:bb:9f:56:09:7e:a3:d7:e2:46:cd:90:be:a3:76:13:c7: 08:2d:71:38:8f:69:9d:e9:72:32:23:7d:70:85:31:b5:4e:42: 9e:27:58:a4:40:77:32:cc:55:9d:31:f0:f9:70:21:eb:04:16: 17:a2:d5:01:d8:fc:d9:fc:b0:cd:fd:ea:87:c1:1f:1f:ef:ad: f2:3c:c4:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdgvYWqRfExjRYKJbghcxRKNcpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNjAzMDEyMzI1NDBaFw0yNjAzMDUwMzA1NDBaMDMxMTAvBgNV BAMTKDc5MTkxNjg5RDI3RUEyOTVEQkM0NTg1MDA2Qzc4Mjg5RjUzMTJBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkDDQcfL6H2mDDLLIzJ8ywa0gE CfKbouHt8O3dBEd+q5hsunBFwb6sPEMO/4fGiLlMtwJyC3Y39CxWHeo3rEcUBFh1 nslkHdHu5clPPpc1WDmQNAKKzMJA1Ln+iQEMgPA9id1yPMOPsm20/RyurzbvhFCC b/7NcogzVwufGkZiFL9LXRc+TXpjvPPdAsWh9rEWuqYfUCrpo08zCOA3dAu9bcxr DX3eEdSK9QzqYzcSwyHg0QNpQC4NOw8gC+4S+jZGijs4HGkmD0H1P9WvPVXroCaS aYo4BrtiDl7FPatX5oSuU9BRwVHV5bmmt/LsYqKhttLOk1f0BUSF/LEVPPVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeRkWidJ+opXbxFhQBseCifUxKoUwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfRuaeXMcxuGFAp43SGjoVMTvTmHhLE2sKW 6hzgUJWMm5uhUsRzNsM/HvPZyw/0O111VAruN+R2ESvadzzbbp6ALlnVARp7X2fJ YHNvJp1lxlPlzOGepMK6jrgyURoJQMmni6qX5VKeQiPrjrSMmaFLe7pOXDFfaocp uqII9927j1BwSPmupft2o5s++BF5YGq0tOV9FiNawQfb4xW9j9fbsbNB4FiOGOs7 B5pZDaPuTRqFDu6mu59WCX6j1+JGzZC+o3YTxwgtcTiPaZ3pcjIjfXCFMbVOQp4n WKRAdzLMVZ0x8PlwIesEFhei1QHY/Nn8sM396ofBHx/vrfI8xBE= -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:39 2026 by rpki-client