$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft File: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft (raw, json) Hash identifier: 8In65wVSU2pJkZWO/EUQ3+N9wIaA4ncrwwzCoT9qgKY= Subject key identifier: 1B:71:E9:F5:1B:D3:FA:11:B8:6E:05:59:81:03:8A:B9:39:FF:95:AC Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 42125C8DC1B26FA7C8FB592DF8F374BD3A06E408 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft Manifest number: 01C3 Signing time: Tue 04 Nov 2025 04:31:31 +0000 Manifest this update: Tue 04 Nov 2025 04:26:31 +0000 Manifest next update: Fri 07 Nov 2025 07:36:31 +0000 Files and hashes: 1: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (hash: HSD+rz78f30+7qMkNj8RIXAP7toiDue03fxCDLpd1gQ=) 2: 3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (hash: 7hZ1/d8z8cuNOvDlKPy5v/4BiAJKyyXEJBjiAsWqzoc=) 3: 3230322e3137332e38382e302f32342d3234203d3e203233363935.roa (hash: MTpdwnhfQZSQAh1ZGXABlj9jbImFIxLfXoLJhkWTtoM=) 4: 3230322e3137332e37382e302f32342d3234203d3e203233363935.roa (hash: zhJMlvXTxLuBFeVwFK4r4fNyStbf/Ql6Yg1ubq1FG9U=) 5: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (hash: X5jy5VzIopKMThtZkzTbzLShWD3aXUht7jnGIoGc1v4=) 6: 3230322e3137332e36382e302f32342d3234203d3e203233363935.roa (hash: mjkSgcJgLX5SOFtOhOviOBQgprMVBBer7U2vhkGwvLU=) 7: 3230322e3137332e38362e302f32342d3234203d3e203233363935.roa (hash: Kuw7lUkD47qMQ8N9t8f+0cUPW15btvt7raHQz8c4jwE=) 8: 3230322e3137332e38392e302f32342d3234203d3e203233363935.roa (hash: MoFSi1IdrKnDxvbOT8+bwDmrwlZs7D30PErF64rXmY4=) 9: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (hash: 8jqzos5S6OkN9Ee6v+YzMqAqC0wNC8Krr96CfUxfSYE=) 10: 3230322e3137332e38312e302f32342d3234203d3e203233363935.roa (hash: 3yHj4lXLINuzyHkwTxJmt8yGObuCgxfBF7xbnpVP4Bw=) 11: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl (hash: VRpm6/f/yQ03YCGUKI5JUTz4/KPUjXtRsZgFIOladRE=) 12: 3230322e3137332e38342e302f32342d3234203d3e203233363935.roa (hash: ebTZrvCC33wSXgS/vmMuYEvFlyItzY4A65tpm7b8XjA=) 13: 3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (hash: DT1voxU1N/hSTql3ltjbouW8VYAmulvadfX76qaEZ6s=) 14: 3230322e3137332e39342e302f32342d3234203d3e203233363935.roa (hash: PFFF7wOzswXkUvuXZAL6iT8tVDgOdkVdZ6Rau5XCsgs=) 15: 3230322e3137332e37392e302f32342d3234203d3e203233363935.roa (hash: nAoSDJuqF6hbVEgVPLS26WtbrrypCt6JFjNgyc3rJL8=) 16: 3230322e3137332e37332e302f32342d3234203d3e203233363935.roa (hash: UWg1+ZlqcjDvHPPT1k4EQ/Rdg1I29Yb8QcAkFZktGvo=) 17: 3230322e3137332e37302e302f32342d3234203d3e203233363935.roa (hash: IuagBHs+wXzOnacnPUkJxU6l40oN7NESENKBCYPpsBU=) 18: 3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (hash: +q3wlg13BeY7XP8EgfGzrDoOCR+6sfClfQe2l9amwig=) 19: 3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (hash: HqyHWbtOd5kjnZpc1shELfkBvMAEJDpjVjZ/6MOE3xA=) 20: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (hash: IWpRULjWlGR9Jzsp+ASiF1flr+SwQ4Q2L5sVUGqiiWo=) 21: 3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (hash: Z/thAbfiH6aci7mCfAjuPHRMycQOfIBu73zKFBwRIHE=) 22: 3230322e3137332e39322e302f32342d3234203d3e203233363935.roa (hash: MAZtj8wCYeyMLR/QhCtmH1rAozS439X8LKLLq7J1p+k=) 23: 3230322e3137332e39302e302f32342d3234203d3e203233363935.roa (hash: aqr9G7daeMRwOwIQcJJyRek+PwNLD3VNhiJaFW2F3a8=) 24: 3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (hash: jKUx0Kb59Rg6MFPSq2RoJeJiSFX4TEG4M2H5FmtzNtA=) 25: 3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (hash: Vmt2hMQ1PzBTrS/Zf6NsqZ+thU+zV90I3cLmY00k7VU=) 26: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (hash: 3cx2QRjGVSumggdxVl9lyK0OrH1snPi5KBCV6wfSuVs=) 27: 3230322e3137332e37352e302f32342d3234203d3e203233363935.roa (hash: Ioz2g+UnY5qDj9ZEs6aQkN93zUApuLGpJfPqtPZmzZA=) 28: 3230322e3137332e39312e302f32342d3234203d3e203233363935.roa (hash: jEFMN+/YArKXHWvdd9szTx7AeesDaLCCXkcmKURU2fg=) 29: 3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (hash: BE8RKzWufUmY8gM5pF6f7oeSsMvCQ/US3VwzzqZjX3g=) 30: 3230322e3137332e36342e302f31392d3139203d3e203233363935.roa (hash: 2bUXUTcYKqH84i/OW2TNfGKGcjdUBjA5fkOcr7LqU+Y=) 31: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (hash: 9TJpLgLS7LUO5wsdFqczCLAa4nlbwR69+ZuGz4M7mRY=) 32: 3230322e3137332e38352e302f32342d3234203d3e203233363935.roa (hash: CZ00gqTzVUJ95u4ziPkcHi+fVrKdKn0XMZAWrlb+XPc=) 33: 3230322e3137332e36342e302f32342d3234203d3e203233363935.roa (hash: 4WyGaw7pg5UYftsuxKZALRkqNDYf7OEez6Nq5nSCM4U=) 34: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (hash: RaKEgFfPBag0Nqmq1W+hCtI9Ea7HFEcZBDAtujJERJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:12:5c:8d:c1:b2:6f:a7:c8:fb:59:2d:f8:f3:74:bd:3a:06:e4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Nov 4 04:26:31 2025 GMT Not After : Nov 7 07:36:31 2025 GMT Subject: CN=1B71E9F51BD3FA11B86E055981038AB939FF95AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:67:d0:8f:3e:05:6e:8e:ee:3e:c2:6e:8a:4c: 9a:60:a7:2a:cf:57:97:7b:47:f2:78:da:0c:fc:5f: b3:41:ca:6b:14:ce:b2:d6:8c:86:bc:35:4a:d3:65: f6:33:9e:e0:e1:e1:3d:d5:05:dc:7b:c3:5f:13:8d: 17:0d:0e:45:f0:21:55:c5:65:1c:ff:a6:bd:c4:f3: 4f:78:d8:7d:f6:fa:0d:0d:75:cf:f6:ab:8b:87:1f: 95:4a:04:6c:08:f4:b2:98:62:eb:0f:41:bd:b1:27: ef:5f:67:43:a8:0e:bc:13:7b:4b:57:d1:07:17:d3: 05:a2:ad:ad:67:76:8a:4d:26:f2:38:33:ef:72:89: 4b:8d:8b:31:3f:86:ec:ff:8b:d6:dd:5f:5b:d7:f8: 84:d8:e9:39:c7:c1:f7:16:72:ac:3d:2e:2e:93:45: 18:24:8d:f4:e9:ce:4f:10:c0:74:a8:da:8a:2f:7d: ea:a0:b1:7f:1a:a7:02:90:73:23:92:93:70:8c:65: a0:90:68:5d:e2:1f:e3:5e:04:8f:22:b5:f8:55:e2: bf:c3:e7:d7:3b:ed:8a:84:85:1a:6d:d6:6f:e5:f0: a3:08:9e:3b:a6:6d:5e:33:0b:78:55:db:7f:1f:a8: fb:b6:08:74:a4:22:16:66:db:d0:5f:00:0b:2b:44: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:71:E9:F5:1B:D3:FA:11:B8:6E:05:59:81:03:8A:B9:39:FF:95:AC X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f5:f0:00:ad:bb:63:b8:f3:9d:98:b6:6f:61:dc:c4:27:43: 7e:e8:b4:cb:d6:ee:1c:2b:71:0a:83:61:f1:da:1b:2e:89:63: 44:fa:2e:3e:6a:0b:86:77:29:da:ca:ef:8e:ce:12:25:ff:56: 42:46:7e:cc:fd:0f:35:2d:28:21:f7:80:d7:36:1e:c3:4a:48: 81:7f:2b:c0:b1:b1:40:88:60:7e:ed:62:a6:93:5b:00:c3:1e: cf:cf:3c:f0:01:87:c6:64:26:05:3b:11:1d:10:1d:76:b4:02: c7:63:72:7d:be:bc:bb:56:de:60:cf:0c:dd:5f:c8:03:d0:13: cc:2a:1e:50:e1:c9:8f:5c:39:ec:e2:7b:74:db:80:67:87:72: eb:85:24:6f:ac:19:c4:5f:da:4e:1b:44:6b:b0:2e:49:15:a4: c8:41:72:20:c4:61:50:0c:1b:3b:62:9c:b6:c4:12:a2:d6:9b: 44:41:d3:f9:2d:86:a2:8a:02:64:63:8b:0a:e1:b5:23:4a:a2: 79:80:72:1d:6a:25:e9:f6:3c:4b:d3:bd:6b:35:bf:5b:66:16: 69:a7:66:1f:f7:38:a2:05:d7:d8:9f:29:4b:9b:fd:b3:a7:24: 8b:bc:4e:f4:a3:fb:24:78:53:47:01:2b:69:26:bd:8b:49:f9: 3b:8d:69:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhJcjcGyb6fI+1kt+PN0vToG5AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTExMDQwNDI2MzFaFw0yNTExMDcwNzM2MzFaMDMxMTAvBgNV BAMTKDFCNzFFOUY1MUJEM0ZBMTFCODZFMDU1OTgxMDM4QUI5MzlGRjk1QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwZ9CPPgVuju4+wm6KTJpgpyrP V5d7R/J42gz8X7NBymsUzrLWjIa8NUrTZfYznuDh4T3VBdx7w18TjRcNDkXwIVXF ZRz/pr3E80942H32+g0Ndc/2q4uHH5VKBGwI9LKYYusPQb2xJ+9fZ0OoDrwTe0tX 0QcX0wWira1ndopNJvI4M+9yiUuNizE/huz/i9bdX1vX+ITY6TnHwfcWcqw9Li6T RRgkjfTpzk8QwHSo2oovfeqgsX8apwKQcyOSk3CMZaCQaF3iH+NeBI8itfhV4r/D 59c77YqEhRpt1m/l8KMInjumbV4zC3hV238fqPu2CHSkIhZm29BfAAsrREGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG3Hp9RvT+hG4bgVZgQOKuTn/lawwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYwZjJiZDktNDJhZS00NDlhLThk NTctYjI2ZGEwNGQ3ZWUxLzAvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzcz OTRBRTRFMkQ4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE318ACtu2O4852Ytm9h3MQnQ37otMvW7hwr cQqDYfHaGy6JY0T6Lj5qC4Z3KdrK747OEiX/VkJGfsz9DzUtKCH3gNc2HsNKSIF/ K8CxsUCIYH7tYqaTWwDDHs/PPPABh8ZkJgU7ER0QHXa0Asdjcn2+vLtW3mDPDN1f yAPQE8wqHlDhyY9cOezie3TbgGeHcuuFJG+sGcRf2k4bRGuwLkkVpMhBciDEYVAM GztinLbEEqLWm0RB0/kthqKKAmRjiwrhtSNKonmAch1qJen2PEvTvWs1v1tmFmmn Zh/3OKIF19ifKUub/bOnJIu8TvSj+yR4U0cBK2kmvYtJ+TuNaVw= -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:39 2025 by rpki-client