
$ rpki-client -vvf rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
File: 41E81C122CFE1947633AAA5A517B7923E1A78966.mft (raw, json)
Hash identifier: OQai3Wdpf01TB2Y6ZO7p/6xplEINevx9mIfzvm1V4D8=
Subject key identifier: 3C:96:46:40:5C:12:86:31:FD:95:5B:96:DF:57:7C:9C:9F:F3:C5:DF
Authority key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
Certificate issuer: /CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Certificate serial: 43CA7752EDC0E1863041DF47FAA327CBE3FD4AC6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 23:17:20 +0000
Manifest this update: Sat 13 Jun 2026 23:12:20 +0000
Manifest next update: Sun 14 Jun 2026 23:38:20 +0000
Files and hashes: 1: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: fMmCbOIL8nMLpF5EKmFyyb/z/cATeDIy9MshfGEYHeY=)
2: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: ZuDxVEAObBxaFOm5uYmRAI9eGu8SevvOVjp9rp2cMH8=)
3: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: lJflPziRVDWpYcvwsJpkfkZb2ca8llttOjutgGe2gos=)
4: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: h8pC3O5UrBoUEC6ODx88QnSAsLryVqTwUJG85o9TxOg=)
5: 41E81C122CFE1947633AAA5A517B7923E1A78966.crl (hash: tuqOvHHWMo+ynh3AlCkGQH80WoRDq0wzOWN9BYVyEAI=)
6: 3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa (hash: HGoEshpetOpXhNr6v4Rw31C6lvgZLfHje+0mfpy78fU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ca:77:52:ed:c0:e1:86:30:41:df:47:fa:a3:27:cb:e3:fd:4a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Validity
Not Before: Jun 13 23:12:20 2026 GMT
Not After : Jun 14 23:38:20 2026 GMT
Subject: CN=3C9646405C128631FD955B96DF577C9C9FF3C5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:5d:08:bd:94:ec:92:7d:27:46:e6:5e:65:
1a:2e:73:b7:35:6a:a2:9d:fd:67:88:db:36:ed:f0:
78:c1:0a:88:3c:ac:d5:5d:c6:fd:59:33:13:c2:28:
26:13:64:e9:3f:d9:2d:d3:e5:84:b1:d5:29:9a:d3:
83:dc:0f:48:3d:44:a5:eb:ee:e7:6d:5e:0c:5b:35:
c2:d3:93:ba:2c:bc:39:b7:28:57:6e:3b:91:97:df:
44:af:78:2f:68:c1:eb:11:3b:22:8d:81:93:f6:31:
38:26:5e:84:56:5f:37:17:03:16:d2:6f:e9:2c:e9:
4b:8a:cb:35:47:d1:9b:13:c1:d9:21:09:44:77:37:
7a:a6:b1:4b:e4:60:c4:d2:89:33:bb:76:8b:ec:ad:
8b:50:c4:14:cf:39:ef:cf:78:15:d0:e0:40:65:a3:
a1:2e:9e:fe:a3:ab:b6:6d:01:98:48:a0:f4:0c:ff:
5f:c5:6e:50:a6:49:86:ac:b4:f1:6d:34:cc:90:c1:
11:90:c8:ba:0f:a5:0a:bb:30:b4:9f:55:3a:67:65:
f5:d1:86:13:f8:07:a3:09:21:72:92:eb:5d:a7:36:
cc:fc:b2:07:02:a9:63:1f:ec:20:7e:ec:4b:11:d1:
00:54:b1:81:b6:91:68:18:61:da:6f:a3:09:56:bd:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:96:46:40:5C:12:86:31:FD:95:5B:96:DF:57:7C:9C:9F:F3:C5:DF
X509v3 Authority Key Identifier:
keyid:41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bd:c1:12:05:2d:4a:7d:3e:93:5f:3d:a3:ed:0f:7c:27:dd:
82:1b:99:ab:d6:e9:11:56:4d:54:d3:4e:14:dc:38:95:58:eb:
16:46:6a:95:3c:2e:03:9b:c8:3d:a9:2e:15:fe:fe:c2:00:68:
0c:93:c3:f5:93:cf:da:0b:28:dd:63:8f:6b:7e:18:50:7b:2b:
e4:e2:9a:bd:12:aa:1c:e9:c4:15:69:73:e1:e9:21:3b:b5:13:
0c:2c:79:ca:ab:01:c2:32:58:89:29:6a:0f:c5:65:b2:00:85:
8b:0b:ba:58:11:83:4a:b9:37:fe:4d:2a:c4:61:af:13:65:fa:
8f:a9:b6:12:69:57:2f:e6:e7:00:5f:19:56:4a:b4:49:08:8a:
92:e6:0b:71:84:3d:61:40:94:3c:41:bd:a9:ff:ef:34:4d:43:
1f:15:74:0a:68:e8:33:af:90:b9:3b:cc:28:09:f4:5c:0a:76:
36:d8:b2:d1:9a:84:e4:e0:35:ae:b4:22:77:ab:7d:ee:9c:13:
d2:ad:06:dc:32:16:63:5d:b9:3e:c2:85:06:00:08:c2:9b:20:
c1:f5:fe:01:0b:d0:a2:f8:70:f4:7f:3f:33:35:71:f6:6b:2c:
a1:9c:0f:40:ca:7a:60:8b:79:70:43:60:4f:22:75:90:34:9f:
c2:63:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:59:54 2026 by rpki-client