$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft File: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft (raw, json) Hash identifier: 0Dg6+2eXg0nZfEmqHk0gsGBdeWG8UcL5xj1EHg7UT5k= Subject key identifier: 87:D2:8A:CE:70:06:D7:8D:E5:EF:54:E0:42:8F:FC:D1:E7:B5:17:6D Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Certificate serial: 3DDCB4463156183A5722E243D6F5E96B4AA1C098 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 08:33:14 +0000 Manifest this update: Wed 17 Jun 2026 08:28:14 +0000 Manifest next update: Thu 18 Jun 2026 11:56:14 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8=) 2: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl (hash: ycirELq5Uh1W956Elck1kOL8V3gkiH0McRWVA6vZJUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dc:b4:46:31:56:18:3a:57:22:e2:43:d6:f5:e9:6b:4a:a1:c0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Validity Not Before: Jun 17 08:28:14 2026 GMT Not After : Jun 18 11:56:14 2026 GMT Subject: CN=87D28ACE7006D78DE5EF54E0428FFCD1E7B5176D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:33:c3:11:84:07:e6:04:20:bd:dd:26:a2: e0:62:ea:8b:b1:40:f3:c2:91:e4:f7:d6:a4:8d:c1: f2:84:f0:9d:b5:ad:b8:ab:32:ff:17:17:5b:85:cb: 81:69:0c:a1:e4:eb:6b:fb:1f:11:44:16:a0:d9:73: 8f:06:8f:45:7d:a6:e5:6e:e3:f3:81:dc:f8:64:d5: 06:48:71:28:6c:32:87:ae:ec:56:de:40:e7:95:5b: 85:d0:d0:2c:3d:0e:fe:11:49:a0:73:32:02:11:27: 1b:9f:e1:d8:13:e3:65:d7:40:26:1c:82:ff:f5:78: df:b3:8e:15:9f:a5:6b:46:47:54:21:10:35:9b:d9: f7:ad:e6:4f:83:ce:cc:d7:c6:b7:0f:f0:cd:0b:64: ca:86:c8:f1:46:f5:3f:27:1f:83:1b:a1:4a:8d:7c: 30:72:6f:4e:96:c5:b0:2f:10:32:99:3f:19:51:4f: 77:b9:f1:b6:d0:75:b1:50:06:1c:d8:00:38:41:f2: e0:d4:0b:47:75:e6:05:cb:ec:bc:6d:bd:49:34:ee: a3:3e:79:76:6c:7d:b3:b0:0e:49:e9:ac:73:90:9c: 84:35:c1:80:72:59:d6:8b:bd:38:01:86:8b:ae:12: 12:34:49:da:a1:b0:48:ce:a8:da:ef:f3:c5:ff:b6: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D2:8A:CE:70:06:D7:8D:E5:EF:54:E0:42:8F:FC:D1:E7:B5:17:6D X509v3 Authority Key Identifier: keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4d:9d:01:96:5e:96:a7:d2:fd:ae:a4:98:25:0a:68:4c:ec: c5:ae:7f:b6:fd:85:b2:e1:8b:6a:61:11:de:9a:18:57:b4:7c: 13:bb:7c:6e:ce:21:4a:b0:2d:fd:a9:86:ec:59:69:56:c4:72: 14:ce:ff:f9:ec:9f:e2:e1:38:0d:66:ed:a2:ab:e6:b0:29:2d: a5:04:1e:06:9a:59:67:b7:8f:36:26:c0:20:12:d5:ee:08:8a: 69:e9:1e:06:2c:04:ec:fa:ee:cb:7d:79:36:6b:b3:9c:64:bb: c0:85:bc:73:f7:63:87:94:20:73:b2:0c:d9:35:2f:0b:f7:f7: 86:94:f3:6f:6d:ca:35:9b:16:41:f9:2d:04:d3:1e:49:78:3c: 87:96:32:52:57:5b:f0:70:2f:e8:80:00:46:d6:bd:43:8e:9b: f4:f9:48:26:ed:80:18:b1:b5:3c:38:a6:66:25:f3:28:1d:e4: 1d:f0:d8:04:c4:f0:3f:0c:18:39:eb:e2:8f:50:a6:1e:5d:f3: 50:9a:0a:bc:9e:cd:46:2b:f1:86:75:c1:5f:95:b3:be:20:ee: 88:d6:bd:7f:0d:c8:c2:28:ee:71:4f:55:84:68:cc:05:6c:ce: 38:fb:c7:db:24:e8:9f:93:32:a5:1d:96:49:5c:d3:1f:54:04: 01:cd:d1:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdy0RjFWGDpXIuJD1vXpa0qhwJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRG OEUzQ0FDMTAeFw0yNjA2MTcwODI4MTRaFw0yNjA2MTgxMTU2MTRaMDMxMTAvBgNV BAMTKDg3RDI4QUNFNzAwNkQ3OERFNUVGNTRFMDQyOEZGQ0QxRTdCNTE3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBjPDEYQH5gQgvd0mouBi6oux QPPCkeT31qSNwfKE8J21rbirMv8XF1uFy4FpDKHk62v7HxFEFqDZc48Gj0V9puVu 4/OB3Phk1QZIcShsMoeu7FbeQOeVW4XQ0Cw9Dv4RSaBzMgIRJxuf4dgT42XXQCYc gv/1eN+zjhWfpWtGR1QhEDWb2fet5k+DzszXxrcP8M0LZMqGyPFG9T8nH4MboUqN fDByb06WxbAvEDKZPxlRT3e58bbQdbFQBhzYADhB8uDUC0d15gXL7LxtvUk07qM+ eXZsfbOwDknprHOQnIQ1wYByWdaLvTgBhouuEhI0SdqhsEjOqNrv88X/tsofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh9KKznAG143l71TgQo/80ee1F20wHwYDVR0j BBgwFoAUQdezlFjJmE9awSzIKvkSRPjjysEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1 OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRGOEUzQ0FDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ3QjM5NDU4Qzk5ODRGNUFDMTJDQzgyQUY5MTI0NEY4RTND QUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEy NDRGOEUzQ0FDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRNnQGWXpan0v2upJglCmhM7MWuf7b9hbLh i2phEd6aGFe0fBO7fG7OIUqwLf2phuxZaVbEchTO//nsn+LhOA1m7aKr5rApLaUE HgaaWWe3jzYmwCAS1e4IimnpHgYsBOz67st9eTZrs5xku8CFvHP3Y4eUIHOyDNk1 Lwv394aU829tyjWbFkH5LQTTHkl4PIeWMlJXW/BwL+iAAEbWvUOOm/T5SCbtgBix tTw4pmYl8ygd5B3w2ATE8D8MGDnr4o9Qph5d81CaCryezUYr8YZ1wV+Vs74g7ojW vX8NyMIo7nFPVYRozAVszjj7x9sk6J+TMqUdlklc0x9UBAHN0YU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:41:59 2026 by rpki-client