$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft File: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft (raw, json) Hash identifier: JuXfhGsXvMMNJx01Inyq9iCrYUocT3wtkZ5vvK31wG4= Subject key identifier: 98:E1:1C:03:2B:98:80:F8:67:46:1A:EA:59:B1:9D:E6:B9:EB:0F:E8 Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Certificate serial: 6401BEF5ACC06B84693FBC117438D34B494E5D0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 21:12:50 +0000 Manifest this update: Mon 21 Sep 2026 21:07:50 +0000 Manifest next update: Wed 23 Sep 2026 00:10:50 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8=) 2: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl (hash: R4/L3DQ5cvf0l+pIR1dpw1luZow8KpCerkNULAJK838=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:01:be:f5:ac:c0:6b:84:69:3f:bc:11:74:38:d3:4b:49:4e:5d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Validity Not Before: Sep 21 21:07:50 2026 GMT Not After : Sep 23 00:10:50 2026 GMT Subject: CN=98E11C032B9880F867461AEA59B19DE6B9EB0FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:99:5e:ec:a8:8a:17:e1:3b:21:ae:b4:9f: d8:9d:7a:b0:74:4d:00:40:63:48:05:92:66:37:54: 51:cd:52:e9:a8:be:fb:6e:73:f2:09:38:5e:0f:95: b3:23:3c:30:3d:84:e3:de:cc:c4:f3:ff:3f:36:4e: 21:6e:ab:6e:ee:66:9d:90:29:56:fc:4b:b5:9c:6e: 3f:ee:c6:49:12:a9:eb:f4:19:01:3a:3b:fa:72:23: 2c:3b:8c:55:9f:f8:92:5e:71:69:cf:61:60:d7:ec: aa:1f:cd:72:7b:5d:f1:34:56:22:0f:1b:d6:bc:8d: 00:79:07:46:64:86:03:58:26:3e:62:18:ed:41:d6: c0:2f:f1:d1:35:22:c8:5b:75:41:61:69:cd:19:93: b0:bf:21:1e:fa:c6:a9:ce:f2:e5:91:43:74:29:13: 39:b9:dd:3b:d4:6e:88:9f:bf:8d:11:a0:36:3b:73: 74:5c:af:dc:2b:b1:a3:16:5b:24:64:71:84:80:8b: 04:60:9d:f4:13:c9:af:27:c9:9d:4c:6f:86:a3:45: ab:52:e2:87:24:d2:94:9d:e9:4e:49:51:d6:f1:6c: bd:16:84:9a:2c:ce:5b:34:74:14:bb:37:15:f2:0c: eb:04:4c:b0:1b:d8:02:d5:0a:67:1f:6d:26:49:51: 29:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E1:1C:03:2B:98:80:F8:67:46:1A:EA:59:B1:9D:E6:B9:EB:0F:E8 X509v3 Authority Key Identifier: keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6d:a2:be:82:81:74:22:1f:25:c1:e0:fa:6e:30:de:8a:c7: a1:90:f7:19:7f:ae:83:f9:5e:2b:a1:35:fa:67:8f:d0:2b:68: 75:2c:70:71:74:d3:5a:a9:3a:55:a3:5d:cd:ed:5d:6c:94:79: db:20:24:03:d5:29:5a:ac:bd:8b:fa:61:a6:d3:f0:43:2c:5c: 57:5f:7f:2a:60:0c:39:68:35:4a:11:d2:a8:37:c9:01:5c:2b: 8e:bc:d8:d4:f4:9d:21:28:76:8e:5f:0b:b4:3f:4e:6d:66:ca: ed:92:78:f6:2d:8d:06:2f:45:07:32:f7:f1:60:2b:ac:b2:31: dd:73:3c:33:9b:ee:00:66:22:31:7a:8f:bd:8a:c6:96:52:e7: b0:c1:44:38:84:a5:52:e4:30:c7:0f:aa:f0:d2:dc:04:b5:dd: c7:ac:87:29:f0:e5:fe:76:f3:ea:97:5a:ff:6d:91:23:c4:d6: 5e:f5:97:71:61:92:2d:ae:54:6e:70:68:b7:10:39:cb:cc:cf: 1a:6d:d2:fc:24:c2:d9:ce:a6:61:b4:89:8c:5f:b7:7a:5c:16: 0e:e3:62:df:94:91:de:1b:d3:77:7f:9c:80:cc:ca:fc:a0:a4: b8:fb:8b:b2:6e:c6:33:ad:4f:cd:81:31:97:04:c5:80:11:35: 27:81:a4:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAG+9azAa4RpP7wRdDjTS0lOXQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRG OEUzQ0FDMTAeFw0yNjA5MjEyMTA3NTBaFw0yNjA5MjMwMDEwNTBaMDMxMTAvBgNV BAMTKDk4RTExQzAzMkI5ODgwRjg2NzQ2MUFFQTU5QjE5REU2QjlFQjBGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/E5le7KiKF+E7Ia60n9iderB0 TQBAY0gFkmY3VFHNUumovvtuc/IJOF4PlbMjPDA9hOPezMTz/z82TiFuq27uZp2Q KVb8S7Wcbj/uxkkSqev0GQE6O/pyIyw7jFWf+JJecWnPYWDX7KofzXJ7XfE0ViIP G9a8jQB5B0ZkhgNYJj5iGO1B1sAv8dE1IshbdUFhac0Zk7C/IR76xqnO8uWRQ3Qp Ezm53TvUboifv40RoDY7c3Rcr9wrsaMWWyRkcYSAiwRgnfQTya8nyZ1Mb4ajRatS 4ock0pSd6U5JUdbxbL0WhJoszls0dBS7NxXyDOsETLAb2ALVCmcfbSZJUSkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmOEcAyuYgPhnRhrqWbGd5rnrD+gwHwYDVR0j BBgwFoAUQdezlFjJmE9awSzIKvkSRPjjysEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1 OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRGOEUzQ0FDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ3QjM5NDU4Qzk5ODRGNUFDMTJDQzgyQUY5MTI0NEY4RTND QUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEy NDRGOEUzQ0FDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVtor6CgXQiHyXB4PpuMN6Kx6GQ9xl/roP5 XiuhNfpnj9AraHUscHF001qpOlWjXc3tXWyUedsgJAPVKVqsvYv6YabT8EMsXFdf fypgDDloNUoR0qg3yQFcK4682NT0nSEodo5fC7Q/Tm1myu2SePYtjQYvRQcy9/Fg K6yyMd1zPDOb7gBmIjF6j72KxpZS57DBRDiEpVLkMMcPqvDS3AS13ceshynw5f52 8+qXWv9tkSPE1l71l3Fhki2uVG5waLcQOcvMzxpt0vwkwtnOpmG0iYxft3pcFg7j Yt+Ukd4b03d/nIDMyvygpLj7i7JuxjOtT82BMZcExYARNSeBpNE= -----END CERTIFICATE-----Generated at Tue Sep 22 05:46:19 2026 by rpki-client