$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft File: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft (raw, json) Hash identifier: 4E9REYi36mvp72hQjrdfegETS79ukH7sNYssdt1yAqo= Subject key identifier: 50:0E:9A:76:1A:52:14:9E:02:19:E7:5E:4B:DB:EC:C5:E6:07:C4:D0 Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Certificate serial: 4EEC00409A506E5B7A093FC2AF2B99152492696A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 18:58:13 +0000 Manifest this update: Sat 14 Nov 2026 18:53:13 +0000 Manifest next update: Sun 15 Nov 2026 22:51:13 +0000 Files and hashes: 1: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl (hash: Lm2IsGj6sQNEc3aUo1CTWvtM63Mt12qd5hPnw9Z6gI8=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 22:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ec:00:40:9a:50:6e:5b:7a:09:3f:c2:af:2b:99:15:24:92:69:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Validity Not Before: Nov 14 18:53:13 2026 GMT Not After : Nov 15 22:51:13 2026 GMT Subject: CN=500E9A761A52149E0219E75E4BDBECC5E607C4D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:55:75:ef:c8:3a:07:6b:e6:07:35:72:48: 7e:d7:0f:89:ed:ec:da:05:15:d3:31:b0:26:ed:88: 59:20:ef:89:21:75:05:dc:67:ca:9b:b4:14:9b:ce: bb:4d:ed:06:08:5e:b9:50:22:38:51:ba:74:b4:a6: 5a:e5:0c:51:dd:0e:c0:69:18:86:8f:02:72:d6:86: 95:df:9f:33:b3:06:fa:1c:b4:da:13:17:22:da:b8: b2:2b:0b:50:75:ee:5c:00:c9:f1:c7:9a:b5:20:6e: 4b:14:e2:73:05:07:62:43:da:e4:ee:8d:6a:49:bf: c2:e2:8e:37:00:e9:d4:ca:15:5e:5d:ae:37:e9:e5: 47:f1:e1:9b:3b:77:9c:a6:e8:94:b2:c9:f8:16:9c: 7f:8f:36:bd:90:c3:76:35:61:9f:9a:37:4b:7c:d3: 3c:ec:c7:98:74:14:ac:4a:92:f3:e5:f8:e7:30:b9: c2:82:04:c0:f2:ae:46:f5:26:7d:41:c9:53:47:d0: f4:0e:bc:76:16:cf:a7:4d:f2:dd:b6:45:ae:36:b2: ec:9f:9e:61:a7:56:eb:f5:8b:5d:ff:61:85:99:39: 93:f8:81:aa:f1:7a:f1:fe:93:8a:ea:ef:74:1d:f0: ca:21:47:b2:19:a5:08:aa:1d:df:c2:be:59:15:58: 4c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0E:9A:76:1A:52:14:9E:02:19:E7:5E:4B:DB:EC:C5:E6:07:C4:D0 X509v3 Authority Key Identifier: keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8b:53:54:1e:8d:c9:47:94:0a:64:96:51:10:be:ee:4d:c8: 1c:91:90:99:87:dc:fa:df:21:02:75:77:51:cc:ff:f5:7d:fd: 36:b0:3a:37:86:6e:1d:82:b4:cc:80:32:e9:a7:d0:69:98:09: 89:3e:a6:0c:15:3d:45:c5:55:80:eb:23:33:ce:98:29:38:da: 1b:f2:23:00:fe:12:d7:80:9e:4c:a9:8c:ec:d6:bc:0f:96:b4: 2c:30:ac:3c:0e:4b:57:02:fd:df:e5:ca:93:a5:e3:43:76:8d: 4d:f1:97:93:eb:8f:f0:30:5e:3e:5f:84:4a:9e:27:55:21:88: dd:52:9e:02:67:3d:5d:ea:8e:a3:34:cb:8b:5a:b8:3a:66:42: 58:76:50:6f:72:25:2b:83:34:2c:e6:e2:45:b2:c3:0d:a8:57: 02:1b:bc:ca:1f:ce:67:51:15:9d:6e:60:29:dc:95:8c:09:e3: f0:51:a5:8b:13:76:e4:cb:ce:48:f8:f8:12:47:b5:ef:06:21: 11:30:0d:37:68:46:cf:f4:ba:8a:80:d0:76:6f:da:b6:c2:8f: ad:2d:be:c6:d8:cf:11:7b:0e:db:11:09:75:2f:e2:66:5c:b3: a5:98:39:86:0f:b0:c5:b2:22:df:a4:4b:03:2e:49:ed:51:9d: 0f:5c:71:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuwAQJpQblt6CT/CryuZFSSSaWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRG OEUzQ0FDMTAeFw0yNjExMTQxODUzMTNaFw0yNjExMTUyMjUxMTNaMDMxMTAvBgNV BAMTKDUwMEU5QTc2MUE1MjE0OUUwMjE5RTc1RTRCREJFQ0M1RTYwN0M0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXNVV178g6B2vmBzVySH7XD4nt 7NoFFdMxsCbtiFkg74khdQXcZ8qbtBSbzrtN7QYIXrlQIjhRunS0plrlDFHdDsBp GIaPAnLWhpXfnzOzBvoctNoTFyLauLIrC1B17lwAyfHHmrUgbksU4nMFB2JD2uTu jWpJv8LijjcA6dTKFV5drjfp5Ufx4Zs7d5ym6JSyyfgWnH+PNr2Qw3Y1YZ+aN0t8 0zzsx5h0FKxKkvPl+OcwucKCBMDyrkb1Jn1ByVNH0PQOvHYWz6dN8t22Ra42suyf nmGnVuv1i13/YYWZOZP4garxevH+k4rq73Qd8MohR7IZpQiqHd/CvlkVWEwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUA6adhpSFJ4CGedeS9vsxeYHxNAwHwYDVR0j BBgwFoAUQdezlFjJmE9awSzIKvkSRPjjysEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1 OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRGOEUzQ0FDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ3QjM5NDU4Qzk5ODRGNUFDMTJDQzgyQUY5MTI0NEY4RTND QUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEy NDRGOEUzQ0FDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeLU1QejclHlApkllEQvu5NyByRkJmH3Prf IQJ1d1HM//V9/TawOjeGbh2CtMyAMumn0GmYCYk+pgwVPUXFVYDrIzPOmCk42hvy IwD+EteAnkypjOzWvA+WtCwwrDwOS1cC/d/lypOl40N2jU3xl5Prj/AwXj5fhEqe J1UhiN1SngJnPV3qjqM0y4tauDpmQlh2UG9yJSuDNCzm4kWyww2oVwIbvMofzmdR FZ1uYCnclYwJ4/BRpYsTduTLzkj4+BJHte8GIREwDTdoRs/0uoqA0HZv2rbCj60t vsbYzxF7DtsRCXUv4mZcs6WYOYYPsMWyIt+kSwMuSe1RnQ9ccYs= -----END CERTIFICATE-----Generated at Sun Nov 15 11:54:05 2026 by rpki-client