$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft File: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft (raw, json) Hash identifier: eCGMQs5/JR6z7TO/Gznj6NYlN4p2vpDw+oxnhwjzj3s= Subject key identifier: CB:EE:1F:31:9C:45:6D:CB:7E:F1:E3:70:E0:AB:CE:5F:D3:B3:EA:86 Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Certificate serial: 4E97258461FBBFCFFC034231A3E5A839CFD6287E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft Manifest number: DC Signing time: Thu 15 Oct 2026 06:12:43 +0000 Manifest this update: Thu 15 Oct 2026 06:07:43 +0000 Manifest next update: Fri 16 Oct 2026 06:15:43 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=) 2: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl (hash: ZdQVgYIHL6kZmQmYWCNbOQuXOq3kn/j9NEx2ldCvQto=) 3: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 06:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:97:25:84:61:fb:bf:cf:fc:03:42:31:a3:e5:a8:39:cf:d6:28:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Validity Not Before: Oct 15 06:07:43 2026 GMT Not After : Oct 16 06:15:43 2026 GMT Subject: CN=CBEE1F319C456DCB7EF1E370E0ABCE5FD3B3EA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:fd:d7:41:84:b2:17:14:35:b0:ff:a8:3b: aa:fc:ff:05:1f:75:27:bc:9c:a8:56:98:91:78:29: 6b:8f:fb:3d:00:85:31:41:ad:59:56:9d:69:a8:12: 55:b0:80:6e:f0:a5:b3:0f:59:7c:c1:ba:a2:c5:f0: ce:23:a0:67:c5:63:42:e7:a6:0a:8e:f2:a4:14:3e: f9:49:37:1c:3c:d0:df:85:9e:48:2d:f9:1e:04:03: 42:99:3c:ca:c1:ea:1a:13:d8:91:a9:b0:2c:f5:fd: b9:e1:a2:e3:3a:42:9b:4a:94:21:5c:46:6e:1c:da: 0b:23:1f:54:6a:57:89:d6:dd:11:8c:75:6c:6a:52: 5f:3d:00:f5:d2:44:5b:d5:18:52:e5:83:79:ab:f7: 35:29:f6:ec:f7:45:72:81:b2:2b:71:a9:e7:f4:ee: c6:88:16:50:8c:0c:d5:b2:7d:e9:9c:f7:c5:b4:0c: 81:f1:f1:26:8a:af:d3:a0:df:80:25:ea:27:fb:4e: cd:b6:b6:49:f3:3c:9c:36:ce:f3:97:9f:0c:c2:43: ee:6f:86:63:a8:ca:86:23:67:f9:8f:ad:da:64:c0: c9:f2:b7:93:09:d8:0e:25:72:a5:72:d2:b0:2a:9c: 30:dd:19:62:dd:0c:13:5f:bc:eb:53:c7:11:25:e8: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:1F:31:9C:45:6D:CB:7E:F1:E3:70:E0:AB:CE:5F:D3:B3:EA:86 X509v3 Authority Key Identifier: keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:1d:45:f5:64:6b:b7:e8:81:a3:cd:b3:f2:6d:f0:85:79:3b: 0a:5f:67:f5:92:b7:69:2c:4c:75:a5:c0:9d:ae:40:b7:c2:69: 66:8f:81:50:79:1e:5f:f9:81:ca:5b:f9:92:7b:4e:98:fd:2b: 90:03:19:ca:55:ea:25:00:3f:0f:74:94:82:67:3a:92:e1:b4: f2:6a:05:31:40:e1:a2:47:eb:75:95:fb:6f:9a:d8:64:da:a5: df:ae:9f:ba:c2:68:1b:01:4e:ac:27:00:26:ce:6d:65:31:81: f9:02:c5:51:50:0c:ca:f9:47:43:db:fc:05:69:cc:55:87:51: 91:9b:b0:49:a8:e6:dc:63:3b:46:40:20:7c:59:83:7b:48:e3: a9:e1:98:ff:70:b3:b9:78:e9:80:cb:4c:90:a2:0d:57:0f:86: 14:e6:fa:63:d8:0a:12:bd:ef:0a:2f:22:f7:d5:6f:58:89:70: 6a:b6:51:a8:47:91:32:fd:ec:2b:58:80:6b:9b:cb:4c:e7:7c: e7:a6:2d:1b:7d:4c:7d:77:cf:22:69:b5:98:59:8a:d1:dc:3c: 35:18:91:44:44:cd:db:a0:2b:74:34:f1:0d:84:c7:fc:8e:70: bd:8d:b5:da:13:fd:8e:c3:01:b7:28:cd:98:65:aa:33:12:e0: e3:68:b1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpclhGH7v8/8A0Ixo+WoOc/WKH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0 N0IzRUEwQzAeFw0yNjEwMTUwNjA3NDNaFw0yNjEwMTYwNjE1NDNaMDMxMTAvBgNV BAMTKENCRUUxRjMxOUM0NTZEQ0I3RUYxRTM3MEUwQUJDRTVGRDNCM0VBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClp/3XQYSyFxQ1sP+oO6r8/wUf dSe8nKhWmJF4KWuP+z0AhTFBrVlWnWmoElWwgG7wpbMPWXzBuqLF8M4joGfFY0Ln pgqO8qQUPvlJNxw80N+Fnkgt+R4EA0KZPMrB6hoT2JGpsCz1/bnhouM6QptKlCFc Rm4c2gsjH1RqV4nW3RGMdWxqUl89APXSRFvVGFLlg3mr9zUp9uz3RXKBsitxqef0 7saIFlCMDNWyfemc98W0DIHx8SaKr9Og34Al6if7Ts22tknzPJw2zvOXnwzCQ+5v hmOoyoYjZ/mPrdpkwMnyt5MJ2A4lcqVy0rAqnDDdGWLdDBNfvOtTxxEl6HLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+4fMZxFbct+8eNw4KvOX9Oz6oYwHwYDVR0j BBgwFoAUQcJMBIfEEMOuxL603EA80Eez6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0ODFlNDktZjRjMS00YzEzLTk0YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4 N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0N0IzRUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMyNEMwNDg3QzQxMEMzQUVDNEJFQjREQzQwM0NEMDQ3QjNF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDND RDA0N0IzRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAdRfVka7fogaPNs/Jt8IV5OwpfZ/WSt2ks THWlwJ2uQLfCaWaPgVB5Hl/5gcpb+ZJ7Tpj9K5ADGcpV6iUAPw90lIJnOpLhtPJq BTFA4aJH63WV+2+a2GTapd+un7rCaBsBTqwnACbObWUxgfkCxVFQDMr5R0Pb/AVp zFWHUZGbsEmo5txjO0ZAIHxZg3tI46nhmP9ws7l46YDLTJCiDVcPhhTm+mPYChK9 7wovIvfVb1iJcGq2UahHkTL97CtYgGuby0znfOemLRt9TH13zyJptZhZitHcPDUY kUREzdugK3Q08Q2Ex/yOcL2NtdoT/Y7DAbcozZhlqjMS4ONoseU= -----END CERTIFICATE-----Generated at Thu Oct 15 08:22:05 2026 by rpki-client