
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft
File: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft (raw, json)
Hash identifier: CiGGH2O8x/YqhQGcGhSPDok4zDbF45amg8xS/MnfaPs=
Subject key identifier: 55:D6:35:98:AD:E0:46:A3:F2:48:9C:2B:7B:16:5C:7C:68:10:5B:F5
Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C
Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C
Certificate serial: 5E6D6C16D3946434D27B959DC923CC8ACCC65617
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 20:03:33 +0000
Manifest this update: Sat 13 Jun 2026 19:58:33 +0000
Manifest next update: Sun 14 Jun 2026 22:26:33 +0000
Files and hashes: 1: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl (hash: SYyph2HF/38UYJy7TpDcW2fRd+t0vr9l8ILju17Do8Y=)
2: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=)
3: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl
rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6d:6c:16:d3:94:64:34:d2:7b:95:9d:c9:23:cc:8a:cc:c6:56:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C
Validity
Not Before: Jun 13 19:58:33 2026 GMT
Not After : Jun 14 22:26:33 2026 GMT
Subject: CN=55D63598ADE046A3F2489C2B7B165C7C68105BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:97:df:ef:ef:9b:a5:ad:3c:aa:8f:e3:c4:
89:64:cd:ad:6b:3e:67:66:e2:8d:62:cc:02:ab:f9:
7b:ac:12:fa:df:3e:d7:eb:aa:00:b1:10:fb:e1:75:
48:aa:bb:3c:6f:03:d7:05:59:14:ed:40:59:36:a6:
f5:72:05:d4:07:e7:0f:5a:1e:51:5a:b2:7a:ab:d0:
1f:55:a6:8e:da:c5:45:09:ed:22:e5:07:66:a0:eb:
14:b1:7e:cf:f1:15:14:28:a5:6d:77:df:d7:de:b7:
5a:ff:9a:48:81:91:a2:83:35:ed:92:1c:df:a8:31:
d7:44:e0:8d:a8:87:4a:db:f0:40:fc:e9:d9:97:01:
3b:ac:61:3a:3e:8e:e7:2b:38:f8:eb:b3:dc:aa:44:
69:30:f3:70:46:96:06:66:8c:ec:aa:b1:eb:67:e0:
d9:32:9e:78:c1:25:63:c9:51:04:56:7d:a9:b8:41:
06:e9:b6:cc:17:07:27:4d:b8:c9:bd:7a:a4:86:98:
a7:93:43:09:f3:bf:46:c3:e4:6e:49:1e:d9:48:65:
e1:e3:96:74:0e:24:c3:b0:1b:df:13:c5:83:96:1b:
bc:23:b0:51:d2:0a:ca:44:f2:dd:c6:c3:a9:d3:de:
6c:84:42:8e:43:85:82:de:3c:ff:88:09:21:21:b6:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:35:98:AD:E0:46:A3:F2:48:9C:2B:7B:16:5C:7C:68:10:5B:F5
X509v3 Authority Key Identifier:
keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f2:13:96:a3:06:1e:66:fa:02:af:5f:5e:11:27:f3:b5:e9:
c8:17:c1:24:3e:bf:50:ee:aa:75:58:4d:c9:d5:7f:64:86:31:
3d:20:48:00:46:2e:b6:ee:de:bc:7d:8d:6b:61:7f:b6:d7:f1:
ee:8b:c1:e8:b9:d8:83:52:dc:f6:35:ae:4f:15:3e:8c:ec:b0:
dc:d8:5d:27:ec:fd:5a:fb:07:52:07:42:e3:35:eb:74:f9:f5:
ea:94:19:2c:39:0e:dc:27:b1:16:e9:5e:a3:27:a5:5b:18:df:
e2:7d:05:7f:02:f4:21:9e:14:1d:0c:cb:c4:b8:46:5a:11:9f:
27:fe:f6:60:95:f9:09:dd:10:62:04:d5:1e:09:5a:66:e2:5f:
2e:c7:1f:ff:0b:d5:ce:f5:10:24:4a:cf:d1:c4:f0:5a:b7:1f:
d8:48:8a:6f:74:07:61:f5:17:28:8b:5b:a1:f7:c0:66:32:2c:
83:36:3f:25:4d:2c:7d:82:f3:c6:65:98:64:a2:93:f9:cf:c2:
ff:78:40:6d:b4:1d:66:30:65:a3:e3:db:37:88:8d:2b:00:91:
23:77:98:b9:49:5c:8f:14:7d:49:7b:f3:4b:2c:17:51:d6:3a:
e6:b5:61:b4:59:d8:44:df:6c:30:f1:e6:02:99:bd:c0:24:4d:
c9:d3:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:18:37 2026 by rpki-client