$ rpki-client -vvvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: RB7HbRcS36D+EG8FYV2jC74v6+bKqjryWZ3n19MQN7c= Subject key identifier: 2E:F4:F3:7C:AD:58:26:6A:22:83:A0:DE:A3:FA:87:8D:EB:11:3D:1D Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 6F807D1312946704981C76B92F89EA311C02F8FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:32:12 +0000 Manifest this update: Mon 21 Sep 2026 04:27:12 +0000 Manifest next update: Tue 22 Sep 2026 05:27:12 +0000 Files and hashes: 1: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: gaGRqzRvzMV326WLQiVystRmhNzp75X9uVefI7x6ClM=) 2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:80:7d:13:12:94:67:04:98:1c:76:b9:2f:89:ea:31:1c:02:f8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: Sep 21 04:27:12 2026 GMT Not After : Sep 22 05:27:12 2026 GMT Subject: CN=2EF4F37CAD58266A2283A0DEA3FA878DEB113D1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:ed:a8:fd:68:de:b0:f6:c8:5c:3a:59:79: f8:20:e1:a9:f9:32:1d:41:2a:64:c2:09:fc:c7:70: 61:b3:c4:9d:5f:48:d9:10:45:d1:84:c2:d7:c5:7b: 9b:fe:32:20:3e:0f:7c:db:36:8f:b9:c7:fd:f9:09: 68:02:1d:c0:1a:f7:44:f3:88:fb:3a:92:05:1f:2f: 5b:b8:ef:b0:87:18:1b:3e:dd:a7:d0:e8:55:26:f3: d0:7c:91:6e:45:71:05:e9:e6:80:90:6b:8e:30:99: 7d:1e:81:4c:9a:a8:9a:ac:21:89:02:b6:ef:c7:63: 1d:27:28:cd:ca:f8:ca:17:cf:20:b7:7f:1d:38:dd: 17:70:ec:69:c6:06:da:77:f3:5a:f3:c4:2c:48:29: 35:c8:5c:d9:2e:2b:4a:d7:bc:8b:86:b4:2b:43:eb: 95:dd:7a:a0:1a:9c:be:c7:fc:99:2d:ab:06:b2:9e: 13:80:c8:cb:c2:79:ce:dc:fa:ff:ae:0e:da:88:a9: 30:64:1b:10:01:9d:6f:b8:ae:84:50:eb:2d:35:b9: 24:19:7e:84:9d:8b:36:f2:b7:ab:ea:63:bf:0d:97: cb:d9:36:2a:5d:6a:52:7a:09:c5:5e:be:56:9e:f8: 99:67:76:6b:a2:60:c7:66:b5:90:15:de:39:b6:f1: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F4:F3:7C:AD:58:26:6A:22:83:A0:DE:A3:FA:87:8D:EB:11:3D:1D X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:92:c4:0f:c5:0f:41:fe:77:c2:94:63:66:a5:f8:37:24:77: b2:97:76:d0:e3:9a:ad:85:31:52:a6:1b:c4:30:0e:72:55:e6: bb:7d:dd:58:90:cf:db:03:89:5e:2c:e3:32:eb:f6:de:ee:ac: 61:e7:c4:ec:f4:60:37:af:c7:6c:b5:9e:fa:54:ef:17:f5:49: 17:ab:1a:02:d8:20:d2:47:72:46:41:b5:df:a4:d0:72:b7:a7: d7:5f:89:f8:1f:07:f0:f2:58:2e:13:b2:25:e7:95:f5:ba:62: 22:a9:f3:9c:33:8b:9c:ff:db:ea:67:fc:05:03:ab:ae:78:bf: c1:74:c3:5d:17:51:5a:66:e6:0c:aa:08:a7:12:c0:b2:0f:7b: 95:30:a0:ce:0f:19:36:08:08:51:7c:e7:78:1e:48:ad:ad:59: d3:4e:e1:1f:88:9e:fc:e1:43:80:e5:5d:e4:9d:37:9b:3e:9b: 90:a1:75:74:99:6d:79:73:74:09:97:1e:af:3f:61:3e:b4:ce: 58:a2:16:52:66:52:eb:c8:22:72:34:01:2f:88:93:d1:2f:e0: fe:48:c6:9a:13:72:c2:95:e6:1e:9f:09:e0:88:ef:22:7b:73: c8:95:83:bc:04:25:54:54:97:c5:6a:45:23:70:1c:29:9c:bb: 77:43:4a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4B9ExKUZwSYHHa5L4nqMRwC+PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjA5MjEwNDI3MTJaFw0yNjA5MjIwNTI3MTJaMDMxMTAvBgNV BAMTKDJFRjRGMzdDQUQ1ODI2NkEyMjgzQTBERUEzRkE4NzhERUIxMTNEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCE+2o/WjesPbIXDpZefgg4an5 Mh1BKmTCCfzHcGGzxJ1fSNkQRdGEwtfFe5v+MiA+D3zbNo+5x/35CWgCHcAa90Tz iPs6kgUfL1u477CHGBs+3afQ6FUm89B8kW5FcQXp5oCQa44wmX0egUyaqJqsIYkC tu/HYx0nKM3K+MoXzyC3fx043Rdw7GnGBtp381rzxCxIKTXIXNkuK0rXvIuGtCtD 65XdeqAanL7H/JktqwaynhOAyMvCec7c+v+uDtqIqTBkGxABnW+4roRQ6y01uSQZ foSdizbyt6vqY78Nl8vZNipdalJ6CcVevlae+JlndmuiYMdmtZAV3jm28VRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvTzfK1YJmoig6Deo/qHjesRPR0wHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSSxA/FD0H+d8KUY2al+Dckd7KXdtDjmq2F MVKmG8QwDnJV5rt93ViQz9sDiV4s4zLr9t7urGHnxOz0YDevx2y1nvpU7xf1SRer GgLYINJHckZBtd+k0HK3p9dfifgfB/DyWC4TsiXnlfW6YiKp85wzi5z/2+pn/AUD q654v8F0w10XUVpm5gyqCKcSwLIPe5UwoM4PGTYICFF853geSK2tWdNO4R+Invzh Q4DlXeSdN5s+m5ChdXSZbXlzdAmXHq8/YT60zliiFlJmUuvIInI0AS+Ik9Ev4P5I xpoTcsKV5h6fCeCI7yJ7c8iVg7wEJVRUl8VqRSNwHCmcu3dDSnc= -----END CERTIFICATE-----Generated at Mon Sep 21 13:57:52 2026 by rpki-client