$ rpki-client -vvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: pqPQKawb0cSuhDsA5z3XoT1cTyJzSg0Vj5acG5VhLaU= Subject key identifier: 4C:92:7E:97:2E:F3:0E:78:A1:6E:B6:39:5D:11:24:BE:CB:40:D2:09 Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 6228D781C281D1C18CBA1F9D44233932688AE635 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 17:15:25 +0000 Manifest this update: Sat 13 Jun 2026 17:10:25 +0000 Manifest next update: Sun 14 Jun 2026 18:28:25 +0000 Files and hashes: 1: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: ZVQhYE6Kr8l7w0X/mKM6QvQwYYMo+3bHchHO4CPYnHQ=) 2: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) 3: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:28:d7:81:c2:81:d1:c1:8c:ba:1f:9d:44:23:39:32:68:8a:e6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: Jun 13 17:10:25 2026 GMT Not After : Jun 14 18:28:25 2026 GMT Subject: CN=4C927E972EF30E78A16EB6395D1124BECB40D209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:36:74:44:67:1a:40:fe:bc:94:69:97:3a: f8:ac:dc:08:c6:9e:d8:93:5f:57:bd:a2:9e:6f:d6: eb:3e:dd:df:3d:2e:ef:ce:57:f0:a8:67:03:24:41: 8b:ee:23:ba:ab:bd:76:5f:36:75:13:46:1b:39:86: 78:b2:a6:64:a5:e5:db:ba:5d:24:44:e3:df:02:81: 07:2a:ad:60:8b:0e:60:96:55:8b:4c:6f:b1:f5:94: 06:35:30:38:68:b1:2c:86:76:80:29:bb:33:76:49: 34:9d:09:b8:6f:8a:39:8c:88:46:7f:52:85:00:11: 96:d1:d6:dd:58:f2:45:38:36:c1:c4:3d:82:b9:e4: 17:53:0d:cd:79:a6:53:27:2e:95:74:fc:68:4a:b6: da:9c:d9:30:91:0b:2b:9b:d2:c9:4a:89:d4:25:45: 75:5f:86:b2:3a:28:01:5c:b0:0d:b7:c0:f0:b8:d9: 40:7d:55:ed:bc:d4:3f:92:d7:de:8a:57:6b:65:66: 5c:d1:f4:37:d0:3d:f1:84:1b:11:e2:e9:90:77:1a: 7f:41:ce:f7:dd:c6:88:28:0b:03:d4:59:f5:af:87: 47:fc:a3:f3:8e:00:32:eb:86:4b:a6:a4:14:1e:77: e1:3c:9d:35:6e:21:89:bf:8f:91:8b:5e:5b:2c:23: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:92:7E:97:2E:F3:0E:78:A1:6E:B6:39:5D:11:24:BE:CB:40:D2:09 X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:03:97:bd:49:d6:b5:c8:8e:de:b7:52:c8:a7:a3:b4:33:30: fd:fa:13:82:59:03:f3:ee:0a:03:33:76:cf:e1:57:1f:d1:22: a3:83:d2:eb:47:8c:b4:6a:70:a9:14:76:80:2a:14:e9:88:a3: 97:17:2e:22:4b:41:a5:63:1c:67:92:a6:16:f7:f9:0c:07:43: 30:f1:30:24:f4:ed:4a:24:76:3e:e1:48:4f:92:0d:39:ce:b2: 45:3e:09:15:02:ae:fc:01:77:58:9f:89:19:65:a4:52:30:5c: 37:7e:cb:39:be:d0:94:05:1b:2e:4e:b7:f8:5e:e3:53:b9:49: de:d0:56:f6:28:8e:2f:8e:bd:53:b0:b3:61:65:d9:0d:86:34: c9:90:ae:dd:01:1c:a9:56:a0:7d:c8:75:fb:63:83:45:56:16: 63:2b:0f:33:d4:73:bf:ce:d6:a5:f2:f4:93:34:87:4d:b2:22: 25:e5:95:6a:02:07:18:5d:8d:91:da:93:4c:64:bc:95:df:10: 7c:ee:9a:c8:76:f4:5b:24:4a:2c:0d:45:b4:9c:44:ec:c1:f6: 7c:8e:40:62:1c:04:62:3e:92:ae:d5:6c:bc:03:de:a9:b5:1d: 95:ed:a9:59:0a:be:2a:35:da:57:98:7f:1e:fc:6f:06:90:e1: 1a:a8:d9:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYijXgcKB0cGMuh+dRCM5MmiK5jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjA2MTMxNzEwMjVaFw0yNjA2MTQxODI4MjVaMDMxMTAvBgNV BAMTKDRDOTI3RTk3MkVGMzBFNzhBMTZFQjYzOTVEMTEyNEJFQ0I0MEQyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbTZ0RGcaQP68lGmXOvis3AjG ntiTX1e9op5v1us+3d89Lu/OV/CoZwMkQYvuI7qrvXZfNnUTRhs5hniypmSl5du6 XSRE498CgQcqrWCLDmCWVYtMb7H1lAY1MDhosSyGdoApuzN2STSdCbhvijmMiEZ/ UoUAEZbR1t1Y8kU4NsHEPYK55BdTDc15plMnLpV0/GhKttqc2TCRCyub0slKidQl RXVfhrI6KAFcsA23wPC42UB9Ve281D+S196KV2tlZlzR9DfQPfGEGxHi6ZB3Gn9B zvfdxogoCwPUWfWvh0f8o/OOADLrhkumpBQed+E8nTVuIYm/j5GLXlssI1IfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTJJ+ly7zDnihbrY5XREkvstA0gkwHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4Dl71J1rXIjt63Usino7QzMP36E4JZA/Pu CgMzds/hVx/RIqOD0utHjLRqcKkUdoAqFOmIo5cXLiJLQaVjHGeSphb3+QwHQzDx MCT07Uokdj7hSE+SDTnOskU+CRUCrvwBd1ifiRllpFIwXDd+yzm+0JQFGy5Ot/he 41O5Sd7QVvYoji+OvVOws2Fl2Q2GNMmQrt0BHKlWoH3Idftjg0VWFmMrDzPUc7/O 1qXy9JM0h02yIiXllWoCBxhdjZHak0xkvJXfEHzumsh29FskSiwNRbScROzB9nyO QGIcBGI+kq7VbLwD3qm1HZXtqVkKvio12leYfx78bwaQ4Rqo2R8= -----END CERTIFICATE-----Generated at Sun Jun 14 08:32:07 2026 by rpki-client