$ rpki-client -vvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: R1v/UFRYsvY3OUDBFMcbMNdPyMiLjnN86iHEDECRRKc= Subject key identifier: DB:6D:98:1A:05:D4:8F:6B:BD:64:67:02:DC:24:8C:A5:E4:DD:CD:FE Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 6BB6E2241BA80E1D6CF457F4B8AF2ABAD1A4AEC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 22:39:46 +0000 Manifest this update: Tue 28 Jul 2026 22:34:46 +0000 Manifest next update: Wed 29 Jul 2026 23:31:46 +0000 Files and hashes: 1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) 2: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) 3: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: XLqeYlOa/lOR3MIYbVyV7U7/4xVpdHSFMqRml5PBl6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b6:e2:24:1b:a8:0e:1d:6c:f4:57:f4:b8:af:2a:ba:d1:a4:ae:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: Jul 28 22:34:46 2026 GMT Not After : Jul 29 23:31:46 2026 GMT Subject: CN=DB6D981A05D48F6BBD646702DC248CA5E4DDCDFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8e:10:91:ac:73:20:7b:89:c0:65:b2:ee:c9: 8c:ef:2a:24:e4:5a:42:7e:20:71:13:69:c6:f9:6c: ae:d6:8e:cb:88:02:f1:72:06:cb:24:55:f6:a1:d2: 24:9d:3a:4f:96:2d:63:19:c3:27:f7:79:3e:dd:b9: fa:27:a2:ca:44:c4:2f:d1:41:92:0b:57:fc:9d:c6: a0:6e:33:c3:1f:9f:89:55:4a:14:d4:14:9e:b2:cc: 8e:64:bf:50:7b:7a:ec:4e:fe:a2:ee:ac:7a:fd:fa: d2:65:67:4a:03:ff:f1:b6:f1:a8:b5:75:ef:c9:d6: 74:f9:51:c9:0d:ec:48:fa:96:b6:33:aa:c6:00:9e: b4:0b:44:f8:e1:bc:79:25:a7:5c:c8:e1:22:a4:c1: 56:be:9d:31:1c:67:28:23:ac:05:e6:0c:b2:bb:d9: b7:b7:ab:c2:a6:26:82:cd:17:68:91:48:45:01:c1: 5f:b4:4a:1c:81:43:98:d3:4f:de:84:ef:41:0b:56: dc:bd:22:4d:1f:6f:be:aa:84:b1:5c:e5:6f:f2:c7: e2:63:a4:1e:f5:ac:3b:df:d5:6f:45:58:f8:cd:01: ba:01:a0:a4:b3:14:b3:f8:b9:71:f2:bd:cd:44:f5: 0a:fe:a8:44:65:f0:6f:ce:b7:18:e1:33:d9:8f:0d: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6D:98:1A:05:D4:8F:6B:BD:64:67:02:DC:24:8C:A5:E4:DD:CD:FE X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:31:25:26:e0:e3:28:f7:55:1a:46:fc:8e:40:a4:f7:c7:c0: 20:58:d6:cf:8d:46:77:20:36:90:5a:4b:aa:b2:50:91:08:04: a3:96:f1:5d:97:49:17:da:60:28:c6:31:bc:d7:ca:b8:30:07: 7a:70:e6:10:d2:0c:18:0c:ae:63:99:1d:e7:c7:02:61:7c:f5: 7e:bf:87:45:57:2f:19:22:7d:1d:de:a4:d9:7e:11:e6:e2:eb: 92:9e:84:91:75:4e:a5:95:54:42:b2:dd:d2:21:38:51:c1:79: 2a:cc:60:75:30:cc:ff:1f:27:56:38:6f:91:84:7b:22:1f:14: 94:91:bc:18:28:63:cc:2e:79:a0:2b:02:42:88:09:bc:bd:47: 3f:b3:b5:ff:8c:b2:03:f2:23:e1:09:0b:4f:1a:d1:e6:9b:c0: 91:96:bb:0d:1a:b5:42:25:64:34:78:94:47:25:67:c1:5f:7a: 2a:43:c6:61:29:b6:98:b9:44:95:0b:bc:df:eb:05:70:38:d2: 7c:05:c2:e9:9f:11:a9:20:16:65:b4:cc:cd:d8:92:ce:aa:8e: 0f:de:ed:32:14:ff:9f:44:a8:bf:a2:8c:d3:3a:4d:a4:78:42: 82:bf:dc:7b:fb:a1:6c:dd:dd:cf:2b:cd:e8:89:7a:21:ae:44: 25:51:9d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7biJBuoDh1s9Ff0uK8qutGkrsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjA3MjgyMjM0NDZaFw0yNjA3MjkyMzMxNDZaMDMxMTAvBgNV BAMTKERCNkQ5ODFBMDVENDhGNkJCRDY0NjcwMkRDMjQ4Q0E1RTRERENERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjhCRrHMge4nAZbLuyYzvKiTk WkJ+IHETacb5bK7WjsuIAvFyBsskVfah0iSdOk+WLWMZwyf3eT7dufonospExC/R QZILV/ydxqBuM8Mfn4lVShTUFJ6yzI5kv1B7euxO/qLurHr9+tJlZ0oD//G28ai1 de/J1nT5UckN7Ej6lrYzqsYAnrQLRPjhvHklp1zI4SKkwVa+nTEcZygjrAXmDLK7 2be3q8KmJoLNF2iRSEUBwV+0ShyBQ5jTT96E70ELVty9Ik0fb76qhLFc5W/yx+Jj pB71rDvf1W9FWPjNAboBoKSzFLP4uXHyvc1E9Qr+qERl8G/OtxjhM9mPDblLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU222YGgXUj2u9ZGcC3CSMpeTdzf4wHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIxJSbg4yj3VRpG/I5ApPfHwCBY1s+NRncg NpBaS6qyUJEIBKOW8V2XSRfaYCjGMbzXyrgwB3pw5hDSDBgMrmOZHefHAmF89X6/ h0VXLxkifR3epNl+Eebi65KehJF1TqWVVEKy3dIhOFHBeSrMYHUwzP8fJ1Y4b5GE eyIfFJSRvBgoY8wueaArAkKICby9Rz+ztf+MsgPyI+EJC08a0eabwJGWuw0atUIl ZDR4lEclZ8FfeipDxmEptpi5RJULvN/rBXA40nwFwumfEakgFmW0zM3Yks6qjg/e 7TIU/59EqL+ijNM6TaR4QoK/3Hv7oWzd3c8rzeiJeiGuRCVRnRI= -----END CERTIFICATE-----Generated at Wed Jul 29 13:53:53 2026 by rpki-client