$ rpki-client -vvf rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft File: 041E78A186856FDDB2C0EC51D0234F297B0694FB.mft (raw, json) Hash identifier: n6w9si/X5WpgDGkTlpgGJowk4y19Q3B9RRbxw97VgOM= Subject key identifier: 8E:5B:EA:C0:57:0A:43:50:AC:9B:D9:E6:0E:EC:D8:2C:81:88:15:75 Authority key identifier: 04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB Certificate issuer: /CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Certificate serial: 75C3A6280F0C01989CAA87C5F7F837B850122785 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:02:26 +0000 Manifest this update: Tue 16 Jun 2026 14:57:26 +0000 Manifest next update: Wed 17 Jun 2026 16:12:26 +0000 Files and hashes: 1: 041E78A186856FDDB2C0EC51D0234F297B0694FB.crl (hash: T4CpEeoQiiyBQ37Hh6ToUUD2YR6LY1NTT6k1YNdoBPo=) 2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: jFMQqts/Xb/kIK8tDhB7Inx5c23uykyP37ClMnrRbng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c3:a6:28:0f:0c:01:98:9c:aa:87:c5:f7:f8:37:b8:50:12:27:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Validity Not Before: Jun 16 14:57:26 2026 GMT Not After : Jun 17 16:12:26 2026 GMT Subject: CN=8E5BEAC0570A4350AC9BD9E60EECD82C81881575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:8b:be:05:2c:df:ad:a1:cd:92:db:7c:82: d3:a1:1a:c0:5c:a5:91:61:4f:6b:ed:44:8b:b5:d8: b6:76:d1:25:59:0e:62:31:0b:03:74:0c:c3:20:a6: c9:a2:51:2e:ca:82:2f:23:fc:df:13:4f:d6:2f:8b: 48:8f:5d:bc:dd:d2:fd:67:c8:46:59:f3:ae:2d:1d: 1a:23:5f:9e:fd:8f:84:4b:12:f0:ff:8b:f7:3f:58: c8:dc:c1:d0:1c:a7:77:b6:66:86:43:60:d6:99:9e: 4f:6b:11:e6:30:e4:9a:8a:11:fa:45:59:20:b9:98: 9e:42:9a:55:6f:dc:3e:f3:22:69:e8:52:13:b1:75: 54:cc:b4:c4:c3:4a:9c:d2:3f:4e:35:67:a0:a7:01: a3:17:76:22:43:e4:15:79:ca:c4:1e:13:45:1c:52: 2f:4e:8b:35:e6:ae:fe:9d:42:10:66:cb:4a:8f:f2: 59:e9:ec:f6:04:99:60:da:b5:52:8f:b1:a0:50:d7: f1:35:0b:16:24:48:62:a3:cb:43:3d:5d:2d:ff:05: 6d:6d:eb:cf:34:d7:48:22:13:03:b3:da:47:35:6f: c4:b8:25:ed:d0:96:dc:05:1f:46:c5:5c:db:9d:58: 27:1b:65:2b:72:fc:f7:1c:56:7b:8d:2b:4b:ca:f6: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5B:EA:C0:57:0A:43:50:AC:9B:D9:E6:0E:EC:D8:2C:81:88:15:75 X509v3 Authority Key Identifier: keyid:04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b1:21:68:72:4d:bf:11:bc:cd:5f:c1:ad:92:28:94:c5:7c: 73:b7:46:cc:90:ee:a5:53:b3:38:28:59:8e:a5:b1:00:54:0a: d7:dd:04:b6:f7:4f:eb:ff:47:a4:63:fe:72:83:15:85:27:bf: f4:a2:6a:25:07:9d:3c:32:60:0e:b3:9e:27:fe:6e:a0:2c:1e: 67:ee:d5:af:2f:d5:90:6d:c7:47:57:f2:2f:11:99:0f:ff:68: 4f:a2:1b:6a:68:00:8c:3e:ec:07:10:b7:c3:04:0a:66:d1:d6: ec:b2:1f:73:bc:21:2c:4a:9f:09:f1:2b:50:f7:68:bd:92:27: b9:ec:c2:3c:c3:9a:3b:57:cb:f8:0a:b2:f0:fa:02:e9:48:61: 3c:a6:4a:d5:b4:b6:dc:77:4f:e9:38:18:9e:b9:d8:bd:8c:b2: b4:3e:63:6f:15:b3:41:92:d9:5e:a1:2a:42:29:4d:42:62:39: 61:ca:35:49:99:94:3d:a0:2f:73:3c:b5:7c:1e:7a:ab:f5:71: b4:0d:18:f9:61:54:bb:1b:e2:95:d7:eb:37:00:7b:51:f5:b6: e2:cf:4b:09:0e:ea:e2:38:60:08:44:b8:d2:22:82:ae:f7:b7: 5f:5c:73:a8:50:94:e2:81:12:90:a5:5c:65:f3:9b:d8:d9:64: 46:63:fd:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcOmKA8MAZicqofF9/g3uFASJ4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3 QjA2OTRGQjAeFw0yNjA2MTYxNDU3MjZaFw0yNjA2MTcxNjEyMjZaMDMxMTAvBgNV BAMTKDhFNUJFQUMwNTcwQTQzNTBBQzlCRDlFNjBFRUNEODJDODE4ODE1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwou+BSzfraHNktt8gtOhGsBc pZFhT2vtRIu12LZ20SVZDmIxCwN0DMMgpsmiUS7Kgi8j/N8TT9Yvi0iPXbzd0v1n yEZZ864tHRojX579j4RLEvD/i/c/WMjcwdAcp3e2ZoZDYNaZnk9rEeYw5JqKEfpF WSC5mJ5CmlVv3D7zImnoUhOxdVTMtMTDSpzSP041Z6CnAaMXdiJD5BV5ysQeE0Uc Ui9OizXmrv6dQhBmy0qP8lnp7PYEmWDatVKPsaBQ1/E1CxYkSGKjy0M9XS3/BW1t 688010giEwOz2kc1b8S4Je3QltwFH0bFXNudWCcbZSty/PccVnuNK0vK9tYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjlvqwFcKQ1Csm9nmDuzYLIGIFXUwHwYDVR0j BBgwFoAUBB54oYaFb92ywOxR0CNPKXsGlPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJhZWJmYjMtZTI5Yi00N2M0LWJkMjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4 Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3QjA2OTRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDFFNzhBMTg2ODU2RkREQjJDMEVDNTFEMDIzNEYyOTdCMDY5 NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRG Mjk3QjA2OTRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqxIWhyTb8RvM1fwa2SKJTFfHO3RsyQ7qVT szgoWY6lsQBUCtfdBLb3T+v/R6Rj/nKDFYUnv/SiaiUHnTwyYA6znif+bqAsHmfu 1a8v1ZBtx0dX8i8RmQ//aE+iG2poAIw+7AcQt8MECmbR1uyyH3O8ISxKnwnxK1D3 aL2SJ7nswjzDmjtXy/gKsvD6AulIYTymStW0ttx3T+k4GJ652L2MsrQ+Y28Vs0GS 2V6hKkIpTUJiOWHKNUmZlD2gL3M8tXweeqv1cbQNGPlhVLsb4pXX6zcAe1H1tuLP SwkO6uI4YAhEuNIigq73t19cc6hQlOKBEpClXGXzm9jZZEZj/Zk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:26 2026 by rpki-client