$ rpki-client -vvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft File: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json) Hash identifier: nLYvfy7wa86JDap7Hl4Q1On2F7cIyvoCvaY1ucOZTX4= Subject key identifier: 99:89:67:5E:47:12:7E:58:91:81:9F:66:35:72:FE:64:AD:49:D9:6C Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A Certificate issuer: /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Certificate serial: 7748A159D0A78862C2DFABE88D84A27AE11FC2A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 18:26:52 +0000 Manifest this update: Sat 13 Jun 2026 18:21:52 +0000 Manifest next update: Sun 14 Jun 2026 19:05:52 +0000 Files and hashes: 1: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: IHK0BBQCA1kKIQHgiyidx/me7aiTCN4u3YsxaKfSIg4=) 2: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=) 3: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=) 4: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:48:a1:59:d0:a7:88:62:c2:df:ab:e8:8d:84:a2:7a:e1:1f:c2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Validity Not Before: Jun 13 18:21:52 2026 GMT Not After : Jun 14 19:05:52 2026 GMT Subject: CN=9989675E47127E5891819F663572FE64AD49D96C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:4e:25:c9:2c:e6:0f:51:69:59:e3:8c:ca: 9c:d7:56:19:dc:10:7a:d7:b6:49:1d:cf:62:90:da: bb:b2:cb:3c:7e:8a:bb:9c:2d:b7:5c:98:12:c5:c2: 8b:ef:01:56:8f:de:ff:6e:ad:56:42:de:20:04:77: c0:b1:44:52:f7:4d:69:20:d8:f5:7c:5b:ec:66:43: a1:cf:02:a0:06:06:b9:17:cd:bf:74:89:98:db:11: 50:55:f0:36:f3:35:61:b7:c6:57:d5:01:28:0b:67: 12:f2:a8:50:2e:1a:2c:3f:d3:94:76:8f:fa:dd:3d: 01:ba:84:9a:88:71:f5:86:e9:c5:73:2d:e0:40:b1: c9:58:cd:52:60:b6:77:ef:9c:7b:87:b0:ed:4e:1e: 75:0f:a8:65:59:14:28:44:04:9d:3f:5f:a7:bb:29: cb:1d:ae:15:56:2c:5e:33:37:c3:8f:e0:a6:53:b1: 9c:cb:8b:12:b1:bd:c0:a6:19:7d:da:de:5f:32:7b: 1a:0b:80:7e:a4:bf:04:93:6e:95:b2:44:da:85:06: 8a:89:a5:ee:c3:46:73:50:54:b2:80:ed:cb:68:c4: e5:e9:22:e6:0b:20:15:be:88:5e:3c:b7:b1:6c:7d: 37:62:48:33:6c:4e:90:17:a8:5a:d9:a5:7d:02:e8: 6d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:89:67:5E:47:12:7E:58:91:81:9F:66:35:72:FE:64:AD:49:D9:6C X509v3 Authority Key Identifier: keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9e:ef:b2:77:d0:8f:7d:04:ff:3c:b6:de:59:bc:2c:39:ae: 4e:6e:12:39:58:9a:c4:74:f1:42:76:55:ef:88:0d:28:73:de: 2a:37:8f:04:9d:21:ee:e4:70:be:46:6f:33:9a:4a:fb:bb:41: d2:7a:e5:85:42:d9:03:f8:64:69:3f:9b:b9:1d:a3:a2:33:30: 21:7e:a5:c8:f1:d7:05:37:9d:86:7e:c8:bd:05:b2:37:2d:3d: 6f:2b:34:9c:02:50:0b:51:64:0d:38:58:30:60:b9:13:55:91: 02:98:8e:d1:a9:84:f4:c8:ec:89:07:d2:3c:95:27:7d:03:cb: b8:fe:98:66:3b:38:f4:34:bb:81:1f:4b:97:f4:5d:30:20:42: 1a:19:a2:b6:4c:e5:f7:4f:73:ad:4d:8c:eb:b2:09:32:31:bc: fd:2f:48:ba:42:af:87:46:ea:b0:40:a4:ca:9d:15:76:5c:c9: cd:40:d8:bb:c4:aa:c3:95:9c:c9:50:a1:87:2b:36:fb:09:73: b3:33:65:00:42:72:ba:d6:9e:7c:1f:45:50:93:c1:44:2b:cb: 94:ee:46:4b:8e:82:ef:f5:21:3a:a1:e1:f8:3c:fc:60:3e:41: 26:c7:7b:b2:ec:8a:53:d0:e5:6f:0a:89:1a:a2:cb:41:0a:ed: d8:55:4e:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0ihWdCniGLC36vojYSieuEfwqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0REZB MUJBQjQzQTAeFw0yNjA2MTMxODIxNTJaFw0yNjA2MTQxOTA1NTJaMDMxMTAvBgNV BAMTKDk5ODk2NzVFNDcxMjdFNTg5MTgxOUY2NjM1NzJGRTY0QUQ0OUQ5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjE4lySzmD1FpWeOMypzXVhnc EHrXtkkdz2KQ2ruyyzx+irucLbdcmBLFwovvAVaP3v9urVZC3iAEd8CxRFL3TWkg 2PV8W+xmQ6HPAqAGBrkXzb90iZjbEVBV8DbzNWG3xlfVASgLZxLyqFAuGiw/05R2 j/rdPQG6hJqIcfWG6cVzLeBAsclYzVJgtnfvnHuHsO1OHnUPqGVZFChEBJ0/X6e7 KcsdrhVWLF4zN8OP4KZTsZzLixKxvcCmGX3a3l8yexoLgH6kvwSTbpWyRNqFBoqJ pe7DRnNQVLKA7ctoxOXpIuYLIBW+iF48t7FsfTdiSDNsTpAXqFrZpX0C6G13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmYlnXkcSfliRgZ9mNXL+ZK1J2WwwHwYDVR0j BBgwFoAUQcCm9zc0/7DH2ZdwGmK036G6tDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc1Mjc3ZTgtN2QwZi00MTg0LTljMjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2Rjcz NzM0RkZCMEM3RDk5NzcwMUE2MkI0REZBMUJBQjQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMwQTZGNzM3MzRGRkIwQzdEOTk3NzAxQTYyQjRERkExQkFC NDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0 REZBMUJBQjQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAee77J30I99BP88tt5ZvCw5rk5uEjlYmsR0 8UJ2Ve+IDShz3io3jwSdIe7kcL5GbzOaSvu7QdJ65YVC2QP4ZGk/m7kdo6IzMCF+ pcjx1wU3nYZ+yL0FsjctPW8rNJwCUAtRZA04WDBguRNVkQKYjtGphPTI7IkH0jyV J30Dy7j+mGY7OPQ0u4EfS5f0XTAgQhoZorZM5fdPc61NjOuyCTIxvP0vSLpCr4dG 6rBApMqdFXZcyc1A2LvEqsOVnMlQoYcrNvsJc7MzZQBCcrrWnnwfRVCTwUQry5Tu RkuOgu/1ITqh4fg8/GA+QSbHe7LsilPQ5W8KiRqiy0EK7dhVTjQ= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:42 2026 by rpki-client