$ rpki-client -vvvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft File: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json) Hash identifier: Gq+0ApovbPJcends3nnE2IEpEPjA9Iej67eFvmfQecs= Subject key identifier: 91:B5:E5:5F:9F:AB:91:8F:BC:13:3F:F9:95:8D:F0:5A:DE:94:D8:32 Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A Certificate issuer: /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Certificate serial: 033FA01E35C5AED2ABCE87573807442B0049A686 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:21:56 +0000 Manifest this update: Tue 22 Sep 2026 00:16:56 +0000 Manifest next update: Wed 23 Sep 2026 02:24:56 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=) 2: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: rDpFM1sJmx4htBzT3XHtwMf0icq+ni4D8ytiprHGtvc=) 3: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=) 4: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3f:a0:1e:35:c5:ae:d2:ab:ce:87:57:38:07:44:2b:00:49:a6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Validity Not Before: Sep 22 00:16:56 2026 GMT Not After : Sep 23 02:24:56 2026 GMT Subject: CN=91B5E55F9FAB918FBC133FF9958DF05ADE94D832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:a6:0f:c2:88:72:f6:2c:5e:a3:61:9f:be: a5:0e:77:bb:dc:f8:56:60:0e:48:28:0d:78:2e:4d: 0b:c5:89:ea:42:21:a6:26:cf:ac:88:0c:15:98:ac: cd:ec:c5:e9:cb:1d:78:99:64:71:2a:83:aa:ac:0a: fd:73:b5:19:b8:72:aa:91:87:0b:80:9d:00:23:26: b3:97:95:cf:cf:70:4d:ba:62:2a:5f:96:f7:cf:1e: e1:9b:69:79:49:3a:ee:5c:42:0c:a1:34:e2:46:a9: 27:5f:a6:43:f9:fa:aa:8f:1e:27:04:7f:e8:df:34: d3:6d:50:91:75:cc:fb:e1:95:1a:1e:30:4d:75:9a: 11:46:e4:e1:49:ba:ab:2d:ff:9f:b4:37:da:c1:59: 7e:2b:00:64:48:75:5a:88:a4:81:ab:24:09:aa:f8: f5:72:23:00:26:71:ea:35:f7:fb:ea:be:2c:a9:1e: 8f:c1:6b:63:82:03:46:94:a5:0f:2f:da:62:1b:a8: c0:c8:51:e5:83:8b:b0:07:c1:c5:ee:5b:1e:84:9f: e9:51:39:b2:16:78:f9:e2:7a:98:90:f8:96:df:1e: 33:8b:ba:0a:fa:d4:23:bf:09:8f:a5:03:94:40:af: 15:14:12:45:73:70:5d:81:7f:e2:0a:9c:b9:8a:d7: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:E5:5F:9F:AB:91:8F:BC:13:3F:F9:95:8D:F0:5A:DE:94:D8:32 X509v3 Authority Key Identifier: keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:79:80:eb:b6:30:2b:a8:22:23:58:3b:db:f5:39:ec:83:9f: ed:cd:b5:6d:d8:ee:6a:6f:4d:f6:a7:31:be:46:13:c0:3a:13: cd:fa:77:9e:13:35:c5:48:e4:50:21:05:a9:46:ec:f3:51:bc: ba:f1:e6:6f:5c:0a:f1:05:17:cc:ec:96:85:3b:d9:05:1d:0a: 0d:7f:ea:d0:8f:3f:ba:b7:6c:04:64:03:4c:d1:cb:82:4d:b7: 7d:40:3c:64:6c:ae:51:62:81:08:08:a7:69:11:89:49:3e:eb: 4c:65:d5:85:2d:f5:9a:76:2f:d5:c2:2e:03:25:12:8c:ed:f4: d3:ba:5a:fd:1e:7b:f6:18:01:f9:dc:d6:88:5c:65:29:f8:28: f1:2b:44:8b:f3:76:3a:85:a7:da:a4:35:b2:eb:15:46:81:69: 01:da:1c:c0:68:e1:ca:7d:47:bb:1d:4c:53:6e:d6:21:b6:ab: 1c:92:d2:76:e0:c0:80:85:72:1f:42:6f:3a:43:e6:f5:26:bf: dd:5c:03:7f:e3:7b:4b:98:1d:50:f9:fe:0a:a1:c4:2c:62:62: ad:7a:aa:d4:63:3f:2e:af:2b:2e:bd:d5:b2:f0:16:b4:8e:d1: 52:1b:f1:05:61:95:b8:59:c9:af:39:f5:4c:e4:45:5c:d8:4f: d9:14:9d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAz+gHjXFrtKrzodXOAdEKwBJpoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0REZB MUJBQjQzQTAeFw0yNjA5MjIwMDE2NTZaFw0yNjA5MjMwMjI0NTZaMDMxMTAvBgNV BAMTKDkxQjVFNTVGOUZBQjkxOEZCQzEzM0ZGOTk1OERGMDVBREU5NEQ4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiKYPwohy9ixeo2GfvqUOd7vc +FZgDkgoDXguTQvFiepCIaYmz6yIDBWYrM3sxenLHXiZZHEqg6qsCv1ztRm4cqqR hwuAnQAjJrOXlc/PcE26YipflvfPHuGbaXlJOu5cQgyhNOJGqSdfpkP5+qqPHicE f+jfNNNtUJF1zPvhlRoeME11mhFG5OFJuqst/5+0N9rBWX4rAGRIdVqIpIGrJAmq +PVyIwAmceo19/vqviypHo/Ba2OCA0aUpQ8v2mIbqMDIUeWDi7AHwcXuWx6En+lR ObIWePniepiQ+JbfHjOLugr61CO/CY+lA5RArxUUEkVzcF2Bf+IKnLmK166NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkbXlX5+rkY+8Ez/5lY3wWt6U2DIwHwYDVR0j BBgwFoAUQcCm9zc0/7DH2ZdwGmK036G6tDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc1Mjc3ZTgtN2QwZi00MTg0LTljMjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2Rjcz NzM0RkZCMEM3RDk5NzcwMUE2MkI0REZBMUJBQjQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMwQTZGNzM3MzRGRkIwQzdEOTk3NzAxQTYyQjRERkExQkFC NDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0 REZBMUJBQjQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFp5gOu2MCuoIiNYO9v1OeyDn+3NtW3Y7mpv TfanMb5GE8A6E836d54TNcVI5FAhBalG7PNRvLrx5m9cCvEFF8zsloU72QUdCg1/ 6tCPP7q3bARkA0zRy4JNt31APGRsrlFigQgIp2kRiUk+60xl1YUt9Zp2L9XCLgMl Eozt9NO6Wv0ee/YYAfnc1ohcZSn4KPErRIvzdjqFp9qkNbLrFUaBaQHaHMBo4cp9 R7sdTFNu1iG2qxyS0nbgwICFch9CbzpD5vUmv91cA3/je0uYHVD5/gqhxCxiYq16 qtRjPy6vKy691bLwFrSO0VIb8QVhlbhZya859UzkRVzYT9kUnVU= -----END CERTIFICATE-----Generated at Tue Sep 22 03:38:08 2026 by rpki-client