$ rpki-client -vvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft File: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json) Hash identifier: xtp0phF8HqEj/QLPmi4YP0MKfayQC7dnZW82Pcz2lWs= Subject key identifier: 76:E2:AA:62:A3:14:B5:16:6A:57:4B:53:3F:26:0A:36:B5:18:6F:64 Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A Certificate issuer: /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Certificate serial: 5998F3B69A30F5ABB69C72B4B4D642E8C5AD8A02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 16:32:10 +0000 Manifest this update: Tue 28 Jul 2026 16:27:10 +0000 Manifest next update: Wed 29 Jul 2026 19:41:10 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=) 2: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: 38xji8ktPs4HaK0BL9m2YvS4nnUh584czYam6CiQjp8=) 3: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=) 4: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:98:f3:b6:9a:30:f5:ab:b6:9c:72:b4:b4:d6:42:e8:c5:ad:8a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Validity Not Before: Jul 28 16:27:10 2026 GMT Not After : Jul 29 19:41:10 2026 GMT Subject: CN=76E2AA62A314B5166A574B533F260A36B5186F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:37:47:3a:bf:14:27:bf:c0:25:bc:aa:4e: 08:ec:56:db:f3:e0:07:1f:1a:90:95:29:d2:39:1f: c1:45:53:fb:cf:76:92:e6:e8:08:62:8e:c0:ad:a6: 43:29:fb:db:ee:87:b4:30:a7:e6:a8:b8:a0:68:40: f1:4c:b5:05:bd:9f:fa:98:4d:cd:95:e3:07:73:c5: 06:7e:87:dc:a4:ca:33:2d:02:16:b9:d8:f0:f3:bc: 9f:0f:70:ac:9b:8c:61:a8:03:f2:04:72:ce:ff:47: b5:fc:fc:9d:c6:4b:8f:8a:c5:b8:85:e6:43:0e:59: d2:69:d5:11:f9:ec:f7:7e:ce:1e:f7:4e:5a:b5:49: 8a:20:4e:36:07:bd:9d:dc:29:6d:87:42:1d:bc:96: 0f:fd:b8:8c:7c:78:52:72:5d:34:e7:b9:45:0a:e5: 16:8e:fb:8f:f1:ec:41:53:56:ba:e6:1b:64:65:a3: 5f:6c:e7:78:bc:e9:b1:0b:dc:c7:28:0b:0b:17:3a: 1a:9f:dc:c1:d7:12:5c:ad:ab:ee:81:a0:0c:7b:64: d4:2c:f9:4c:05:fc:8c:cb:f6:29:b4:28:aa:a6:66: 0b:9e:f1:96:1f:b2:97:c4:57:2f:8e:a2:8b:22:8d: 3a:07:59:84:f8:d5:26:3b:b3:a5:f7:82:b8:0b:c1: 3f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:AA:62:A3:14:B5:16:6A:57:4B:53:3F:26:0A:36:B5:18:6F:64 X509v3 Authority Key Identifier: keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1c:c9:c6:08:0b:14:f3:28:4a:28:52:9e:45:0a:63:69:97: 0c:50:b1:36:84:fa:81:c8:7f:46:5a:19:0f:46:91:cc:38:17: eb:b1:32:52:c7:3f:db:83:ad:01:b8:0a:5e:64:12:53:41:7a: 69:72:de:e8:05:ce:46:ec:49:a1:3c:4b:57:19:9d:3f:42:78: 78:9f:18:df:78:03:b5:41:9f:66:e5:3c:02:50:79:f8:07:7c: e8:00:c6:73:b9:2f:0b:5a:03:ad:95:98:fb:a6:f3:f7:cc:5a: 96:5f:93:b9:f3:d0:ea:18:73:c8:71:82:5f:45:81:1f:8b:07: 70:70:14:f3:61:66:1c:65:ac:16:bf:73:c3:27:ae:a1:ca:39: e0:23:5a:cd:0b:6f:61:56:42:14:14:dd:2e:47:51:a7:aa:12: 44:a2:7e:90:90:8e:ff:79:3a:0e:22:8c:00:05:20:f9:03:a4: ae:c1:bb:d7:72:38:05:49:e4:82:0e:b5:4d:4e:fc:e2:48:d7: 47:77:3c:9a:02:c5:ee:df:f7:d7:03:c0:65:58:a8:03:0c:03: b1:1c:93:f8:bb:0e:c1:d4:3d:92:f7:88:7e:0d:b5:55:5b:60: 1d:93:61:d0:90:74:ec:20:40:c3:21:a3:14:df:8c:f4:2a:2e: b9:93:3b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZjztpow9au2nHK0tNZC6MWtigIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0REZB MUJBQjQzQTAeFw0yNjA3MjgxNjI3MTBaFw0yNjA3MjkxOTQxMTBaMDMxMTAvBgNV BAMTKDc2RTJBQTYyQTMxNEI1MTY2QTU3NEI1MzNGMjYwQTM2QjUxODZGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4jdHOr8UJ7/AJbyqTgjsVtvz 4AcfGpCVKdI5H8FFU/vPdpLm6AhijsCtpkMp+9vuh7Qwp+aouKBoQPFMtQW9n/qY Tc2V4wdzxQZ+h9ykyjMtAha52PDzvJ8PcKybjGGoA/IEcs7/R7X8/J3GS4+KxbiF 5kMOWdJp1RH57Pd+zh73Tlq1SYogTjYHvZ3cKW2HQh28lg/9uIx8eFJyXTTnuUUK 5RaO+4/x7EFTVrrmG2Rlo19s53i86bEL3McoCwsXOhqf3MHXElytq+6BoAx7ZNQs +UwF/IzL9im0KKqmZgue8ZYfspfEVy+OoosijToHWYT41SY7s6X3grgLwT9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUduKqYqMUtRZqV0tTPyYKNrUYb2QwHwYDVR0j BBgwFoAUQcCm9zc0/7DH2ZdwGmK036G6tDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc1Mjc3ZTgtN2QwZi00MTg0LTljMjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2Rjcz NzM0RkZCMEM3RDk5NzcwMUE2MkI0REZBMUJBQjQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMwQTZGNzM3MzRGRkIwQzdEOTk3NzAxQTYyQjRERkExQkFC NDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0 REZBMUJBQjQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEcycYICxTzKEooUp5FCmNplwxQsTaE+oHI f0ZaGQ9Gkcw4F+uxMlLHP9uDrQG4Cl5kElNBemly3ugFzkbsSaE8S1cZnT9CeHif GN94A7VBn2blPAJQefgHfOgAxnO5LwtaA62VmPum8/fMWpZfk7nz0OoYc8hxgl9F gR+LB3BwFPNhZhxlrBa/c8MnrqHKOeAjWs0Lb2FWQhQU3S5HUaeqEkSifpCQjv95 Og4ijAAFIPkDpK7Bu9dyOAVJ5IIOtU1O/OJI10d3PJoCxe7f99cDwGVYqAMMA7Ec k/i7DsHUPZL3iH4NtVVbYB2TYdCQdOwgQMMhoxTfjPQqLrmTO14= -----END CERTIFICATE-----Generated at Wed Jul 29 12:25:54 2026 by rpki-client