$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft File: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft (raw, json) Hash identifier: KkfAyxt+EDyNzrFUqtS64jM1M1oXI2iXtivTu/YBdg0= Subject key identifier: 71:A4:33:F2:D1:A3:C3:14:79:D8:90:D5:C9:0F:96:2A:20:85:9F:DD Authority key identifier: 41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED Certificate issuer: /CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Certificate serial: 744CF913ED2FD2486C88B8085C3D5FBD09D7A817 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft Manifest number: BD Signing time: Sun 20 Sep 2026 16:57:51 +0000 Manifest this update: Sun 20 Sep 2026 16:52:51 +0000 Manifest next update: Mon 21 Sep 2026 20:32:51 +0000 Files and hashes: 1: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: AheQBKSQ2I3wH55R9fGq5yq1Y0JimW9uyTq22nxAO5s=) 2: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl (hash: SAPsbVT/75onKskvIwmSkcG1Dy1VzhRlmS97YdtTQ7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4c:f9:13:ed:2f:d2:48:6c:88:b8:08:5c:3d:5f:bd:09:d7:a8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Validity Not Before: Sep 20 16:52:51 2026 GMT Not After : Sep 21 20:32:51 2026 GMT Subject: CN=71A433F2D1A3C31479D890D5C90F962A20859FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:4f:a2:46:41:dd:80:01:d0:be:71:21:87: 14:97:ae:e0:b2:ad:43:b6:8c:34:25:10:bb:05:58: 7b:04:87:d0:15:fa:0d:df:33:2f:64:3f:6c:66:09: 03:dd:b4:3d:3f:d2:74:44:2d:2c:33:23:e0:5c:e9: b9:62:64:04:b8:e2:31:1d:4a:33:8e:71:8f:a0:5b: 18:26:8c:92:97:aa:ef:25:7b:54:4a:b7:26:25:4b: a6:67:da:5c:23:e5:98:c0:c0:50:d7:94:31:0d:be: 6d:7a:5c:13:f6:4e:90:53:b7:26:91:f2:7f:9c:8a: 82:8b:77:c3:d8:6c:91:69:53:5d:db:0b:a0:57:c4: 30:b0:42:21:ed:1f:7a:77:fa:85:e6:7c:67:ea:a0: cd:f1:94:8c:34:18:76:9a:a9:ca:86:31:24:53:b1: e2:68:46:8c:b2:ff:36:bc:b5:c4:2f:9c:6d:68:e3: 94:a4:fb:20:bf:ab:4e:ed:e1:83:15:23:b1:9b:ff: 9e:e1:f2:9e:11:e8:20:1a:38:d9:b6:93:9b:e5:4c: ec:9f:db:44:00:e2:4e:cb:2d:3f:41:04:25:8e:2c: e1:c5:a7:58:8a:42:98:37:8b:18:40:be:01:d9:0c: 3d:fe:df:05:1a:fe:7f:81:73:ee:05:79:b2:2a:66: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:33:F2:D1:A3:C3:14:79:D8:90:D5:C9:0F:96:2A:20:85:9F:DD X509v3 Authority Key Identifier: keyid:41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3f:75:5f:1a:bf:bc:78:c6:d3:8a:5d:8b:d8:09:f4:21:94: 56:5b:2a:aa:76:bc:c9:d4:d9:b2:ff:3b:be:9c:bc:d3:9e:9f: 73:37:31:98:11:52:6b:4a:87:40:67:76:51:b2:bb:52:54:02: db:ad:af:c8:98:91:58:af:0d:b1:bf:57:fd:7c:6a:f0:7e:58: 25:53:cb:39:d8:2c:c3:c7:e2:b9:02:af:aa:75:6a:16:5f:2d: 8e:fb:99:9f:7a:2b:2a:a2:94:d4:36:12:33:2b:3f:15:5b:79: 22:88:a3:db:2a:4b:ee:5e:bf:29:58:a4:49:cc:b2:96:f5:e0: 2e:02:47:3b:6b:e4:cc:cd:e4:1b:24:68:e5:1a:b9:50:8b:59: 8f:0e:0f:86:fb:ba:21:f6:2b:53:ca:a6:0f:76:f3:78:9b:c1: 6c:2e:f6:6e:15:0f:44:e7:24:f4:47:ea:b9:f2:41:1e:16:99: 6b:3a:8f:61:ef:c6:39:5b:38:f3:f2:7d:26:8a:b8:c5:e5:35: 37:e4:59:65:d7:1d:68:e6:d6:ba:05:54:69:a3:e6:52:3f:04: d6:c9:64:72:2e:74:dd:0f:2a:4d:97:25:fb:11:75:e2:c2:8b: c4:38:bf:5e:a4:bd:03:54:fa:67:9a:ea:b6:70:f1:7c:82:c3: bd:e6:69:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEz5E+0v0khsiLgIXD1fvQnXqBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNCQTk1 NjBEMzhFRDAeFw0yNjA5MjAxNjUyNTFaFw0yNjA5MjEyMDMyNTFaMDMxMTAvBgNV BAMTKDcxQTQzM0YyRDFBM0MzMTQ3OUQ4OTBENUM5MEY5NjJBMjA4NTlGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElE+iRkHdgAHQvnEhhxSXruCy rUO2jDQlELsFWHsEh9AV+g3fMy9kP2xmCQPdtD0/0nRELSwzI+Bc6bliZAS44jEd SjOOcY+gWxgmjJKXqu8le1RKtyYlS6Zn2lwj5ZjAwFDXlDENvm16XBP2TpBTtyaR 8n+cioKLd8PYbJFpU13bC6BXxDCwQiHtH3p3+oXmfGfqoM3xlIw0GHaaqcqGMSRT seJoRoyy/za8tcQvnG1o45Sk+yC/q07t4YMVI7Gb/57h8p4R6CAaONm2k5vlTOyf 20QA4k7LLT9BBCWOLOHFp1iKQpg3ixhAvgHZDD3+3wUa/n+Bc+4FebIqZoJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcaQz8tGjwxR52JDVyQ+WKiCFn90wHwYDVR0j BBgwFoAUQf5ngj9TWO89X5tPBPvLqVYNOO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlYzJjYjYtMzVhZC00MTAxLTk4MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIz RjUzNThFRjNENUY5QjRGMDRGQkNCQTk1NjBEMzhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUZFNjc4MjNGNTM1OEVGM0Q1RjlCNEYwNEZCQ0JBOTU2MEQz OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNC QTk1NjBEMzhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0/dV8av7x4xtOKXYvYCfQhlFZbKqp2vMnU 2bL/O76cvNOen3M3MZgRUmtKh0BndlGyu1JUAtutr8iYkVivDbG/V/18avB+WCVT yznYLMPH4rkCr6p1ahZfLY77mZ96KyqilNQ2EjMrPxVbeSKIo9sqS+5evylYpEnM spb14C4CRztr5MzN5BskaOUauVCLWY8OD4b7uiH2K1PKpg9283ibwWwu9m4VD0Tn JPRH6rnyQR4WmWs6j2HvxjlbOPPyfSaKuMXlNTfkWWXXHWjm1roFVGmj5lI/BNbJ ZHIudN0PKk2XJfsRdeLCi8Q4v16kvQNU+mea6rZw8XyCw73maQY= -----END CERTIFICATE-----Generated at Sun Sep 20 23:25:25 2026 by rpki-client