$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft File: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft (raw, json) Hash identifier: QrX16butB+eHrGjnB9oh5aOokYABkaFSdri6ENtisYk= Subject key identifier: 2E:F6:03:4E:F3:C1:D4:57:3C:FB:78:75:C8:D2:D7:F6:25:26:07:35 Authority key identifier: 41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED Certificate issuer: /CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Certificate serial: 34112CCDBE59B3BEBE95E44877FDF4E58589D3A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft Manifest number: FE Signing time: Mon 09 Nov 2026 06:54:14 +0000 Manifest this update: Mon 09 Nov 2026 06:49:14 +0000 Manifest next update: Tue 10 Nov 2026 09:50:14 +0000 Files and hashes: 1: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: AheQBKSQ2I3wH55R9fGq5yq1Y0JimW9uyTq22nxAO5s=) 2: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl (hash: h+BSC64oj1NXf844lHyt2GFh34Lomby8orsie/KMvEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:11:2c:cd:be:59:b3:be:be:95:e4:48:77:fd:f4:e5:85:89:d3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Validity Not Before: Nov 9 06:49:14 2026 GMT Not After : Nov 10 09:50:14 2026 GMT Subject: CN=2EF6034EF3C1D4573CFB7875C8D2D7F625260735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:34:e0:ba:9d:8d:b8:cb:ee:3d:83:c8:df: 8e:17:41:22:dc:ad:54:9c:3e:d4:63:9b:70:4c:16: 0b:a7:f8:36:88:84:5d:4a:87:72:09:d5:bc:07:c1: 86:05:1f:7b:3b:ac:7f:b6:cf:9f:7a:49:e9:9b:11: 76:de:af:5e:c3:79:76:d3:71:06:f7:1f:5d:11:cf: 61:21:f2:90:f4:fb:00:8c:48:6c:a5:72:78:87:d3: 2c:35:05:f1:92:a8:ca:eb:c7:16:d7:a7:4b:11:ac: 5c:a9:2b:e4:08:a6:f7:94:f8:40:c9:dc:33:82:fb: aa:02:4d:e4:69:5d:64:99:00:ee:75:28:38:e0:b6: 08:eb:2b:cb:f0:c5:40:df:46:45:62:fa:68:6b:65: 5d:11:e9:c5:05:23:69:20:ee:d8:bc:3c:83:55:a9: 51:b7:40:76:10:07:be:5a:5d:a0:5d:cc:af:5b:54: 94:4f:e6:92:62:86:cf:64:66:38:0d:e1:78:a1:a1: 0b:be:45:01:8d:e1:e2:ac:64:23:e7:6c:44:e3:c2: e9:2f:1b:6a:25:7d:be:03:25:a2:b6:c2:24:e2:46: da:c3:4e:3b:6c:fc:78:50:ce:31:76:9e:14:e2:b8: 8e:3f:7d:2c:6a:69:fc:36:b4:7d:41:91:33:24:b6: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F6:03:4E:F3:C1:D4:57:3C:FB:78:75:C8:D2:D7:F6:25:26:07:35 X509v3 Authority Key Identifier: keyid:41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c2:bf:14:e2:74:4b:c9:70:80:25:ca:ca:63:32:4c:b2:bb: ed:35:63:4a:f5:1d:ea:7f:77:3a:45:5a:1e:4d:2f:4b:01:7e: 70:77:e7:ef:2e:06:4a:94:03:09:ec:6f:3f:05:c5:dc:80:9e: 96:19:f2:4b:ab:0f:bf:e5:9e:ca:ad:95:32:87:4b:16:5b:8e: 1e:6c:2f:78:09:c6:bb:e8:cc:b3:35:70:08:a1:57:33:fc:7c: bd:b2:2d:d6:c4:e9:6b:0b:16:04:16:c6:80:c3:a7:26:1f:84: 63:cc:17:82:a5:af:73:3a:d7:c5:80:a9:74:c4:3c:c3:8e:c0: c7:ef:6d:46:66:bb:1f:9c:5d:bc:30:f9:93:72:a9:d8:d8:cf: 26:46:2d:0c:e1:a8:76:40:08:f3:0f:39:39:ad:a1:b4:a7:3b: ba:dc:9c:47:02:b0:ca:12:05:08:10:de:75:82:bb:3b:ed:80: 7c:dd:5c:8d:d8:f3:15:cc:c1:69:f3:dd:6f:9f:1e:7f:79:c3: 90:4c:cb:e3:ee:c0:c5:b9:2a:09:f3:45:c8:1a:a1:f2:92:1e: 94:36:0d:5f:bc:5a:fc:7d:e2:fe:4d:20:23:a7:14:b9:44:05: 2c:bd:f8:85:37:9b:7d:41:f2:3e:b4:1f:3e:5a:4a:2a:be:e0: ec:d0:84:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBEszb5Zs76+leRId/305YWJ06QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNCQTk1 NjBEMzhFRDAeFw0yNjExMDkwNjQ5MTRaFw0yNjExMTAwOTUwMTRaMDMxMTAvBgNV BAMTKDJFRjYwMzRFRjNDMUQ0NTczQ0ZCNzg3NUM4RDJEN0Y2MjUyNjA3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzjTgup2NuMvuPYPI344XQSLc rVScPtRjm3BMFgun+DaIhF1Kh3IJ1bwHwYYFH3s7rH+2z596SembEXber17DeXbT cQb3H10Rz2Eh8pD0+wCMSGylcniH0yw1BfGSqMrrxxbXp0sRrFypK+QIpveU+EDJ 3DOC+6oCTeRpXWSZAO51KDjgtgjrK8vwxUDfRkVi+mhrZV0R6cUFI2kg7ti8PINV qVG3QHYQB75aXaBdzK9bVJRP5pJihs9kZjgN4XihoQu+RQGN4eKsZCPnbETjwukv G2olfb4DJaK2wiTiRtrDTjts/HhQzjF2nhTiuI4/fSxqafw2tH1BkTMktsXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvYDTvPB1Fc8+3h1yNLX9iUmBzUwHwYDVR0j BBgwFoAUQf5ngj9TWO89X5tPBPvLqVYNOO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlYzJjYjYtMzVhZC00MTAxLTk4MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIz RjUzNThFRjNENUY5QjRGMDRGQkNCQTk1NjBEMzhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUZFNjc4MjNGNTM1OEVGM0Q1RjlCNEYwNEZCQ0JBOTU2MEQz OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNC QTk1NjBEMzhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvCvxTidEvJcIAlyspjMkyyu+01Y0r1Hep/ dzpFWh5NL0sBfnB35+8uBkqUAwnsbz8FxdyAnpYZ8kurD7/lnsqtlTKHSxZbjh5s L3gJxrvozLM1cAihVzP8fL2yLdbE6WsLFgQWxoDDpyYfhGPMF4Klr3M618WAqXTE PMOOwMfvbUZmux+cXbww+ZNyqdjYzyZGLQzhqHZACPMPOTmtobSnO7rcnEcCsMoS BQgQ3nWCuzvtgHzdXI3Y8xXMwWnz3W+fHn95w5BMy+PuwMW5KgnzRcgaofKSHpQ2 DV+8Wvx94v5NICOnFLlEBSy9+IU3m31B8j60Hz5aSiq+4OzQhB4= -----END CERTIFICATE-----Generated at Tue Nov 10 04:04:44 2026 by rpki-client