
$ rpki-client -vvf rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
File: 41E81C122CFE1947633AAA5A517B7923E1A78966.mft (raw, json)
Hash identifier: PIpUH871sU+qiHVaNkul5ySFtdSGYjQizA2YhZAlaMk=
Subject key identifier: 18:DB:E6:09:DA:E9:BF:D5:AA:50:EB:45:FA:89:01:9E:8D:05:C7:13
Authority key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
Certificate issuer: /CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Certificate serial: 742C3EF3499EE10BE09A1C86167B32B5694D9BA6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:06:53 +0000
Manifest this update: Tue 12 May 2026 17:01:53 +0000
Manifest next update: Wed 13 May 2026 18:44:53 +0000
Files and hashes: 1: 41E81C122CFE1947633AAA5A517B7923E1A78966.crl (hash: riVUCixhK4MGqdjz0MQll1PQpXwSlx/k4Xf39kSOSzQ=)
2: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: h8pC3O5UrBoUEC6ODx88QnSAsLryVqTwUJG85o9TxOg=)
3: 3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa (hash: HGoEshpetOpXhNr6v4Rw31C6lvgZLfHje+0mfpy78fU=)
4: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: lJflPziRVDWpYcvwsJpkfkZb2ca8llttOjutgGe2gos=)
5: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: ZuDxVEAObBxaFOm5uYmRAI9eGu8SevvOVjp9rp2cMH8=)
6: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: fMmCbOIL8nMLpF5EKmFyyb/z/cATeDIy9MshfGEYHeY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2c:3e:f3:49:9e:e1:0b:e0:9a:1c:86:16:7b:32:b5:69:4d:9b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Validity
Not Before: May 12 17:01:53 2026 GMT
Not After : May 13 18:44:53 2026 GMT
Subject: CN=18DBE609DAE9BFD5AA50EB45FA89019E8D05C713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:98:4b:8c:4b:fd:1f:a2:1e:63:45:0f:94:10:
fe:b8:3c:c8:0b:22:5f:5b:44:d4:55:fe:16:46:de:
cb:97:09:ce:5e:bd:be:8a:e9:5f:47:25:90:59:e4:
54:b4:20:54:cf:e1:9a:9e:37:5c:68:7a:4b:10:77:
15:2d:b0:88:57:11:eb:56:94:ce:85:4e:d8:06:8a:
90:c7:d7:76:4e:32:bb:8d:0d:b2:82:fd:b9:c1:a2:
fd:68:e4:9a:79:1c:b8:32:1c:1f:93:18:d1:f2:3b:
a6:60:c9:42:2a:0b:6a:d6:75:cb:d9:7a:de:ac:be:
9d:28:45:4a:c0:e0:4e:bd:a1:ba:d0:51:3e:6b:ae:
78:92:9c:fb:99:81:24:33:0f:b4:c7:4e:1d:51:8a:
47:f3:68:84:28:18:6d:c9:25:12:9f:54:22:d2:fe:
17:5a:5b:64:d1:71:8b:90:ae:39:30:b6:21:ae:b9:
95:25:48:e9:79:5a:40:57:e2:2f:fd:d5:ca:78:e0:
53:c4:16:c1:2a:30:ef:b8:c0:9c:bb:1d:67:8c:d0:
49:7f:6c:9b:64:e0:bd:98:78:38:3f:00:54:64:65:
c9:af:67:ff:a4:75:b2:9c:fe:10:f0:d8:35:2c:db:
89:ba:dc:7e:29:9d:2a:94:a7:7c:44:3f:51:5c:f0:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DB:E6:09:DA:E9:BF:D5:AA:50:EB:45:FA:89:01:9E:8D:05:C7:13
X509v3 Authority Key Identifier:
keyid:41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:01:68:da:f4:38:5b:aa:29:a0:e7:fd:37:fb:6d:0a:d5:4d:
17:92:3f:3a:0f:e7:11:59:ae:66:82:70:ed:31:be:94:59:80:
6e:19:67:27:1b:32:2b:f6:c3:27:c8:14:09:af:ee:17:46:10:
af:24:ea:ed:b1:dd:40:ea:76:c6:b0:67:32:aa:44:18:37:bb:
27:44:73:a5:10:95:d2:b0:ea:76:b4:95:98:92:9a:f3:f6:08:
b6:30:85:9f:e6:06:a1:a4:a7:82:8c:14:e6:fd:17:8b:39:f7:
fc:61:96:61:d1:ee:d5:05:16:90:de:72:b7:07:cf:ae:be:6b:
7c:09:1b:5b:cd:a4:47:2c:79:85:b1:c3:44:4b:32:34:48:95:
ef:b1:39:3e:6a:a4:ed:64:04:bc:0d:e7:c0:63:37:8a:5f:14:
c0:17:07:82:9c:0d:8f:e7:8a:ba:a6:32:dd:7d:a1:3e:23:06:
ac:93:8a:97:9a:07:0d:0f:95:78:a7:52:5a:f7:7e:d2:c5:ec:
c4:66:a6:9e:41:88:20:f8:b5:ae:fb:2e:7b:d0:2a:1b:9a:c7:
06:77:67:74:9c:86:90:12:a9:b2:26:c8:ff:ca:9b:61:f9:4b:
4a:ac:54:ff:74:77:2a:82:39:ec:05:c0:68:58:c4:85:fe:6c:
4e:aa:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:25 2026 by rpki-client