$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft File: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft (raw, json) Hash identifier: 3aBwSxLrvNYSAzIulKhCrt/oz2hwADmTzrjr7B5gEXY= Subject key identifier: 36:5B:B1:5E:9D:63:E5:88:04:91:61:99:94:5F:11:67:75:6E:90:B1 Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Certificate serial: 784EB5A5BC752A59153499584D524932C09724A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 03:50:18 +0000 Manifest this update: Thu 24 Sep 2026 03:45:18 +0000 Manifest next update: Fri 25 Sep 2026 06:08:18 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8=) 2: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl (hash: Y+zHnvmsQgcYyK7MfkqHXkA2zmvFVNlugu8BFlFmcaY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4e:b5:a5:bc:75:2a:59:15:34:99:58:4d:52:49:32:c0:97:24:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Validity Not Before: Sep 24 03:45:18 2026 GMT Not After : Sep 25 06:08:18 2026 GMT Subject: CN=365BB15E9D63E58804916199945F1167756E90B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:32:48:d5:37:ab:f8:a3:a0:04:2a:d9:56: f7:06:45:41:79:f3:98:ce:13:17:b1:7a:ed:60:38: 3f:61:a1:c2:50:6c:5b:ec:ee:25:4c:0a:80:e5:f6: 29:e8:85:50:5a:36:42:09:e1:87:4c:f1:a9:73:22: 8b:17:2c:0a:4e:be:84:3c:a3:d1:5f:3e:5a:02:ec: 55:e8:83:d4:78:46:19:9a:8b:f2:e1:c8:27:c4:0a: 2a:27:98:b2:81:45:06:27:2e:b3:0b:60:54:94:68: 12:26:17:b7:73:4e:6e:c1:40:32:d4:63:10:85:1d: ad:fb:f8:02:73:44:d0:03:df:5b:f1:6c:c1:8b:d9: 95:af:19:fa:44:e1:81:45:b0:b7:1a:ae:18:cc:08: 2f:ce:e3:d3:c7:3e:9a:f7:db:f8:ee:18:f0:3d:dc: 52:17:1f:ab:23:42:a6:26:6b:93:1e:46:f7:5f:36: cf:d6:93:35:d3:36:49:4b:c1:2b:d0:4f:84:26:23: 41:4e:c9:5d:19:76:d8:8a:1a:fc:0a:d6:ef:87:b8: ef:33:7f:1a:ce:98:72:1d:98:a1:cd:13:ae:f3:69: 25:b1:7f:69:31:fc:b3:22:77:9a:48:9b:91:77:4d: 6d:74:b8:de:30:70:3f:f7:39:2b:12:0e:45:35:ce: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5B:B1:5E:9D:63:E5:88:04:91:61:99:94:5F:11:67:75:6E:90:B1 X509v3 Authority Key Identifier: keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bb:85:78:f2:6e:9a:f8:30:bb:1a:44:06:a3:bc:8d:2d:02: ea:e3:27:c6:26:29:7f:21:fa:32:dc:f1:62:e3:3a:5c:79:ba: 6d:6f:51:44:c7:01:20:1f:e6:04:4d:97:20:d1:cf:c0:43:6b: 6e:d1:71:e6:1d:87:af:88:75:39:1d:7c:30:3e:d7:88:30:b9: 9b:32:32:a9:a9:41:6a:96:6a:03:5a:fc:2b:29:70:95:97:96: 56:eb:35:46:39:c3:65:0d:fc:46:2f:c3:45:33:11:e3:00:1f: 12:6a:24:d7:4d:dd:c2:50:5a:90:b7:75:95:2b:f9:89:f6:e9: 68:23:44:96:26:b2:44:51:9a:80:5a:20:5b:08:54:02:69:0f: 48:6a:0b:2a:0d:7e:a2:ce:5c:61:c7:29:ce:4b:e8:0a:07:a9: 07:70:bc:e9:b3:43:79:ca:4e:aa:b6:d0:14:07:df:4b:42:0c: cf:50:01:23:b6:12:71:c5:f7:2d:4c:29:53:3d:a5:b0:46:d0: a0:cd:fc:14:dc:27:ae:a6:7c:ad:88:c1:0f:b6:42:07:2f:cc: 87:54:dc:7d:c8:a9:99:59:a1:48:c4:f7:86:b2:4c:bd:6b:32: 3d:17:aa:a1:b0:4e:dc:70:a0:de:d5:04:ef:29:21:63:76:39: 2b:43:a2:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeE61pbx1KlkVNJlYTVJJMsCXJKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRG OEUzQ0FDMTAeFw0yNjA5MjQwMzQ1MThaFw0yNjA5MjUwNjA4MThaMDMxMTAvBgNV BAMTKDM2NUJCMTVFOUQ2M0U1ODgwNDkxNjE5OTk0NUYxMTY3NzU2RTkwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiizJI1Ter+KOgBCrZVvcGRUF5 85jOExexeu1gOD9hocJQbFvs7iVMCoDl9inohVBaNkIJ4YdM8alzIosXLApOvoQ8 o9FfPloC7FXog9R4Rhmai/LhyCfECionmLKBRQYnLrMLYFSUaBImF7dzTm7BQDLU YxCFHa37+AJzRNAD31vxbMGL2ZWvGfpE4YFFsLcarhjMCC/O49PHPpr32/juGPA9 3FIXH6sjQqYma5MeRvdfNs/WkzXTNklLwSvQT4QmI0FOyV0ZdtiKGvwK1u+HuO8z fxrOmHIdmKHNE67zaSWxf2kx/LMid5pIm5F3TW10uN4wcD/3OSsSDkU1zsyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNluxXp1j5YgEkWGZlF8RZ3VukLEwHwYDVR0j BBgwFoAUQdezlFjJmE9awSzIKvkSRPjjysEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1 OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRGOEUzQ0FDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ3QjM5NDU4Qzk5ODRGNUFDMTJDQzgyQUY5MTI0NEY4RTND QUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEy NDRGOEUzQ0FDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu7hXjybpr4MLsaRAajvI0tAurjJ8YmKX8h +jLc8WLjOlx5um1vUUTHASAf5gRNlyDRz8BDa27RceYdh6+IdTkdfDA+14gwuZsy MqmpQWqWagNa/CspcJWXllbrNUY5w2UN/EYvw0UzEeMAHxJqJNdN3cJQWpC3dZUr +Yn26WgjRJYmskRRmoBaIFsIVAJpD0hqCyoNfqLOXGHHKc5L6AoHqQdwvOmzQ3nK Tqq20BQH30tCDM9QASO2EnHF9y1MKVM9pbBG0KDN/BTcJ66mfK2IwQ+2QgcvzIdU 3H3IqZlZoUjE94ayTL1rMj0XqqGwTtxwoN7VBO8pIWN2OStDokM= -----END CERTIFICATE-----Generated at Thu Sep 24 10:56:01 2026 by rpki-client