$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft File: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft (raw, json) Hash identifier: SDwD5RVDUmdS32XMWNk5HBUtEH0ydZQde5MBULPga84= Subject key identifier: EB:02:9E:92:91:63:A6:AE:E6:66:12:B7:58:40:57:D9:13:33:1F:C0 Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Certificate serial: 32CCE6E9D8D0B34A080DAE7FE64223E7829481FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:47:42 +0000 Manifest this update: Tue 12 May 2026 17:42:42 +0000 Manifest next update: Wed 13 May 2026 21:02:42 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8=) 2: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl (hash: Src6EIx/3bkUrFFh3vITEF6BIqqEd723/vKgcnDCmmU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cc:e6:e9:d8:d0:b3:4a:08:0d:ae:7f:e6:42:23:e7:82:94:81:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Validity Not Before: May 12 17:42:42 2026 GMT Not After : May 13 21:02:42 2026 GMT Subject: CN=EB029E929163A6AEE66612B7584057D913331FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:f7:1b:0f:ed:2b:7c:e5:96:62:c3:d9:91: 41:6b:9a:5a:54:fe:2c:a0:59:02:5e:89:77:c0:89: 5a:b1:b5:94:fd:5d:f3:ed:eb:1b:7e:1f:e3:f4:07: 81:f3:0e:40:1f:34:7e:43:68:a4:0b:96:0f:90:f7: 40:4d:4c:d9:b4:13:37:12:7a:ad:95:ad:10:ec:3a: 44:9b:6e:38:ef:cf:8b:10:be:f4:28:37:fc:d7:a9: c7:83:8e:fc:7c:a8:c7:ca:2e:a2:7a:9f:cb:90:2f: 42:4a:bd:c2:e7:fa:16:1e:7d:4c:3e:eb:11:50:3d: 10:5b:b5:21:4d:63:dd:4b:2b:e2:62:46:0e:85:0c: a6:5e:33:84:70:2e:5d:b5:43:bc:e4:5e:d8:ab:0a: d9:fc:a9:69:3b:01:50:b3:20:89:f5:56:3b:08:27: cc:dc:26:7a:56:75:30:df:d8:e6:e6:fe:26:7c:d3: 3c:47:ce:be:af:97:4f:e9:2f:bf:27:9f:f3:b8:a9: 89:c3:86:82:50:46:82:80:7e:37:34:d1:07:c7:31: 8d:8f:92:b2:bc:7c:4a:80:5d:74:64:6b:4f:e6:cf: 33:22:f1:7b:4c:9a:b9:33:1d:3a:4e:db:3d:9b:9e: 1f:fc:88:e6:b7:cd:04:e2:33:d7:2b:54:84:07:96: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:9E:92:91:63:A6:AE:E6:66:12:B7:58:40:57:D9:13:33:1F:C0 X509v3 Authority Key Identifier: keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0f:0b:0e:89:be:4b:d8:ad:a2:eb:55:47:9f:45:3e:a8:42: 61:b3:4b:ee:e9:fc:6c:8b:2d:4d:f3:b8:04:5b:c3:ce:8f:93: 07:ee:fb:1a:2d:67:f5:fe:3d:9b:97:90:23:a7:5d:a7:61:d9: 01:b9:8f:5f:a4:a7:96:b6:6a:1d:d0:cd:dc:99:7f:d0:2a:f9: 4c:5e:3d:3e:57:ed:27:0e:56:4f:85:35:3c:2c:d9:f2:55:a2: f6:98:97:2d:ed:c7:b8:4f:4c:bf:53:9b:6f:3d:22:81:a8:56: 07:23:5b:9d:9a:1e:e9:1d:34:46:6a:cc:24:0b:b5:fa:8b:6c: b9:3e:69:eb:b6:46:5c:cb:15:84:c2:a0:a0:b8:88:da:30:6f: d8:67:17:ef:83:ad:a7:72:46:51:15:18:4a:30:7d:a4:6b:03: d8:1a:bf:0b:45:91:ee:8c:c5:ba:b5:f7:82:0a:f4:04:bc:98: 2b:0f:3f:70:a0:fd:41:d9:9c:c1:7a:78:7d:e1:e7:12:78:37: 23:31:75:1f:a5:2c:55:13:25:d0:7e:4b:e3:a4:3f:92:49:47: 64:25:17:a9:35:bd:00:22:fe:f4:3a:ac:62:d5:00:8e:eb:4e: f3:1e:7c:6e:c0:32:8a:1a:31:d9:18:c6:b6:37:89:e6:fd:23: 3c:2c:e4:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMszm6djQs0oIDa5/5kIj54KUgf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRG OEUzQ0FDMTAeFw0yNjA1MTIxNzQyNDJaFw0yNjA1MTMyMTAyNDJaMDMxMTAvBgNV BAMTKEVCMDI5RTkyOTE2M0E2QUVFNjY2MTJCNzU4NDA1N0Q5MTMzMzFGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGvcbD+0rfOWWYsPZkUFrmlpU /iygWQJeiXfAiVqxtZT9XfPt6xt+H+P0B4HzDkAfNH5DaKQLlg+Q90BNTNm0EzcS eq2VrRDsOkSbbjjvz4sQvvQoN/zXqceDjvx8qMfKLqJ6n8uQL0JKvcLn+hYefUw+ 6xFQPRBbtSFNY91LK+JiRg6FDKZeM4RwLl21Q7zkXtirCtn8qWk7AVCzIIn1VjsI J8zcJnpWdTDf2Obm/iZ80zxHzr6vl0/pL78nn/O4qYnDhoJQRoKAfjc00QfHMY2P krK8fEqAXXRka0/mzzMi8XtMmrkzHTpO2z2bnh/8iOa3zQTiM9crVIQHlvczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wKekpFjpq7mZhK3WEBX2RMzH8AwHwYDVR0j BBgwFoAUQdezlFjJmE9awSzIKvkSRPjjysEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1 OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRGOEUzQ0FDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ3QjM5NDU4Qzk5ODRGNUFDMTJDQzgyQUY5MTI0NEY4RTND QUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEy NDRGOEUzQ0FDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8PCw6JvkvYraLrVUefRT6oQmGzS+7p/GyL LU3zuARbw86Pkwfu+xotZ/X+PZuXkCOnXadh2QG5j1+kp5a2ah3QzdyZf9Aq+Uxe PT5X7ScOVk+FNTws2fJVovaYly3tx7hPTL9Tm289IoGoVgcjW52aHukdNEZqzCQL tfqLbLk+aeu2RlzLFYTCoKC4iNowb9hnF++DradyRlEVGEowfaRrA9gavwtFke6M xbq194IK9AS8mCsPP3Cg/UHZnMF6eH3h5xJ4NyMxdR+lLFUTJdB+S+OkP5JJR2Ql F6k1vQAi/vQ6rGLVAI7rTvMefG7AMooaMdkYxrY3ieb9Izws5BU= -----END CERTIFICATE-----Generated at Wed May 13 00:43:54 2026 by rpki-client