$ rpki-client -vvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft File: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft (raw, json) Hash identifier: Pnd+P1/kO8HptV/tkhiVT+oBNWw3plKwXWkyM7/l9eg= Subject key identifier: 5B:2F:2F:AE:38:FD:87:B3:4B:8D:41:1F:3F:0C:8E:1A:AD:2C:79:40 Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Certificate serial: 2F6D4153FD91453AE65C6CA27654CA98B70A5C21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft Manifest number: 0F Signing time: Wed 13 May 2026 04:12:53 +0000 Manifest this update: Wed 13 May 2026 04:07:53 +0000 Manifest next update: Thu 14 May 2026 07:31:53 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=) 2: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl (hash: Q/0ZuiaWe+pZrzvnWtssGSl0ko7iAjObMC1km03IRic=) 3: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6d:41:53:fd:91:45:3a:e6:5c:6c:a2:76:54:ca:98:b7:0a:5c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Validity Not Before: May 13 04:07:53 2026 GMT Not After : May 14 07:31:53 2026 GMT Subject: CN=5B2F2FAE38FD87B34B8D411F3F0C8E1AAD2C7940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:1f:cd:f8:d6:b5:36:57:23:28:eb:9d:c3: dd:b8:88:04:d3:ae:0b:bb:8f:a0:15:47:cd:7a:9a: 48:78:67:df:16:4c:de:83:58:14:d0:10:52:0c:52: 47:6e:ee:02:32:6b:0f:09:47:c6:3f:2e:9c:a9:df: 27:53:3f:90:08:04:83:82:e4:83:9c:c4:87:0b:2f: 9f:02:29:17:37:59:1c:0d:87:cc:17:25:33:18:f6: 67:da:5e:21:0b:80:1f:ed:d6:b4:ae:88:8e:cd:50: a3:04:8b:21:22:94:80:4d:5d:71:8a:c3:f8:da:f5: 37:99:3c:11:58:c1:a5:8f:da:3c:36:ae:42:49:56: 12:fd:96:d9:65:24:1b:86:a9:a3:e1:7d:dc:c1:77: 37:6f:35:08:2b:be:f5:8d:64:dd:cf:34:03:98:0b: 45:41:d4:25:59:c8:cf:9f:2b:b1:86:b3:96:3a:8d: 4d:2f:fe:30:42:35:eb:d3:b0:97:da:d6:e0:b7:d2: 17:f0:57:3e:f6:9c:c7:85:bb:ed:ff:f7:22:18:ce: f9:19:41:f9:de:d2:c1:dc:bd:f4:1e:92:ae:66:8a: 34:df:23:39:c9:17:57:72:a6:8d:93:9e:13:7a:38: 17:7f:d5:b2:7b:3c:af:2c:51:80:92:ab:af:f7:ac: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2F:2F:AE:38:FD:87:B3:4B:8D:41:1F:3F:0C:8E:1A:AD:2C:79:40 X509v3 Authority Key Identifier: keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:84:95:42:ce:dd:1f:43:ed:e7:a9:7f:00:b3:24:63:63:e4: ab:c0:78:e7:83:10:14:4f:88:f5:54:3c:ef:6a:ba:9d:7a:2d: ae:fb:6c:43:ee:91:08:ca:41:78:dd:6c:33:c6:4f:5f:2c:fd: 41:0a:3c:cd:00:1a:8e:a6:a9:79:09:91:4a:f6:86:c6:4d:ef: 6f:ba:b0:93:d5:67:a7:32:4b:b7:f0:4c:ab:9b:01:e5:02:f8: a6:c5:02:e4:65:59:ef:d8:99:8f:de:ee:e4:8b:22:cc:4a:f9: 98:42:49:37:fc:8f:81:5a:f5:3e:67:a9:40:04:bd:7d:6d:0a: 1d:6b:2b:75:09:4f:35:af:30:66:f3:d5:c9:4b:e6:06:79:42: 57:fc:4f:42:7d:a4:47:f8:dc:c9:ec:bf:f0:f5:23:b5:e3:f7: 0b:1a:a7:c3:3f:d1:0c:23:92:01:a8:5f:08:3e:94:43:36:bb: c6:bb:1e:37:35:a6:96:cf:54:40:79:1a:b5:9c:e2:d5:0a:01: 5f:f6:22:fd:53:37:6b:1b:e2:26:79:fb:a0:67:97:26:da:78: 3d:6c:d1:30:29:8a:97:4f:af:96:9b:26:df:91:42:8f:40:ab: 44:e5:89:d6:81:0a:9e:e8:5c:0c:62:a5:6b:b3:ee:2a:98:cf: a9:49:0d:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL21BU/2RRTrmXGyidlTKmLcKXCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0 N0IzRUEwQzAeFw0yNjA1MTMwNDA3NTNaFw0yNjA1MTQwNzMxNTNaMDMxMTAvBgNV BAMTKDVCMkYyRkFFMzhGRDg3QjM0QjhENDExRjNGMEM4RTFBQUQyQzc5NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPB/N+Na1NlcjKOudw924iATT rgu7j6AVR816mkh4Z98WTN6DWBTQEFIMUkdu7gIyaw8JR8Y/Lpyp3ydTP5AIBIOC 5IOcxIcLL58CKRc3WRwNh8wXJTMY9mfaXiELgB/t1rSuiI7NUKMEiyEilIBNXXGK w/ja9TeZPBFYwaWP2jw2rkJJVhL9ltllJBuGqaPhfdzBdzdvNQgrvvWNZN3PNAOY C0VB1CVZyM+fK7GGs5Y6jU0v/jBCNevTsJfa1uC30hfwVz72nMeFu+3/9yIYzvkZ Qfne0sHcvfQekq5mijTfIznJF1dypo2TnhN6OBd/1bJ7PK8sUYCSq6/3rIALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWy8vrjj9h7NLjUEfPwyOGq0seUAwHwYDVR0j BBgwFoAUQcJMBIfEEMOuxL603EA80Eez6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0ODFlNDktZjRjMS00YzEzLTk0YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4 N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0N0IzRUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMyNEMwNDg3QzQxMEMzQUVDNEJFQjREQzQwM0NEMDQ3QjNF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDND RDA0N0IzRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeElULO3R9D7eepfwCzJGNj5KvAeOeDEBRP iPVUPO9qup16La77bEPukQjKQXjdbDPGT18s/UEKPM0AGo6mqXkJkUr2hsZN72+6 sJPVZ6cyS7fwTKubAeUC+KbFAuRlWe/YmY/e7uSLIsxK+ZhCSTf8j4Fa9T5nqUAE vX1tCh1rK3UJTzWvMGbz1clL5gZ5Qlf8T0J9pEf43Mnsv/D1I7Xj9wsap8M/0Qwj kgGoXwg+lEM2u8a7Hjc1ppbPVEB5GrWc4tUKAV/2Iv1TN2sb4iZ5+6BnlybaeD1s 0TApipdPr5abJt+RQo9Aq0TlidaBCp7oXAxipWuz7iqYz6lJDYk= -----END CERTIFICATE-----Generated at Wed May 13 10:43:49 2026 by rpki-client