$ rpki-client -vvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft File: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft (raw, json) Hash identifier: VR6EefA3xXaoD3EnCDinxYqFqImw8fY4UsqTmYIEOVg= Subject key identifier: AB:A1:52:BE:88:3B:93:56:EB:0C:5E:76:16:06:23:12:13:C2:6F:FD Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Certificate serial: 7E4B6D698A5EB21256E57F819D91C7BF922DF4E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 00:04:11 +0000 Manifest this update: Thu 23 Jul 2026 23:59:11 +0000 Manifest next update: Sat 25 Jul 2026 00:20:11 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=) 2: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=) 3: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl (hash: Z7JiPUfP207U5gjLqI07+0AlNccWwRd4sudDzLsvyBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4b:6d:69:8a:5e:b2:12:56:e5:7f:81:9d:91:c7:bf:92:2d:f4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Validity Not Before: Jul 23 23:59:11 2026 GMT Not After : Jul 25 00:20:11 2026 GMT Subject: CN=ABA152BE883B9356EB0C5E761606231213C26FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dd:2b:0b:c4:45:37:74:7f:d6:33:14:e2:b5: 89:9d:57:48:c6:3a:da:51:81:97:43:2d:b2:45:90: f4:7d:98:e4:61:df:83:a3:d9:b1:3a:5d:81:10:0d: 79:86:91:95:4e:44:e3:2f:af:e8:0e:89:47:3c:1e: 42:02:f2:b2:9e:ff:3f:9c:36:16:07:50:ee:dd:af: 9b:32:40:d4:ec:42:01:23:97:8d:2f:98:18:ea:e9: 8c:e0:70:f3:ac:a3:56:fe:43:c5:6c:60:ad:ab:d6: f1:1f:ab:21:24:e6:63:e9:9b:f3:f9:83:f4:6b:58: 19:33:a8:ab:be:95:80:43:8f:8b:48:47:84:50:48: ed:47:29:a2:25:54:3e:ef:1e:1e:85:9f:9b:df:03: 98:38:69:65:16:dc:82:a4:b4:82:03:88:0f:80:df: 33:60:5c:d1:18:65:70:69:2b:36:31:e4:85:31:bf: d6:c0:ce:5f:be:69:bc:1e:59:25:bb:80:28:c1:6a: 2c:2d:9e:aa:f1:b9:f5:a4:2d:66:68:e2:e6:d4:1a: 20:c2:b0:67:57:5f:c4:2f:c8:75:22:67:6f:13:94: d9:cc:4a:02:b7:f7:c2:07:b4:f5:f0:ee:87:7b:3b: 2b:c5:3c:07:eb:b9:1d:0a:e4:ec:15:b8:c1:4b:3a: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A1:52:BE:88:3B:93:56:EB:0C:5E:76:16:06:23:12:13:C2:6F:FD X509v3 Authority Key Identifier: keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:4c:c3:34:c9:52:79:60:01:ed:a5:62:4b:59:80:29:43: b3:d4:65:be:69:3e:c1:ce:84:be:32:ac:c8:6a:d4:6c:c5:7c: 79:0a:28:84:6d:9f:92:c6:d8:0b:4a:be:b9:10:bf:0f:98:e1: 5c:7d:65:96:6a:fa:9f:60:0f:77:30:d8:e1:7e:05:38:a4:75: a5:a6:3a:5b:59:df:ab:43:77:83:03:8a:f6:ec:48:f7:e1:8d: ef:a5:bf:8d:f3:b5:2c:46:eb:6a:86:cd:74:09:b5:6f:b5:b0: fe:82:3a:90:56:9e:62:85:fd:38:43:e2:be:a6:80:10:ea:fd: 63:96:6d:bd:11:b0:7d:20:09:af:c2:1d:59:fa:de:80:c5:c2: 29:63:a3:d1:fc:c4:ee:c7:eb:1a:76:92:d7:a9:10:30:48:00: 32:16:f4:fc:47:06:5c:11:87:d5:a4:48:8d:f4:9f:2b:f2:84: d0:c9:dc:94:19:3e:d1:f5:7c:7a:9b:cc:97:93:75:b7:17:1d: 57:ad:38:53:41:98:4b:0a:12:14:c9:de:32:d6:ee:8c:9e:df: 74:00:3e:d8:79:98:14:55:fb:fe:ca:25:a8:d7:4f:3f:3a:2e: 60:90:12:b6:3c:db:2c:3a:1f:9a:89:93:df:34:9f:2e:3b:b9: 7d:05:dd:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkttaYpeshJW5X+BnZHHv5It9OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0 N0IzRUEwQzAeFw0yNjA3MjMyMzU5MTFaFw0yNjA3MjUwMDIwMTFaMDMxMTAvBgNV BAMTKEFCQTE1MkJFODgzQjkzNTZFQjBDNUU3NjE2MDYyMzEyMTNDMjZGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR3SsLxEU3dH/WMxTitYmdV0jG OtpRgZdDLbJFkPR9mORh34Oj2bE6XYEQDXmGkZVOROMvr+gOiUc8HkIC8rKe/z+c NhYHUO7dr5syQNTsQgEjl40vmBjq6YzgcPOso1b+Q8VsYK2r1vEfqyEk5mPpm/P5 g/RrWBkzqKu+lYBDj4tIR4RQSO1HKaIlVD7vHh6Fn5vfA5g4aWUW3IKktIIDiA+A 3zNgXNEYZXBpKzYx5IUxv9bAzl++abweWSW7gCjBaiwtnqrxufWkLWZo4ubUGiDC sGdXX8QvyHUiZ28TlNnMSgK398IHtPXw7od7OyvFPAfruR0K5OwVuMFLOhyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq6FSvog7k1brDF52FgYjEhPCb/0wHwYDVR0j BBgwFoAUQcJMBIfEEMOuxL603EA80Eez6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0ODFlNDktZjRjMS00YzEzLTk0YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4 N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0N0IzRUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMyNEMwNDg3QzQxMEMzQUVDNEJFQjREQzQwM0NEMDQ3QjNF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDND RDA0N0IzRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGqTMM0yVJ5YAHtpWJLWYApQ7PUZb5pPsHO hL4yrMhq1GzFfHkKKIRtn5LG2AtKvrkQvw+Y4Vx9ZZZq+p9gD3cw2OF+BTikdaWm OltZ36tDd4MDivbsSPfhje+lv43ztSxG62qGzXQJtW+1sP6COpBWnmKF/ThD4r6m gBDq/WOWbb0RsH0gCa/CHVn63oDFwiljo9H8xO7H6xp2ktepEDBIADIW9PxHBlwR h9WkSI30nyvyhNDJ3JQZPtH1fHqbzJeTdbcXHVetOFNBmEsKEhTJ3jLW7oye33QA Pth5mBRV+/7KJajXTz86LmCQErY82yw6H5qJk980ny47uX0F3ZE= -----END CERTIFICATE-----Generated at Fri Jul 24 15:47:53 2026 by rpki-client