$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft File: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft (raw, json) Hash identifier: 1S+IZrm9RI+pTFxtMOGTICnSs8isgnAS4UwXaKI4OKc= Subject key identifier: 03:B8:78:87:CF:D4:3E:1A:12:3D:2A:C6:42:6F:1A:6F:96:60:14:75 Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Certificate serial: 376528D7620E4C86BE119EF30E92835C0EEAD435 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 08:51:41 +0000 Manifest this update: Fri 25 Sep 2026 08:46:41 +0000 Manifest next update: Sat 26 Sep 2026 11:35:41 +0000 Files and hashes: 1: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl (hash: nL2B1pmndLC+6/vu5vG+vkZrV8j1mLecgUENypdZFGM=) 2: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=) 3: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:65:28:d7:62:0e:4c:86:be:11:9e:f3:0e:92:83:5c:0e:ea:d4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Validity Not Before: Sep 25 08:46:41 2026 GMT Not After : Sep 26 11:35:41 2026 GMT Subject: CN=03B87887CFD43E1A123D2AC6426F1A6F96601475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:94:00:2a:35:ca:d6:52:80:cf:76:39:ae: 47:7f:36:4b:ce:b3:5f:5d:46:ab:53:c7:2d:92:0a: 6c:6f:b9:74:07:9f:14:ef:75:cf:47:c7:1b:31:f9: 57:24:9d:77:e2:2b:4d:88:7e:ab:2d:66:f2:d9:83: ad:3f:5a:f2:46:d0:ef:2f:ed:75:ba:01:09:91:a1: 0d:86:72:31:c4:90:4c:88:54:26:af:ff:7f:d1:b0: ba:18:af:c6:56:f0:a0:74:40:fd:8c:e9:6a:82:91: 19:e7:e8:01:c2:71:38:b1:c4:63:7d:7b:3b:3d:fa: e4:5f:a4:a2:b7:5e:ca:9f:1a:96:9b:76:d5:e1:a6: 3d:68:0d:5f:56:39:07:8f:e3:32:d1:7b:2b:cd:bb: 24:fe:0f:4d:50:52:ba:81:a3:3a:ac:ab:bb:91:35: 10:6b:aa:85:07:fc:b0:5e:67:86:e5:7c:a6:6a:57: 6a:e6:89:ea:6b:56:68:1d:c5:28:73:98:3c:27:8f: c2:0c:db:c5:0f:3d:f1:65:ab:2e:76:76:f0:01:78: 55:59:d1:90:31:10:37:ef:01:07:e2:d8:b5:ed:74: 83:31:b1:ce:56:db:a8:18:d4:3a:8b:af:4a:dc:61: b3:dd:3d:dd:32:f0:2d:e3:6c:4a:2d:3d:d8:39:a8: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B8:78:87:CF:D4:3E:1A:12:3D:2A:C6:42:6F:1A:6F:96:60:14:75 X509v3 Authority Key Identifier: keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9f:db:5f:ad:d4:cb:cf:cb:7b:b1:3b:5f:7c:58:31:f7:17: 48:ae:63:ad:cd:08:d0:4c:30:1c:73:75:d0:cd:0f:b1:29:34: 0e:8f:d5:54:fe:e2:2a:f1:5a:c3:e1:31:f8:22:af:cd:6d:ff: 2f:56:05:c6:38:c0:e9:85:84:2c:e4:ea:c1:1a:24:6d:87:20: 72:b3:62:ae:e8:10:84:b5:a1:5e:08:14:14:6e:08:1a:a7:8c: 82:84:43:c2:6e:a6:b0:0e:e8:b2:f6:93:1b:16:a4:92:83:7a: 7a:06:d7:be:f6:56:39:df:86:2f:d4:aa:d8:71:36:aa:73:6d: dc:fa:26:61:59:d4:dc:67:2c:85:0f:dc:f7:5f:00:c2:07:6e: ac:1e:ee:ba:b1:15:a4:4d:70:bf:44:46:ae:10:32:10:9b:28: cc:32:d3:38:0c:80:fd:0a:d8:90:1a:88:23:9c:1f:8d:2c:94: 75:e0:88:cf:ab:58:2e:f0:b6:0c:72:d6:fe:0c:af:33:f1:a0: f3:6c:3e:cc:a9:03:a1:74:98:d2:89:9a:92:be:88:32:14:ab: cd:be:89:eb:b3:06:4d:ca:6a:73:68:61:a9:0e:e9:d3:7f:6c: c6:1b:d8:45:29:eb:ba:0f:00:88:c5:fe:c5:14:c0:f2:50:bf: 47:66:4a:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2Uo12IOTIa+EZ7zDpKDXA7q1DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0 N0IzRUEwQzAeFw0yNjA5MjUwODQ2NDFaFw0yNjA5MjYxMTM1NDFaMDMxMTAvBgNV BAMTKDAzQjg3ODg3Q0ZENDNFMUExMjNEMkFDNjQyNkYxQTZGOTY2MDE0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClj5QAKjXK1lKAz3Y5rkd/NkvO s19dRqtTxy2SCmxvuXQHnxTvdc9Hxxsx+VcknXfiK02IfqstZvLZg60/WvJG0O8v 7XW6AQmRoQ2GcjHEkEyIVCav/3/RsLoYr8ZW8KB0QP2M6WqCkRnn6AHCcTixxGN9 ezs9+uRfpKK3XsqfGpabdtXhpj1oDV9WOQeP4zLReyvNuyT+D01QUrqBozqsq7uR NRBrqoUH/LBeZ4blfKZqV2rmieprVmgdxShzmDwnj8IM28UPPfFlqy52dvABeFVZ 0ZAxEDfvAQfi2LXtdIMxsc5W26gY1DqLr0rcYbPdPd0y8C3jbEotPdg5qDHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA7h4h8/UPhoSPSrGQm8ab5ZgFHUwHwYDVR0j BBgwFoAUQcJMBIfEEMOuxL603EA80Eez6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0ODFlNDktZjRjMS00YzEzLTk0YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4 N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0N0IzRUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMyNEMwNDg3QzQxMEMzQUVDNEJFQjREQzQwM0NEMDQ3QjNF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDND RDA0N0IzRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKf21+t1MvPy3uxO198WDH3F0iuY63NCNBM MBxzddDND7EpNA6P1VT+4irxWsPhMfgir81t/y9WBcY4wOmFhCzk6sEaJG2HIHKz Yq7oEIS1oV4IFBRuCBqnjIKEQ8JuprAO6LL2kxsWpJKDenoG1772Vjnfhi/Uqthx Nqpzbdz6JmFZ1NxnLIUP3PdfAMIHbqwe7rqxFaRNcL9ERq4QMhCbKMwy0zgMgP0K 2JAaiCOcH40slHXgiM+rWC7wtgxy1v4MrzPxoPNsPsypA6F0mNKJmpK+iDIUq82+ ieuzBk3KanNoYakO6dN/bMYb2EUp67oPAIjF/sUUwPJQv0dmSg0= -----END CERTIFICATE-----Generated at Fri Sep 25 21:23:48 2026 by rpki-client