$ rpki-client -vvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: WZIRsY1frzhR7UxABnOfEniw4bxIUSYUmzE0TIy/Rrs= Subject key identifier: C2:3B:4A:51:0B:60:F3:F4:58:65:2A:71:F4:7F:45:C8:0E:88:63:4C Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 6622E22E11A5C259CC234ECA7000AB02252D9217 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:17:26 +0000 Manifest this update: Thu 23 Jul 2026 14:12:26 +0000 Manifest next update: Fri 24 Jul 2026 17:38:26 +0000 Files and hashes: 1: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) 2: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: BcIfE4ZNU5Cz+uHHXbXm5gRNefFgl+CxiShC0brqc3o=) 3: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:22:e2:2e:11:a5:c2:59:cc:23:4e:ca:70:00:ab:02:25:2d:92:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: Jul 23 14:12:26 2026 GMT Not After : Jul 24 17:38:26 2026 GMT Subject: CN=C23B4A510B60F3F458652A71F47F45C80E88634C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:eb:3e:89:bc:cd:26:9b:06:43:a2:60:f6: 2a:e1:ee:14:3f:1e:e3:8b:7c:9f:42:6e:61:1c:31: ca:f3:97:5a:04:a9:1e:33:73:18:78:1e:49:bd:bd: 96:90:b1:f5:0c:c8:23:fd:cd:52:8c:e0:ad:bb:42: 2d:d4:ce:4b:58:aa:5b:db:f4:5f:31:ab:c8:e2:73: 67:42:b6:0c:35:16:7d:b2:af:42:ad:16:10:dd:aa: a6:e9:7b:61:df:72:00:3d:41:e5:5a:b8:c0:b9:a0: 96:6c:ea:67:24:3b:59:d2:a3:02:6e:32:39:a8:f6: b4:d5:13:5a:0e:56:e9:07:75:30:49:9a:91:a2:21: 7a:44:73:ce:7d:38:75:d5:cb:78:da:1d:bc:71:16: 5c:72:a7:fd:8f:ff:eb:e0:a6:78:ec:e0:e9:54:73: 97:1c:35:80:20:af:aa:4d:fe:c8:18:68:9c:44:01: b6:23:d4:f7:97:c5:8f:cd:3b:47:f3:87:65:69:76: 72:a0:8c:0f:d1:d7:5b:1a:64:88:41:e2:70:a7:3e: 63:95:b3:aa:24:0f:2c:39:43:5c:3a:98:55:3b:88: a3:f4:ac:85:69:25:44:7a:96:85:35:b8:ab:7c:5d: 7e:4c:7f:c2:a1:da:ec:05:ff:ea:d2:5a:57:ce:a5: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3B:4A:51:0B:60:F3:F4:58:65:2A:71:F4:7F:45:C8:0E:88:63:4C X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:43:4d:46:85:58:93:f4:80:0c:8a:59:7a:85:50:0d:6e:dd: de:14:81:c6:2b:a7:94:95:40:ea:e2:07:66:cd:93:be:34:4a: bb:a2:f8:05:8e:ea:83:1d:d4:7b:65:c6:14:45:6d:cc:eb:84: 5f:01:31:51:45:fa:5d:cb:16:19:d7:47:cd:57:69:a4:39:25: 4e:09:8f:b6:df:47:d9:3b:47:ee:51:00:99:0c:7d:8c:98:49: 55:47:bc:46:f4:0c:9b:61:cd:b2:f8:c8:6d:3f:0f:8c:ae:c7: cb:f5:e4:ae:d2:9d:3a:7d:ef:82:31:f3:d1:c7:d0:2f:2e:47: 9b:ad:09:2e:fd:5d:ff:7d:70:3f:83:24:37:11:fd:59:bc:26: df:3c:24:98:6d:db:79:89:56:f8:12:e4:8e:0b:52:7a:09:3d: f8:89:2b:3f:b5:e1:8c:85:96:a3:7e:bc:e7:25:fe:53:a4:74: b5:b8:73:e9:17:c9:52:a1:1d:74:aa:ca:18:46:c7:c9:87:fe: 46:7e:18:90:82:94:55:de:d1:c1:c2:99:e3:16:95:f9:1b:25: 70:22:5b:5d:bb:dc:2f:92:32:4c:19:dd:f5:0d:82:81:29:17: 89:bb:cf:f6:dc:19:d5:63:4a:31:f4:61:4c:f7:24:cf:6e:d0: d4:62:8e:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiLiLhGlwlnMI07KcACrAiUtkhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjA3MjMxNDEyMjZaFw0yNjA3MjQxNzM4MjZaMDMxMTAvBgNV BAMTKEMyM0I0QTUxMEI2MEYzRjQ1ODY1MkE3MUY0N0Y0NUM4MEU4ODYzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotus+ibzNJpsGQ6Jg9irh7hQ/ HuOLfJ9CbmEcMcrzl1oEqR4zcxh4Hkm9vZaQsfUMyCP9zVKM4K27Qi3UzktYqlvb 9F8xq8jic2dCtgw1Fn2yr0KtFhDdqqbpe2HfcgA9QeVauMC5oJZs6mckO1nSowJu Mjmo9rTVE1oOVukHdTBJmpGiIXpEc859OHXVy3jaHbxxFlxyp/2P/+vgpnjs4OlU c5ccNYAgr6pN/sgYaJxEAbYj1PeXxY/NO0fzh2VpdnKgjA/R11saZIhB4nCnPmOV s6okDyw5Q1w6mFU7iKP0rIVpJUR6loU1uKt8XX5Mf8Kh2uwF/+rSWlfOpczxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjtKUQtg8/RYZSpx9H9FyA6IY0wwHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1DTUaFWJP0gAyKWXqFUA1u3d4UgcYrp5SV QOriB2bNk740Srui+AWO6oMd1HtlxhRFbczrhF8BMVFF+l3LFhnXR81XaaQ5JU4J j7bfR9k7R+5RAJkMfYyYSVVHvEb0DJthzbL4yG0/D4yux8v15K7SnTp974Ix89HH 0C8uR5utCS79Xf99cD+DJDcR/Vm8Jt88JJht23mJVvgS5I4LUnoJPfiJKz+14YyF lqN+vOcl/lOkdLW4c+kXyVKhHXSqyhhGx8mH/kZ+GJCClFXe0cHCmeMWlfkbJXAi W1273C+SMkwZ3fUNgoEpF4m7z/bcGdVjSjH0YUz3JM9u0NRijq0= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:21 2026 by rpki-client