$ rpki-client -vvvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: 8JxUF8zwldEefxQQwtdSOM65AnQhbnQr9XGTv+RNvHw= Subject key identifier: 07:FC:0A:06:6C:40:BB:4C:73:10:6D:B9:1D:9A:A7:8E:71:6D:F8:CA Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 24CCDEBB296E3E278A16ADAD0B212F5A8D9CC16A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 18:33:34 +0000 Manifest this update: Thu 24 Sep 2026 18:28:34 +0000 Manifest next update: Fri 25 Sep 2026 21:55:34 +0000 Files and hashes: 1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) 2: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: lP/XVf2bRKqSFzAUDVTYXzQpkytJrHdrMYb1PWlFG34=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cc:de:bb:29:6e:3e:27:8a:16:ad:ad:0b:21:2f:5a:8d:9c:c1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: Sep 24 18:28:34 2026 GMT Not After : Sep 25 21:55:34 2026 GMT Subject: CN=07FC0A066C40BB4C73106DB91D9AA78E716DF8CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:29:53:10:d5:ac:6a:14:c6:60:7e:36:f1: 12:61:82:5f:71:29:56:af:fd:1f:65:2f:72:e8:8f: 16:f8:9e:60:0a:1f:4b:b4:25:e4:98:a1:8c:c7:b9: 54:32:b3:9e:cb:d6:24:b9:4a:04:e1:32:b3:bd:65: 75:d0:5b:30:f2:f3:3e:8f:17:8c:2f:25:a6:45:c7: d4:3e:f4:52:d1:7e:8b:0d:a8:8f:1d:35:fe:a4:33: 82:0e:01:f4:0c:c8:3a:83:82:92:04:c4:60:6b:ce: 54:fe:01:dc:40:0b:db:40:62:39:6a:5d:12:b8:9c: 4f:e9:85:37:ca:f0:06:95:9b:38:52:5c:61:4f:f9: 50:08:3e:38:b5:af:93:32:f6:6d:de:c2:ea:9f:29: 44:ac:07:08:ac:ee:df:04:83:80:73:ba:1a:89:66: b9:dd:1c:07:de:cc:f7:e2:3f:ff:a3:eb:1a:97:44: cb:5c:f4:ad:9f:39:6e:73:90:92:57:11:c1:41:c0: 9e:c9:2c:f4:bc:7f:1c:de:91:67:2a:34:f3:d3:a6: bd:50:de:a8:8b:9a:26:2f:52:92:8d:99:ed:77:0b: aa:a3:fe:4b:22:ff:98:dc:6f:8c:19:78:85:71:d3: 4d:aa:5a:37:d4:9a:9b:49:fc:de:21:1b:b0:0d:a8: 55:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FC:0A:06:6C:40:BB:4C:73:10:6D:B9:1D:9A:A7:8E:71:6D:F8:CA X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0d:07:d6:c1:a1:a6:a7:f8:e2:c8:77:0a:18:a1:2b:05:99: 15:da:21:ee:94:e6:14:08:9f:70:2c:d1:41:19:96:f7:48:9f: a7:dd:7e:ba:98:b6:7c:13:0a:6f:8d:09:0b:84:0e:35:60:fa: 06:b5:d4:50:29:ac:3b:4c:dc:05:15:ac:92:ad:e9:b8:65:0f: 65:ad:8b:ad:8c:f7:31:06:83:07:fb:84:6f:ff:b8:f5:37:06: d3:0e:e4:6a:87:42:9a:d6:1b:2d:ef:0d:42:24:11:c3:fc:52: be:ca:c4:56:c9:89:f5:4e:5d:dc:8b:ab:7c:89:9e:1a:49:45: 2f:18:66:54:aa:80:31:c0:92:72:7b:5a:fb:d3:76:ef:10:cb: 1e:29:a7:0f:73:00:19:ce:b2:7b:0d:4d:ef:72:73:b5:bc:51: 70:7f:4a:cf:e7:2c:7c:76:cf:e0:97:6f:8e:73:b5:eb:e2:75: 51:5b:d2:eb:4d:76:96:cd:7b:b5:73:a0:bb:75:0a:7e:ea:61: 42:3a:20:90:84:ea:a3:2c:d0:3e:3f:06:65:b0:48:d6:b7:a2: 8b:8d:6e:18:b7:0a:41:cf:1f:d7:22:1e:a8:a7:0b:fb:93:1f: 05:36:8f:6d:ac:c1:1c:f3:44:5a:77:e0:90:cc:14:90:8f:b7: b2:1b:b9:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMzeuyluPieKFq2tCyEvWo2cwWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjA5MjQxODI4MzRaFw0yNjA5MjUyMTU1MzRaMDMxMTAvBgNV BAMTKDA3RkMwQTA2NkM0MEJCNEM3MzEwNkRCOTFEOUFBNzhFNzE2REY4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKSlTENWsahTGYH428RJhgl9x KVav/R9lL3Lojxb4nmAKH0u0JeSYoYzHuVQys57L1iS5SgThMrO9ZXXQWzDy8z6P F4wvJaZFx9Q+9FLRfosNqI8dNf6kM4IOAfQMyDqDgpIExGBrzlT+AdxAC9tAYjlq XRK4nE/phTfK8AaVmzhSXGFP+VAIPji1r5My9m3ewuqfKUSsBwis7t8Eg4BzuhqJ ZrndHAfezPfiP/+j6xqXRMtc9K2fOW5zkJJXEcFBwJ7JLPS8fxzekWcqNPPTpr1Q 3qiLmiYvUpKNme13C6qj/ksi/5jcb4wZeIVx002qWjfUmptJ/N4hG7ANqFXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB/wKBmxAu0xzEG25HZqnjnFt+MowHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUNB9bBoaan+OLIdwoYoSsFmRXaIe6U5hQI n3As0UEZlvdIn6fdfrqYtnwTCm+NCQuEDjVg+ga11FAprDtM3AUVrJKt6bhlD2Wt i62M9zEGgwf7hG//uPU3BtMO5GqHQprWGy3vDUIkEcP8Ur7KxFbJifVOXdyLq3yJ nhpJRS8YZlSqgDHAknJ7WvvTdu8Qyx4ppw9zABnOsnsNTe9yc7W8UXB/Ss/nLHx2 z+CXb45ztevidVFb0utNdpbNe7VzoLt1Cn7qYUI6IJCE6qMs0D4/BmWwSNa3oouN bhi3CkHPH9ciHqinC/uTHwU2j22swRzzRFp34JDMFJCPt7IbuSY= -----END CERTIFICATE-----Generated at Fri Sep 25 11:04:13 2026 by rpki-client