$ rpki-client -vvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: nzM6F0nqniQ9KJ2aCCr5EXhFSbwYuwemJr4oN45dT2o= Subject key identifier: 56:10:F9:7D:78:88:BE:E4:1D:5A:43:D7:35:39:20:5F:8F:DB:5C:45 Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 482BA3DB5DFF09DB592C7049297A2A1F8896326B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:25:23 +0000 Manifest this update: Tue 12 May 2026 19:20:23 +0000 Manifest next update: Wed 13 May 2026 20:05:23 +0000 Files and hashes: 1: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: 0m9cs61oxAihPSH0Whz/zQPq1IaX3hw+p6GWWn5Htqw=) 2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2b:a3:db:5d:ff:09:db:59:2c:70:49:29:7a:2a:1f:88:96:32:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: May 12 19:20:23 2026 GMT Not After : May 13 20:05:23 2026 GMT Subject: CN=5610F97D7888BEE41D5A43D73539205F8FDB5C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:63:15:30:05:e9:b1:ac:94:94:c5:97:bc: 0a:e4:54:52:0b:64:c4:03:f4:a9:79:46:ae:0b:38: db:b7:fb:a3:30:cc:00:94:6a:e5:6d:de:bc:cd:ee: 17:a9:d7:1b:c8:f7:9d:29:5f:50:9c:c7:f1:59:d0: c7:90:f3:da:86:d8:d7:66:24:1f:bf:0b:8e:35:d9: 10:5f:6d:dd:bf:86:7e:85:24:b0:60:c6:70:6e:c8: 09:a9:16:24:53:5e:f0:88:6b:5c:4a:1c:65:d7:8d: 13:ff:c5:2b:f6:8e:03:ac:4d:79:bb:93:af:f1:a2: 23:1e:96:fb:6f:21:4d:51:b1:07:ef:f5:e4:8b:9c: bc:e3:00:24:bd:e9:54:14:06:af:9e:40:e3:76:12: e9:79:0f:5e:f4:ef:46:58:43:0f:60:a7:53:f4:a0: c5:f3:97:bc:10:cc:ce:8c:12:73:3b:08:b9:e5:e2: 4f:82:37:8f:6c:a9:9b:54:ea:89:84:7b:b5:48:c1: 3f:b3:58:e4:36:40:38:6c:6e:f8:02:6a:cd:6c:1d: 65:32:a4:c7:38:28:e9:fa:8a:87:b4:a0:43:0d:1d: 5b:f1:39:9f:6e:b3:23:4e:3e:12:a5:c7:47:ef:e3: 27:81:72:33:b9:fb:8f:5a:3a:47:5c:9d:5e:03:ea: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:10:F9:7D:78:88:BE:E4:1D:5A:43:D7:35:39:20:5F:8F:DB:5C:45 X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b4:17:c6:42:a2:35:4b:b3:12:1c:34:d7:f3:1e:b1:8d:5d: 6f:ef:8e:be:28:76:93:81:57:cc:c1:e3:87:48:92:ac:c6:d1: 9c:84:72:6f:c4:df:ae:3f:17:a5:fc:68:ae:2e:06:f4:f7:a7: 9d:f1:e2:5f:00:32:ee:4f:57:9e:bd:9e:ad:75:dd:da:cf:be: 09:eb:43:2a:7f:e3:41:8d:a0:15:57:0f:42:ab:d4:dd:8c:6a: 54:1a:78:49:8f:c1:19:93:3c:1d:18:9c:75:f3:1d:1c:3e:57: 20:2b:46:2a:ad:c2:8e:be:ca:34:8b:cc:61:b6:d4:e8:df:ee: 28:b3:cb:4a:ba:c8:b4:1e:bf:35:fb:b0:d3:a4:61:48:29:92: 4c:18:37:0f:d7:71:ef:4b:c3:2b:5f:7e:28:6a:32:c0:d7:48: ab:fa:a1:1a:43:5b:2e:a6:91:5f:6b:07:12:3a:8a:a7:d5:27: cd:52:99:5f:14:d9:9e:a6:5d:b7:61:da:d5:44:93:c4:cf:02: 16:29:4b:5c:f5:96:26:2b:c3:d5:45:4f:2d:fc:36:5d:4c:2c: b4:52:9f:10:5e:41:b5:76:6f:ba:f3:19:bd:80:21:0c:35:58: 66:ac:a7:f0:06:18:a4:8e:93:6f:86:a9:b2:6b:6c:5c:2a:e0: 0c:1a:25:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCuj213/CdtZLHBJKXoqH4iWMmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjA1MTIxOTIwMjNaFw0yNjA1MTMyMDA1MjNaMDMxMTAvBgNV BAMTKDU2MTBGOTdENzg4OEJFRTQxRDVBNDNENzM1MzkyMDVGOEZEQjVDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECmMVMAXpsayUlMWXvArkVFIL ZMQD9Kl5Rq4LONu3+6MwzACUauVt3rzN7hep1xvI950pX1Ccx/FZ0MeQ89qG2Ndm JB+/C4412RBfbd2/hn6FJLBgxnBuyAmpFiRTXvCIa1xKHGXXjRP/xSv2jgOsTXm7 k6/xoiMelvtvIU1RsQfv9eSLnLzjACS96VQUBq+eQON2Eul5D17070ZYQw9gp1P0 oMXzl7wQzM6MEnM7CLnl4k+CN49sqZtU6omEe7VIwT+zWOQ2QDhsbvgCas1sHWUy pMc4KOn6ioe0oEMNHVvxOZ9usyNOPhKlx0fv4yeBcjO5+49aOkdcnV4D6hyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVhD5fXiIvuQdWkPXNTkgX4/bXEUwHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAa0F8ZCojVLsxIcNNfzHrGNXW/vjr4odpOB V8zB44dIkqzG0ZyEcm/E364/F6X8aK4uBvT3p53x4l8AMu5PV569nq113drPvgnr Qyp/40GNoBVXD0Kr1N2MalQaeEmPwRmTPB0YnHXzHRw+VyArRiqtwo6+yjSLzGG2 1Ojf7iizy0q6yLQevzX7sNOkYUgpkkwYNw/Xce9LwytffihqMsDXSKv6oRpDWy6m kV9rBxI6iqfVJ81SmV8U2Z6mXbdh2tVEk8TPAhYpS1z1liYrw9VFTy38Nl1MLLRS nxBeQbV2b7rzGb2AIQw1WGasp/AGGKSOk2+GqbJrbFwq4AwaJQA= -----END CERTIFICATE-----Generated at Wed May 13 02:50:43 2026 by rpki-client