
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft
File: 041E78A186856FDDB2C0EC51D0234F297B0694FB.mft (raw, json)
Hash identifier: cNl+SehVCNMD+/chOyrPL0VBWSvuOPG4RVVSN99csmY=
Subject key identifier: 6F:1F:1E:56:46:F6:42:04:3B:A2:70:DB:E8:2B:32:62:30:BB:52:CE
Authority key identifier: 04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB
Certificate issuer: /CN=041E78A186856FDDB2C0EC51D0234F297B0694FB
Certificate serial: 3257C3B7EE2E3AC600335500E524583750C90EA8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:55:00 +0000
Manifest this update: Tue 12 May 2026 04:50:00 +0000
Manifest next update: Wed 13 May 2026 07:00:00 +0000
Files and hashes: 1: 041E78A186856FDDB2C0EC51D0234F297B0694FB.crl (hash: 9dL651wJ++hfEPCJxg4XOJlG3dlNUT/l1HhbIEdARb4=)
2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: jFMQqts/Xb/kIK8tDhB7Inx5c23uykyP37ClMnrRbng=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl
rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:57:c3:b7:ee:2e:3a:c6:00:33:55:00:e5:24:58:37:50:c9:0e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041E78A186856FDDB2C0EC51D0234F297B0694FB
Validity
Not Before: May 12 04:50:00 2026 GMT
Not After : May 13 07:00:00 2026 GMT
Subject: CN=6F1F1E5646F642043BA270DBE82B326230BB52CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:f7:64:42:4f:b0:0e:78:04:87:ee:62:fc:
f3:e9:10:05:48:1b:d2:76:83:8e:34:51:ab:fb:34:
a7:74:cb:03:e2:80:bf:ad:7b:c7:66:b4:a3:77:25:
22:7b:1b:3e:c7:8f:e9:2d:47:ea:6d:b0:9f:75:d9:
1f:10:73:28:38:a3:8a:3c:e6:30:f9:41:b1:c1:8f:
d4:33:7a:88:63:85:b7:48:51:9b:18:fc:5c:6a:e5:
6f:69:3a:3c:86:6e:28:1e:a0:72:98:83:1e:d6:a5:
03:b6:9f:7a:03:21:e3:40:9d:cd:fc:50:7c:aa:f3:
d0:d5:e8:a7:9a:f4:fd:e7:17:2a:9e:42:3e:ae:43:
5b:ae:6c:dc:cb:44:fc:db:22:3e:c5:be:18:0d:d5:
9a:02:13:ee:36:9b:07:be:c4:8b:db:58:be:9b:d4:
36:63:cf:56:3a:bf:ca:19:ec:d9:f1:d2:79:ef:77:
a9:43:80:77:2e:42:19:58:71:f0:3c:98:85:21:94:
bf:7e:59:d1:bb:21:a8:ed:62:93:e8:18:f5:55:97:
8a:95:a4:f1:dd:eb:c1:0e:0f:ee:87:15:21:24:d0:
be:eb:6a:d0:1a:bf:1e:60:46:8c:08:6a:5a:5e:69:
59:74:5e:c2:73:62:9c:db:41:82:6f:7b:83:fd:29:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1F:1E:56:46:F6:42:04:3B:A2:70:DB:E8:2B:32:62:30:BB:52:CE
X509v3 Authority Key Identifier:
keyid:04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:91:93:9b:8b:25:21:1f:11:1b:1e:b4:57:fa:80:fd:bf:
2a:37:bf:f6:2f:e1:2c:55:fc:a5:a9:92:4d:a6:3b:5b:43:69:
41:ba:df:c4:74:89:3a:12:b0:72:e4:0b:73:81:d8:61:7b:10:
9e:ab:1c:50:7c:1c:e1:57:3f:c2:ff:68:53:cf:8f:22:ec:5b:
2d:b4:1a:32:57:8f:43:45:1e:e2:eb:45:b6:23:8f:d8:49:e0:
e5:ae:b2:cc:e1:30:05:de:f9:f0:93:72:d6:f8:09:6e:fe:0c:
41:a3:eb:98:e8:37:f5:3f:3d:fd:4a:a8:fa:1b:e4:b8:55:2a:
8e:a8:42:b4:29:bf:bb:92:20:b6:cc:39:0d:84:4f:b9:36:c9:
c9:b5:6e:2f:8e:18:60:d3:18:31:89:a3:b0:88:34:77:e2:60:
4c:f0:3f:7a:12:20:8f:a2:7d:a5:85:7f:e7:89:29:eb:89:03:
5f:8b:5c:ce:12:cd:d7:41:5c:98:ca:2f:d6:c1:08:7f:cb:02:
a6:71:75:da:97:1b:88:0c:c2:53:49:b2:ec:39:77:bb:9f:09:
45:9f:2f:96:11:e2:4c:e0:f4:12:51:58:4a:25:bd:60:9c:18:
26:0f:48:c9:a1:f1:cc:12:55:d6:bb:8e:1e:cb:76:0a:06:10:
38:82:2f:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMlfDt+4uOsYAM1UA5SRYN1DJDqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3
QjA2OTRGQjAeFw0yNjA1MTIwNDUwMDBaFw0yNjA1MTMwNzAwMDBaMDMxMTAvBgNV
BAMTKDZGMUYxRTU2NDZGNjQyMDQzQkEyNzBEQkU4MkIzMjYyMzBCQjUyQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoOPdkQk+wDngEh+5i/PPpEAVI
G9J2g440Uav7NKd0ywPigL+te8dmtKN3JSJ7Gz7Hj+ktR+ptsJ912R8Qcyg4o4o8
5jD5QbHBj9QzeohjhbdIUZsY/Fxq5W9pOjyGbigeoHKYgx7WpQO2n3oDIeNAnc38
UHyq89DV6Kea9P3nFyqeQj6uQ1uubNzLRPzbIj7FvhgN1ZoCE+42mwe+xIvbWL6b
1DZjz1Y6v8oZ7Nnx0nnvd6lDgHcuQhlYcfA8mIUhlL9+WdG7IajtYpPoGPVVl4qV
pPHd68EOD+6HFSEk0L7ratAavx5gRowIalpeaVl0XsJzYpzbQYJve4P9KWj/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbx8eVkb2QgQ7onDb6CsyYjC7Us4wHwYDVR0j
BBgwFoAUBB54oYaFb92ywOxR0CNPKXsGlPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWJhZWJmYjMtZTI5Yi00N2M0LWJkMjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4
Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3QjA2OTRGQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNDFFNzhBMTg2ODU2RkREQjJDMEVDNTFEMDIzNEYyOTdCMDY5
NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk
MjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRG
Mjk3QjA2OTRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFkakZObiyUhHxEbHrRX+oD9vyo3v/Yv4SxV
/KWpkk2mO1tDaUG638R0iToSsHLkC3OB2GF7EJ6rHFB8HOFXP8L/aFPPjyLsWy20
GjJXj0NFHuLrRbYjj9hJ4OWusszhMAXe+fCTctb4CW7+DEGj65joN/U/Pf1KqPob
5LhVKo6oQrQpv7uSILbMOQ2ET7k2ycm1bi+OGGDTGDGJo7CINHfiYEzwP3oSII+i
faWFf+eJKeuJA1+LXM4SzddBXJjKL9bBCH/LAqZxddqXG4gMwlNJsuw5d7ufCUWf
L5YR4kzg9BJRWEolvWCcGCYPSMmh8cwSVda7jh7LdgoGEDiCLxU=
-----END CERTIFICATE-----
Generated at Tue May 12 22:13:23 2026 by rpki-client