$ rpki-client -vvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft File: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json) Hash identifier: U1SCCP8ONW2TVgRuW3XGv2DpP8JzLb66jtnHv76i9zY= Subject key identifier: 97:31:D7:6B:CE:2F:37:57:9F:3D:EB:EB:BA:90:EC:93:3A:6A:7A:9C Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A Certificate issuer: /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Certificate serial: 0199F777D3EF5357ECE1752FB5267F402558D492 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:23:58 +0000 Manifest this update: Tue 12 May 2026 21:18:58 +0000 Manifest next update: Wed 13 May 2026 22:23:58 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=) 2: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: CEIigO2u0Q3lj8uXsCAv1u8ew5nsMl7jQSdqoIOMgRU=) 3: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=) 4: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:f7:77:d3:ef:53:57:ec:e1:75:2f:b5:26:7f:40:25:58:d4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Validity Not Before: May 12 21:18:58 2026 GMT Not After : May 13 22:23:58 2026 GMT Subject: CN=9731D76BCE2F37579F3DEBEBBA90EC933A6A7A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:93:a9:c2:8a:36:aa:17:cd:15:95:ea:bb: 34:06:a7:a3:1e:e3:6c:ce:77:09:3d:a2:34:2c:fb: 8c:e5:41:2f:f2:3d:2f:5c:d5:0a:7e:38:da:eb:99: 3a:69:a1:6a:f5:ac:4b:9d:49:c3:a6:8a:62:92:7c: 7b:b8:d3:36:4d:ff:68:b6:c7:63:76:b8:6c:d8:67: 37:39:34:9d:43:e2:b1:ed:bb:3e:bf:0a:84:5e:06: 87:aa:4c:33:66:86:e9:93:3e:af:98:72:ac:af:0d: 29:93:77:33:bb:c5:b1:7a:e5:d7:1b:06:d2:9c:bb: ae:23:81:6c:7d:48:ac:0c:a5:a0:d1:ad:4e:2e:3e: bd:48:a6:96:09:dd:5f:89:bb:34:6f:36:65:e7:1a: cb:56:49:93:a6:06:06:cd:36:6f:82:b9:48:07:97: 0e:9a:4e:f8:94:c3:b1:10:45:63:f1:92:b5:91:06: 2b:01:3c:e9:fb:1b:ae:96:43:db:f7:f4:bc:54:d5: 74:bf:4f:47:02:df:39:6f:36:fc:50:17:ba:86:b6: 35:f0:4e:35:18:1b:7d:b5:dd:39:47:14:e7:24:0c: 5d:92:ad:e5:a2:25:7b:65:6b:37:ee:82:a8:3c:74: de:d7:df:72:26:6d:c4:26:01:72:2e:f6:7a:26:1e: a2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:31:D7:6B:CE:2F:37:57:9F:3D:EB:EB:BA:90:EC:93:3A:6A:7A:9C X509v3 Authority Key Identifier: keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:22:45:ee:0a:bc:57:92:ad:0e:fa:df:10:a5:98:9b:7c:ff: 39:eb:d5:d0:35:61:31:78:1a:47:95:05:79:ce:59:26:17:73: f6:f4:56:ea:ef:cd:51:2f:0d:e6:63:4a:6b:46:a1:b7:ce:c3: f4:b9:67:57:51:b2:fc:6d:5e:cf:8e:22:f6:2c:03:63:1e:66: 7c:1d:fb:1a:21:eb:03:a1:34:f0:17:73:f7:c4:48:89:c0:0e: c3:a3:0a:3b:4c:c6:de:e3:55:93:62:5d:1c:18:a7:6c:ab:74: 61:8d:0d:0a:b0:b7:d7:88:a8:4c:c1:b7:6b:28:e7:ad:73:4f: 1e:5d:68:45:b0:47:94:71:8f:b8:46:dc:ee:f9:18:58:81:16: c1:03:8c:b2:74:5b:8c:db:72:6b:08:dc:cd:a0:12:58:df:3a: 06:41:54:ce:71:63:8c:15:b3:33:2e:95:12:ad:d6:91:ae:ee: 94:68:03:4b:77:7c:f5:0d:f4:48:da:a5:c5:e5:58:17:90:7a: de:63:53:85:e5:99:ea:64:73:e7:e3:b6:49:67:5f:c1:db:53: 2e:c7:9e:b6:d7:54:3d:d1:b5:b3:e1:6e:ff:be:d0:53:1d:26: 42:80:de:0b:1d:a7:50:d4:19:b3:39:5b:0c:8b:02:95:28:82: 69:cb:b2:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZn3d9PvU1fs4XUvtSZ/QCVY1JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0REZB MUJBQjQzQTAeFw0yNjA1MTIyMTE4NThaFw0yNjA1MTMyMjIzNThaMDMxMTAvBgNV BAMTKDk3MzFENzZCQ0UyRjM3NTc5RjNERUJFQkJBOTBFQzkzM0E2QTdBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2PpOpwoo2qhfNFZXquzQGp6Me 42zOdwk9ojQs+4zlQS/yPS9c1Qp+ONrrmTppoWr1rEudScOmimKSfHu40zZN/2i2 x2N2uGzYZzc5NJ1D4rHtuz6/CoReBoeqTDNmhumTPq+YcqyvDSmTdzO7xbF65dcb BtKcu64jgWx9SKwMpaDRrU4uPr1IppYJ3V+JuzRvNmXnGstWSZOmBgbNNm+CuUgH lw6aTviUw7EQRWPxkrWRBisBPOn7G66WQ9v39LxU1XS/T0cC3zlvNvxQF7qGtjXw TjUYG3213TlHFOckDF2SreWiJXtlazfugqg8dN7X33ImbcQmAXIu9nomHqIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlzHXa84vN1efPevrupDskzpqepwwHwYDVR0j BBgwFoAUQcCm9zc0/7DH2ZdwGmK036G6tDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc1Mjc3ZTgtN2QwZi00MTg0LTljMjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2Rjcz NzM0RkZCMEM3RDk5NzcwMUE2MkI0REZBMUJBQjQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMwQTZGNzM3MzRGRkIwQzdEOTk3NzAxQTYyQjRERkExQkFC NDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0 REZBMUJBQjQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0iRe4KvFeSrQ763xClmJt8/znr1dA1YTF4 GkeVBXnOWSYXc/b0VurvzVEvDeZjSmtGobfOw/S5Z1dRsvxtXs+OIvYsA2MeZnwd +xoh6wOhNPAXc/fESInADsOjCjtMxt7jVZNiXRwYp2yrdGGNDQqwt9eIqEzBt2so 561zTx5daEWwR5Rxj7hG3O75GFiBFsEDjLJ0W4zbcmsI3M2gEljfOgZBVM5xY4wV szMulRKt1pGu7pRoA0t3fPUN9EjapcXlWBeQet5jU4Xlmepkc+fjtklnX8HbUy7H nrbXVD3RtbPhbv++0FMdJkKA3gsdp1DUGbM5WwyLApUogmnLsmQ= -----END CERTIFICATE-----Generated at Wed May 13 03:16:40 2026 by rpki-client