$ rpki-client -vvvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft File: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json) Hash identifier: UfN3QxbgDpjG2mnMIcFP+pLsDnbmO/PLFD5WTv9H39k= Subject key identifier: 7E:46:8F:1B:46:73:CC:CC:C8:97:47:67:D0:18:CC:51:81:50:DD:1C Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A Certificate issuer: /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Certificate serial: 073AACF44D52081F383B7101430CA58E0865E784 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 00:05:19 +0000 Manifest this update: Fri 25 Sep 2026 00:00:19 +0000 Manifest next update: Sat 26 Sep 2026 02:51:19 +0000 Files and hashes: 1: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: qA3CiNiA+XUrOKmxk6ljjF9nuk8+fU8gehYZl/WgX/4=) 2: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=) 3: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=) 4: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3a:ac:f4:4d:52:08:1f:38:3b:71:01:43:0c:a5:8e:08:65:e7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Validity Not Before: Sep 25 00:00:19 2026 GMT Not After : Sep 26 02:51:19 2026 GMT Subject: CN=7E468F1B4673CCCCC8974767D018CC518150DD1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:20:de:50:d9:1e:2a:05:97:6d:a4:7a:41: d1:c3:bc:89:0d:69:2c:95:1b:9a:ad:f2:68:5a:cc: ad:d3:cf:52:09:00:43:1b:ab:77:4e:92:50:e0:16: 78:52:55:70:60:b9:83:fc:72:87:2e:e1:5c:41:93: df:69:ba:4b:ef:15:35:88:61:0e:cb:ad:df:47:c9: d5:b1:0d:9a:a9:51:6b:ab:29:ce:1d:b6:ea:ca:9d: 3a:b6:28:ad:5a:24:ff:3a:ca:1d:bd:61:2f:35:70: 61:36:49:84:0d:1d:c0:e9:36:aa:2e:93:3d:d8:87: 38:26:5f:5c:70:69:3d:11:1d:da:ed:b6:f4:0d:16: 5f:c2:79:0d:ab:05:8f:78:73:08:d3:2d:25:40:26: e6:be:6b:d6:55:6e:b8:51:06:9c:5a:e7:03:5c:b1: c7:f8:ab:55:59:15:d6:5b:4a:00:7f:7c:b6:6d:f4: f5:f4:28:03:1b:9c:c4:f3:f8:1b:1a:d5:73:2d:91: 48:8f:ba:1b:a2:68:c1:2e:3f:cd:aa:ab:fd:37:02: 30:e3:4f:dc:a5:46:4b:e4:59:df:73:ee:d1:0c:a2: 4f:04:1c:75:4d:45:3b:72:c8:af:e5:b1:e7:ce:3d: f1:f7:8f:93:de:bc:51:c1:54:4f:f9:7c:3e:df:96: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:46:8F:1B:46:73:CC:CC:C8:97:47:67:D0:18:CC:51:81:50:DD:1C X509v3 Authority Key Identifier: keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0c:49:0e:47:a6:d0:45:07:69:cf:90:76:c8:a6:1b:47:87: 09:c6:00:80:ae:9e:4f:dd:c2:28:aa:07:e5:bb:1d:94:b6:38: 9a:4f:cb:43:df:f8:84:53:d2:3f:f1:44:17:e2:7a:48:60:30: 74:d9:0c:b2:01:5d:04:60:99:df:20:4a:76:e8:de:df:cf:ef: 64:e7:d0:0f:10:33:8c:88:72:db:e7:6e:30:a7:86:e6:bc:4e: 06:df:18:33:17:22:64:a3:c6:d2:aa:71:ed:5e:b4:2a:1e:d6: b2:4b:5d:a7:df:ad:e4:49:20:26:8c:3a:2d:0d:d1:f8:64:6f: b7:89:ee:55:ae:07:2c:80:d7:24:f0:a0:62:f7:4f:32:62:7d: f8:a7:58:04:9a:fa:13:b5:4e:dc:b0:1a:31:c7:55:0a:40:ef: a9:9f:b4:e3:99:0b:b7:03:68:67:ca:e6:b6:a4:06:b6:ce:db: 0f:73:a6:c6:d3:13:df:20:94:4a:98:0c:08:12:f4:13:32:bb: 2d:48:5a:7e:66:9c:10:3c:75:a4:3b:60:ce:16:db:4b:ce:7c: 08:50:df:28:cf:87:56:4b:2c:46:ee:3c:2c:0a:4f:f0:2f:2e: 23:74:e2:44:00:6e:b0:47:ba:d7:ca:f7:90:a9:38:c6:72:83: 32:4f:6b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzqs9E1SCB84O3EBQwyljghl54QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0REZB MUJBQjQzQTAeFw0yNjA5MjUwMDAwMTlaFw0yNjA5MjYwMjUxMTlaMDMxMTAvBgNV BAMTKDdFNDY4RjFCNDY3M0NDQ0NDODk3NDc2N0QwMThDQzUxODE1MEREMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbSDeUNkeKgWXbaR6QdHDvIkN aSyVG5qt8mhazK3Tz1IJAEMbq3dOklDgFnhSVXBguYP8cocu4VxBk99pukvvFTWI YQ7Lrd9HydWxDZqpUWurKc4dturKnTq2KK1aJP86yh29YS81cGE2SYQNHcDpNqou kz3YhzgmX1xwaT0RHdrttvQNFl/CeQ2rBY94cwjTLSVAJua+a9ZVbrhRBpxa5wNc scf4q1VZFdZbSgB/fLZt9PX0KAMbnMTz+Bsa1XMtkUiPuhuiaMEuP82qq/03AjDj T9ylRkvkWd9z7tEMok8EHHVNRTtyyK/lsefOPfH3j5PevFHBVE/5fD7fli35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfkaPG0ZzzMzIl0dn0BjMUYFQ3RwwHwYDVR0j BBgwFoAUQcCm9zc0/7DH2ZdwGmK036G6tDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc1Mjc3ZTgtN2QwZi00MTg0LTljMjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2Rjcz NzM0RkZCMEM3RDk5NzcwMUE2MkI0REZBMUJBQjQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMwQTZGNzM3MzRGRkIwQzdEOTk3NzAxQTYyQjRERkExQkFC NDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0 REZBMUJBQjQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMMSQ5HptBFB2nPkHbIphtHhwnGAICunk/d wiiqB+W7HZS2OJpPy0Pf+IRT0j/xRBfiekhgMHTZDLIBXQRgmd8gSnbo3t/P72Tn 0A8QM4yIctvnbjCnhua8TgbfGDMXImSjxtKqce1etCoe1rJLXaffreRJICaMOi0N 0fhkb7eJ7lWuByyA1yTwoGL3TzJiffinWASa+hO1TtywGjHHVQpA76mftOOZC7cD aGfK5rakBrbO2w9zpsbTE98glEqYDAgS9BMyuy1IWn5mnBA8daQ7YM4W20vOfAhQ 3yjPh1ZLLEbuPCwKT/AvLiN04kQAbrBHutfK95CpOMZygzJPa5k= -----END CERTIFICATE-----Generated at Fri Sep 25 08:04:23 2026 by rpki-client