$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft File: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft (raw, json) Hash identifier: ZIYtfswIM2Zmgqvqk7SWk7Ke469TKLpAzPjVDmA11oE= Subject key identifier: 9B:09:FD:54:6A:93:B3:59:9F:07:F9:95:55:16:BB:93:DF:31:F3:68 Authority key identifier: 41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED Certificate issuer: /CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Certificate serial: 7604A294F71A333AFE5C580ACF8A55CFCDEC4372 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:22:31 +0000 Manifest this update: Tue 12 May 2026 03:17:31 +0000 Manifest next update: Wed 13 May 2026 06:09:31 +0000 Files and hashes: 1: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl (hash: IlOn+rHyanntI+2YOVkV74baTsVkGCc+CnDKWVppaW4=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: AheQBKSQ2I3wH55R9fGq5yq1Y0JimW9uyTq22nxAO5s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:04:a2:94:f7:1a:33:3a:fe:5c:58:0a:cf:8a:55:cf:cd:ec:43:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Validity Not Before: May 12 03:17:31 2026 GMT Not After : May 13 06:09:31 2026 GMT Subject: CN=9B09FD546A93B3599F07F9955516BB93DF31F368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:94:c5:ae:b0:78:4a:c5:df:99:eb:f9:49: 02:3d:bb:60:1e:4b:04:c5:5d:4b:4b:ab:29:71:fd: 86:c9:5a:09:3d:17:53:9e:c6:ab:8b:1e:f1:b6:a2: d2:6a:c0:dd:5c:4b:7a:32:78:fa:63:b5:a3:d7:3b: 6b:d3:32:92:bf:fc:f8:86:6d:31:16:46:5d:49:0e: 62:bf:f1:b1:6a:ac:3f:da:1c:a6:9e:f5:b8:f0:55: a6:58:85:19:1b:88:0c:ae:8e:c7:0d:b0:a1:0c:fc: d5:9c:c0:9c:ff:b1:58:62:56:9f:18:e3:48:a6:89: fe:43:4d:8c:25:ad:b9:13:51:19:6a:c2:c4:5b:2c: 0e:a6:f8:dc:e0:f3:1b:eb:1e:27:72:12:1f:3d:22: 55:ef:58:42:1c:8a:c0:22:3d:62:1a:e0:76:25:d2: be:c1:a0:42:25:3b:75:36:47:e8:61:64:68:b3:72: b2:14:23:0d:f5:71:c5:d5:08:ce:38:78:55:84:b8: 1f:c9:b8:6a:7a:d0:54:ca:21:21:aa:30:31:00:68: 6c:d9:a5:21:bc:bb:08:e2:82:c0:8e:09:ab:79:a5: 2c:dc:de:75:f1:4a:95:b6:73:f7:94:93:2f:24:07: ec:14:37:d3:04:84:aa:72:e3:93:3c:eb:69:4b:8e: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:09:FD:54:6A:93:B3:59:9F:07:F9:95:55:16:BB:93:DF:31:F3:68 X509v3 Authority Key Identifier: keyid:41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:fe:d6:91:bd:fb:b5:a2:b5:23:49:5e:84:9a:16:d0:9f:56: e7:b0:ec:0a:00:60:8c:26:f0:df:44:66:aa:de:b7:be:1e:b2: 63:99:3a:2a:08:5d:94:d7:35:21:81:89:28:ce:26:40:a2:9f: 89:9e:7b:ab:28:26:cb:f0:d9:a6:c7:5b:d9:f8:2f:d9:98:25: ce:0c:81:e5:bb:e6:b6:45:55:b1:5b:3f:35:48:78:6c:9e:e8: 60:a0:e3:46:15:15:ec:b8:7b:de:ea:5f:83:4a:d2:38:51:8a: 27:7f:b0:95:9c:16:9e:dd:00:6c:ed:9b:ea:f1:d4:f6:73:6a: 0b:18:f6:2c:52:77:1d:c3:92:cd:3c:52:ac:d7:38:f1:c7:40: ab:3b:af:78:d8:87:4a:67:d8:dd:c3:db:93:49:9d:ee:0e:ba: 6f:84:01:87:28:80:28:cb:7b:b6:01:15:c5:a6:70:6d:f5:1d: 97:fb:60:3c:86:22:db:b3:92:80:c1:ea:48:bb:b7:7c:19:87: de:12:83:6a:fb:9d:7e:2b:a6:a6:b0:cc:7a:5f:50:bd:3d:80: 38:b0:16:03:60:90:24:8d:95:bd:0d:3d:f9:57:72:c1:0e:36: dd:b9:a2:ed:bb:0e:5b:19:35:a3:0b:af:c4:aa:4f:f2:1d:b4: c9:a4:b9:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgSilPcaMzr+XFgKz4pVz83sQ3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNCQTk1 NjBEMzhFRDAeFw0yNjA1MTIwMzE3MzFaFw0yNjA1MTMwNjA5MzFaMDMxMTAvBgNV BAMTKDlCMDlGRDU0NkE5M0IzNTk5RjA3Rjk5NTU1MTZCQjkzREYzMUYzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WpTFrrB4SsXfmev5SQI9u2Ae SwTFXUtLqylx/YbJWgk9F1OexquLHvG2otJqwN1cS3oyePpjtaPXO2vTMpK//PiG bTEWRl1JDmK/8bFqrD/aHKae9bjwVaZYhRkbiAyujscNsKEM/NWcwJz/sVhiVp8Y 40imif5DTYwlrbkTURlqwsRbLA6m+Nzg8xvrHidyEh89IlXvWEIcisAiPWIa4HYl 0r7BoEIlO3U2R+hhZGizcrIUIw31ccXVCM44eFWEuB/JuGp60FTKISGqMDEAaGzZ pSG8uwjigsCOCat5pSzc3nXxSpW2c/eUky8kB+wUN9MEhKpy45M862lLjrpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmwn9VGqTs1mfB/mVVRa7k98x82gwHwYDVR0j BBgwFoAUQf5ngj9TWO89X5tPBPvLqVYNOO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlYzJjYjYtMzVhZC00MTAxLTk4MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIz RjUzNThFRjNENUY5QjRGMDRGQkNCQTk1NjBEMzhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUZFNjc4MjNGNTM1OEVGM0Q1RjlCNEYwNEZCQ0JBOTU2MEQz OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNC QTk1NjBEMzhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALz+1pG9+7WitSNJXoSaFtCfVuew7AoAYIwm 8N9EZqret74esmOZOioIXZTXNSGBiSjOJkCin4mee6soJsvw2abHW9n4L9mYJc4M geW75rZFVbFbPzVIeGye6GCg40YVFey4e97qX4NK0jhRiid/sJWcFp7dAGztm+rx 1PZzagsY9ixSdx3Dks08UqzXOPHHQKs7r3jYh0pn2N3D25NJne4Oum+EAYcogCjL e7YBFcWmcG31HZf7YDyGItuzkoDB6ki7t3wZh94Sg2r7nX4rpqawzHpfUL09gDiw FgNgkCSNlb0NPflXcsEONt25ou27DlsZNaMLr8SqT/IdtMmkuao= -----END CERTIFICATE-----Generated at Tue May 12 22:52:27 2026 by rpki-client