$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft File: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft (raw, json) Hash identifier: xGuvlR3a4OaSlUK3968mYh3vMA4wAL7jH+BlSBCX230= Subject key identifier: B3:FF:72:17:E4:14:FC:1C:EF:53:B0:99:CE:71:71:4F:CA:BB:2F:5E Authority key identifier: 41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED Certificate issuer: /CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Certificate serial: 6EC9BFEA2279AE2208327E63A6FCDE80AD0FF2AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:02:04 +0000 Manifest this update: Wed 23 Sep 2026 20:57:04 +0000 Manifest next update: Thu 24 Sep 2026 22:04:04 +0000 Files and hashes: 1: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl (hash: tpHHC6oy6TVMtMAHW4ZQj7RO+VOaAp3XW4qec5sa1Fw=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: AheQBKSQ2I3wH55R9fGq5yq1Y0JimW9uyTq22nxAO5s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c9:bf:ea:22:79:ae:22:08:32:7e:63:a6:fc:de:80:ad:0f:f2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Validity Not Before: Sep 23 20:57:04 2026 GMT Not After : Sep 24 22:04:04 2026 GMT Subject: CN=B3FF7217E414FC1CEF53B099CE71714FCABB2F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:12:d6:c6:a5:02:95:f0:0b:64:4e:b3:84:bd: 93:36:ae:dc:00:85:b4:63:f1:10:2a:38:36:02:2e: e0:af:10:6d:f4:aa:5a:5c:90:43:d2:e0:dc:c5:c9: bc:86:78:48:19:76:68:bf:13:38:e0:77:9e:74:42: eb:8a:a4:8c:73:4c:35:32:b8:41:2b:3d:55:45:42: 8d:02:b7:e2:78:3c:75:48:11:03:7d:16:2b:0c:5b: ef:fe:81:f6:00:9e:96:da:31:d9:1f:8f:d6:bf:f7: b1:f8:62:70:29:e7:5c:40:bb:64:85:8a:19:3e:db: ab:ff:9a:fd:54:e5:c9:98:d7:aa:e9:d9:fa:cb:0b: 40:a3:20:43:ae:f1:31:58:94:6c:d3:d5:9a:03:f1: 8f:43:b8:a0:82:0b:46:6f:f0:2f:31:e3:9b:c9:b8: d1:d1:1e:17:4b:70:37:e6:15:bc:98:67:e0:e0:fe: 8b:f1:92:07:c4:e8:cf:46:74:7a:3a:f0:fd:07:c9: b9:c3:34:64:cc:75:d0:95:c6:f7:96:a2:26:d8:76: 7c:ba:0c:b9:6c:cb:67:5a:d9:ba:af:f6:20:10:5c: 61:0f:33:17:0c:db:50:d1:e2:1a:e4:0e:f0:0b:bf: 48:78:ff:29:14:2f:15:0a:7d:9f:21:51:02:ff:be: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FF:72:17:E4:14:FC:1C:EF:53:B0:99:CE:71:71:4F:CA:BB:2F:5E X509v3 Authority Key Identifier: keyid:41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d4:ed:0c:57:39:dc:49:9b:e0:d9:11:44:1b:08:2a:15:3f: ce:30:c4:d6:2e:44:55:fe:8d:0e:fe:b4:18:95:42:83:78:1b: 4d:7c:38:08:e0:44:01:13:78:a4:3c:7e:55:4e:ad:f9:69:d2: ef:fc:5c:c7:a4:bf:ab:02:94:d8:65:23:50:10:5c:58:7d:ee: ed:e5:6d:71:7c:60:6f:be:da:6c:d7:98:36:c9:55:15:f2:80: 6d:01:da:c5:01:65:4b:4c:c6:27:2f:d3:c5:01:9c:59:cd:64: 3e:1a:9f:ff:05:ba:10:05:ce:a9:0c:4b:0c:c3:39:47:59:5a: fc:bc:ab:b9:bd:df:3c:d3:7f:1b:d1:ee:8a:d1:10:ee:74:ce: 2f:c9:2d:4e:fd:cc:a5:fd:5d:54:06:c3:f8:9f:b3:04:c8:64: e6:26:4a:f8:60:cb:63:47:89:a3:c1:4c:cc:2c:ee:52:90:a9: 46:72:d3:66:38:3d:c7:a0:29:3b:51:7f:41:32:4e:8f:39:ba: 3e:f6:0a:f5:f5:9b:ee:11:e3:76:8d:6b:71:3d:18:83:2a:12: 54:f5:59:fe:9c:1e:ef:e8:6b:47:ba:71:db:b8:ef:a2:f9:a8: 6e:58:02:af:9e:94:08:16:1b:32:00:87:f4:ad:83:6c:bf:38: 54:dc:cb:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsm/6iJ5riIIMn5jpvzegK0P8qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNCQTk1 NjBEMzhFRDAeFw0yNjA5MjMyMDU3MDRaFw0yNjA5MjQyMjA0MDRaMDMxMTAvBgNV BAMTKEIzRkY3MjE3RTQxNEZDMUNFRjUzQjA5OUNFNzE3MTRGQ0FCQjJGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEtbGpQKV8AtkTrOEvZM2rtwA hbRj8RAqODYCLuCvEG30qlpckEPS4NzFybyGeEgZdmi/Ezjgd550QuuKpIxzTDUy uEErPVVFQo0Ct+J4PHVIEQN9FisMW+/+gfYAnpbaMdkfj9a/97H4YnAp51xAu2SF ihk+26v/mv1U5cmY16rp2frLC0CjIEOu8TFYlGzT1ZoD8Y9DuKCCC0Zv8C8x45vJ uNHRHhdLcDfmFbyYZ+Dg/ovxkgfE6M9GdHo68P0HybnDNGTMddCVxveWoibYdny6 DLlsy2da2bqv9iAQXGEPMxcM21DR4hrkDvALv0h4/ykULxUKfZ8hUQL/vnvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/9yF+QU/BzvU7CZznFxT8q7L14wHwYDVR0j BBgwFoAUQf5ngj9TWO89X5tPBPvLqVYNOO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlYzJjYjYtMzVhZC00MTAxLTk4MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIz RjUzNThFRjNENUY5QjRGMDRGQkNCQTk1NjBEMzhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUZFNjc4MjNGNTM1OEVGM0Q1RjlCNEYwNEZCQ0JBOTU2MEQz OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNC QTk1NjBEMzhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3U7QxXOdxJm+DZEUQbCCoVP84wxNYuRFX+ jQ7+tBiVQoN4G018OAjgRAETeKQ8flVOrflp0u/8XMekv6sClNhlI1AQXFh97u3l bXF8YG++2mzXmDbJVRXygG0B2sUBZUtMxicv08UBnFnNZD4an/8FuhAFzqkMSwzD OUdZWvy8q7m93zzTfxvR7orREO50zi/JLU79zKX9XVQGw/ifswTIZOYmSvhgy2NH iaPBTMws7lKQqUZy02Y4PcegKTtRf0EyTo85uj72CvX1m+4R43aNa3E9GIMqElT1 Wf6cHu/oa0e6cdu476L5qG5YAq+elAgWGzIAh/Stg2y/OFTcy8Q= -----END CERTIFICATE-----Generated at Thu Sep 24 00:28:46 2026 by rpki-client