$ rpki-client -vvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: ZO/pyI6yZXO5mnbtRGvhGhXhTOEpO8APvF7nQKBolZU= Subject key identifier: 0B:7D:91:AA:2D:67:AE:0C:4E:A6:E6:D4:5F:33:5A:3A:EA:61:5E:80 Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 0A144CFBC27D05F9BBDE4A578A0CBB3F253990D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: 10 Signing time: Wed 13 May 2026 12:10:04 +0000 Manifest this update: Wed 13 May 2026 12:05:04 +0000 Manifest next update: Thu 14 May 2026 14:40:04 +0000 Files and hashes: 1: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: Ucp5kJMxLJdJOGDDp2TQv8RAHubkNUr8kbY5bPiSnWw=) 2: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) 3: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:14:4c:fb:c2:7d:05:f9:bb:de:4a:57:8a:0c:bb:3f:25:39:90:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: May 13 12:05:04 2026 GMT Not After : May 14 14:40:04 2026 GMT Subject: CN=0B7D91AA2D67AE0C4EA6E6D45F335A3AEA615E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:ad:00:25:9d:d2:79:ee:2d:0d:af:7a:95: 8e:52:5f:24:61:18:1b:12:38:a6:92:59:13:4b:a3: 8d:58:39:79:a7:8a:fa:22:07:e8:05:97:19:21:cd: 81:6d:46:74:6d:34:f0:f5:f7:25:1f:d6:31:59:8a: 02:b9:1e:a9:a4:33:b0:12:38:34:ea:37:cb:30:69: d7:71:91:57:c1:04:4e:af:77:81:02:86:da:65:99: df:ac:18:ff:bd:1d:8e:07:01:a9:90:f3:d9:ef:a8: 16:f3:49:0d:30:4f:9d:1b:32:31:28:5b:d8:8f:86: 01:1d:2d:dc:7e:39:74:34:81:22:89:1e:c0:93:a0: fe:bb:b0:fa:39:9f:fa:dc:27:d4:ba:31:91:20:f0: 15:93:f4:83:2f:dc:e6:2f:28:d0:68:5a:c8:d7:c5: 8f:c2:96:f4:26:73:ec:b8:a3:e5:62:69:aa:55:b5: 36:f6:66:2c:5d:73:09:7c:82:c3:a3:69:59:25:50: d4:7f:ed:6e:20:71:6c:59:b6:b0:c4:cd:ac:ad:c9: 26:d1:8e:e9:25:21:7c:5e:2d:ab:96:85:8a:ee:d3: 78:51:d3:8b:67:7e:44:aa:83:c5:a1:e7:24:89:94: 79:6f:83:c2:02:84:92:33:0b:e3:69:d5:c1:2f:5b: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7D:91:AA:2D:67:AE:0C:4E:A6:E6:D4:5F:33:5A:3A:EA:61:5E:80 X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b8:ed:a2:b3:d9:57:4b:56:5a:a1:9f:77:4b:bf:3f:55:76: 1b:95:47:7c:f4:c7:f4:fe:09:61:d7:a5:f2:54:0d:5b:b2:70: 1c:32:08:fc:91:f9:c2:ab:99:64:8d:5f:f1:a0:4a:f8:35:d9: 7a:2e:03:e0:32:3a:12:ee:1b:09:d5:d9:0f:de:df:c0:c0:cd: 1e:4d:99:43:4c:e0:16:b4:79:a3:9b:5f:d1:12:7e:70:9a:dc: 3b:2f:86:8e:49:ad:f5:fb:b1:fd:1b:6e:e1:a4:27:1e:d3:08: b4:60:6a:c8:ba:4b:ce:8d:3a:d1:ee:d9:90:ec:4e:f4:97:d5: 87:85:b3:2d:96:9b:d8:4e:bd:a0:53:83:c3:a0:c3:a8:0a:08: 2e:9c:cd:93:5a:db:7c:03:ec:1f:94:02:fd:ab:95:92:ca:42: 5f:1f:d8:89:4c:2b:b3:64:d7:18:d0:04:49:8e:08:f7:ee:81: e9:b0:c6:30:d3:47:04:5d:87:34:fe:c4:2b:42:3c:19:d1:d7: bc:8d:15:34:41:ab:9d:c8:b1:30:bf:85:57:5a:2e:5d:9f:cd: ee:14:1a:eb:86:69:08:76:f8:14:ac:e0:98:e8:08:f6:72:cc: fb:39:52:ef:f6:40:ec:44:d6:65:5a:f7:7d:86:c1:b2:74:3d: 1b:b0:8a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChRM+8J9Bfm73kpXigy7PyU5kNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjA1MTMxMjA1MDRaFw0yNjA1MTQxNDQwMDRaMDMxMTAvBgNV BAMTKDBCN0Q5MUFBMkQ2N0FFMEM0RUE2RTZENDVGMzM1QTNBRUE2MTVFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTz60AJZ3See4tDa96lY5SXyRh GBsSOKaSWRNLo41YOXmnivoiB+gFlxkhzYFtRnRtNPD19yUf1jFZigK5HqmkM7AS ODTqN8swaddxkVfBBE6vd4EChtplmd+sGP+9HY4HAamQ89nvqBbzSQ0wT50bMjEo W9iPhgEdLdx+OXQ0gSKJHsCToP67sPo5n/rcJ9S6MZEg8BWT9IMv3OYvKNBoWsjX xY/ClvQmc+y4o+ViaapVtTb2Zixdcwl8gsOjaVklUNR/7W4gcWxZtrDEzaytySbR juklIXxeLauWhYru03hR04tnfkSqg8Wh5ySJlHlvg8IChJIzC+Np1cEvW3oBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC32Rqi1nrgxOpubUXzNaOuphXoAwHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe47aKz2VdLVlqhn3dLvz9VdhuVR3z0x/T+ CWHXpfJUDVuycBwyCPyR+cKrmWSNX/GgSvg12XouA+AyOhLuGwnV2Q/e38DAzR5N mUNM4Ba0eaObX9ESfnCa3Dsvho5JrfX7sf0bbuGkJx7TCLRgasi6S86NOtHu2ZDs TvSX1YeFsy2Wm9hOvaBTg8Ogw6gKCC6czZNa23wD7B+UAv2rlZLKQl8f2IlMK7Nk 1xjQBEmOCPfugemwxjDTRwRdhzT+xCtCPBnR17yNFTRBq53IsTC/hVdaLl2fze4U GuuGaQh2+BSs4JjoCPZyzPs5Uu/2QOxE1mVa932GwbJ0PRuwinY= -----END CERTIFICATE-----Generated at Thu May 14 02:48:35 2026 by rpki-client