
$ rpki-client -vvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft
File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json)
Hash identifier: LZ9b/BHpa6NrAKemNhBNAat0iDwqsy90noBVmdOgF8A=
Subject key identifier: 64:99:F8:58:CA:DE:A8:BF:03:BC:F6:30:A3:04:62:A1:4A:F0:C1:3B
Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23
Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23
Certificate serial: 31BC8C9B63C05BABB13D413C9CC651A1325E7F43
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft
Manifest number: 55
Signing time: Sat 04 Jul 2026 04:48:34 +0000
Manifest this update: Sat 04 Jul 2026 04:43:34 +0000
Manifest next update: Sun 05 Jul 2026 07:53:34 +0000
Files and hashes: 1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=)
2: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: kWEzgtHsvFwzx5pUvE5kOai+inSDkSNdiCDLxfswxeI=)
3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl
rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jul 2026 05:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bc:8c:9b:63:c0:5b:ab:b1:3d:41:3c:9c:c6:51:a1:32:5e:7f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23
Validity
Not Before: Jul 4 04:43:34 2026 GMT
Not After : Jul 5 07:53:34 2026 GMT
Subject: CN=6499F858CADEA8BF03BCF630A30462A14AF0C13B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:03:c5:35:c7:ca:49:0d:5f:cb:27:ca:65:
46:b1:c8:6f:3b:14:21:18:6f:af:a0:dd:87:9d:27:
aa:42:2f:d7:1c:26:f4:43:37:48:1c:ba:90:c0:a8:
7a:9a:7d:47:d7:fd:5f:9c:43:6d:07:e1:1c:02:b9:
23:50:be:55:f1:f8:f9:46:db:d8:70:5a:3f:68:51:
8b:ed:16:31:c5:3f:31:81:45:7c:90:5a:bc:b7:2c:
d4:2c:dc:83:47:12:63:a8:c0:37:80:6d:85:89:e4:
d1:d1:0d:de:89:26:05:1b:51:b1:0d:e1:b0:48:89:
5a:b7:c9:b0:43:45:0d:31:8f:70:a5:74:06:0e:df:
02:89:61:71:27:7d:51:45:40:ef:a9:6b:94:ef:44:
ed:53:dc:62:f0:a3:31:9a:b2:c4:5b:f8:7d:58:1f:
4f:8e:1d:fd:fd:74:2e:a0:10:3e:fa:d4:2a:f1:2d:
97:f8:9b:45:f2:13:3f:35:37:b9:5f:c5:ba:9c:26:
dd:c4:c7:38:c7:36:0f:b7:e5:15:02:ae:c7:de:6a:
21:ba:bb:50:31:4b:f6:db:c5:d5:b2:b3:32:08:01:
4c:f8:88:4f:88:32:ac:40:49:0d:74:b7:36:2a:9d:
f6:f4:a7:58:7e:11:f6:a6:2c:30:64:db:77:2d:d1:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:F8:58:CA:DE:A8:BF:03:BC:F6:30:A3:04:62:A1:4A:F0:C1:3B
X509v3 Authority Key Identifier:
keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:91:9f:b6:49:09:d6:92:74:91:31:2d:15:c7:db:cf:da:6d:
0a:f0:fa:cd:a7:e7:37:bf:b0:df:00:66:f4:13:57:61:da:ec:
08:23:e9:b1:0c:02:3e:11:ac:0f:37:5f:27:fe:84:e6:c6:d3:
64:a5:28:ea:62:d9:47:87:e5:07:69:b4:1d:d9:80:40:0f:78:
c8:44:75:e4:92:94:ce:9c:75:33:3d:f9:72:1f:c8:98:4d:62:
d2:ab:80:4e:30:3a:6c:41:5f:ea:61:04:50:0a:13:88:02:d8:
b2:e8:57:39:f4:53:e8:e0:75:25:3a:5e:e5:f8:7e:e2:4f:b4:
7d:44:b0:df:a8:47:ae:4b:07:50:de:25:60:56:4d:c0:0c:cb:
08:8d:03:83:b8:c2:45:4f:61:cb:c4:90:24:6b:86:5e:d2:07:
3e:1c:d5:25:33:35:e5:1a:81:7c:2f:e6:2d:bc:95:57:5a:e4:
38:07:4f:64:bb:61:c1:51:5f:6d:fe:1c:ed:9a:fc:76:1a:8e:
39:2d:ce:ef:bd:fd:ad:19:bf:aa:06:24:b3:79:cd:d0:a9:65:
3a:89:67:34:8c:0d:ef:6c:b1:f0:d0:ce:e1:92:a0:52:6a:ed:
62:12:b6:72:88:ed:75:6f:91:22:8e:9a:67:5b:e0:ba:39:36:
10:14:76:ee
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMbyMm2PAW6uxPUE8nMZRoTJef0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE
NzYyMkQyMzAeFw0yNjA3MDQwNDQzMzRaFw0yNjA3MDUwNzUzMzRaMDMxMTAvBgNV
BAMTKDY0OTlGODU4Q0FERUE4QkYwM0JDRjYzMEEzMDQ2MkExNEFGMEMxM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhsAPFNcfKSQ1fyyfKZUaxyG87
FCEYb6+g3YedJ6pCL9ccJvRDN0gcupDAqHqafUfX/V+cQ20H4RwCuSNQvlXx+PlG
29hwWj9oUYvtFjHFPzGBRXyQWry3LNQs3INHEmOowDeAbYWJ5NHRDd6JJgUbUbEN
4bBIiVq3ybBDRQ0xj3CldAYO3wKJYXEnfVFFQO+pa5TvRO1T3GLwozGassRb+H1Y
H0+OHf39dC6gED761CrxLZf4m0XyEz81N7lfxbqcJt3ExzjHNg+35RUCrsfeaiG6
u1AxS/bbxdWyszIIAUz4iE+IMqxASQ10tzYqnfb0p1h+EfamLDBk23ct0fKhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZJn4WMreqL8DvPYwowRioUrwwTswHwYDVR0j
BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx
Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy
RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2
NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0
MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAASRn7ZJCdaSdJExLRXH28/abQrw+s2n5ze/
sN8AZvQTV2Ha7Agj6bEMAj4RrA83Xyf+hObG02SlKOpi2UeH5QdptB3ZgEAPeMhE
deSSlM6cdTM9+XIfyJhNYtKrgE4wOmxBX+phBFAKE4gC2LLoVzn0U+jgdSU6XuX4
fuJPtH1EsN+oR65LB1DeJWBWTcAMywiNA4O4wkVPYcvEkCRrhl7SBz4c1SUzNeUa
gXwv5i28lVda5DgHT2S7YcFRX23+HO2a/HYajjktzu+9/a0Zv6oGJLN5zdCpZTqJ
ZzSMDe9ssfDQzuGSoFJq7WIStnKI7XVvkSKOmmdb4Lo5NhAUdu4=
-----END CERTIFICATE-----
Generated at Sat Jul 4 21:48:26 2026 by rpki-client