$ rpki-client -vvf rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft File: 041E78A186856FDDB2C0EC51D0234F297B0694FB.mft (raw, json) Hash identifier: gN/KVdOiegbAoU2p4FW0/pIFpN4WdqU7gngbBgz0qwQ= Subject key identifier: 1B:20:D7:2F:55:65:F4:CD:26:FA:3F:F5:94:AD:F6:44:51:05:2C:D7 Authority key identifier: 04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB Certificate issuer: /CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Certificate serial: 5CECFA33C1F667EC81D395689B0C31801A77BCAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:07:08 +0000 Manifest this update: Tue 21 Jul 2026 05:02:08 +0000 Manifest next update: Wed 22 Jul 2026 06:44:08 +0000 Files and hashes: 1: 041E78A186856FDDB2C0EC51D0234F297B0694FB.crl (hash: rqnCq1HTuoKJLD1K+Nmh5lodxAAKAhHqHW5XDAaG68w=) 2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: jFMQqts/Xb/kIK8tDhB7Inx5c23uykyP37ClMnrRbng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ec:fa:33:c1:f6:67:ec:81:d3:95:68:9b:0c:31:80:1a:77:bc:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Validity Not Before: Jul 21 05:02:08 2026 GMT Not After : Jul 22 06:44:08 2026 GMT Subject: CN=1B20D72F5565F4CD26FA3FF594ADF64451052CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:2a:35:e9:1a:96:cc:6c:c9:29:8d:e4:38: b8:62:cf:2a:17:ca:79:47:ce:d0:9a:3c:c1:4f:06: 0c:20:3e:d2:25:a7:48:ec:1d:ea:c9:7e:d7:00:93: 93:e6:76:1d:ab:51:a9:1c:c8:ee:7a:a2:65:9d:51: 15:26:b9:73:d1:d8:47:8b:8c:6a:25:6d:13:12:73: c3:6e:61:f6:4c:b5:f1:d3:c2:12:0f:19:ec:ad:09: 53:27:43:9d:66:34:d6:a4:0f:e6:6d:3b:10:fc:3e: be:2a:32:e6:ba:b8:34:b8:18:9b:b1:93:e3:b6:61: 47:c7:e0:52:da:cb:25:25:31:b6:85:03:97:b3:0e: 02:60:8c:e7:48:f1:6e:fb:d5:2a:15:99:33:8e:02: 7b:d8:f1:9a:e3:b0:c7:9c:1a:20:d2:40:86:e1:1a: 65:0b:a1:fd:73:2a:92:89:ea:fb:ae:64:b0:f9:cd: 5c:ad:f1:ad:52:6d:41:82:60:ef:b6:e6:22:90:e4: 88:01:f9:83:83:4b:f5:ac:3d:e7:33:ed:df:30:fe: 6a:3f:d8:d9:94:2f:5a:0b:62:fd:ff:b9:e7:c7:e0: a7:11:b4:7e:bc:85:8e:ab:43:d6:08:41:b7:2c:cb: c9:26:7e:8a:73:8b:66:1e:c3:fe:57:c1:94:37:4f: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:20:D7:2F:55:65:F4:CD:26:FA:3F:F5:94:AD:F6:44:51:05:2C:D7 X509v3 Authority Key Identifier: keyid:04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6a:82:aa:f0:e2:2e:5e:dc:62:43:30:62:2e:19:50:ac:7e: 3a:29:9c:1b:7a:3a:46:b1:49:30:52:c7:c3:19:0e:5e:4f:9f: bd:fa:2a:55:f6:a5:08:50:44:92:3d:bf:39:82:bb:67:70:a0: 57:0c:95:45:ad:9e:74:26:ad:16:8b:0f:f1:de:19:8f:39:ea: cb:c1:65:59:23:a3:9c:a4:25:82:e6:6b:a6:50:2b:db:47:f8: 62:ef:77:c7:da:8d:7a:3f:57:55:5c:7f:17:b0:b8:29:a6:63: 0f:17:45:4a:f7:a2:94:6a:63:28:45:f4:02:4b:ff:9c:e6:6f: de:e8:5a:c0:83:7e:55:84:e5:12:f9:0c:c0:b3:13:f4:7d:65: e5:e5:3c:49:3e:47:aa:6e:83:2b:8d:40:82:1c:7f:6b:d0:5b: c7:57:00:f2:49:02:89:a8:08:1e:57:40:09:74:4c:dd:58:21: 76:f6:3d:3a:96:92:55:ec:35:53:e0:c1:4a:94:01:83:1a:d0: d9:3c:f6:90:83:46:6e:67:4d:de:a4:62:52:bf:c0:61:92:2a: 23:93:c8:22:c5:b9:bf:b2:58:e6:49:2a:03:bf:7f:53:a8:01: 26:b1:51:7e:82:72:46:fc:fd:71:e2:c2:31:dc:b4:63:ae:88: d4:b7:4c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOz6M8H2Z+yB05VomwwxgBp3vK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3 QjA2OTRGQjAeFw0yNjA3MjEwNTAyMDhaFw0yNjA3MjIwNjQ0MDhaMDMxMTAvBgNV BAMTKDFCMjBENzJGNTU2NUY0Q0QyNkZBM0ZGNTk0QURGNjQ0NTEwNTJDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Nio16RqWzGzJKY3kOLhizyoX ynlHztCaPMFPBgwgPtIlp0jsHerJftcAk5Pmdh2rUakcyO56omWdURUmuXPR2EeL jGolbRMSc8NuYfZMtfHTwhIPGeytCVMnQ51mNNakD+ZtOxD8Pr4qMua6uDS4GJux k+O2YUfH4FLayyUlMbaFA5ezDgJgjOdI8W771SoVmTOOAnvY8ZrjsMecGiDSQIbh GmULof1zKpKJ6vuuZLD5zVyt8a1SbUGCYO+25iKQ5IgB+YODS/WsPecz7d8w/mo/ 2NmUL1oLYv3/uefH4KcRtH68hY6rQ9YIQbcsy8kmfopzi2Yew/5XwZQ3T7/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGyDXL1Vl9M0m+j/1lK32RFEFLNcwHwYDVR0j BBgwFoAUBB54oYaFb92ywOxR0CNPKXsGlPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJhZWJmYjMtZTI5Yi00N2M0LWJkMjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4 Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3QjA2OTRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDFFNzhBMTg2ODU2RkREQjJDMEVDNTFEMDIzNEYyOTdCMDY5 NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRG Mjk3QjA2OTRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRqgqrw4i5e3GJDMGIuGVCsfjopnBt6Okax STBSx8MZDl5Pn736KlX2pQhQRJI9vzmCu2dwoFcMlUWtnnQmrRaLD/HeGY856svB ZVkjo5ykJYLma6ZQK9tH+GLvd8fajXo/V1VcfxewuCmmYw8XRUr3opRqYyhF9AJL /5zmb97oWsCDflWE5RL5DMCzE/R9ZeXlPEk+R6pugyuNQIIcf2vQW8dXAPJJAomo CB5XQAl0TN1YIXb2PTqWklXsNVPgwUqUAYMa0Nk89pCDRm5nTd6kYlK/wGGSKiOT yCLFub+yWOZJKgO/f1OoASaxUX6Cckb8/XHiwjHctGOuiNS3TCU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:26 2026 by rpki-client