$ rpki-client -vvf rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft File: 041E78A186856FDDB2C0EC51D0234F297B0694FB.mft (raw, json) Hash identifier: mPgB5WhK0NUH9FWdJny3lLo2J8UvuVlw/062dn7YybQ= Subject key identifier: 56:C5:9B:16:53:0C:64:AC:2C:6C:20:09:F6:28:67:7D:8C:A7:EE:E3 Authority key identifier: 04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB Certificate issuer: /CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Certificate serial: 6239D26C09EB7BCE0196B758AA42C53921E4583F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:07:36 +0000 Manifest this update: Tue 02 Jun 2026 10:02:36 +0000 Manifest next update: Wed 03 Jun 2026 11:56:36 +0000 Files and hashes: 1: 041E78A186856FDDB2C0EC51D0234F297B0694FB.crl (hash: SiA5bj+IB6kzw675iy/cTE7RGNxSu7X8VDMjb08LaLk=) 2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: jFMQqts/Xb/kIK8tDhB7Inx5c23uykyP37ClMnrRbng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:39:d2:6c:09:eb:7b:ce:01:96:b7:58:aa:42:c5:39:21:e4:58:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041E78A186856FDDB2C0EC51D0234F297B0694FB Validity Not Before: Jun 2 10:02:36 2026 GMT Not After : Jun 3 11:56:36 2026 GMT Subject: CN=56C59B16530C64AC2C6C2009F628677D8CA7EEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:3f:38:3f:c0:1d:21:16:f9:f6:0a:be:91: 02:0b:05:f5:63:e7:83:bd:0d:19:d7:3a:6c:d2:26: da:d6:d0:8d:c1:8d:f6:0a:47:0b:e0:af:f3:92:a0: 5e:e9:a0:a5:b9:9f:e8:41:80:0c:fa:49:10:a5:b6: b5:a4:c8:ed:92:a4:81:eb:4d:a5:4b:5f:d5:3c:fe: ab:5a:22:31:72:b3:6c:0f:6f:08:8c:f0:ba:db:b4: 66:aa:61:46:6c:cf:3b:3d:31:17:65:46:e1:c4:97: 26:65:fa:95:6a:73:ae:bc:f0:82:17:a0:e9:a1:f5: 0e:26:0a:8d:bd:ce:bb:29:2c:a7:9e:71:ee:05:71: cf:57:62:76:50:e7:ee:84:e0:82:c8:89:9f:84:2d: 95:d7:6c:3b:3c:50:aa:e5:b1:2a:6f:fc:92:90:0f: a7:5a:ce:06:ed:6d:8a:79:1e:e3:1f:a1:b4:4f:fd: 61:ac:ca:78:ad:ab:f7:32:15:c3:73:1d:ba:1b:68: b2:8b:1f:51:c4:0b:39:1c:55:a7:7a:3d:b6:0d:85: b0:3a:b7:cc:8c:c6:53:e7:38:f5:55:34:c1:6f:20: 14:3a:4a:c8:b4:1b:2e:2f:37:1b:bb:94:75:bd:d8: fa:32:c6:b8:e9:8f:76:69:c1:16:00:06:45:3a:13: d6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C5:9B:16:53:0C:64:AC:2C:6C:20:09:F6:28:67:7D:8C:A7:EE:E3 X509v3 Authority Key Identifier: keyid:04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c6:15:f0:c4:46:36:d3:85:27:2d:32:43:be:a8:d8:29:21: f6:ab:66:e8:90:ba:33:39:a0:ad:c9:4c:6b:91:85:97:e5:0c: cf:1c:b3:bc:15:d0:bf:2a:a7:6a:60:75:b6:a0:72:5b:62:f2: 5b:18:a4:a5:0c:39:be:e5:3f:8e:2e:9e:db:8d:d5:de:9a:3f: c6:96:55:35:11:0c:1d:90:d6:8f:b3:2e:f3:74:c4:31:a2:f3: 99:fc:95:7b:0f:80:fd:14:a9:53:5c:2f:e9:cc:3b:9b:87:fc: a2:f0:4a:31:1e:18:5d:21:61:43:a0:26:5c:ff:b3:f4:15:bf: 6a:7a:22:73:84:a8:0d:d6:37:39:29:1d:05:20:c3:6c:10:5c: 38:d7:d6:b7:85:a7:d0:b3:ed:d5:ec:cc:17:6c:be:c8:86:31: 9d:46:9e:79:6d:ed:37:24:35:cf:8e:50:c4:67:1d:d5:a2:72: 0e:e7:c9:e2:5d:8b:86:ea:e2:b5:15:3f:da:3f:03:cd:de:c4: 74:ee:95:aa:17:bb:69:6f:c6:c8:62:c3:9f:1d:3d:08:8d:fd: c2:06:72:d9:70:29:d5:02:24:9e:e5:c9:1c:9f:88:80:5f:ce: 86:37:68:9e:4d:76:10:81:ce:1f:71:ab:1b:d8:5b:2d:65:54: a7:28:3b:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjnSbAnre84BlrdYqkLFOSHkWD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3 QjA2OTRGQjAeFw0yNjA2MDIxMDAyMzZaFw0yNjA2MDMxMTU2MzZaMDMxMTAvBgNV BAMTKDU2QzU5QjE2NTMwQzY0QUMyQzZDMjAwOUY2Mjg2NzdEOENBN0VFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKRD84P8AdIRb59gq+kQILBfVj 54O9DRnXOmzSJtrW0I3BjfYKRwvgr/OSoF7poKW5n+hBgAz6SRCltrWkyO2SpIHr TaVLX9U8/qtaIjFys2wPbwiM8LrbtGaqYUZszzs9MRdlRuHElyZl+pVqc6688IIX oOmh9Q4mCo29zrspLKeece4Fcc9XYnZQ5+6E4ILIiZ+ELZXXbDs8UKrlsSpv/JKQ D6dazgbtbYp5HuMfobRP/WGsynitq/cyFcNzHbobaLKLH1HECzkcVad6PbYNhbA6 t8yMxlPnOPVVNMFvIBQ6Ssi0Gy4vNxu7lHW92Poyxrjpj3ZpwRYABkU6E9YFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVsWbFlMMZKwsbCAJ9ihnfYyn7uMwHwYDVR0j BBgwFoAUBB54oYaFb92ywOxR0CNPKXsGlPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJhZWJmYjMtZTI5Yi00N2M0LWJkMjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4 Njg1NkZEREIyQzBFQzUxRDAyMzRGMjk3QjA2OTRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDFFNzhBMTg2ODU2RkREQjJDMEVDNTFEMDIzNEYyOTdCMDY5 NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvMDQxRTc4QTE4Njg1NkZEREIyQzBFQzUxRDAyMzRG Mjk3QjA2OTRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHGFfDERjbThSctMkO+qNgpIfarZuiQujM5 oK3JTGuRhZflDM8cs7wV0L8qp2pgdbagclti8lsYpKUMOb7lP44untuN1d6aP8aW VTURDB2Q1o+zLvN0xDGi85n8lXsPgP0UqVNcL+nMO5uH/KLwSjEeGF0hYUOgJlz/ s/QVv2p6InOEqA3WNzkpHQUgw2wQXDjX1reFp9Cz7dXszBdsvsiGMZ1Gnnlt7Tck Nc+OUMRnHdWicg7nyeJdi4bq4rUVP9o/A83exHTulaoXu2lvxshiw58dPQiN/cIG ctlwKdUCJJ7lyRyfiIBfzoY3aJ5NdhCBzh9xqxvYWy1lVKcoO4I= -----END CERTIFICATE-----Generated at Wed Jun 3 04:47:57 2026 by rpki-client