$ rpki-client -vvvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft File: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json) Hash identifier: RPySTgKjbTSYXr+lx0VSISSCdvRNDTiyjTMiS8P5LP4= Subject key identifier: 48:A0:02:F5:05:11:64:95:91:82:8B:A3:AA:99:6D:F1:EE:47:B8:70 Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A Certificate issuer: /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Certificate serial: 519C7953021C063907176B8E5A1365089A9BA926 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 16:16:57 +0000 Manifest this update: Thu 03 Sep 2026 16:11:57 +0000 Manifest next update: Fri 04 Sep 2026 18:41:57 +0000 Files and hashes: 1: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=) 2: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=) 3: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=) 4: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: fZqcGrJmI43ZGTgJfqtQeRKfJ+6JC3oJOtNuIGxXIUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9c:79:53:02:1c:06:39:07:17:6b:8e:5a:13:65:08:9a:9b:a9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Validity Not Before: Sep 3 16:11:57 2026 GMT Not After : Sep 4 18:41:57 2026 GMT Subject: CN=48A002F50511649591828BA3AA996DF1EE47B870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:50:bb:9e:74:9c:37:ec:49:29:a2:fe:64: 0a:46:f3:36:d0:f1:96:0f:3f:03:33:05:14:20:f1: 8e:29:c6:99:b4:d1:8c:ec:f1:72:8b:4c:7d:43:4a: 85:13:d2:b5:c2:59:e0:1f:62:ea:60:39:3d:16:c1: 91:56:ac:2c:7e:e5:21:1b:0d:f2:60:a8:c1:f0:8e: 73:92:06:3a:27:e3:91:ad:3a:4f:c2:76:9d:c1:75: 3d:3f:1c:00:27:bc:64:b5:4c:f0:7a:55:75:5d:7b: 0b:38:a6:7c:7a:a8:a8:b0:fa:d2:db:ee:ae:69:90: 5c:bf:52:7b:91:ce:11:70:95:83:9a:a2:54:7e:eb: d7:24:b4:d2:56:25:66:a2:ab:2b:66:66:54:c1:c3: 49:6b:38:f7:25:48:ef:80:4a:4e:6b:5c:d1:2f:04: 3a:71:2f:d1:c1:90:e6:cb:9f:ea:f6:d8:0d:38:77: de:f7:26:70:ef:df:0c:52:da:f5:c0:5d:f2:6d:fe: a5:94:36:17:56:ea:2e:28:84:c6:c4:99:52:a4:10: e2:d9:49:b6:a0:61:5c:01:8e:fb:10:11:aa:09:79: 65:f6:9f:b3:be:4d:5b:cf:97:8f:3c:ed:2f:6d:a1: 3a:42:85:14:fb:c5:bc:2f:9f:99:a4:8e:15:67:1f: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A0:02:F5:05:11:64:95:91:82:8B:A3:AA:99:6D:F1:EE:47:B8:70 X509v3 Authority Key Identifier: keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:0d:8e:fa:51:4d:aa:48:89:f4:9f:6a:72:28:07:06:9d:1b: 85:82:ca:a1:44:8a:13:5f:dd:d0:01:21:5c:c1:83:88:76:97: d8:03:ab:52:a4:fd:71:1f:91:f9:58:c5:5d:5f:94:0a:3e:d4: a9:0a:a5:30:01:1f:88:af:62:91:6a:54:7a:b0:f6:e9:83:03: f4:e9:4f:4d:96:58:3a:1e:da:1f:58:dd:1d:08:84:99:58:b4: 34:0d:ba:ad:b1:e1:af:d7:f7:9a:7d:2e:e8:f1:29:23:eb:41: ca:34:e6:2f:40:eb:b3:87:ef:83:e3:4d:20:62:ae:c7:3b:92: aa:e9:92:18:b5:7e:96:b8:10:28:66:58:85:51:fe:b2:57:47: 6d:84:c9:c3:a9:d7:6c:bb:2b:8b:b7:78:d5:63:d6:8b:ee:08: da:44:54:a7:8a:4a:6d:36:44:6b:cc:5c:0d:21:6e:5a:b1:32: ed:a3:a6:c0:79:bb:fc:ac:ea:2e:32:4b:7b:f9:02:8b:97:ae: 27:59:66:0d:32:49:f4:06:43:61:a2:d0:45:29:0c:42:ca:e2: 67:96:04:ad:96:e3:b4:ae:8e:56:6c:cc:37:2a:80:9d:0f:95: c8:ce:6e:e6:11:e4:d5:7a:fc:32:8f:fd:46:2c:bd:21:21:7f: 4c:3c:27:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZx5UwIcBjkHF2uOWhNlCJqbqSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0REZB MUJBQjQzQTAeFw0yNjA5MDMxNjExNTdaFw0yNjA5MDQxODQxNTdaMDMxMTAvBgNV BAMTKDQ4QTAwMkY1MDUxMTY0OTU5MTgyOEJBM0FBOTk2REYxRUU0N0I4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5n1C7nnScN+xJKaL+ZApG8zbQ 8ZYPPwMzBRQg8Y4pxpm00Yzs8XKLTH1DSoUT0rXCWeAfYupgOT0WwZFWrCx+5SEb DfJgqMHwjnOSBjon45GtOk/Cdp3BdT0/HAAnvGS1TPB6VXVdews4pnx6qKiw+tLb 7q5pkFy/UnuRzhFwlYOaolR+69cktNJWJWaiqytmZlTBw0lrOPclSO+ASk5rXNEv BDpxL9HBkObLn+r22A04d973JnDv3wxS2vXAXfJt/qWUNhdW6i4ohMbEmVKkEOLZ SbagYVwBjvsQEaoJeWX2n7O+TVvPl4887S9toTpChRT7xbwvn5mkjhVnHygNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKAC9QURZJWRgoujqplt8e5HuHAwHwYDVR0j BBgwFoAUQcCm9zc0/7DH2ZdwGmK036G6tDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc1Mjc3ZTgtN2QwZi00MTg0LTljMjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2Rjcz NzM0RkZCMEM3RDk5NzcwMUE2MkI0REZBMUJBQjQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMwQTZGNzM3MzRGRkIwQzdEOTk3NzAxQTYyQjRERkExQkFC NDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0 REZBMUJBQjQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACENjvpRTapIifSfanIoBwadG4WCyqFEihNf 3dABIVzBg4h2l9gDq1Kk/XEfkflYxV1flAo+1KkKpTABH4ivYpFqVHqw9umDA/Tp T02WWDoe2h9Y3R0IhJlYtDQNuq2x4a/X95p9LujxKSPrQco05i9A67OH74PjTSBi rsc7kqrpkhi1fpa4EChmWIVR/rJXR22EycOp12y7K4u3eNVj1ovuCNpEVKeKSm02 RGvMXA0hblqxMu2jpsB5u/ys6i4yS3v5AouXridZZg0ySfQGQ2Gi0EUpDELK4meW BK2W47SujlZszDcqgJ0PlcjObuYR5NV6/DKP/UYsvSEhf0w8J6c= -----END CERTIFICATE-----Generated at Thu Sep 3 22:42:44 2026 by rpki-client