$ rpki-client -vvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft File: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json) Hash identifier: iKaffUKujhwuTw5AoTASf5zo227WajYT8B0ppbQP29s= Subject key identifier: C8:3A:3E:02:3A:AE:22:FF:CF:EC:6C:B1:5D:DC:59:84:3C:E4:D4:B5 Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A Certificate issuer: /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Certificate serial: 4EF82E4A060F1CDB529BE707DD2651D95C9C666B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 16:42:29 +0000 Manifest this update: Sun 19 Jul 2026 16:37:29 +0000 Manifest next update: Mon 20 Jul 2026 17:05:29 +0000 Files and hashes: 1: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=) 2: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: r/CG7kD46dPYhwhS0/ujmRfUkYUSo/7zx1ieVOo7xQ4=) 3: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=) 4: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:2e:4a:06:0f:1c:db:52:9b:e7:07:dd:26:51:d9:5c:9c:66:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A Validity Not Before: Jul 19 16:37:29 2026 GMT Not After : Jul 20 17:05:29 2026 GMT Subject: CN=C83A3E023AAE22FFCFEC6CB15DDC59843CE4D4B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:7b:09:4f:f6:aa:77:45:9c:d0:4e:a0:7b: 4e:19:25:19:0e:2b:3a:78:6a:0c:c4:86:2b:c0:a5: 93:3a:b8:b2:41:dc:0e:0c:c0:48:2a:7a:d2:dd:5e: da:85:ae:98:e9:10:df:7e:fb:42:20:62:5d:b4:63: ee:79:b5:24:d2:1c:f5:9e:cb:cf:4d:ae:5d:17:21: d4:73:4d:e0:0d:5b:7c:1d:cd:80:41:17:53:86:74: 5e:64:e2:64:9d:73:00:9e:4f:c4:b2:e4:b0:46:fd: 1b:bc:4c:63:a4:66:cb:b7:39:12:9c:f4:84:ad:e2: 09:7f:29:6e:dc:17:27:f4:d1:0e:ca:71:ed:0e:38: 88:0a:f0:52:e6:a0:f1:77:f1:7c:96:e5:73:82:a2: 06:0c:df:08:9c:f5:c2:a8:4b:73:55:70:5e:fd:66: e8:15:ae:70:b8:02:8c:75:9f:f5:ef:5a:d0:8b:fd: c3:39:fe:32:3b:fd:bb:9b:55:f9:9b:a4:24:c3:2b: 12:4f:5e:68:f4:97:f7:dd:7e:a3:7d:7b:e1:f1:65: eb:04:4c:7d:24:3d:8a:e6:f5:63:fe:0c:59:cb:56: 6f:63:15:ac:d6:ef:56:f4:2b:64:41:76:79:31:f6: 04:27:61:69:b7:78:60:b5:d2:40:4f:c1:12:7d:4c: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:3E:02:3A:AE:22:FF:CF:EC:6C:B1:5D:DC:59:84:3C:E4:D4:B5 X509v3 Authority Key Identifier: keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:22:c5:66:f6:e4:2d:23:35:8e:a9:01:af:67:a1:c2:b8:7b: c2:c8:67:fe:9f:72:6b:17:c8:09:31:13:78:4c:af:9b:e1:26: b4:e9:b6:94:7e:e0:12:6f:bb:a8:97:60:c6:ff:c6:25:4f:af: be:7d:dd:60:96:f3:bd:25:1f:28:34:ef:df:f2:9b:a3:a7:ac: 7f:24:a2:64:1e:cd:a0:4e:d8:2a:46:87:8b:cf:91:49:0e:28: f0:82:15:bc:85:28:a2:52:f0:12:a2:ed:69:b6:87:6f:eb:8f: 31:36:a0:af:38:83:fa:87:05:16:6a:23:2d:be:0f:1b:d1:1b: 6e:41:43:87:81:b6:2b:f8:04:90:e9:ac:31:34:04:ce:97:88: 87:d3:b7:44:d0:2e:be:ad:c1:f4:1d:d1:28:fc:ef:3a:b9:61: 54:0a:95:1c:3e:fc:b3:8a:db:93:d7:87:6c:27:77:73:4f:fb: a3:3c:ab:e0:95:6c:dd:cb:68:fe:e6:d8:46:6f:34:bb:0f:52: dc:bd:18:68:6c:25:a0:30:8d:2c:1e:f8:0a:3a:7a:73:a0:65: 8d:3a:2b:0e:95:52:21:37:1a:cd:11:ce:16:95:66:07:49:39: 38:c8:9f:b9:2c:f3:09:6a:83:d9:65:c2:3b:69:b6:e5:c9:ca: 7c:79:ee:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvguSgYPHNtSm+cH3SZR2VycZmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0REZB MUJBQjQzQTAeFw0yNjA3MTkxNjM3MjlaFw0yNjA3MjAxNzA1MjlaMDMxMTAvBgNV BAMTKEM4M0EzRTAyM0FBRTIyRkZDRkVDNkNCMTVEREM1OTg0M0NFNEQ0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCouXsJT/aqd0Wc0E6ge04ZJRkO Kzp4agzEhivApZM6uLJB3A4MwEgqetLdXtqFrpjpEN9++0IgYl20Y+55tSTSHPWe y89Nrl0XIdRzTeANW3wdzYBBF1OGdF5k4mSdcwCeT8Sy5LBG/Ru8TGOkZsu3ORKc 9ISt4gl/KW7cFyf00Q7Kce0OOIgK8FLmoPF38XyW5XOCogYM3wic9cKoS3NVcF79 ZugVrnC4Aox1n/XvWtCL/cM5/jI7/bubVfmbpCTDKxJPXmj0l/fdfqN9e+HxZesE TH0kPYrm9WP+DFnLVm9jFazW71b0K2RBdnkx9gQnYWm3eGC10kBPwRJ9TNXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyDo+AjquIv/P7GyxXdxZhDzk1LUwHwYDVR0j BBgwFoAUQcCm9zc0/7DH2ZdwGmK036G6tDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc1Mjc3ZTgtN2QwZi00MTg0LTljMjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2Rjcz NzM0RkZCMEM3RDk5NzcwMUE2MkI0REZBMUJBQjQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMwQTZGNzM3MzRGRkIwQzdEOTk3NzAxQTYyQjRERkExQkFC NDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvNDFDMEE2RjczNzM0RkZCMEM3RDk5NzcwMUE2MkI0 REZBMUJBQjQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgixWb25C0jNY6pAa9nocK4e8LIZ/6fcmsX yAkxE3hMr5vhJrTptpR+4BJvu6iXYMb/xiVPr7593WCW870lHyg079/ym6OnrH8k omQezaBO2CpGh4vPkUkOKPCCFbyFKKJS8BKi7Wm2h2/rjzE2oK84g/qHBRZqIy2+ DxvRG25BQ4eBtiv4BJDprDE0BM6XiIfTt0TQLr6twfQd0Sj87zq5YVQKlRw+/LOK 25PXh2wnd3NP+6M8q+CVbN3LaP7m2EZvNLsPUty9GGhsJaAwjSwe+Ao6enOgZY06 Kw6VUiE3Gs0RzhaVZgdJOTjIn7ks8wlqg9llwjtptuXJynx57lM= -----END CERTIFICATE-----Generated at Sun Jul 19 23:37:12 2026 by rpki-client