$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft File: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft (raw, json) Hash identifier: QbzeADVQYVbNGBrevho1wQF9XEAbbOQGwkWibvBfRGM= Subject key identifier: 35:00:99:A1:99:E9:89:1A:B5:33:19:A4:ED:D7:9F:79:29:92:6F:F5 Authority key identifier: 41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED Certificate issuer: /CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Certificate serial: 6C4C198FCF4A615B5D80DB80A46E290165BC1386 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 11:45:53 +0000 Manifest this update: Mon 20 Jul 2026 11:40:53 +0000 Manifest next update: Tue 21 Jul 2026 14:20:53 +0000 Files and hashes: 1: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl (hash: 3nLzP9skYygU3TZPO0UQ0t0fbSn7apa3pkGFJIyKjmM=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: AheQBKSQ2I3wH55R9fGq5yq1Y0JimW9uyTq22nxAO5s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4c:19:8f:cf:4a:61:5b:5d:80:db:80:a4:6e:29:01:65:bc:13:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Validity Not Before: Jul 20 11:40:53 2026 GMT Not After : Jul 21 14:20:53 2026 GMT Subject: CN=350099A199E9891AB53319A4EDD79F7929926FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:6a:a0:50:20:6f:91:09:cb:1e:5f:19:7c: 8d:dc:c4:2d:18:03:4e:c9:bf:50:90:31:08:13:0f: 91:1e:3f:ab:6d:ce:fb:0b:a4:e2:5b:fb:b9:03:9f: 31:3a:ab:fd:cc:0a:ba:e1:5e:40:ec:45:e4:cc:c0: da:c1:6c:cf:e3:96:1e:74:b3:be:8d:04:f2:ec:d3: e0:80:92:b5:db:b9:4c:60:5c:6b:d7:41:58:0a:90: 7c:b6:40:15:0c:4f:e0:2d:e0:d0:5d:19:f0:f4:f6: 19:b7:01:10:dd:04:e8:01:5d:3c:5c:d6:07:54:46: 19:ca:a5:ee:7f:33:dd:82:8a:7e:e8:96:5b:3d:47: fd:d2:d3:d1:e5:e6:b4:20:06:cd:42:d5:0d:15:71: 2b:64:de:27:c2:a7:36:86:d6:9d:9d:70:25:34:a6: 51:a4:3b:46:86:85:45:aa:d6:f9:a8:cd:1b:15:4c: 07:c5:4b:a2:2f:9a:82:98:1a:2b:a7:80:cc:27:c6: 47:48:ae:0f:91:43:e0:ea:31:20:85:5f:57:87:99: d2:51:92:8a:c9:a7:b8:55:ae:71:ef:01:a8:1d:f0: 6b:19:28:04:46:a5:f7:db:f1:69:9b:50:92:c6:96: 8b:d7:e2:d0:4d:c3:cf:ba:e1:79:7a:e3:15:65:fb: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:99:A1:99:E9:89:1A:B5:33:19:A4:ED:D7:9F:79:29:92:6F:F5 X509v3 Authority Key Identifier: keyid:41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:8f:32:63:14:4d:f1:74:36:79:87:9b:17:62:ec:56:9a:fe: 21:03:b1:da:9e:c7:eb:d9:60:a6:a6:d1:bd:86:d7:e7:cf:5b: 29:09:ad:76:41:42:a7:21:e1:68:be:e9:54:cc:e0:91:82:7a: 50:c8:a7:cb:4f:7a:f8:0b:45:a5:f7:58:80:57:34:9b:83:53: 00:40:41:d0:ad:61:38:7d:34:ac:fa:a8:cd:9c:d2:22:a0:07: 38:3d:11:19:f6:cd:3f:27:e3:40:c5:1b:4d:e3:fe:5a:5d:7c: 4c:74:0f:b2:b4:58:76:5f:fa:14:e2:6b:7e:5a:8d:48:72:fa: 44:97:40:25:f7:2d:46:45:38:dd:59:06:25:7b:db:a3:87:01: fe:bc:f8:c0:2e:9c:6b:a1:b0:92:cb:60:02:18:a2:8c:6d:fe: 8d:e9:84:51:dd:92:3d:6e:9c:6d:ca:e1:36:11:38:54:53:94: a8:c4:60:24:ab:df:58:fe:c5:8d:68:44:6d:43:4d:75:be:d8: 0a:e6:6a:c3:cc:2c:37:17:aa:4c:35:1c:dd:86:22:42:9b:71: 46:50:97:88:ce:cc:65:60:a5:4e:a7:33:28:08:2f:e6:a3:a8: e1:1c:8e:c4:60:ac:6d:4c:ae:18:af:09:66:88:21:c9:ec:77: 84:97:61:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEwZj89KYVtdgNuApG4pAWW8E4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNCQTk1 NjBEMzhFRDAeFw0yNjA3MjAxMTQwNTNaFw0yNjA3MjExNDIwNTNaMDMxMTAvBgNV BAMTKDM1MDA5OUExOTlFOTg5MUFCNTMzMTlBNEVERDc5Rjc5Mjk5MjZGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTmqgUCBvkQnLHl8ZfI3cxC0Y A07Jv1CQMQgTD5EeP6ttzvsLpOJb+7kDnzE6q/3MCrrhXkDsReTMwNrBbM/jlh50 s76NBPLs0+CAkrXbuUxgXGvXQVgKkHy2QBUMT+At4NBdGfD09hm3ARDdBOgBXTxc 1gdURhnKpe5/M92Cin7olls9R/3S09Hl5rQgBs1C1Q0VcStk3ifCpzaG1p2dcCU0 plGkO0aGhUWq1vmozRsVTAfFS6IvmoKYGiungMwnxkdIrg+RQ+DqMSCFX1eHmdJR korJp7hVrnHvAagd8GsZKARGpffb8WmbUJLGlovX4tBNw8+64Xl64xVl+yixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQCZoZnpiRq1Mxmk7defeSmSb/UwHwYDVR0j BBgwFoAUQf5ngj9TWO89X5tPBPvLqVYNOO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlYzJjYjYtMzVhZC00MTAxLTk4MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIz RjUzNThFRjNENUY5QjRGMDRGQkNCQTk1NjBEMzhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUZFNjc4MjNGNTM1OEVGM0Q1RjlCNEYwNEZCQ0JBOTU2MEQz OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNC QTk1NjBEMzhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWPMmMUTfF0NnmHmxdi7Faa/iEDsdqex+vZ YKam0b2G1+fPWykJrXZBQqch4Wi+6VTM4JGCelDIp8tPevgLRaX3WIBXNJuDUwBA QdCtYTh9NKz6qM2c0iKgBzg9ERn2zT8n40DFG03j/lpdfEx0D7K0WHZf+hTia35a jUhy+kSXQCX3LUZFON1ZBiV726OHAf68+MAunGuhsJLLYAIYooxt/o3phFHdkj1u nG3K4TYROFRTlKjEYCSr31j+xY1oRG1DTXW+2ArmasPMLDcXqkw1HN2GIkKbcUZQ l4jOzGVgpU6nMygIL+ajqOEcjsRgrG1MrhivCWaIIcnsd4SXYdM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:51:33 2026 by rpki-client