$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft File: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft (raw, json) Hash identifier: 23sveuptMyzwJg+mSUVnzd9So2/YOnDUYw0DSZqD25I= Subject key identifier: 2D:42:E3:30:22:28:BD:50:DF:DC:A2:6C:94:E7:61:68:24:86:45:74 Authority key identifier: 41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED Certificate issuer: /CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Certificate serial: 0F0F3A1C6C8E569080B376F59EDC736420CBF7D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:07:35 +0000 Manifest this update: Tue 02 Jun 2026 22:02:35 +0000 Manifest next update: Thu 04 Jun 2026 01:15:35 +0000 Files and hashes: 1: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl (hash: 8Q/U7m/NczvSF0sg9YJLsFRoXhLbd/3oBC4Sdu4deD8=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: AheQBKSQ2I3wH55R9fGq5yq1Y0JimW9uyTq22nxAO5s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0f:3a:1c:6c:8e:56:90:80:b3:76:f5:9e:dc:73:64:20:cb:f7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Validity Not Before: Jun 2 22:02:35 2026 GMT Not After : Jun 4 01:15:35 2026 GMT Subject: CN=2D42E3302228BD50DFDCA26C94E7616824864574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:b6:a6:b9:4a:86:9d:37:3b:8d:e1:bf:51: 82:3b:da:6c:ec:83:45:6e:75:04:79:ec:18:a6:81: cf:63:ab:d5:4d:78:55:ba:28:ae:6e:c5:a3:e7:8f: bd:d1:dc:a6:14:79:1d:2c:5b:3e:3d:ed:de:5f:db: d3:5c:b5:73:b6:05:25:2a:8e:70:57:f5:f9:3b:33: a1:e1:cd:1e:3b:86:0a:7f:99:8f:b1:b2:30:1c:ac: a6:cf:67:17:f0:2f:b8:a3:52:7a:b8:b8:e3:d4:0c: 7a:28:fc:7e:a8:c9:db:1c:23:52:5b:b2:7e:fa:05: 84:d9:aa:63:b6:63:77:c1:ac:55:fe:a5:f0:fc:80: 79:b2:de:59:a7:1c:b2:4e:63:24:7e:a8:e1:0e:9c: fd:71:c1:8c:a4:41:6e:62:f9:fb:89:1d:60:fb:5c: d8:5b:5b:6a:7e:9e:25:1f:f1:ca:19:68:2e:a2:79: 1a:3c:6b:da:1f:07:cb:9a:bb:2f:1b:47:d7:fb:84: 76:76:25:16:70:61:06:fd:ec:a7:3c:69:7f:ae:13: 54:b8:00:ee:a1:60:ea:b6:15:7d:66:52:4b:85:bc: cb:99:33:f0:c3:2d:bf:d3:57:92:06:0e:aa:c5:51: 1f:ea:84:65:5a:f4:ab:3d:a5:1c:1f:31:81:9e:9f: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:42:E3:30:22:28:BD:50:DF:DC:A2:6C:94:E7:61:68:24:86:45:74 X509v3 Authority Key Identifier: keyid:41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:96:e7:35:2a:e4:71:ea:bb:3c:ef:87:27:6f:f2:e8:20:43: 97:50:26:a5:32:93:77:5b:77:22:90:a9:80:a7:0e:3e:f4:08: 59:5c:06:a3:49:cf:d2:64:3c:e0:e1:39:52:dc:23:b5:4a:82: c6:7a:da:38:de:6c:e8:52:55:74:b6:b7:4a:c2:4e:6c:9a:41: 32:db:71:f7:56:27:6b:55:bc:a1:82:34:ae:36:0d:89:14:2d: 3b:71:97:f5:01:36:2e:f2:ef:55:67:12:53:38:86:3a:56:d5: ec:12:2e:33:4e:33:6e:5b:d5:b5:5f:4a:a2:ba:eb:40:c7:06: a7:69:12:ff:f3:db:00:bc:3a:bc:16:ca:6e:1e:8a:b4:d7:af: 05:22:a4:bf:51:3e:39:4a:09:5f:16:ef:77:f6:1c:c5:d0:cc: 77:37:c3:bb:06:8c:c8:f5:28:4f:d0:d8:b9:93:51:28:73:30: 4b:e7:c4:42:62:7b:36:68:cb:2b:4c:4e:b6:f9:0f:54:14:cc: d6:f6:03:21:c6:7e:41:b0:46:a0:d3:78:36:9f:a4:c1:c9:3e: 2d:ac:2f:ad:6f:64:39:55:88:e5:49:0a:d0:fc:14:e3:ac:05: 3e:f6:e9:d7:ce:f6:20:50:5d:2c:c9:e7:58:f4:e6:8e:17:c9: e3:9b:e6:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDw86HGyOVpCAs3b1ntxzZCDL99EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNCQTk1 NjBEMzhFRDAeFw0yNjA2MDIyMjAyMzVaFw0yNjA2MDQwMTE1MzVaMDMxMTAvBgNV BAMTKDJENDJFMzMwMjIyOEJENTBERkRDQTI2Qzk0RTc2MTY4MjQ4NjQ1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTb7amuUqGnTc7jeG/UYI72mzs g0VudQR57Bimgc9jq9VNeFW6KK5uxaPnj73R3KYUeR0sWz497d5f29NctXO2BSUq jnBX9fk7M6HhzR47hgp/mY+xsjAcrKbPZxfwL7ijUnq4uOPUDHoo/H6oydscI1Jb sn76BYTZqmO2Y3fBrFX+pfD8gHmy3lmnHLJOYyR+qOEOnP1xwYykQW5i+fuJHWD7 XNhbW2p+niUf8coZaC6ieRo8a9ofB8uauy8bR9f7hHZ2JRZwYQb97Kc8aX+uE1S4 AO6hYOq2FX1mUkuFvMuZM/DDLb/TV5IGDqrFUR/qhGVa9Ks9pRwfMYGen5x5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULULjMCIovVDf3KJslOdhaCSGRXQwHwYDVR0j BBgwFoAUQf5ngj9TWO89X5tPBPvLqVYNOO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlYzJjYjYtMzVhZC00MTAxLTk4MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIz RjUzNThFRjNENUY5QjRGMDRGQkNCQTk1NjBEMzhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUZFNjc4MjNGNTM1OEVGM0Q1RjlCNEYwNEZCQ0JBOTU2MEQz OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNC QTk1NjBEMzhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANiW5zUq5HHquzzvhydv8uggQ5dQJqUyk3db dyKQqYCnDj70CFlcBqNJz9JkPODhOVLcI7VKgsZ62jjebOhSVXS2t0rCTmyaQTLb cfdWJ2tVvKGCNK42DYkULTtxl/UBNi7y71VnElM4hjpW1ewSLjNOM25b1bVfSqK6 60DHBqdpEv/z2wC8OrwWym4eirTXrwUipL9RPjlKCV8W73f2HMXQzHc3w7sGjMj1 KE/Q2LmTUShzMEvnxEJiezZoyytMTrb5D1QUzNb2AyHGfkGwRqDTeDafpMHJPi2s L61vZDlViOVJCtD8FOOsBT726dfO9iBQXSzJ51j05o4XyeOb5ng= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:42 2026 by rpki-client