$ rpki-client -vvvf rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft File: 41E81C122CFE1947633AAA5A517B7923E1A78966.mft (raw, json) Hash identifier: aiW4nh4WL/m0pHzYsGN1HtiHn0ZlKU/UC31AAx3pnu8= Subject key identifier: 8D:11:EF:6E:D7:14:AD:6D:95:81:97:D5:D7:BB:4A:75:38:5D:76:E7 Authority key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66 Certificate issuer: /CN=41E81C122CFE1947633AAA5A517B7923E1A78966 Certificate serial: 082A3CE8D7C5027027E53290B6595DBA12EA190E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft Manifest number: D8 Signing time: Sun 11 Oct 2026 04:22:13 +0000 Manifest this update: Sun 11 Oct 2026 04:17:13 +0000 Manifest next update: Mon 12 Oct 2026 08:04:13 +0000 Files and hashes: 1: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: h8pC3O5UrBoUEC6ODx88QnSAsLryVqTwUJG85o9TxOg=) 2: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: fMmCbOIL8nMLpF5EKmFyyb/z/cATeDIy9MshfGEYHeY=) 3: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: ZuDxVEAObBxaFOm5uYmRAI9eGu8SevvOVjp9rp2cMH8=) 4: 3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa (hash: HGoEshpetOpXhNr6v4Rw31C6lvgZLfHje+0mfpy78fU=) 5: 41E81C122CFE1947633AAA5A517B7923E1A78966.crl (hash: l9pwwnMKqIEqvcFEKo2N34pZSM8c6gwvV12pl/sD30M=) 6: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: lJflPziRVDWpYcvwsJpkfkZb2ca8llttOjutgGe2gos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2a:3c:e8:d7:c5:02:70:27:e5:32:90:b6:59:5d:ba:12:ea:19:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E81C122CFE1947633AAA5A517B7923E1A78966 Validity Not Before: Oct 11 04:17:13 2026 GMT Not After : Oct 12 08:04:13 2026 GMT Subject: CN=8D11EF6ED714AD6D958197D5D7BB4A75385D76E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:8b:5c:50:55:60:e0:8e:da:fe:58:77:46: e0:37:07:11:f0:ab:86:74:c4:e2:79:d4:d5:74:9c: f7:e5:b2:b1:20:c8:90:3e:01:43:98:2c:c3:a1:5f: bb:f6:87:9d:61:be:09:43:80:be:bf:74:ad:49:47: 4d:06:50:9d:a0:d0:f3:df:29:c9:5a:14:90:9f:1f: 85:7f:ed:7b:b4:f2:c0:6c:31:aa:b8:c7:ee:ad:71: 60:e6:b0:f9:d7:84:13:73:70:ab:32:7a:33:13:67: d0:53:37:ea:c4:81:8c:b2:7c:e5:52:73:f1:96:43: 94:8a:93:c1:08:cc:ee:e9:a8:07:03:0e:9d:f4:5f: 0c:5c:b6:1e:93:77:35:6d:4d:1a:70:da:e0:d9:ba: 20:0a:70:31:b4:04:9d:65:b3:57:5c:b4:31:9c:5d: 91:70:64:c9:bc:cb:37:90:38:ab:2d:10:83:34:82: 94:3d:ce:4a:8b:7a:a8:3a:7a:fb:63:16:b2:2b:c5: 93:d8:93:ed:92:1a:81:0c:5a:73:24:9d:73:b6:9c: 02:6c:e2:7d:52:08:83:be:9d:49:7f:32:cc:4a:96: ee:bd:2b:00:25:b1:96:aa:86:be:72:c8:1e:29:7f: 50:e5:2a:7c:37:76:73:72:d6:3e:79:58:d3:8e:d0: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:11:EF:6E:D7:14:AD:6D:95:81:97:D5:D7:BB:4A:75:38:5D:76:E7 X509v3 Authority Key Identifier: keyid:41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:78:35:ae:c2:cf:0d:e0:c8:b5:68:b3:87:3e:7a:e1:08:79: f1:bb:36:17:f5:2f:64:2b:23:39:2f:e0:08:31:2e:8c:11:f0: d7:bc:76:73:a4:95:b9:eb:1f:4f:33:96:9e:0c:da:13:45:53: b5:6a:ff:05:d9:5e:24:e1:29:1a:c9:e7:07:1c:bd:9d:f5:08: 20:a6:69:7f:86:97:40:32:2e:d7:c3:42:b8:0a:c7:9d:37:f4: 69:3d:6d:49:b3:ba:74:15:9a:20:64:91:e1:74:bc:fe:5f:dd: ac:06:75:aa:a0:b3:83:99:0f:6c:ed:08:f4:13:27:df:39:e0: b5:ec:87:42:62:44:b8:d0:37:c5:45:7f:ff:41:c4:51:a1:62: b8:e0:2d:d6:6f:07:d1:c6:56:d1:3b:b8:a4:72:92:c1:41:fd: c6:8e:5a:d3:d7:f9:74:c9:dc:ac:2c:56:b3:d3:f3:db:57:a8: e1:62:cd:30:b9:8e:91:74:1a:fe:67:64:d9:84:68:bd:bc:e5: 71:1e:c7:c6:97:6e:ed:5e:b8:53:86:41:d7:0f:fa:0b:eb:31: 39:7f:e6:1e:68:81:9c:17:c1:e0:00:d2:3c:b6:0b:48:a0:ab: 25:9b:07:9d:23:89:01:ed:4b:5c:54:43:db:e4:e6:aa:38:26: 92:1b:18:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCo86NfFAnAn5TKQtllduhLqGQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFODFDMTIyQ0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNF MUE3ODk2NjAeFw0yNjEwMTEwNDE3MTNaFw0yNjEwMTIwODA0MTNaMDMxMTAvBgNV BAMTKDhEMTFFRjZFRDcxNEFENkQ5NTgxOTdENUQ3QkI0QTc1Mzg1RDc2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfYtcUFVg4I7a/lh3RuA3BxHw q4Z0xOJ51NV0nPflsrEgyJA+AUOYLMOhX7v2h51hvglDgL6/dK1JR00GUJ2g0PPf KclaFJCfH4V/7Xu08sBsMaq4x+6tcWDmsPnXhBNzcKsyejMTZ9BTN+rEgYyyfOVS c/GWQ5SKk8EIzO7pqAcDDp30Xwxcth6TdzVtTRpw2uDZuiAKcDG0BJ1ls1dctDGc XZFwZMm8yzeQOKstEIM0gpQ9zkqLeqg6evtjFrIrxZPYk+2SGoEMWnMknXO2nAJs 4n1SCIO+nUl/MsxKlu69KwAlsZaqhr5yyB4pf1DlKnw3dnNy1j55WNOO0MJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjRHvbtcUrW2VgZfV17tKdThdducwHwYDVR0j BBgwFoAUQegcEiz+GUdjOqpaUXt5I+GniWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDc0ZjIxNGEtYmY1NS00MDQ4LTg0NWQtMjA2NzVmYjVmMmE0LzAvNDFFODFDMTIy Q0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNFMUE3ODk2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUU4MUMxMjJDRkUxOTQ3NjMzQUFBNUE1MTdCNzkyM0UxQTc4 OTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0 NWQtMjA2NzVmYjVmMmE0LzAvNDFFODFDMTIyQ0ZFMTk0NzYzM0FBQTVBNTE3Qjc5 MjNFMUE3ODk2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ4Na7Czw3gyLVos4c+euEIefG7Nhf1L2Qr Izkv4AgxLowR8Ne8dnOklbnrH08zlp4M2hNFU7Vq/wXZXiThKRrJ5wccvZ31CCCm aX+Gl0AyLtfDQrgKx5039Gk9bUmzunQVmiBkkeF0vP5f3awGdaqgs4OZD2ztCPQT J9854LXsh0JiRLjQN8VFf/9BxFGhYrjgLdZvB9HGVtE7uKRyksFB/caOWtPX+XTJ 3KwsVrPT89tXqOFizTC5jpF0Gv5nZNmEaL285XEex8aXbu1euFOGQdcP+gvrMTl/ 5h5ogZwXweAA0jy2C0igqyWbB50jiQHtS1xUQ9vk5qo4JpIbGFg= -----END CERTIFICATE-----Generated at Sun Oct 11 23:14:05 2026 by rpki-client