$ rpki-client -vvf rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft File: 41E81C122CFE1947633AAA5A517B7923E1A78966.mft (raw, json) Hash identifier: xejt4mAM2hl4USg/38pduabXtE/mfDc8IsXlPiqGazo= Subject key identifier: 42:7B:43:93:8C:62:47:1E:53:8A:C6:FB:F4:EE:6A:6F:4D:24:AA:A1 Authority key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66 Certificate issuer: /CN=41E81C122CFE1947633AAA5A517B7923E1A78966 Certificate serial: 04FB7A34D4EFE635138B3F3136560DABF60A2A0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:12:48 +0000 Manifest this update: Fri 19 Jun 2026 22:07:48 +0000 Manifest next update: Sun 21 Jun 2026 01:21:48 +0000 Files and hashes: 1: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: fMmCbOIL8nMLpF5EKmFyyb/z/cATeDIy9MshfGEYHeY=) 2: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: ZuDxVEAObBxaFOm5uYmRAI9eGu8SevvOVjp9rp2cMH8=) 3: 41E81C122CFE1947633AAA5A517B7923E1A78966.crl (hash: Z7nRAylH0mHO5q4NOKH+wViotg8tZ0+yni7HGRpaNU4=) 4: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: h8pC3O5UrBoUEC6ODx88QnSAsLryVqTwUJG85o9TxOg=) 5: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: lJflPziRVDWpYcvwsJpkfkZb2ca8llttOjutgGe2gos=) 6: 3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa (hash: HGoEshpetOpXhNr6v4Rw31C6lvgZLfHje+0mfpy78fU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fb:7a:34:d4:ef:e6:35:13:8b:3f:31:36:56:0d:ab:f6:0a:2a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E81C122CFE1947633AAA5A517B7923E1A78966 Validity Not Before: Jun 19 22:07:48 2026 GMT Not After : Jun 21 01:21:48 2026 GMT Subject: CN=427B43938C62471E538AC6FBF4EE6A6F4D24AAA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:89:9b:66:65:d9:f4:1b:c7:9d:ea:18:92: 87:6d:cf:0e:c1:1c:a4:cf:25:d9:6d:7c:40:c7:3b: b9:10:07:bd:19:9d:41:40:c8:e0:fd:44:b2:b3:69: cd:57:bf:9f:fa:ae:44:83:64:86:6a:2f:52:27:64: fe:ab:cb:7b:d5:9c:bd:60:f9:12:a4:14:d8:ab:74: 48:1b:23:fd:ca:13:10:4a:37:93:40:ba:49:a1:de: 5f:99:1a:de:dd:98:b7:2e:d9:c8:54:d2:0f:f8:14: 4b:5f:be:37:f3:75:81:aa:95:33:22:c7:c6:86:69: 90:72:12:4b:e3:38:78:61:88:70:59:31:f0:d7:b8: 2d:09:c1:3a:b4:13:13:c9:81:88:48:bc:8f:96:ab: 2a:ba:d5:50:31:f2:44:17:1c:f3:cb:b9:74:80:6d: 8c:be:7b:b9:f5:60:16:83:37:2e:41:c5:13:1e:1c: 58:b2:14:3b:c8:28:18:c3:7c:33:30:7a:2c:5c:ee: a4:3f:b5:b3:50:5c:8d:cf:c1:a2:22:25:a5:89:87: 93:79:2a:d0:9a:73:cd:3c:5b:64:86:ba:fc:5c:f9: 10:de:d9:c5:51:df:a6:04:1a:b9:f5:55:89:c9:b0: df:92:a0:65:ea:ae:f0:66:30:da:30:f9:2a:fc:a9: 47:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7B:43:93:8C:62:47:1E:53:8A:C6:FB:F4:EE:6A:6F:4D:24:AA:A1 X509v3 Authority Key Identifier: keyid:41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8a:45:74:e4:57:d8:68:3a:f0:61:09:f0:bd:83:2c:d4:66: 9f:01:5d:48:9e:d8:b1:57:2d:be:52:5d:ee:41:e4:25:fd:dd: ab:0d:3b:08:c6:8a:d3:a8:59:cb:5f:e3:99:8c:fb:40:e0:5c: e1:0b:b4:27:a0:d2:36:97:30:4c:ca:a9:da:36:76:a0:79:ca: a1:36:19:a7:11:12:dd:a4:b9:48:d9:dd:8e:d2:fc:82:8f:c8: af:67:2e:ef:a7:b8:74:19:e8:d5:09:7a:a5:46:08:2c:b7:63: bd:4b:ea:47:c7:94:00:a3:d1:84:b0:d3:64:8e:ca:0c:9c:28: 83:87:b1:eb:d3:98:41:ea:22:87:bc:6e:93:72:6a:cc:69:53: 89:4f:62:87:98:e9:32:99:ba:18:47:58:2d:11:21:5d:66:41: f9:9f:11:79:9b:c4:13:df:69:ad:11:a4:d1:2c:54:34:ba:8f: 5f:73:85:3e:cb:ef:4c:d9:1d:3a:a7:b0:e7:92:0c:fd:72:41: e9:07:e3:8b:f0:de:d5:70:2d:29:8a:98:be:45:1b:7d:16:e7: f1:fe:7c:68:ec:4a:a6:24:07:a5:37:b1:74:48:30:e6:ba:07: 25:57:27:eb:2d:b4:89:17:7d:c6:c9:7f:0b:5f:be:1c:cf:52: 6d:fc:7e:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPt6NNTv5jUTiz8xNlYNq/YKKgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFODFDMTIyQ0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNF MUE3ODk2NjAeFw0yNjA2MTkyMjA3NDhaFw0yNjA2MjEwMTIxNDhaMDMxMTAvBgNV BAMTKDQyN0I0MzkzOEM2MjQ3MUU1MzhBQzZGQkY0RUU2QTZGNEQyNEFBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHG4mbZmXZ9BvHneoYkodtzw7B HKTPJdltfEDHO7kQB70ZnUFAyOD9RLKzac1Xv5/6rkSDZIZqL1InZP6ry3vVnL1g +RKkFNirdEgbI/3KExBKN5NAukmh3l+ZGt7dmLcu2chU0g/4FEtfvjfzdYGqlTMi x8aGaZByEkvjOHhhiHBZMfDXuC0JwTq0ExPJgYhIvI+Wqyq61VAx8kQXHPPLuXSA bYy+e7n1YBaDNy5BxRMeHFiyFDvIKBjDfDMweixc7qQ/tbNQXI3PwaIiJaWJh5N5 KtCac808W2SGuvxc+RDe2cVR36YEGrn1VYnJsN+SoGXqrvBmMNow+Sr8qUdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQntDk4xiRx5Tisb79O5qb00kqqEwHwYDVR0j BBgwFoAUQegcEiz+GUdjOqpaUXt5I+GniWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDc0ZjIxNGEtYmY1NS00MDQ4LTg0NWQtMjA2NzVmYjVmMmE0LzAvNDFFODFDMTIy Q0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNFMUE3ODk2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUU4MUMxMjJDRkUxOTQ3NjMzQUFBNUE1MTdCNzkyM0UxQTc4 OTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0 NWQtMjA2NzVmYjVmMmE0LzAvNDFFODFDMTIyQ0ZFMTk0NzYzM0FBQTVBNTE3Qjc5 MjNFMUE3ODk2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeKRXTkV9hoOvBhCfC9gyzUZp8BXUie2LFX Lb5SXe5B5CX93asNOwjGitOoWctf45mM+0DgXOELtCeg0jaXMEzKqdo2dqB5yqE2 GacREt2kuUjZ3Y7S/IKPyK9nLu+nuHQZ6NUJeqVGCCy3Y71L6kfHlACj0YSw02SO ygycKIOHsevTmEHqIoe8bpNyasxpU4lPYoeY6TKZuhhHWC0RIV1mQfmfEXmbxBPf aa0RpNEsVDS6j19zhT7L70zZHTqnsOeSDP1yQekH44vw3tVwLSmKmL5FG30W5/H+ fGjsSqYkB6U3sXRIMOa6ByVXJ+sttIkXfcbJfwtfvhzPUm38fsk= -----END CERTIFICATE-----Generated at Sat Jun 20 11:42:34 2026 by rpki-client