$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft File: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft (raw, json) Hash identifier: iwN0M1CdNEoFZ4zDLHZ4QuxF9tnxoa6oHZsv1SHDGnY= Subject key identifier: E9:B1:10:AA:48:0B:F7:93:9B:BF:37:26:74:49:AC:0C:A9:FD:D1:CF Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Certificate serial: 72B2EC84CA00351C6C7BB47395D8DC3F05594CCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft Manifest number: BA Signing time: Thu 17 Sep 2026 06:57:04 +0000 Manifest this update: Thu 17 Sep 2026 06:52:04 +0000 Manifest next update: Fri 18 Sep 2026 10:11:04 +0000 Files and hashes: 1: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl (hash: vynniLPDfRUvmHU6uXspC2xAuQBwKORILGiqbFeiA+0=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b2:ec:84:ca:00:35:1c:6c:7b:b4:73:95:d8:dc:3f:05:59:4c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Validity Not Before: Sep 17 06:52:04 2026 GMT Not After : Sep 18 10:11:04 2026 GMT Subject: CN=E9B110AA480BF7939BBF37267449AC0CA9FDD1CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:c4:c2:89:8d:3b:03:a3:42:96:b1:db:cb: 7d:92:84:f8:35:53:8b:da:fe:24:3e:e5:2f:a2:32: b7:e4:7b:fa:7a:8e:95:7f:be:4b:29:ff:be:c3:58: 53:35:c0:6c:cc:66:63:9e:91:7a:15:91:67:09:ca: a5:4f:0a:33:ec:8f:1d:ff:b6:6b:1f:51:7a:50:8c: ae:af:71:c1:89:3f:7d:4c:2e:92:cf:af:35:32:c5: cf:34:82:83:bf:5f:62:e8:3f:70:d2:58:dc:d4:7c: ec:fa:64:83:43:18:fd:83:61:00:5e:7e:fa:bd:7e: ec:46:b2:bf:b1:ce:6f:b8:be:ed:8c:5d:37:fc:e8: 88:e1:04:91:5f:59:26:32:84:e0:7b:ad:f3:84:43: bf:0c:70:30:b4:08:91:e3:66:e5:34:34:c3:33:b8: c6:c8:cb:70:d6:4a:08:d3:1b:e3:28:ff:f4:ce:2c: cb:58:a1:dd:f1:f4:82:b9:ea:dc:66:9e:44:25:9e: df:3e:a2:ad:ef:a4:46:62:ff:fb:ce:53:5b:fe:4c: af:79:5e:0d:ec:17:18:43:61:da:11:17:a1:4a:f5: 53:80:cb:59:8c:22:89:89:68:31:88:20:8b:21:c4: f9:55:d0:e6:5f:40:77:62:44:37:55:88:fa:77:86: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B1:10:AA:48:0B:F7:93:9B:BF:37:26:74:49:AC:0C:A9:FD:D1:CF X509v3 Authority Key Identifier: keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4b:ed:9b:33:dc:dd:91:f6:90:5f:f6:2f:8c:6b:dc:6b:2a: e9:3e:e7:c2:d0:46:9e:26:ed:54:87:53:54:36:2f:a5:ae:8b: 3a:58:11:b7:d3:85:40:14:62:be:23:99:23:e7:28:54:b2:e6: c4:ff:84:34:7e:b9:69:c4:0d:89:ab:16:54:9a:73:21:ed:03: a9:1b:cf:2f:43:ac:b8:0a:b7:eb:20:03:70:f2:0d:f3:e4:92: 29:ec:cc:fe:bb:70:d9:19:da:8a:b1:11:e0:33:4f:96:2a:d7: 19:b0:8d:8c:05:22:41:4c:6f:da:f1:84:d0:a0:d9:de:1e:13: dc:d6:31:0c:fa:aa:e0:91:a0:ee:99:da:0f:66:31:b6:03:96: 6b:18:d7:c7:68:c2:a9:47:dd:61:d0:86:26:7a:47:e4:a2:32: 53:42:14:5f:09:85:54:d3:1f:56:34:2b:2e:05:02:4f:fc:61: 73:19:9f:ba:4a:ff:3b:f3:fa:69:2c:cd:3d:62:10:b0:4d:d4: aa:74:b7:9f:62:91:e6:fc:2b:fd:59:57:ef:07:a8:91:52:e6: d8:1f:88:27:b0:05:af:ef:a4:7c:6b:a7:d3:d1:62:c1:8a:47: 2a:5b:74:5a:05:41:7d:04:83:ea:f6:fd:2d:18:7b:be:ca:75: c6:4e:0b:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrLshMoANRxse7RzldjcPwVZTMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRG OEUzQ0FDMTAeFw0yNjA5MTcwNjUyMDRaFw0yNjA5MTgxMDExMDRaMDMxMTAvBgNV BAMTKEU5QjExMEFBNDgwQkY3OTM5QkJGMzcyNjc0NDlBQzBDQTlGREQxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJ8TCiY07A6NClrHby32ShPg1 U4va/iQ+5S+iMrfke/p6jpV/vksp/77DWFM1wGzMZmOekXoVkWcJyqVPCjPsjx3/ tmsfUXpQjK6vccGJP31MLpLPrzUyxc80goO/X2LoP3DSWNzUfOz6ZINDGP2DYQBe fvq9fuxGsr+xzm+4vu2MXTf86IjhBJFfWSYyhOB7rfOEQ78McDC0CJHjZuU0NMMz uMbIy3DWSgjTG+Mo//TOLMtYod3x9IK56txmnkQlnt8+oq3vpEZi//vOU1v+TK95 Xg3sFxhDYdoRF6FK9VOAy1mMIomJaDGIIIshxPlV0OZfQHdiRDdViPp3hm/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bEQqkgL95ObvzcmdEmsDKn90c8wHwYDVR0j BBgwFoAUQdezlFjJmE9awSzIKvkSRPjjysEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1 OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRGOEUzQ0FDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ3QjM5NDU4Qzk5ODRGNUFDMTJDQzgyQUY5MTI0NEY4RTND QUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEy NDRGOEUzQ0FDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxL7Zsz3N2R9pBf9i+Ma9xrKuk+58LQRp4m 7VSHU1Q2L6WuizpYEbfThUAUYr4jmSPnKFSy5sT/hDR+uWnEDYmrFlSacyHtA6kb zy9DrLgKt+sgA3DyDfPkkinszP67cNkZ2oqxEeAzT5Yq1xmwjYwFIkFMb9rxhNCg 2d4eE9zWMQz6quCRoO6Z2g9mMbYDlmsY18dowqlH3WHQhiZ6R+SiMlNCFF8JhVTT H1Y0Ky4FAk/8YXMZn7pK/zvz+mkszT1iELBN1Kp0t59ikeb8K/1ZV+8HqJFS5tgf iCewBa/vpHxrp9PRYsGKRypbdFoFQX0Eg+r2/S0Ye77KdcZOC5E= -----END CERTIFICATE-----Generated at Thu Sep 17 11:03:32 2026 by rpki-client