$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft File: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft (raw, json) Hash identifier: 6p+NR5r6eYQROkOfsiEDBlBvkq1Otndi4WEPPw25zxo= Subject key identifier: B9:A4:50:C8:1F:0A:AC:3F:D6:B6:04:B3:B0:85:56:D5:BF:9C:93:7B Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Certificate serial: 615AC46DA5296EFCBD987B9EC8BE0E10D2DC90FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 03:56:39 +0000 Manifest this update: Thu 18 Jun 2026 03:51:39 +0000 Manifest next update: Fri 19 Jun 2026 05:04:39 +0000 Files and hashes: 1: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl (hash: EVxHDtw4do4Bo9uYMQZ9QnKvkFxM3iuPGUkhAwpa9Wg=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5a:c4:6d:a5:29:6e:fc:bd:98:7b:9e:c8:be:0e:10:d2:dc:90:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Validity Not Before: Jun 18 03:51:39 2026 GMT Not After : Jun 19 05:04:39 2026 GMT Subject: CN=B9A450C81F0AAC3FD6B604B3B08556D5BF9C937B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:ec:86:d2:df:6a:24:9b:ff:e5:8f:4e:a3: ec:d6:29:e4:5d:32:4f:d4:24:6a:8b:48:53:81:84: 93:87:8c:fc:6e:0b:9f:36:24:97:e0:65:30:0c:d2: ba:cb:e2:30:23:31:c8:93:a1:b2:1c:0a:29:24:3a: 21:0f:b5:60:9c:da:b1:f9:39:ce:e8:0b:b0:ee:41: 8a:e6:8d:3e:67:f8:6d:ed:ab:01:84:a7:cf:ac:60: d5:8b:d7:e7:ef:bb:28:09:2b:a8:42:d2:1f:21:43: a7:e7:63:d2:31:dc:96:4c:b0:8c:96:44:ce:11:3f: 94:6e:8b:06:4f:29:fc:07:35:3b:98:b2:07:7e:06: 73:e8:f0:fc:26:43:f4:79:bf:f0:19:64:e3:00:fd: 38:61:11:be:f0:49:18:67:a6:8e:ad:ef:12:dd:35: d9:b5:27:0b:40:18:67:c1:1f:de:10:eb:5a:ad:e1: b9:8a:88:93:fe:82:94:03:c6:fe:2e:15:e2:26:e2: 00:f8:5f:a4:d3:e7:6b:08:24:92:df:9c:58:08:7c: 98:96:35:12:c0:06:e7:3c:67:84:b7:97:f4:fc:38: ae:51:21:94:b4:d7:d1:46:cc:34:1a:d6:1c:19:95: ca:39:34:a2:4c:e9:3e:91:f9:b2:1a:a6:41:7b:32: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A4:50:C8:1F:0A:AC:3F:D6:B6:04:B3:B0:85:56:D5:BF:9C:93:7B X509v3 Authority Key Identifier: keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9d:84:6c:d6:4c:e0:88:c1:04:0f:58:73:9a:44:d1:7d:c2: 18:d4:d0:cd:a4:e3:57:03:c3:b7:b5:2e:ea:5d:81:25:56:32: a1:24:7e:d2:08:aa:8d:4c:14:dc:e9:8e:8e:03:0f:8d:9c:48: 6c:4a:10:d4:b4:e2:ca:6a:d7:6e:39:85:f0:ad:32:c5:c8:6b: 06:75:b9:fe:1b:67:2d:67:7e:08:8a:36:da:7d:e3:45:6e:79: 77:42:de:92:f3:1e:91:74:bf:d9:6e:11:5f:bd:0e:d6:17:9c: f8:52:d1:c6:46:df:b9:22:d9:3a:ef:ff:e2:b9:58:84:f6:93: cf:c3:c2:84:56:b8:80:16:f4:b2:43:63:ff:02:69:1a:5e:2e: 2e:3f:0a:96:c8:20:71:49:c3:41:c2:c8:8c:f3:c9:c9:23:42: d7:73:37:8e:1b:63:46:7d:c7:6d:0d:9e:73:5d:77:ea:50:51: 15:94:c2:56:ae:89:9d:c0:6d:09:9d:74:98:e3:90:70:5c:1a: 48:18:2a:f8:8b:79:65:45:ae:44:b3:e4:cd:14:84:7e:8f:b3: df:e3:04:20:f9:ce:fc:5c:08:db:75:35:32:6f:ce:58:a9:da: 6a:ad:fc:a2:7a:26:4e:9a:2d:f9:a6:f4:82:92:37:cc:55:ea: 8b:14:dc:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVrEbaUpbvy9mHueyL4OENLckP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRG OEUzQ0FDMTAeFw0yNjA2MTgwMzUxMzlaFw0yNjA2MTkwNTA0MzlaMDMxMTAvBgNV BAMTKEI5QTQ1MEM4MUYwQUFDM0ZENkI2MDRCM0IwODU1NkQ1QkY5QzkzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHuyG0t9qJJv/5Y9Oo+zWKeRd Mk/UJGqLSFOBhJOHjPxuC582JJfgZTAM0rrL4jAjMciTobIcCikkOiEPtWCc2rH5 Oc7oC7DuQYrmjT5n+G3tqwGEp8+sYNWL1+fvuygJK6hC0h8hQ6fnY9Ix3JZMsIyW RM4RP5RuiwZPKfwHNTuYsgd+BnPo8PwmQ/R5v/AZZOMA/ThhEb7wSRhnpo6t7xLd Ndm1JwtAGGfBH94Q61qt4bmKiJP+gpQDxv4uFeIm4gD4X6TT52sIJJLfnFgIfJiW NRLABuc8Z4S3l/T8OK5RIZS019FGzDQa1hwZlco5NKJM6T6R+bIapkF7MsjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaRQyB8KrD/WtgSzsIVW1b+ck3swHwYDVR0j BBgwFoAUQdezlFjJmE9awSzIKvkSRPjjysEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1 OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRGOEUzQ0FDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ3QjM5NDU4Qzk5ODRGNUFDMTJDQzgyQUY5MTI0NEY4RTND QUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEy NDRGOEUzQ0FDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmdhGzWTOCIwQQPWHOaRNF9whjU0M2k41cD w7e1LupdgSVWMqEkftIIqo1MFNzpjo4DD42cSGxKENS04spq1245hfCtMsXIawZ1 uf4bZy1nfgiKNtp940VueXdC3pLzHpF0v9luEV+9DtYXnPhS0cZG37ki2Trv/+K5 WIT2k8/DwoRWuIAW9LJDY/8CaRpeLi4/CpbIIHFJw0HCyIzzyckjQtdzN44bY0Z9 x20NnnNdd+pQURWUwlauiZ3AbQmddJjjkHBcGkgYKviLeWVFrkSz5M0UhH6Ps9/j BCD5zvxcCNt1NTJvzlip2mqt/KJ6Jk6aLfmm9IKSN8xV6osU3OE= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:25 2026 by rpki-client