
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft
File: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft (raw, json)
Hash identifier: eDSOu6udsDLesi1XSCSfAQJR4c4GgmP209oU2oi4YBo=
Subject key identifier: 64:C8:3A:A7:EF:A5:C5:F4:CD:0A:1D:29:EC:3A:39:22:90:4F:7D:E5
Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1
Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1
Certificate serial: 4982488E9241AB2E2D2BECDA5E2A7F442088C100
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 05:18:47 +0000
Manifest this update: Sun 02 Aug 2026 05:13:47 +0000
Manifest next update: Mon 03 Aug 2026 07:43:47 +0000
Files and hashes: 1: 41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl (hash: Z3rlxwr1nl1b+owVtYRZSVaPXo/u+praQMPKuo+wUUI=)
2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl
rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:82:48:8e:92:41:ab:2e:2d:2b:ec:da:5e:2a:7f:44:20:88:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1
Validity
Not Before: Aug 2 05:13:47 2026 GMT
Not After : Aug 3 07:43:47 2026 GMT
Subject: CN=64C83AA7EFA5C5F4CD0A1D29EC3A3922904F7DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:14:1b:93:e9:0b:8f:ee:fd:65:3c:3b:b6:
51:de:48:53:76:a3:7d:4e:9e:20:fe:0a:55:4b:a5:
25:90:c8:42:fd:5f:5a:4b:c6:fb:75:b2:8b:c0:52:
f9:1d:7f:09:ba:b9:6a:c2:17:21:cc:49:8e:d1:a7:
79:63:ab:89:8f:c7:2a:72:78:b3:45:f9:65:54:f1:
8c:e2:29:b2:94:d2:7b:02:b6:0d:6c:70:e7:d5:40:
98:a1:94:c3:ef:de:78:b6:f0:9d:41:e6:16:d5:52:
1c:ac:7d:01:46:7a:7d:c3:6f:76:9e:41:00:83:09:
87:51:1e:cc:5a:46:57:21:ec:6d:b3:ca:a0:6c:ef:
fa:04:47:d2:1a:77:1a:af:60:dc:4e:39:1d:47:04:
e9:95:59:c2:f2:c8:2d:99:b5:8f:20:38:16:02:2b:
a3:67:a5:c9:dd:ab:41:a7:5b:9d:6d:97:af:0c:14:
e1:b1:b2:8c:11:62:c1:f2:7b:10:4c:e3:65:bf:7d:
64:44:79:e7:7a:c0:b1:17:39:19:3a:bd:86:e6:58:
e2:ff:66:ef:65:56:53:60:a1:25:b1:6d:42:7e:f3:
80:24:47:53:bb:ff:53:75:d7:89:6b:53:91:6f:08:
51:05:e0:f0:70:d9:41:64:78:94:ec:ab:1e:88:ba:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:3A:A7:EF:A5:C5:F4:CD:0A:1D:29:EC:3A:39:22:90:4F:7D:E5
X509v3 Authority Key Identifier:
keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:99:18:c3:6b:eb:86:50:8a:58:6d:6b:e1:a8:a6:3d:a9:67:
c8:b6:d6:7d:40:20:59:7b:9f:34:da:d7:7b:b2:d4:32:0f:16:
c4:87:f3:7e:ca:e8:72:fb:bf:4a:37:4d:c9:ff:24:5d:1e:74:
fa:81:6c:0a:f2:f5:89:05:fe:72:7d:19:e2:7f:2f:87:95:4d:
ed:75:43:12:33:74:af:58:6e:cc:ed:33:9d:01:9b:85:a1:0b:
c1:ec:82:5f:a3:bf:d0:ba:17:f7:a5:ac:bf:e4:cb:d1:09:53:
b0:c5:22:59:dd:c9:2f:ed:d2:fe:1a:b9:79:da:c1:6a:0e:f1:
f8:15:6b:9b:42:2a:1f:a4:09:15:29:1d:90:3e:ba:46:25:48:
34:97:1b:f7:34:db:bd:d6:ce:ed:e3:52:58:9e:6c:a9:44:3a:
fa:79:f6:f1:23:a6:93:41:57:db:7d:f0:38:49:2a:4c:f2:c4:
62:30:ab:49:e0:6c:ce:53:07:96:95:e3:31:c6:5c:88:1d:64:
7f:fa:bf:0d:e3:05:ad:83:5b:10:b5:d6:e2:98:44:5c:4f:be:
a8:e3:18:a0:5d:fc:f3:02:30:89:39:4b:9a:75:a8:cc:b4:91:
3e:95:d8:24:13:ac:08:d5:36:05:4b:5d:aa:21:b9:ed:25:6a:
e4:cc:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 23:18:52 2026 by rpki-client