$ rpki-client -vvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft File: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft (raw, json) Hash identifier: hrbeIHbmZ5r6Bri0bF+okZ9NB6nNxOkTozbVN30YwtA= Subject key identifier: 02:0C:85:95:95:02:C0:48:91:66:3B:36:9F:B6:21:D6:69:C0:0D:95 Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Certificate serial: 43A24CA97DD683E8489C8C1A1CAB36512F1BE38B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft Manifest number: 59 Signing time: Tue 07 Jul 2026 23:23:55 +0000 Manifest this update: Tue 07 Jul 2026 23:18:55 +0000 Manifest next update: Thu 09 Jul 2026 02:34:55 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=) 2: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=) 3: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl (hash: I2cwDZevgrF2zkEhB08avKEuit8XBSvkHxmBHKrQnhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Jul 2026 02:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a2:4c:a9:7d:d6:83:e8:48:9c:8c:1a:1c:ab:36:51:2f:1b:e3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Validity Not Before: Jul 7 23:18:55 2026 GMT Not After : Jul 9 02:34:55 2026 GMT Subject: CN=020C85959502C04891663B369FB621D669C00D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:d3:f5:7d:02:c4:3e:df:56:ab:e6:95:a2: 83:1f:5e:ee:07:7d:73:ff:fe:2b:25:7e:81:5c:5a: 84:40:c6:f6:ab:b2:a2:6f:01:3a:a9:81:61:4c:ec: ef:3f:64:bd:94:fc:5b:c2:f1:dd:eb:94:d4:85:91: 7a:c6:8b:4b:db:78:52:1e:ce:dc:ed:0c:06:20:4f: 1a:95:e2:0a:37:21:8d:ae:3e:4f:9d:1d:f4:95:a9: ca:75:23:f5:ad:62:4a:cf:54:19:0e:55:38:10:f0: 42:d8:8c:9c:b0:58:65:91:89:c7:86:21:20:20:ff: 62:ec:61:19:9d:f7:c5:a5:4a:b5:fd:5b:24:53:a7: 25:f6:cc:b2:32:72:7e:3e:6f:d3:8b:38:ac:94:33: 70:06:e0:b8:55:93:66:04:64:4a:be:d0:1f:5c:3b: d6:aa:28:23:cd:3f:99:8a:99:78:6e:8f:05:d2:12: 9f:39:ec:d8:a1:00:b5:e3:c5:a9:e1:f4:f1:b7:a3: c8:ea:f7:5b:31:e6:a9:2a:f5:d1:b5:5a:9b:1f:d8: e8:50:7d:76:ef:fb:c1:68:49:87:1e:5e:75:6d:94: 45:33:35:11:23:a4:1f:40:82:66:11:53:c5:4e:c7: 6d:9b:7c:ef:d7:ec:4e:25:85:3d:ce:96:ff:61:15: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0C:85:95:95:02:C0:48:91:66:3B:36:9F:B6:21:D6:69:C0:0D:95 X509v3 Authority Key Identifier: keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:dc:1f:a2:65:e7:82:c5:4e:b6:65:90:01:6f:ed:4b:7a:27: cb:0d:ab:f7:da:f8:5b:a4:cd:15:7b:95:4d:0e:b4:2f:6e:ea: 2a:d9:1a:34:d5:68:11:1e:d5:64:54:44:b3:c4:8b:ce:ab:67: f5:20:4b:f0:87:9f:07:85:a7:85:50:3c:3f:ec:53:4e:75:a1: 1a:9c:87:16:78:41:b4:ad:cc:37:37:4a:55:a9:4d:b2:c5:14: 78:62:11:28:e5:44:26:49:28:2c:fb:45:f8:61:50:d7:0c:48: e1:8b:cf:ce:12:6c:0a:6a:a4:a4:f6:39:2b:ad:32:af:32:f2: 6b:d4:77:49:3f:0d:67:81:88:6c:77:72:b4:c0:81:6c:51:fa: 9a:0c:ec:d0:15:c9:4d:9e:e4:2c:25:d5:b0:d9:12:ab:99:4f: 6b:22:38:30:be:28:2c:4b:f2:ae:84:08:6e:8a:95:ba:f9:ff: 2f:df:6c:71:58:37:32:4d:a2:ea:4c:1a:c0:7d:7e:6c:9f:97: 60:3f:b8:21:b5:eb:37:57:1b:2b:08:3c:2d:88:8f:7d:9f:d7: 96:70:08:21:4c:b9:5c:4f:fc:9a:08:5e:99:65:d1:10:c5:e2: 6d:bc:c3:c5:df:27:d2:2c:3a:92:0c:b8:94:b9:09:56:d6:2f: 68:39:32:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6JMqX3Wg+hInIwaHKs2US8b44swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0 N0IzRUEwQzAeFw0yNjA3MDcyMzE4NTVaFw0yNjA3MDkwMjM0NTVaMDMxMTAvBgNV BAMTKDAyMEM4NTk1OTUwMkMwNDg5MTY2M0IzNjlGQjYyMUQ2NjlDMDBEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnitP1fQLEPt9Wq+aVooMfXu4H fXP//islfoFcWoRAxvarsqJvATqpgWFM7O8/ZL2U/FvC8d3rlNSFkXrGi0vbeFIe ztztDAYgTxqV4go3IY2uPk+dHfSVqcp1I/WtYkrPVBkOVTgQ8ELYjJywWGWRiceG ISAg/2LsYRmd98WlSrX9WyRTpyX2zLIycn4+b9OLOKyUM3AG4LhVk2YEZEq+0B9c O9aqKCPNP5mKmXhujwXSEp857NihALXjxanh9PG3o8jq91sx5qkq9dG1Wpsf2OhQ fXbv+8FoSYceXnVtlEUzNREjpB9AgmYRU8VOx22bfO/X7E4lhT3Olv9hFYe1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAgyFlZUCwEiRZjs2n7Yh1mnADZUwHwYDVR0j BBgwFoAUQcJMBIfEEMOuxL603EA80Eez6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0ODFlNDktZjRjMS00YzEzLTk0YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4 N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0N0IzRUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMyNEMwNDg3QzQxMEMzQUVDNEJFQjREQzQwM0NEMDQ3QjNF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDND RDA0N0IzRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIncH6Jl54LFTrZlkAFv7Ut6J8sNq/fa+Fuk zRV7lU0OtC9u6irZGjTVaBEe1WRURLPEi86rZ/UgS/CHnweFp4VQPD/sU051oRqc hxZ4QbStzDc3SlWpTbLFFHhiESjlRCZJKCz7RfhhUNcMSOGLz84SbApqpKT2OSut Mq8y8mvUd0k/DWeBiGx3crTAgWxR+poM7NAVyU2e5Cwl1bDZEquZT2siODC+KCxL 8q6ECG6Klbr5/y/fbHFYNzJNoupMGsB9fmyfl2A/uCG16zdXGysIPC2Ij32f15Zw CCFMuVxP/JoIXpll0RDF4m28w8XfJ9IsOpIMuJS5CVbWL2g5Mu8= -----END CERTIFICATE-----Generated at Wed Jul 8 18:49:12 2026 by rpki-client