$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft File: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft (raw, json) Hash identifier: 1VQbBJ3JrzP93Yr5yMQXtsWOIaLYRJ7VaeyJpSQybDE= Subject key identifier: CC:8B:25:A2:C3:C4:3D:F8:B0:28:3A:3B:B5:85:02:93:66:35:9F:A4 Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Certificate serial: 721A85FC609BFC2E4F34ED97064A936C60633F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft Manifest number: EB Signing time: Mon 26 Oct 2026 03:36:27 +0000 Manifest this update: Mon 26 Oct 2026 03:31:27 +0000 Manifest next update: Tue 27 Oct 2026 06:19:27 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=) 2: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=) 3: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl (hash: sEcckPa0n08HUcSX1n7HKTQq2o8DW/g6F4jp0UD0++Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 06:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1a:85:fc:60:9b:fc:2e:4f:34:ed:97:06:4a:93:6c:60:63:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Validity Not Before: Oct 26 03:31:27 2026 GMT Not After : Oct 27 06:19:27 2026 GMT Subject: CN=CC8B25A2C3C43DF8B0283A3BB585029366359FA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:94:00:66:13:7e:b7:e4:20:a8:ea:1e:97: 01:05:73:de:f4:cc:d1:cf:45:11:86:aa:cb:d7:b0: cf:25:ce:19:61:54:ad:2c:d0:ba:b1:96:96:f8:14: 18:12:01:90:08:67:ad:45:8a:19:16:74:a3:e6:61: 13:20:70:ea:b6:6b:f6:7e:f4:23:18:2f:26:d1:3c: e7:09:9c:cd:62:11:bf:aa:93:2d:a9:92:81:da:f5: 4d:d9:7a:a5:66:e1:95:be:e4:c9:ed:1b:9d:25:4d: b2:40:21:be:a8:c4:bc:3e:b9:35:06:eb:4e:17:79: 46:cb:11:78:50:1e:29:35:d4:a0:cd:a6:c6:11:0a: 3f:14:d2:fb:bc:38:8f:a1:ab:43:92:40:3c:9b:00: cf:e4:e0:2f:63:64:eb:6c:3e:41:48:38:4b:60:26: 06:06:bc:c8:1d:f4:53:f0:70:02:cc:49:b4:4c:f1: 1c:8e:64:7c:8b:39:f5:d9:75:c2:a2:a6:8b:66:51: e4:f7:b2:93:b3:2b:02:3f:90:0b:c8:c6:e1:8a:b7: 55:23:c4:63:94:46:72:3f:e7:0c:87:39:74:73:99: 98:5d:bc:a4:3c:d7:6f:7a:39:48:a9:ee:03:20:21: b2:24:0a:2e:1c:78:e8:1f:6d:9c:1a:bf:4a:43:5e: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8B:25:A2:C3:C4:3D:F8:B0:28:3A:3B:B5:85:02:93:66:35:9F:A4 X509v3 Authority Key Identifier: keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9f:2b:90:70:40:85:05:8d:1c:68:ae:5a:1d:60:da:28:5e: d8:4d:3b:a8:d5:6e:75:33:82:82:b3:5e:ff:d9:96:2f:50:2b: 6e:ac:75:7a:60:4f:f0:ea:27:1e:22:bc:72:fe:23:ae:3f:66: 84:d7:60:91:be:48:e8:91:9e:43:f2:4d:d8:3d:e5:f5:8a:e0: 15:8c:18:5b:1a:9a:4f:99:1c:4c:a2:d8:87:ea:f3:80:96:8a: 35:5c:b4:c5:f7:f4:54:77:d1:f6:e6:24:1f:b6:09:9f:72:5d: 29:6d:aa:50:68:13:b9:f4:f5:a0:1b:84:b5:71:e9:8d:37:c8: 1d:e2:61:8b:6d:3a:9b:6c:d8:67:d4:6f:12:df:6e:a5:bd:36: cd:dd:7b:b2:9d:d8:ea:02:70:36:58:7f:af:12:69:71:50:e6: 42:0b:77:94:c7:0e:44:55:05:bc:78:e0:1e:bc:ce:aa:38:31: 83:ee:ed:ac:1a:88:2a:2a:31:45:25:10:8d:37:32:df:03:3c: 6d:d8:fa:7a:44:ee:ed:43:0c:7e:3c:3a:eb:c2:6f:99:f9:49: e5:e0:73:08:b6:6c:bc:37:d7:ed:18:8a:59:6a:87:bb:cf:ac: c4:69:2c:e0:dc:13:19:75:ae:90:2c:93:47:81:0a:15:21:a1: 3b:8e:42:f7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITchqF/GCb/C5PNO2XBkqTbGBjPzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0MUMyNEMwNDg3QzQxMEMzQUVDNEJFQjREQzQwM0NEMDQ3 QjNFQTBDMB4XDTI2MTAyNjAzMzEyN1oXDTI2MTAyNzA2MTkyN1owMzExMC8GA1UE AxMoQ0M4QjI1QTJDM0M0M0RGOEIwMjgzQTNCQjU4NTAyOTM2NjM1OUZBNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVMlABmE3635CCo6h6XAQVz3vTM 0c9FEYaqy9ewzyXOGWFUrSzQurGWlvgUGBIBkAhnrUWKGRZ0o+ZhEyBw6rZr9n70 IxgvJtE85wmczWIRv6qTLamSgdr1Tdl6pWbhlb7kye0bnSVNskAhvqjEvD65NQbr Thd5RssReFAeKTXUoM2mxhEKPxTS+7w4j6GrQ5JAPJsAz+TgL2Nk62w+QUg4S2Am Bga8yB30U/BwAsxJtEzxHI5kfIs59dl1wqKmi2ZR5Peyk7MrAj+QC8jG4Yq3VSPE Y5RGcj/nDIc5dHOZmF28pDzXb3o5SKnuAyAhsiQKLhx46B9tnBq/SkNeswsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTMiyWiw8Q9+LAoOju1hQKTZjWfpDAfBgNVHSME GDAWgBRBwkwEh8QQw67EvrTcQDzQR7PqDDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8y MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80MUMyNEMwNDg3 QzQxMEMzQUVDNEJFQjREQzQwM0NEMDQ3QjNFQTBDLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzQxQzI0QzA0ODdDNDEwQzNBRUM0QkVCNERDNDAzQ0QwNDdCM0VB MEMuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMDQ4MWU0OS1mNGMxLTRjMTMtOTRi Ny0wNzAxYzkyYzM0NTAvMC80MUMyNEMwNDg3QzQxMEMzQUVDNEJFQjREQzQwM0NE MDQ3QjNFQTBDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAWp8rkHBAhQWNHGiuWh1g2ihe2E07qNVudTOC grNe/9mWL1Arbqx1emBP8OonHiK8cv4jrj9mhNdgkb5I6JGeQ/JN2D3l9YrgFYwY WxqaT5kcTKLYh+rzgJaKNVy0xff0VHfR9uYkH7YJn3JdKW2qUGgTufT1oBuEtXHp jTfIHeJhi206m2zYZ9RvEt9upb02zd17sp3Y6gJwNlh/rxJpcVDmQgt3lMcORFUF vHjgHrzOqjgxg+7trBqIKioxRSUQjTcy3wM8bdj6ekTu7UMMfjw668JvmflJ5eBz CLZsvDfX7RiKWWqHu8+sxGks4NwTGXWukCyTR4EKFSGhO45C9w== -----END CERTIFICATE-----Generated at Mon Oct 26 23:30:49 2026 by rpki-client