$ rpki-client -vvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft File: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft (raw, json) Hash identifier: rU0uKu4A0M0y0A0pcC4sAtAm8UHS0/ZnEX4dgx884Oo= Subject key identifier: 59:F9:E9:98:36:36:A8:E9:FB:18:99:B9:5D:C8:F8:5B:09:C4:09:B6 Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Certificate serial: 6AC66F5E94852E86D22B519AB70A8A44C3503952 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft Manifest number: 1D Signing time: Sat 23 May 2026 12:38:27 +0000 Manifest this update: Sat 23 May 2026 12:33:27 +0000 Manifest next update: Sun 24 May 2026 13:26:27 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=) 2: 41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl (hash: Iyl18Mn72we36wO5wfhXzrV0kPjoWIgGARgrfFpZbYY=) 3: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 13:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c6:6f:5e:94:85:2e:86:d2:2b:51:9a:b7:0a:8a:44:c3:50:39:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C Validity Not Before: May 23 12:33:27 2026 GMT Not After : May 24 13:26:27 2026 GMT Subject: CN=59F9E9983636A8E9FB1899B95DC8F85B09C409B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:15:09:d3:d8:30:8a:ff:fd:53:2f:fe:3f: c7:55:fa:fd:eb:c6:4c:9e:80:c5:c3:2a:da:6d:a1: 77:20:83:26:ca:64:d5:5d:a1:b2:1f:27:92:c4:43: 76:7f:4b:c7:ba:ef:5c:56:60:5f:90:e2:f7:f3:af: ac:a0:58:1d:2a:8c:83:9d:b1:c4:51:9e:c0:39:0c: b7:cb:1f:ce:0c:ad:2c:79:f8:92:cc:e7:62:5a:e1: 46:72:58:b2:1e:65:a8:77:52:3d:4e:7a:5d:14:64: fa:10:4c:10:d6:39:dd:a8:57:5b:d6:e6:64:c6:7c: b8:34:64:10:8a:0d:4c:8f:92:d8:ef:8b:29:63:5e: 05:18:f2:23:af:6d:1b:d9:99:6c:25:9a:98:89:b4: 76:c8:34:6a:18:9d:09:50:a1:7b:94:f3:1a:03:b5: 73:af:4c:e7:d6:7a:42:95:99:94:20:d7:02:8f:3c: bb:23:a7:ac:27:6e:da:21:ab:0a:d8:75:88:7e:f0: 74:ab:38:92:de:28:33:ba:b9:e4:46:67:1d:4d:36: 4c:88:40:5a:7f:74:6b:94:94:02:25:b2:2d:bd:10: 1d:04:a7:59:ba:7b:2a:89:57:6e:80:c0:10:99:c5: 0a:d0:3d:58:ef:f8:20:1d:8a:eb:3f:17:56:d2:b0: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F9:E9:98:36:36:A8:E9:FB:18:99:B9:5D:C8:F8:5B:09:C4:09:B6 X509v3 Authority Key Identifier: keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f0:a2:0d:e4:8f:eb:a8:d6:36:fa:75:03:07:a7:ae:62:32: c7:67:d4:25:4c:61:ce:c3:f1:c2:c5:d4:a9:c1:88:54:37:4b: 61:72:ae:3b:1a:82:c7:09:ea:5c:d0:36:86:51:1f:a0:ea:b6: a1:0a:84:cf:2b:c4:e4:02:08:c5:81:de:63:4c:cf:3c:c8:6d: e5:04:58:27:52:43:4b:1d:58:d2:11:46:3b:4c:13:c0:cc:ea: 75:fc:ab:2f:8c:57:94:ba:4a:82:be:29:65:11:54:0f:af:e0: c1:4b:30:66:84:a3:22:84:80:fb:23:c3:05:9e:42:5a:20:50: d2:4d:3f:c1:c7:b5:64:a0:5e:c6:2b:9f:af:ca:b8:9a:70:2b: ae:ff:fb:4c:d6:d9:f2:c5:7c:ba:2d:4b:9f:80:ff:f5:58:16: fc:24:c4:77:9f:19:04:8c:81:f4:40:88:09:19:a6:9b:b7:ed: c9:8d:f0:9f:60:13:8a:75:2e:de:a8:bd:5b:64:e5:1a:7a:7d: 45:6d:a2:6d:1c:fc:eb:2d:17:79:c3:fc:82:ba:77:2e:2e:52: ef:46:cd:44:92:73:cc:1f:5b:d2:89:fa:ab:69:26:02:9c:bc: 64:d8:cd:4a:18:4c:ab:b2:14:93:ce:4d:7e:50:21:53:51:97: 2c:eb:87:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasZvXpSFLobSK1GatwqKRMNQOVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0 N0IzRUEwQzAeFw0yNjA1MjMxMjMzMjdaFw0yNjA1MjQxMzI2MjdaMDMxMTAvBgNV BAMTKDU5RjlFOTk4MzYzNkE4RTlGQjE4OTlCOTVEQzhGODVCMDlDNDA5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5RUJ09gwiv/9Uy/+P8dV+v3r xkyegMXDKtptoXcggybKZNVdobIfJ5LEQ3Z/S8e671xWYF+Q4vfzr6ygWB0qjIOd scRRnsA5DLfLH84MrSx5+JLM52Ja4UZyWLIeZah3Uj1Oel0UZPoQTBDWOd2oV1vW 5mTGfLg0ZBCKDUyPktjviyljXgUY8iOvbRvZmWwlmpiJtHbINGoYnQlQoXuU8xoD tXOvTOfWekKVmZQg1wKPPLsjp6wnbtohqwrYdYh+8HSrOJLeKDO6ueRGZx1NNkyI QFp/dGuUlAIlsi29EB0Ep1m6eyqJV26AwBCZxQrQPVjv+CAdius/F1bSsD89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWfnpmDY2qOn7GJm5Xcj4WwnECbYwHwYDVR0j BBgwFoAUQcJMBIfEEMOuxL603EA80Eez6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0ODFlNDktZjRjMS00YzEzLTk0YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4 N0M0MTBDM0FFQzRCRUI0REM0MDNDRDA0N0IzRUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUMyNEMwNDg3QzQxMEMzQUVDNEJFQjREQzQwM0NEMDQ3QjNF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDFDMjRDMDQ4N0M0MTBDM0FFQzRCRUI0REM0MDND RDA0N0IzRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/wog3kj+uo1jb6dQMHp65iMsdn1CVMYc7D 8cLF1KnBiFQ3S2FyrjsagscJ6lzQNoZRH6DqtqEKhM8rxOQCCMWB3mNMzzzIbeUE WCdSQ0sdWNIRRjtME8DM6nX8qy+MV5S6SoK+KWURVA+v4MFLMGaEoyKEgPsjwwWe QlogUNJNP8HHtWSgXsYrn6/KuJpwK67/+0zW2fLFfLotS5+A//VYFvwkxHefGQSM gfRAiAkZppu37cmN8J9gE4p1Lt6ovVtk5Rp6fUVtom0c/OstF3nD/IK6dy4uUu9G zUSSc8wfW9KJ+qtpJgKcvGTYzUoYTKuyFJPOTX5QIVNRlyzrh3M= -----END CERTIFICATE-----Generated at Sun May 24 04:34:47 2026 by rpki-client