$ rpki-client -vvvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: k9kPWTFSlwqjOe17e+v5VC0kj7NgxFwL94OPcp8N7v0= Subject key identifier: 63:0B:91:26:57:E1:46:4B:88:21:C4:80:0A:7E:D0:32:B6:CE:10:62 Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 184B67B28F820292FA05D56D319FECE7B8F488DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: EC Signing time: Sun 25 Oct 2026 04:47:13 +0000 Manifest this update: Sun 25 Oct 2026 04:42:13 +0000 Manifest next update: Mon 26 Oct 2026 07:41:13 +0000 Files and hashes: 1: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: +en6mBkstx/sZbGGvoxmN4K5D89eJIsntf6GBhihgjI=) 2: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) 3: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 07:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4b:67:b2:8f:82:02:92:fa:05:d5:6d:31:9f:ec:e7:b8:f4:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: Oct 25 04:42:13 2026 GMT Not After : Oct 26 07:41:13 2026 GMT Subject: CN=630B912657E1464B8821C4800A7ED032B6CE1062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d9:db:94:d5:14:35:c0:ca:04:64:cd:50:e1: 5f:ce:68:5a:0d:bd:ca:f5:0d:cd:c9:40:a0:f9:93: 24:31:4f:f4:ba:cd:75:7d:71:5b:b2:54:02:81:74: e2:82:de:04:af:b6:25:4e:0c:6c:e0:d3:68:b0:a0: 6b:a8:91:aa:4e:54:a5:94:a7:22:a4:39:f8:43:34: 6b:27:8c:19:c2:da:5d:02:25:3e:f2:4c:96:c7:23: 69:77:cf:d4:51:67:2c:a4:c4:30:b4:e3:39:4c:05: a8:3d:7f:b4:7d:92:03:8d:37:34:eb:8e:ec:66:15: a9:54:53:d0:1f:2d:2c:91:da:c7:a7:ed:93:48:bd: 07:9e:e1:8f:79:8a:48:82:87:9d:c1:2a:2e:c3:b0: f5:71:1c:46:5c:ef:f6:fe:dc:ac:7e:19:fb:ee:51: 0c:a6:28:01:63:7a:28:a4:b4:30:c8:27:3a:38:ec: 70:ac:47:62:33:77:4c:c6:ca:9a:e2:5a:d8:2b:31: 86:62:cf:f9:e3:be:45:5e:cc:80:f8:c4:81:9e:0f: 22:77:5d:24:19:e1:de:ec:cc:95:4c:33:c0:ac:05: ca:b6:cd:85:e9:09:77:65:c8:d7:7e:1a:4a:33:21: 80:e1:a3:1d:95:4e:28:13:5c:ec:47:b5:43:8d:68: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0B:91:26:57:E1:46:4B:88:21:C4:80:0A:7E:D0:32:B6:CE:10:62 X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9e:80:85:37:db:3c:48:93:88:60:a3:cf:68:1f:80:62:62: 4e:b4:fc:5f:d2:79:12:fd:86:42:85:de:43:d3:dc:10:14:99: 04:de:76:26:ad:27:67:42:a6:3c:e2:c7:9c:8c:d3:04:66:ab: 95:ac:6f:32:8c:72:c5:08:0b:a4:8f:2d:7d:97:24:c4:8c:38: a4:40:84:e7:07:21:c8:f7:bd:88:e5:da:60:fa:5b:a0:74:21: de:05:e3:18:f4:2f:69:f4:99:2b:e3:77:1a:0b:05:b2:31:a7: ca:03:57:32:e3:0f:0b:06:29:fb:e1:0a:b6:8d:3f:c1:c8:5d: 1f:9e:f4:93:72:06:3d:c8:f5:25:7b:cc:31:d8:f2:dc:04:e9: ab:46:86:8a:96:37:fc:71:1a:b5:fa:5a:bb:ab:61:cd:12:ec: 98:01:0e:5e:b3:60:d5:6b:99:ee:3f:78:1d:b6:f3:30:9f:c0: b4:f2:8c:d4:f3:2a:71:da:b8:f9:1d:96:58:21:38:4e:d0:bf: e4:da:2d:fd:88:32:3d:03:e3:05:4f:71:39:b7:ab:ee:9a:c0: ae:85:42:c6:9d:40:43:f6:e5:b9:da:71:7c:eb:e5:59:d9:c3: 38:ce:14:8c:0e:1c:ea:40:05:54:de:34:ea:3b:50:75:a9:b3: c2:80:ff:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEtnso+CApL6BdVtMZ/s57j0iNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjEwMjUwNDQyMTNaFw0yNjEwMjYwNzQxMTNaMDMxMTAvBgNV BAMTKDYzMEI5MTI2NTdFMTQ2NEI4ODIxQzQ4MDBBN0VEMDMyQjZDRTEwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq2duU1RQ1wMoEZM1Q4V/OaFoN vcr1Dc3JQKD5kyQxT/S6zXV9cVuyVAKBdOKC3gSvtiVODGzg02iwoGuokapOVKWU pyKkOfhDNGsnjBnC2l0CJT7yTJbHI2l3z9RRZyykxDC04zlMBag9f7R9kgONNzTr juxmFalUU9AfLSyR2sen7ZNIvQee4Y95ikiCh53BKi7DsPVxHEZc7/b+3Kx+Gfvu UQymKAFjeiiktDDIJzo47HCsR2Izd0zGypriWtgrMYZiz/njvkVezID4xIGeDyJ3 XSQZ4d7szJVMM8CsBcq2zYXpCXdlyNd+GkozIYDhox2VTigTXOxHtUONaP+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwuRJlfhRkuIIcSACn7QMrbOEGIwHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+egIU32zxIk4hgo89oH4BiYk60/F/SeRL9 hkKF3kPT3BAUmQTediatJ2dCpjzix5yM0wRmq5WsbzKMcsUIC6SPLX2XJMSMOKRA hOcHIcj3vYjl2mD6W6B0Id4F4xj0L2n0mSvjdxoLBbIxp8oDVzLjDwsGKfvhCraN P8HIXR+e9JNyBj3I9SV7zDHY8twE6atGhoqWN/xxGrX6WrurYc0S7JgBDl6zYNVr me4/eB228zCfwLTyjNTzKnHauPkdllghOE7Qv+TaLf2IMj0D4wVPcTm3q+6awK6F QsadQEP25bnacXzr5VnZwzjOFIwOHOpABVTeNOo7UHWps8KA/1g= -----END CERTIFICATE-----Generated at Sun Oct 25 17:23:18 2026 by rpki-client