$ rpki-client -vvvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft File: 41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json) Hash identifier: Wl1t7NCWiB+270/et7MpYFFjqx/kDS7neyeOcvayfqE= Subject key identifier: A2:AA:52:6D:A6:C2:31:D8:31:F3:E7:BE:6C:9C:C7:05:63:8F:52:11 Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 Certificate issuer: /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Certificate serial: 5E841AC4F932C7B29F8DAD964909592F4B122B95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft Manifest number: 9B Signing time: Wed 26 Aug 2026 02:14:12 +0000 Manifest this update: Wed 26 Aug 2026 02:09:12 +0000 Manifest next update: Thu 27 Aug 2026 02:42:12 +0000 Files and hashes: 1: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=) 2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=) 3: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: ZY0l42uQ61nAfIhizNTk1paJvz1EeXxIhLtH0zglnzs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 02:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:84:1a:c4:f9:32:c7:b2:9f:8d:ad:96:49:09:59:2f:4b:12:2b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23 Validity Not Before: Aug 26 02:09:12 2026 GMT Not After : Aug 27 02:42:12 2026 GMT Subject: CN=A2AA526DA6C231D831F3E7BE6C9CC705638F5211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:99:18:b9:1e:18:e0:7c:f1:ec:27:a3:8c: 4d:4b:94:e9:48:d6:89:f0:93:d6:4e:eb:f4:46:02: cb:21:cf:a0:91:e9:0e:e3:d2:9c:bd:5c:3f:e7:87: 31:86:5e:b3:5b:a9:62:47:85:2f:94:cf:16:e4:7a: 4e:b3:ea:c8:87:07:83:2f:6c:10:03:6e:c2:40:fa: ef:ca:94:ad:31:63:e9:8e:86:62:f7:f2:d4:e1:2e: 75:d6:69:82:c6:33:fe:42:65:45:52:30:b9:d0:de: 1b:09:17:e2:6a:75:75:db:1c:cb:36:f6:91:91:1f: 5a:9b:59:5e:15:37:11:0d:70:44:3c:5c:05:8a:b6: d1:f6:45:c9:0d:9f:40:92:0f:7d:45:6e:41:ca:77: 68:91:e1:6d:01:14:ed:5c:d2:78:c9:fb:7b:06:5b: 4a:fd:c0:09:96:48:a0:35:75:7e:7c:36:b1:6c:79: 8f:51:72:1a:a7:c0:5f:d9:5f:91:9e:be:8d:73:76: 3c:3c:c8:5c:1e:fc:99:45:ae:cf:7e:83:a2:72:29: 2e:2d:f7:b7:74:5a:61:42:ce:5d:51:b9:22:a4:fc: 89:b2:18:4c:84:f9:d7:bf:17:14:13:0a:64:ee:41: 0a:85:49:ad:9d:9d:91:fb:25:5a:e3:67:b7:3e:70: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AA:52:6D:A6:C2:31:D8:31:F3:E7:BE:6C:9C:C7:05:63:8F:52:11 X509v3 Authority Key Identifier: keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ff:3c:3d:c5:aa:fe:1e:be:e8:22:44:ee:cc:85:e0:d8:98: cb:81:88:ee:18:04:f7:e4:ea:49:8a:43:47:dc:c1:00:ff:67: 71:e0:60:1f:30:18:b1:a8:c8:c4:41:36:32:69:8e:26:44:e5: 45:60:ea:27:7a:31:4b:7e:cc:40:34:21:5c:4b:a2:05:98:aa: 48:d7:bc:0d:fd:08:11:55:a8:eb:37:43:b7:27:84:59:d8:42: e1:f8:49:28:3b:e3:b4:8c:6e:c9:71:3e:b2:20:23:99:f1:d4: fc:33:5c:a9:00:26:4f:82:5f:b8:d7:1d:c7:1d:b0:4a:dd:cf: 75:b5:50:cf:b6:19:16:2d:7c:18:f9:6b:52:65:51:13:bb:90: 80:d0:e4:49:f8:ea:ee:0e:87:9e:11:38:99:da:f9:31:6c:a4: d6:32:68:24:fe:83:09:e2:47:e5:7f:b7:c8:b3:88:cd:58:49: a7:dc:a1:3f:57:1c:6f:ae:6b:1f:82:46:6a:92:5f:bf:3a:c5: 92:df:d1:7a:ab:06:2e:29:f1:fe:80:28:eb:06:c1:bb:63:87: ec:b1:46:a6:f0:97:43:7c:46:eb:c4:07:f5:51:b9:06:56:18: ed:3b:07:59:af:99:01:8b:60:3f:33:55:09:b3:d8:f4:83:66: 41:47:65:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXoQaxPkyx7Kfja2WSQlZL0sSK5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJE NzYyMkQyMzAeFw0yNjA4MjYwMjA5MTJaFw0yNjA4MjcwMjQyMTJaMDMxMTAvBgNV BAMTKEEyQUE1MjZEQTZDMjMxRDgzMUYzRTdCRTZDOUNDNzA1NjM4RjUyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvpkYuR4Y4Hzx7CejjE1LlOlI 1onwk9ZO6/RGAsshz6CR6Q7j0py9XD/nhzGGXrNbqWJHhS+Uzxbkek6z6siHB4Mv bBADbsJA+u/KlK0xY+mOhmL38tThLnXWaYLGM/5CZUVSMLnQ3hsJF+JqdXXbHMs2 9pGRH1qbWV4VNxENcEQ8XAWKttH2RckNn0CSD31FbkHKd2iR4W0BFO1c0njJ+3sG W0r9wAmWSKA1dX58NrFseY9RchqnwF/ZX5Gevo1zdjw8yFwe/JlFrs9+g6JyKS4t 97d0WmFCzl1RuSKk/ImyGEyE+de/FxQTCmTuQQqFSa2dnZH7JVrjZ7c+cPezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqpSbabCMdgx8+e+bJzHBWOPUhEwHwYDVR0j BBgwFoAUQdWUqBznkCxbhhzd9ELUC9diLSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTM4YzYyMWQtMDViYy00YmNkLTk2NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgx Q0U3OTAyQzVCODYxQ0RERjQ0MkQ0MEJENzYyMkQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ1OTRBODFDRTc5MDJDNUI4NjFDRERGNDQyRDQwQkQ3NjIy RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvNDFENTk0QTgxQ0U3OTAyQzVCODYxQ0RERjQ0MkQ0 MEJENzYyMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJf/PD3Fqv4evugiRO7MheDYmMuBiO4YBPfk 6kmKQ0fcwQD/Z3HgYB8wGLGoyMRBNjJpjiZE5UVg6id6MUt+zEA0IVxLogWYqkjX vA39CBFVqOs3Q7cnhFnYQuH4SSg747SMbslxPrIgI5nx1PwzXKkAJk+CX7jXHccd sErdz3W1UM+2GRYtfBj5a1JlURO7kIDQ5En46u4Oh54ROJna+TFspNYyaCT+gwni R+V/t8iziM1YSafcoT9XHG+uax+CRmqSX786xZLf0XqrBi4p8f6AKOsGwbtjh+yx Rqbwl0N8RuvEB/VRuQZWGO07B1mvmQGLYD8zVQmz2PSDZkFHZeg= -----END CERTIFICATE-----Generated at Wed Aug 26 07:32:09 2026 by rpki-client