
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
File: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json)
Hash identifier: gS6Ysk41xBVImivHkyeojrWVRI+S3j1mk4QjS4f++MU=
Subject key identifier: 60:B8:87:CB:52:BB:E7:93:0F:3E:98:C0:79:74:98:2E:2C:C5:E0:17
Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A
Certificate issuer: /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A
Certificate serial: 236212B40FDC42EED6415FDDE97E5B63933EC41C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 20:57:57 +0000
Manifest this update: Sun 25 Oct 2026 20:52:57 +0000
Manifest next update: Mon 26 Oct 2026 22:20:57 +0000
Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=)
2: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: uAdqVYMiB52ReQL2D6yEG2ShnqVEobxFHEUAQ2utETo=)
3: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=)
4: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl
rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:62:12:b4:0f:dc:42:ee:d6:41:5f:dd:e9:7e:5b:63:93:3e:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A
Validity
Not Before: Oct 25 20:52:57 2026 GMT
Not After : Oct 26 22:20:57 2026 GMT
Subject: CN=60B887CB52BBE7930F3E98C07974982E2CC5E017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:57:d8:fb:07:79:d3:95:b6:e7:f7:e6:6e:
47:f5:75:80:2b:75:4e:e6:11:6e:47:9e:ac:bd:30:
b2:16:72:47:9e:d6:d7:62:f9:72:f8:18:d5:1b:a2:
f1:b1:61:3e:2c:b2:8b:5b:c3:f9:c6:90:c6:0f:97:
24:6b:21:ef:d0:0f:66:d7:02:40:a1:90:a2:a3:40:
47:50:e5:d5:ae:43:07:d7:89:d3:23:b0:26:c6:3d:
08:9c:4f:4d:04:cb:57:20:35:ee:a7:16:d3:85:74:
52:14:45:60:40:a3:40:fb:27:35:33:93:c4:0e:e7:
97:1a:9a:3d:e0:c0:55:c7:cd:9b:e9:12:fc:98:b8:
b2:90:84:52:d7:03:0f:12:39:e1:c4:23:7e:8b:3f:
0f:f2:e0:2a:9f:26:1d:12:56:99:0f:ee:4e:b8:2e:
78:5e:4c:c9:51:db:83:23:ca:2f:5e:55:c9:08:23:
1a:99:a4:ad:6f:85:61:45:99:da:25:62:e0:b4:8b:
80:7a:0b:10:43:1c:40:92:40:73:ea:8f:3c:fd:22:
22:50:30:42:e3:a9:99:1e:c4:e5:8a:11:ab:fc:db:
71:60:39:ef:0c:79:ca:78:c6:7f:db:ed:82:6b:d1:
ca:b3:36:5b:8d:d9:74:17:9d:08:f6:a9:5f:f9:62:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B8:87:CB:52:BB:E7:93:0F:3E:98:C0:79:74:98:2E:2C:C5:E0:17
X509v3 Authority Key Identifier:
keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a9:0a:bd:ea:7d:16:c3:33:95:02:7d:da:41:80:08:73:a5:
40:02:60:64:b3:63:c3:1d:07:43:5b:47:51:b6:87:db:48:0f:
a2:96:ad:9a:06:e0:3c:34:60:50:81:f0:ef:69:64:c4:69:a2:
28:ec:04:71:b8:42:70:fe:02:b3:a9:5a:fb:35:de:a9:0b:fa:
44:9a:0e:34:ce:e1:c9:43:f6:25:ab:a6:d5:5b:1c:cc:31:69:
bb:1f:7e:77:4b:37:53:56:96:55:5d:8e:cc:b2:f8:63:34:60:
70:b5:80:6a:ab:f3:7c:2c:8a:40:58:ba:98:3c:a6:3f:de:8b:
78:fb:80:b7:4b:02:f6:0f:46:db:8b:c5:f9:88:73:5a:b4:46:
0c:88:1c:60:2f:72:f3:e3:b4:7a:7e:d1:7a:52:de:3d:78:fc:
8a:41:cb:86:68:04:c9:1e:3a:20:e8:d6:bc:52:68:88:33:a2:
8c:d5:88:07:18:28:02:0e:85:e2:9f:7b:04:09:ab:fc:0f:be:
e6:10:6c:9c:57:52:e2:2f:dd:e8:76:bf:3f:68:4e:f8:54:09:
77:5f:67:7a:ff:b8:df:6c:d6:b5:f7:85:c2:25:de:a7:32:16:
ba:3b:b1:3f:d0:76:d5:54:a4:18:0c:fd:6c:12:a8:da:fb:88:
30:a2:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:51 2026 by rpki-client