$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft File: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft (raw, json) Hash identifier: eithG3rhboao17+uwSSCQ16Ov2maS2aKCDF5TaI75W4= Subject key identifier: EE:18:61:7C:44:F5:FA:38:54:E2:4C:4B:4F:86:35:67:CF:AF:18:9E Authority key identifier: 41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED Certificate issuer: /CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Certificate serial: 0A3A0D39F324A9BE060DD4346FB1BF17B862FA62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:42:00 +0000 Manifest this update: Wed 16 Sep 2026 22:37:00 +0000 Manifest next update: Fri 18 Sep 2026 00:58:00 +0000 Files and hashes: 1: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: AheQBKSQ2I3wH55R9fGq5yq1Y0JimW9uyTq22nxAO5s=) 2: 41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl (hash: oo0Ml0dxiOVcPKLmb70b7Aw0b30+ur18nySCOfVWsWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3a:0d:39:f3:24:a9:be:06:0d:d4:34:6f:b1:bf:17:b8:62:fa:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED Validity Not Before: Sep 16 22:37:00 2026 GMT Not After : Sep 18 00:58:00 2026 GMT Subject: CN=EE18617C44F5FA3854E24C4B4F863567CFAF189E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:c9:58:69:48:02:d9:bc:83:71:ea:26:a9: bd:0e:7a:50:66:2c:5a:0c:83:e5:ad:50:e0:3a:22: ec:7c:2f:56:20:3d:70:58:1f:04:6b:be:3a:d3:da: 73:bb:2b:9d:40:d6:be:0b:ae:e8:c1:06:fb:00:aa: 4e:00:7b:dd:24:e6:71:c8:0e:cd:a8:5a:12:c5:cc: 40:55:b6:fe:d0:93:46:ea:d1:c5:2d:dc:35:f9:ee: 40:eb:64:26:c0:51:ff:17:2b:6a:06:4e:63:d5:1b: ad:de:a4:cb:19:e6:2b:3e:55:35:ec:c6:02:eb:c6: 60:1c:b1:01:a2:17:db:4b:52:c2:60:a2:07:76:43: ae:76:0c:e1:b7:43:48:3a:02:98:5b:9b:35:63:f8: 46:3c:3a:fe:50:49:a4:c1:b1:5d:ec:e9:9f:6e:87: 9d:20:8a:2b:2e:74:98:73:3f:c6:36:ab:95:e6:59: 77:89:7f:91:87:e7:19:8a:34:29:b3:32:84:17:52: 0e:5e:31:c1:ca:71:13:3c:f5:bf:46:c6:0f:25:a6: cc:fd:a0:53:c0:51:b0:c6:4e:3a:93:1d:29:30:53: 86:6c:3c:3a:0e:83:b0:2d:d0:0d:81:d3:17:cd:6c: e8:fb:a1:95:2d:95:de:13:13:60:11:db:bd:f2:20: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:18:61:7C:44:F5:FA:38:54:E2:4C:4B:4F:86:35:67:CF:AF:18:9E X509v3 Authority Key Identifier: keyid:41:FE:67:82:3F:53:58:EF:3D:5F:9B:4F:04:FB:CB:A9:56:0D:38:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/41FE67823F5358EF3D5F9B4F04FBCBA9560D38ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:63:93:18:04:56:ff:b7:ef:12:55:2e:a9:c9:63:8f:4e: 2c:da:5d:7d:fa:ee:10:75:24:f6:54:c0:3d:07:a3:4c:cc:fc: 58:3d:03:44:aa:f1:65:bc:07:aa:5e:74:35:00:c6:0d:2a:3b: 2f:34:ab:0c:5b:47:67:42:56:1f:3a:9c:fc:cd:58:30:4d:99: 9b:1e:10:19:ed:50:5a:07:85:62:fa:65:5c:ff:13:af:57:98: dd:6d:b6:d0:ec:c7:a6:9e:8c:f0:53:e5:b0:4c:fe:41:8c:82: 47:34:5c:a3:5a:c2:98:78:cf:62:23:a1:11:e4:2c:1f:c3:e0: c9:38:50:60:47:45:50:58:4e:c3:09:73:62:db:5b:96:49:39: 39:d5:2f:9e:84:ed:37:c9:5d:88:01:3c:42:d4:b6:9b:7b:75: e5:80:e0:c1:4b:e2:1d:50:1d:1f:75:d8:7e:78:14:05:7d:d4: 04:ec:91:0c:c1:b7:8b:cd:18:bb:2d:3d:34:12:16:dd:66:f7: 61:fa:8b:e8:b5:b4:8c:52:65:e8:9f:7c:1a:40:f0:f4:c8:04: b4:da:e3:3a:0c:20:8a:55:9a:51:39:8b:e1:9b:f5:d4:84:bb: cf:ed:aa:c8:8a:f6:5d:14:12:80:a9:20:6d:d9:06:9e:43:3c: 4d:b0:52:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjoNOfMkqb4GDdQ0b7G/F7hi+mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNCQTk1 NjBEMzhFRDAeFw0yNjA5MTYyMjM3MDBaFw0yNjA5MTgwMDU4MDBaMDMxMTAvBgNV BAMTKEVFMTg2MTdDNDRGNUZBMzg1NEUyNEM0QjRGODYzNTY3Q0ZBRjE4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiMlYaUgC2byDceomqb0OelBm LFoMg+WtUOA6Iux8L1YgPXBYHwRrvjrT2nO7K51A1r4LrujBBvsAqk4Ae90k5nHI Ds2oWhLFzEBVtv7Qk0bq0cUt3DX57kDrZCbAUf8XK2oGTmPVG63epMsZ5is+VTXs xgLrxmAcsQGiF9tLUsJgogd2Q652DOG3Q0g6AphbmzVj+EY8Ov5QSaTBsV3s6Z9u h50giisudJhzP8Y2q5XmWXeJf5GH5xmKNCmzMoQXUg5eMcHKcRM89b9Gxg8lpsz9 oFPAUbDGTjqTHSkwU4ZsPDoOg7At0A2B0xfNbOj7oZUtld4TE2AR273yIMm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7hhhfET1+jhU4kxLT4Y1Z8+vGJ4wHwYDVR0j BBgwFoAUQf5ngj9TWO89X5tPBPvLqVYNOO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlYzJjYjYtMzVhZC00MTAxLTk4MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIz RjUzNThFRjNENUY5QjRGMDRGQkNCQTk1NjBEMzhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUZFNjc4MjNGNTM1OEVGM0Q1RjlCNEYwNEZCQ0JBOTU2MEQz OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvNDFGRTY3ODIzRjUzNThFRjNENUY5QjRGMDRGQkNC QTk1NjBEMzhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkXY5MYBFb/t+8SVS6pyWOPTizaXX367hB1 JPZUwD0Ho0zM/Fg9A0Sq8WW8B6pedDUAxg0qOy80qwxbR2dCVh86nPzNWDBNmZse EBntUFoHhWL6ZVz/E69XmN1tttDsx6aejPBT5bBM/kGMgkc0XKNawph4z2IjoRHk LB/D4Mk4UGBHRVBYTsMJc2LbW5ZJOTnVL56E7TfJXYgBPELUtpt7deWA4MFL4h1Q HR912H54FAV91ATskQzBt4vNGLstPTQSFt1m92H6i+i1tIxSZeiffBpA8PTIBLTa 4zoMIIpVmlE5i+Gb9dSEu8/tqsiK9l0UEoCpIG3ZBp5DPE2wUso= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:50 2026 by rpki-client