$ rpki-client -vvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft File: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft (raw, json) Hash identifier: 4w53saEnYyR2R94BrAkmRGYfbcwdzOkjVm439253O9E= Subject key identifier: 3D:F8:44:2F:7E:C2:88:0D:FF:40:BC:9B:DF:37:4B:4E:E6:3C:66:83 Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA Certificate issuer: /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Certificate serial: 1896BF3B9CA22F1E79535B5D5CFEBBC0F862486C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:59:35 +0000 Manifest this update: Tue 12 May 2026 18:54:35 +0000 Manifest next update: Wed 13 May 2026 20:25:35 +0000 Files and hashes: 1: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl (hash: MEEWZEuJRV8WCBp99ttFbVCXxpI4GmsMdzQkpMzEYz8=) 2: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: j5WFyDrMaI9n63JSzTSL6p6/2kiX350w7znF9gXn6oE=) 3: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: wrUQ4EMVX+PJSZbONtjRtGC7+n3R84eMm7t/IYNPjw8=) 4: 3130332e3234332e31302e302f32342d3234203d3e203536323334.roa (hash: zufjgeZw/w05det8sEI0LnaWHbULyBgD0ra6w23cC5w=) 5: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: iZLgBREB8douvHYZz9gauKXSkvDFXVOW+Mvm3xgORFU=) 6: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: +bPIyCGaEGWvS82VlAv2EHMMfj7mjRKwJoRxD8Cvfm0=) 7: 3130332e3234332e31312e302f32342d3234203d3e203536323334.roa (hash: dTKCe4paU2IY2Oh+L5IqUZGGFO4TUfQMNiigaYInGe4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:96:bf:3b:9c:a2:2f:1e:79:53:5b:5d:5c:fe:bb:c0:f8:62:48:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Validity Not Before: May 12 18:54:35 2026 GMT Not After : May 13 20:25:35 2026 GMT Subject: CN=3DF8442F7EC2880DFF40BC9BDF374B4EE63C6683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:60:01:b5:13:bb:2b:40:9e:7b:5a:0f:83: de:b4:9a:55:94:86:b2:1f:eb:a3:b2:b1:1a:06:5e: 4b:45:bb:27:56:b5:3c:d1:2a:88:20:3e:57:a2:24: 64:77:a8:75:75:0d:71:f6:1a:66:aa:1f:da:77:ce: 42:44:74:8c:93:9d:c8:cd:37:44:41:0c:48:9c:26: d4:c8:e4:9d:43:da:f0:a1:3d:f3:ca:cb:d1:35:90: 0c:36:c7:5d:10:d9:a8:d8:f1:9e:1a:66:93:7c:32: 21:f4:43:dc:0b:45:9c:b9:ef:a6:25:e5:40:60:ea: 29:fd:51:d8:0b:47:91:69:0b:4a:05:cb:cd:86:55: 3e:7a:a1:28:ea:b2:27:7a:10:9c:2a:2c:8d:06:bf: d4:86:e6:39:1b:d7:a1:f7:40:e8:82:af:2e:11:77: 20:83:4c:f2:e1:59:d2:6e:cf:22:3c:17:7e:bb:21: 0a:59:c1:26:ac:81:e2:c9:c4:b9:22:53:8f:ce:66: 75:7d:9e:26:a3:28:54:36:09:f4:d9:c6:ef:e6:5d: 63:fe:dc:1a:d1:e3:f7:03:89:56:c4:16:40:8e:c6: 61:ee:63:11:86:56:2c:72:64:0a:78:61:d5:44:30: dd:17:13:4e:ab:5d:5f:f2:4d:1c:7a:d1:d9:aa:aa: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F8:44:2F:7E:C2:88:0D:FF:40:BC:9B:DF:37:4B:4E:E6:3C:66:83 X509v3 Authority Key Identifier: keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:66:b0:3f:46:e3:c0:58:df:4f:dd:99:eb:a0:84:f3:e1:ae: a1:54:d6:ca:13:c4:60:87:1e:49:8a:e6:b9:db:bc:bb:82:fa: 49:e4:4d:fd:f7:0e:b7:6e:7d:49:de:e9:0b:2a:b9:d1:75:48: c4:ed:69:67:6f:48:fb:ef:b0:b0:d9:6f:25:c6:bd:bf:a4:89: 09:b4:5e:5a:6b:0c:4f:67:3a:bb:bc:03:3e:79:eb:79:1a:b5: 42:17:3e:48:19:24:7e:2a:26:61:83:d5:42:a2:ac:31:e4:b4: 0b:17:b8:4b:4c:46:6b:09:75:f8:80:18:b7:ae:c6:ed:1e:56: fc:47:80:2f:27:12:19:f9:00:18:5f:d6:3c:21:c9:ab:ee:80: a5:bc:1a:78:47:de:0c:65:63:42:01:ee:02:f5:8a:3d:43:53: 51:5d:ad:1a:a8:ee:bf:6a:6c:75:95:5c:7b:49:db:70:53:b2: 1b:b6:30:31:45:89:28:b9:e6:87:99:89:54:18:a2:46:72:8f: 37:8c:73:48:55:58:d7:ac:10:b2:2a:94:7b:b5:70:e3:63:56: 4a:18:81:e8:59:33:37:67:48:36:21:b7:7e:01:3c:f3:b9:1a: 3e:fa:df:f7:af:9a:39:6c:74:be:d8:85:f9:02:3e:6a:bb:5a: f3:31:13:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJa/O5yiLx55U1tdXP67wPhiSGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5 RDRCNkFEQTAeFw0yNjA1MTIxODU0MzVaFw0yNjA1MTMyMDI1MzVaMDMxMTAvBgNV BAMTKDNERjg0NDJGN0VDMjg4MERGRjQwQkM5QkRGMzc0QjRFRTYzQzY2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQGABtRO7K0Cee1oPg960mlWU hrIf66OysRoGXktFuydWtTzRKoggPleiJGR3qHV1DXH2GmaqH9p3zkJEdIyTncjN N0RBDEicJtTI5J1D2vChPfPKy9E1kAw2x10Q2ajY8Z4aZpN8MiH0Q9wLRZy576Yl 5UBg6in9UdgLR5FpC0oFy82GVT56oSjqsid6EJwqLI0Gv9SG5jkb16H3QOiCry4R dyCDTPLhWdJuzyI8F367IQpZwSasgeLJxLkiU4/OZnV9niajKFQ2CfTZxu/mXWP+ 3BrR4/cDiVbEFkCOxmHuYxGGVixyZAp4YdVEMN0XE06rXV/yTRx60dmqqgybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPfhEL37CiA3/QLyb3zdLTuY8ZoMwHwYDVR0j BBgwFoAUkkJ5kIpHwQEbS2pUqgXHvZ1LatowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJjN2RmZDQtZTUxMC00NzA3LTk4MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4 QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5RDRCNkFEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjQyNzk5MDhBNDdDMTAxMUI0QjZBNTRBQTA1QzdCRDlENEI2 QURBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3 QkQ5RDRCNkFEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElmsD9G48BY30/dmeughPPhrqFU1soTxGCH HkmK5rnbvLuC+knkTf33DrdufUne6QsqudF1SMTtaWdvSPvvsLDZbyXGvb+kiQm0 XlprDE9nOru8Az5563katUIXPkgZJH4qJmGD1UKirDHktAsXuEtMRmsJdfiAGLeu xu0eVvxHgC8nEhn5ABhf1jwhyavugKW8GnhH3gxlY0IB7gL1ij1DU1FdrRqo7r9q bHWVXHtJ23BTshu2MDFFiSi55oeZiVQYokZyjzeMc0hVWNesELIqlHu1cONjVkoY gehZMzdnSDYht34BPPO5Gj763/evmjlsdL7YhfkCPmq7WvMxEyg= -----END CERTIFICATE-----Generated at Wed May 13 00:54:30 2026 by rpki-client