$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft File: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft (raw, json) Hash identifier: TsB4lsA2kXJq/BImiYNZbJx7ca4VmK+2Rs44Pw0UlWg= Subject key identifier: B1:20:51:61:FB:2C:D0:51:F3:35:B2:AB:77:E4:95:2E:4A:52:F7:A1 Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA Certificate issuer: /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Certificate serial: 2B93673079206FE1025F4EA580F116A3F7E24C33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 09:22:18 +0000 Manifest this update: Thu 24 Sep 2026 09:17:18 +0000 Manifest next update: Fri 25 Sep 2026 11:03:18 +0000 Files and hashes: 1: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: +bPIyCGaEGWvS82VlAv2EHMMfj7mjRKwJoRxD8Cvfm0=) 2: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: wrUQ4EMVX+PJSZbONtjRtGC7+n3R84eMm7t/IYNPjw8=) 3: 3130332e3234332e31312e302f32342d3234203d3e203536323334.roa (hash: dTKCe4paU2IY2Oh+L5IqUZGGFO4TUfQMNiigaYInGe4=) 4: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl (hash: ZsHTTNBmF2Civ48gTO/WbltMLjRzG1mII10aZ0wiShU=) 5: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: j5WFyDrMaI9n63JSzTSL6p6/2kiX350w7znF9gXn6oE=) 6: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: iZLgBREB8douvHYZz9gauKXSkvDFXVOW+Mvm3xgORFU=) 7: 3130332e3234332e31302e302f32342d3234203d3e203536323334.roa (hash: zufjgeZw/w05det8sEI0LnaWHbULyBgD0ra6w23cC5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:93:67:30:79:20:6f:e1:02:5f:4e:a5:80:f1:16:a3:f7:e2:4c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Validity Not Before: Sep 24 09:17:18 2026 GMT Not After : Sep 25 11:03:18 2026 GMT Subject: CN=B1205161FB2CD051F335B2AB77E4952E4A52F7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:82:5f:8c:f9:1b:46:b1:36:6c:8d:8a:02: 57:c7:3b:01:8a:c7:1c:c7:94:34:8a:4f:ea:3d:7f: bb:f6:e5:0a:97:9e:f4:f5:22:df:fc:9b:e8:aa:88: bd:15:7f:72:e9:0c:50:c9:67:3d:c5:a6:ae:1c:5b: f0:73:0e:b3:b9:a7:1f:4f:7c:34:41:52:f2:15:28: 78:6b:c6:89:90:7c:e8:84:57:8f:c2:7c:d5:a0:0f: c5:e8:40:3a:e9:12:15:74:6e:6a:19:e4:66:ab:a7: 0e:2a:34:a0:88:ff:5f:96:1f:e3:6b:07:90:bf:8f: 8d:5b:c9:cc:05:cd:02:f0:ce:3d:f6:4c:8f:7d:d3: 15:1f:bd:d3:a8:79:4f:81:20:2c:8b:b4:ed:31:61: 3e:5e:18:89:2a:5e:65:37:84:06:d8:ea:91:a4:b4: 18:c9:ad:8f:bb:0c:76:69:82:d3:70:9a:b7:9e:f3: f2:f3:5b:d6:33:28:79:04:74:6d:7f:6d:fa:0c:c9: 35:0a:23:10:05:33:7d:86:f1:92:0b:4d:0d:c4:0f: ba:ad:e7:53:6c:17:5c:62:e7:a7:64:d6:75:dd:d9: 4c:8a:80:f5:2f:21:03:92:98:33:e8:4b:e4:8d:1e: b8:db:a9:76:3b:97:ec:1a:01:b6:07:d6:d6:ba:ad: 2b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:20:51:61:FB:2C:D0:51:F3:35:B2:AB:77:E4:95:2E:4A:52:F7:A1 X509v3 Authority Key Identifier: keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:20:e4:3a:dd:80:81:f4:bb:6b:7b:03:ec:7c:bb:94:1e:6c: 16:3f:ef:fd:55:49:5d:02:d8:5d:1f:07:dd:db:68:5c:8b:1e: 8c:e6:8a:78:de:df:c3:6e:a1:3d:7b:0b:90:5e:e4:f8:5e:b8: 56:6b:6c:9a:70:2d:a4:fa:7d:23:4a:8d:58:9c:62:e4:19:f7: 4e:d2:eb:14:3b:bc:92:95:dd:e4:50:b7:31:38:9e:4a:40:f6: 4a:0b:ce:08:5d:52:93:56:4f:f4:8f:60:b5:14:3d:cd:6d:04: 14:91:5e:09:9b:8c:43:08:d7:31:8b:cd:0a:90:e2:76:f4:c5: bd:b5:3a:86:ef:09:93:f2:13:52:95:21:7b:c8:81:61:53:df: 0d:64:6a:98:f6:d6:57:e2:6d:04:8e:de:c5:08:54:6e:0a:a4: 80:14:97:4b:3e:06:7c:54:0b:09:d1:41:44:cb:0d:a2:5b:54: a7:74:c8:38:61:85:36:84:b8:7f:f1:9a:c2:24:b1:4d:cd:64: 13:50:17:07:16:c2:ae:f7:17:20:13:27:d0:2f:3f:be:e1:3c: a0:6b:3e:72:d2:e5:41:b5:28:93:2d:6b:27:37:f0:48:3a:b2: 8c:bb:d0:2e:c0:a5:cc:f3:81:3b:cf:ee:38:25:31:79:e0:04: d1:3c:8e:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5NnMHkgb+ECX06lgPEWo/fiTDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5 RDRCNkFEQTAeFw0yNjA5MjQwOTE3MThaFw0yNjA5MjUxMTAzMThaMDMxMTAvBgNV BAMTKEIxMjA1MTYxRkIyQ0QwNTFGMzM1QjJBQjc3RTQ5NTJFNEE1MkY3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RoJfjPkbRrE2bI2KAlfHOwGK xxzHlDSKT+o9f7v25QqXnvT1It/8m+iqiL0Vf3LpDFDJZz3Fpq4cW/BzDrO5px9P fDRBUvIVKHhrxomQfOiEV4/CfNWgD8XoQDrpEhV0bmoZ5Garpw4qNKCI/1+WH+Nr B5C/j41bycwFzQLwzj32TI990xUfvdOoeU+BICyLtO0xYT5eGIkqXmU3hAbY6pGk tBjJrY+7DHZpgtNwmree8/LzW9YzKHkEdG1/bfoMyTUKIxAFM32G8ZILTQ3ED7qt 51NsF1xi56dk1nXd2UyKgPUvIQOSmDPoS+SNHrjbqXY7l+waAbYH1ta6rSvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsSBRYfss0FHzNbKrd+SVLkpS96EwHwYDVR0j BBgwFoAUkkJ5kIpHwQEbS2pUqgXHvZ1LatowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJjN2RmZDQtZTUxMC00NzA3LTk4MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4 QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5RDRCNkFEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjQyNzk5MDhBNDdDMTAxMUI0QjZBNTRBQTA1QzdCRDlENEI2 QURBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3 QkQ5RDRCNkFEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYg5DrdgIH0u2t7A+x8u5QebBY/7/1VSV0C 2F0fB93baFyLHozminje38NuoT17C5Be5PheuFZrbJpwLaT6fSNKjVicYuQZ907S 6xQ7vJKV3eRQtzE4nkpA9koLzghdUpNWT/SPYLUUPc1tBBSRXgmbjEMI1zGLzQqQ 4nb0xb21OobvCZPyE1KVIXvIgWFT3w1kapj21lfibQSO3sUIVG4KpIAUl0s+BnxU CwnRQUTLDaJbVKd0yDhhhTaEuH/xmsIksU3NZBNQFwcWwq73FyATJ9AvP77hPKBr PnLS5UG1KJMtayc38Eg6soy70C7ApczzgTvP7jglMXngBNE8jkE= -----END CERTIFICATE-----Generated at Thu Sep 24 20:52:59 2026 by rpki-client