$ rpki-client -vvvf rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft File: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft (raw, json) Hash identifier: epXN02AY0u+M6WQGa9PNa+haNpHdEtgasmchMK7SPwU= Subject key identifier: AE:4C:20:C5:2F:64:56:2F:D7:2D:5A:00:1C:45:47:D7:03:AD:58:4F Authority key identifier: 74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA Certificate issuer: /CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Certificate serial: 236FBFFD6253C791D16C57B0BA706AFF80E73904 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 02:44:02 +0000 Manifest this update: Thu 24 Sep 2026 02:39:02 +0000 Manifest next update: Fri 25 Sep 2026 05:12:02 +0000 Files and hashes: 1: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl (hash: kuKirPD1nNjjFJz5plhK+iAaJNER3Q9X7gqQtLvcxNY=) 2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: d8hlpMGwM7inThd2/Asl74/yVlwwKBLZArB/QX8GfGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6f:bf:fd:62:53:c7:91:d1:6c:57:b0:ba:70:6a:ff:80:e7:39:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Validity Not Before: Sep 24 02:39:02 2026 GMT Not After : Sep 25 05:12:02 2026 GMT Subject: CN=AE4C20C52F64562FD72D5A001C4547D703AD584F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:2d:9a:4d:62:2a:b5:97:3f:77:30:e4:99: f7:f1:19:16:59:8f:b6:b4:1d:86:89:8e:71:e7:c4: f5:f1:1b:78:f8:c3:bf:cf:a4:5e:ac:9a:16:47:8c: 7f:c9:aa:88:8c:31:08:92:c1:d7:0d:64:2e:bb:01: f2:da:a9:61:dc:fa:59:24:60:a1:b6:13:27:d0:f0: 65:e2:d8:ae:2f:5d:08:06:e6:ec:7b:24:ba:51:c1: f5:ad:84:b3:00:13:5d:27:05:32:2f:65:4c:19:ac: d9:35:79:43:51:d3:45:d5:69:7e:7a:a6:be:2c:9e: 9f:43:78:64:f4:3a:c7:1a:8c:06:03:8a:70:21:30: 55:1d:87:51:52:b3:ad:c0:c6:2a:1b:e0:43:a8:95: 72:5f:29:00:9d:6e:eb:68:13:b6:e2:de:63:9a:ea: b7:13:18:2e:fb:db:16:50:8c:91:4b:2c:89:6c:dc: 96:f5:0d:26:04:6f:03:e4:bd:28:e8:11:f6:2d:59: c3:e5:46:d0:f1:89:43:18:de:49:e1:30:af:8d:f9: a8:b5:84:e7:0b:fc:32:a2:9e:9a:89:b8:8e:be:7c: 3a:48:26:ad:14:c3:b2:a4:32:01:f5:9c:8c:70:46: ba:71:64:77:01:50:e1:28:7a:3c:11:82:d6:1b:f0: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4C:20:C5:2F:64:56:2F:D7:2D:5A:00:1C:45:47:D7:03:AD:58:4F X509v3 Authority Key Identifier: keyid:74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f1:d7:37:1e:82:f8:b2:fa:e9:1c:53:ec:04:a0:1a:35:90: e9:bb:8f:c1:db:9b:b0:37:fc:10:06:fa:10:84:c4:7e:9e:f0: a2:e5:7f:b6:f8:47:f4:e8:e6:f7:20:f4:9d:26:b6:99:9b:1b: 0f:26:2f:5a:7c:86:57:a7:d7:9f:4a:fb:63:05:33:24:a7:df: 7a:e7:ea:a5:b7:0e:c4:a5:43:c2:19:04:4d:00:07:90:53:c1: 51:fd:c4:8f:ca:88:b8:a8:18:d0:c1:9b:43:4a:27:22:4e:9e: e1:9d:0c:00:e4:5a:47:87:10:cf:46:e6:27:a9:49:04:6c:30: b4:55:09:96:99:00:26:9a:de:a7:31:40:1c:8c:1c:89:c3:f0: 05:19:34:84:cc:14:cb:b7:36:59:65:73:36:c2:4c:30:77:c1: bc:01:be:ee:ed:fd:78:6c:1a:21:4e:33:dd:7a:d1:22:e7:fe: 40:4a:ec:10:9b:4f:e2:31:56:4d:1c:fc:16:a2:d7:f4:1b:d0: 51:c1:2a:33:18:9a:ad:25:e2:12:17:32:17:b1:b7:f6:4d:dd: 8d:6e:9d:97:51:fd:19:c5:c9:60:01:57:76:cf:82:d6:3b:d8: 04:65:78:55:36:15:fa:06:ed:e4:1e:2b:14:f1:e9:0d:e2:51: f8:ca:25:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2+//WJTx5HRbFewunBq/4DnOQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZG NTFEN0ZFQTAeFw0yNjA5MjQwMjM5MDJaFw0yNjA5MjUwNTEyMDJaMDMxMTAvBgNV BAMTKEFFNEMyMEM1MkY2NDU2MkZENzJENUEwMDFDNDU0N0Q3MDNBRDU4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXwS2aTWIqtZc/dzDkmffxGRZZ j7a0HYaJjnHnxPXxG3j4w7/PpF6smhZHjH/JqoiMMQiSwdcNZC67AfLaqWHc+lkk YKG2EyfQ8GXi2K4vXQgG5ux7JLpRwfWthLMAE10nBTIvZUwZrNk1eUNR00XVaX56 pr4snp9DeGT0OscajAYDinAhMFUdh1FSs63Axiob4EOolXJfKQCdbutoE7bi3mOa 6rcTGC772xZQjJFLLIls3Jb1DSYEbwPkvSjoEfYtWcPlRtDxiUMY3knhMK+N+ai1 hOcL/DKinpqJuI6+fDpIJq0Uw7KkMgH1nIxwRrpxZHcBUOEoejwRgtYb8KrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrkwgxS9kVi/XLVoAHEVH1wOtWE8wHwYDVR0j BBgwFoAUdOQt4NGqb6jQVNU++If4T/Udf+owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUzYWM2NjctNGQ5ZS00OGQ3LWFmZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBE MUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZGNTFEN0ZFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NEU0MkRFMEQxQUE2RkE4RDA1NEQ1M0VGODg3Rjg0RkY1MUQ3 RkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4 NEZGNTFEN0ZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPx1zcegviy+ukcU+wEoBo1kOm7j8Hbm7A3 /BAG+hCExH6e8KLlf7b4R/To5vcg9J0mtpmbGw8mL1p8hlen159K+2MFMySn33rn 6qW3DsSlQ8IZBE0AB5BTwVH9xI/KiLioGNDBm0NKJyJOnuGdDADkWkeHEM9G5iep SQRsMLRVCZaZACaa3qcxQByMHInD8AUZNITMFMu3NlllczbCTDB3wbwBvu7t/Xhs GiFOM9160SLn/kBK7BCbT+IxVk0c/Bai1/Qb0FHBKjMYmq0l4hIXMhext/ZN3Y1u nZdR/RnFyWABV3bPgtY72ARleFU2FfoG7eQeKxTx6Q3iUfjKJZ8= -----END CERTIFICATE-----Generated at Thu Sep 24 06:28:14 2026 by rpki-client