$ rpki-client -vvf rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft File: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft (raw, json) Hash identifier: 862vUGfSIY2qrLw1A3cXIOLOj8BArTftWXefGWZ8o/k= Subject key identifier: 6F:1F:5D:DC:4D:19:4E:C2:A0:16:7B:D9:BF:9E:9D:4C:20:3A:33:0E Authority key identifier: 74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA Certificate issuer: /CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Certificate serial: 24CC6A85A9E63204D6A19CE85D17289A12720174 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:45:13 +0000 Manifest this update: Tue 12 May 2026 08:40:13 +0000 Manifest next update: Wed 13 May 2026 11:22:13 +0000 Files and hashes: 1: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: d8hlpMGwM7inThd2/Asl74/yVlwwKBLZArB/QX8GfGM=) 2: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl (hash: g9Jqd1YjgihcCjcnIA5LOZZupsVpLyWr6CBwsFMI7Sg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cc:6a:85:a9:e6:32:04:d6:a1:9c:e8:5d:17:28:9a:12:72:01:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Validity Not Before: May 12 08:40:13 2026 GMT Not After : May 13 11:22:13 2026 GMT Subject: CN=6F1F5DDC4D194EC2A0167BD9BF9E9D4C203A330E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:4d:96:f2:47:5d:80:28:76:85:6e:63:c1:46: f5:7d:49:04:23:10:68:e7:35:08:f3:21:f3:83:74: 79:d6:84:c8:e6:1e:25:c9:c8:80:d9:c6:a7:6d:84: 09:58:51:41:6e:49:2c:4e:ab:26:2e:a5:05:91:3c: 9a:ce:1e:66:ac:ae:38:57:e4:61:10:cf:01:60:73: 2f:09:00:d8:c4:4f:37:39:32:13:53:08:35:1a:70: 82:5a:ba:45:c9:10:df:af:56:d5:31:c6:ff:2a:ce: 3c:05:19:ae:26:f7:cd:1f:dc:c4:a3:1b:00:cc:13: e7:98:bc:59:9f:ef:ed:e7:bf:01:2b:e4:9a:9d:21: e0:70:03:8e:a2:89:29:98:ab:56:04:d7:33:0f:7a: 96:c2:98:4f:42:b5:60:e8:ea:2c:e2:e2:1f:04:cb: 00:a9:8d:6c:df:ed:4d:79:11:95:1d:70:cc:98:00: 3a:39:4b:e1:9b:8d:42:ba:1f:b9:40:93:72:a2:ff: 2d:52:65:7a:25:a2:35:70:25:12:0a:85:21:49:0b: da:2b:a9:e7:ff:7f:74:1c:bf:94:51:0a:9e:39:33: a0:50:ab:94:0d:5d:7e:3f:9b:a0:da:2e:1d:08:fe: da:e4:ff:09:f9:14:27:31:3b:21:a1:87:19:88:ef: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1F:5D:DC:4D:19:4E:C2:A0:16:7B:D9:BF:9E:9D:4C:20:3A:33:0E X509v3 Authority Key Identifier: keyid:74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5f:90:59:5a:6c:61:ba:27:a2:82:3b:c8:35:48:fa:da:33: b3:43:67:33:b1:8e:db:c9:a3:1e:8e:71:be:13:e4:4b:bd:74: 9e:28:c4:9b:cb:0e:2d:68:85:db:16:a7:e4:c9:d3:8b:dd:38: a1:2f:7c:fe:c0:f8:c2:7d:69:1c:ac:8a:c7:95:8a:11:ce:05: c3:c2:f3:96:ce:88:12:fe:f4:25:e5:44:2e:66:ec:67:54:18: d2:93:19:a8:ac:e1:cc:8f:9d:3c:f1:1e:ff:b5:9e:1a:17:2e: 72:f0:53:78:f5:ef:78:bd:a9:43:f0:83:a8:c6:e7:26:30:4f: 58:44:9f:db:1a:ff:28:4a:21:b5:56:e6:77:31:95:da:12:d2: ba:20:7f:7b:63:ea:a0:81:a6:86:dd:b8:9f:0c:14:f5:84:cc: 7e:46:da:d2:0d:16:5d:84:8e:a7:c4:f8:8a:33:33:7e:ea:bf: b2:50:a2:79:b7:55:e6:ab:34:72:08:84:2a:59:c1:5e:cf:e1: e0:75:15:cb:ee:f9:f9:97:14:3d:fa:db:d6:e7:7e:1e:77:6d: 85:4f:13:5d:e0:71:26:bf:04:fb:74:5b:45:cb:33:3d:96:85: 1b:c9:ce:7f:73:2d:e7:ff:91:e8:5d:03:77:c2:8e:09:3f:b8: 8e:aa:6c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMxqhanmMgTWoZzoXRcomhJyAXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZG NTFEN0ZFQTAeFw0yNjA1MTIwODQwMTNaFw0yNjA1MTMxMTIyMTNaMDMxMTAvBgNV BAMTKDZGMUY1RERDNEQxOTRFQzJBMDE2N0JEOUJGOUU5RDRDMjAzQTMzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8TZbyR12AKHaFbmPBRvV9SQQj EGjnNQjzIfODdHnWhMjmHiXJyIDZxqdthAlYUUFuSSxOqyYupQWRPJrOHmasrjhX 5GEQzwFgcy8JANjETzc5MhNTCDUacIJaukXJEN+vVtUxxv8qzjwFGa4m980f3MSj GwDME+eYvFmf7+3nvwEr5JqdIeBwA46iiSmYq1YE1zMPepbCmE9CtWDo6izi4h8E ywCpjWzf7U15EZUdcMyYADo5S+GbjUK6H7lAk3Ki/y1SZXolojVwJRIKhSFJC9or qef/f3Qcv5RRCp45M6BQq5QNXX4/m6DaLh0I/trk/wn5FCcxOyGhhxmI7/clAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbx9d3E0ZTsKgFnvZv56dTCA6Mw4wHwYDVR0j BBgwFoAUdOQt4NGqb6jQVNU++If4T/Udf+owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUzYWM2NjctNGQ5ZS00OGQ3LWFmZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBE MUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZGNTFEN0ZFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NEU0MkRFMEQxQUE2RkE4RDA1NEQ1M0VGODg3Rjg0RkY1MUQ3 RkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4 NEZGNTFEN0ZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItfkFlabGG6J6KCO8g1SPraM7NDZzOxjtvJ ox6Ocb4T5Eu9dJ4oxJvLDi1ohdsWp+TJ04vdOKEvfP7A+MJ9aRysiseVihHOBcPC 85bOiBL+9CXlRC5m7GdUGNKTGais4cyPnTzxHv+1nhoXLnLwU3j173i9qUPwg6jG 5yYwT1hEn9sa/yhKIbVW5ncxldoS0rogf3tj6qCBpobduJ8MFPWEzH5G2tINFl2E jqfE+IozM37qv7JQonm3VearNHIIhCpZwV7P4eB1Fcvu+fmXFD3629bnfh53bYVP E13gcSa/BPt0W0XLMz2WhRvJzn9zLef/kehdA3fCjgk/uI6qbL4= -----END CERTIFICATE-----Generated at Wed May 13 03:52:11 2026 by rpki-client