$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft File: 4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json) Hash identifier: GBY2MzSOII3kFh6pN+b1L0ebgw15X2erNo6RuJRKemg= Subject key identifier: 56:CE:4A:58:2F:B8:4C:D4:1F:59:5D:45:AA:C9:4B:CF:87:64:0A:85 Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 Certificate issuer: /CN=4202428F6F3C953C642F298719C5C35E169724A2 Certificate serial: 7C5254D6C1E722AE673294E295FA0FCFEEA4DE68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:51:53 +0000 Manifest this update: Wed 23 Sep 2026 20:46:53 +0000 Manifest next update: Thu 24 Sep 2026 23:01:53 +0000 Files and hashes: 1: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: V1nl17SUR1vpstn6lgCAeUpE549X/nzXovZIp7w3gd4=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:52:54:d6:c1:e7:22:ae:67:32:94:e2:95:fa:0f:cf:ee:a4:de:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2 Validity Not Before: Sep 23 20:46:53 2026 GMT Not After : Sep 24 23:01:53 2026 GMT Subject: CN=56CE4A582FB84CD41F595D45AAC94BCF87640A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:97:c5:cb:a2:e8:db:ba:bc:fa:fa:bb:c3: ac:e5:19:86:e6:ba:f0:0e:12:9b:97:dc:bf:91:a1: 11:b6:65:b5:65:6a:d0:37:5f:25:c0:5e:97:43:ce: b3:33:ba:de:93:6f:7a:af:b7:2b:43:eb:59:3f:f0: 64:02:1f:df:72:0d:c0:f3:a5:fd:6c:b1:3d:0a:0c: 9b:32:c2:85:cf:39:79:c3:83:1a:4b:d5:67:43:bf: 08:b8:64:90:0e:dc:00:6e:d7:41:44:c7:17:a0:25: de:18:b0:03:46:20:ca:33:53:37:2a:27:96:72:6f: 68:f1:23:13:7c:e3:47:58:65:9a:3b:c9:eb:bd:aa: 09:54:32:31:21:1c:93:6c:d2:46:52:88:63:99:03: 7e:02:65:de:c9:db:33:ab:28:64:45:32:c7:30:53: 96:9c:87:36:ba:aa:51:d1:d8:a6:f5:ad:f6:1b:20: 51:87:58:a5:5a:78:e5:1c:bf:f8:af:64:41:56:20: de:20:9f:91:0e:5c:b1:6e:bf:93:d4:ce:ce:c0:64: c6:2f:b0:f3:96:f2:07:32:b7:12:2a:79:8d:c6:5a: b0:08:a4:1d:d8:5a:f5:1c:60:93:bb:5e:52:f2:ea: 90:0d:72:9c:9a:a2:99:c5:9a:15:d7:ec:a3:8e:9f: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CE:4A:58:2F:B8:4C:D4:1F:59:5D:45:AA:C9:4B:CF:87:64:0A:85 X509v3 Authority Key Identifier: keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cb:8f:a0:92:74:71:ca:73:ad:5b:93:ff:a0:32:43:2f:b3: 81:4e:73:3e:a7:f8:2e:e8:21:ce:17:ac:8b:e2:24:c4:02:1b: 8b:30:5e:82:6e:64:17:d9:93:48:58:79:02:29:fd:ea:d5:b2: d2:ca:a8:b9:8f:9b:c6:52:64:7f:a2:6e:40:a4:73:35:78:0e: ce:fa:2d:bd:ed:dc:8c:ad:8b:f3:3d:c8:83:c4:ea:9e:69:2b: 43:40:23:dc:20:75:cd:3c:42:c1:1d:ab:34:4c:34:ae:5b:86: d6:f9:92:1d:8c:43:d1:78:59:8e:c2:b1:21:4f:f3:4c:e5:8e: cc:75:ab:2b:f2:f9:64:16:76:e1:b6:78:01:4a:07:d2:24:d8: 7f:6b:be:5f:8c:83:15:df:e2:2d:c6:5e:25:e0:25:72:1c:e5: fb:1f:89:77:3a:06:08:8e:4e:5a:58:88:ea:5f:f4:5c:08:8d: ad:0d:6e:47:aa:fa:60:ea:f0:12:89:47:90:e3:45:3d:2b:73: 9d:57:99:2b:cb:ce:80:e3:eb:ac:6b:dc:48:1a:2d:24:c9:95: f8:de:fb:bc:a4:5a:7a:b4:93:02:52:70:b8:af:6b:97:95:46: 83:06:fe:1f:2c:40:51:49:25:53:e2:ec:23:c6:54:ba:f8:8d: 79:4d:b2:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFJU1sHnIq5nMpTilfoPz+6k3mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUx Njk3MjRBMjAeFw0yNjA5MjMyMDQ2NTNaFw0yNjA5MjQyMzAxNTNaMDMxMTAvBgNV BAMTKDU2Q0U0QTU4MkZCODRDRDQxRjU5NUQ0NUFBQzk0QkNGODc2NDBBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLkZfFy6Lo27q8+vq7w6zlGYbm uvAOEpuX3L+RoRG2ZbVlatA3XyXAXpdDzrMzut6Tb3qvtytD61k/8GQCH99yDcDz pf1ssT0KDJsywoXPOXnDgxpL1WdDvwi4ZJAO3ABu10FExxegJd4YsANGIMozUzcq J5Zyb2jxIxN840dYZZo7yeu9qglUMjEhHJNs0kZSiGOZA34CZd7J2zOrKGRFMscw U5achza6qlHR2Kb1rfYbIFGHWKVaeOUcv/ivZEFWIN4gn5EOXLFuv5PUzs7AZMYv sPOW8gcytxIqeY3GWrAIpB3YWvUcYJO7XlLy6pANcpyaopnFmhXX7KOOnx67AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVs5KWC+4TNQfWV1FqslLz4dkCoUwHwYDVR0j BBgwFoAUQgJCj288lTxkLymHGcXDXhaXJKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiODA4ZWItYzk4ZS00MDM2LWJlOWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2 RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUxNjk3MjRBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MjAyNDI4RjZGM0M5NTNDNjQyRjI5ODcxOUM1QzM1RTE2OTcy NEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMz NUUxNjk3MjRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnLj6CSdHHKc61bk/+gMkMvs4FOcz6n+C7o Ic4XrIviJMQCG4swXoJuZBfZk0hYeQIp/erVstLKqLmPm8ZSZH+ibkCkczV4Ds76 Lb3t3Iyti/M9yIPE6p5pK0NAI9wgdc08QsEdqzRMNK5bhtb5kh2MQ9F4WY7CsSFP 80zljsx1qyvy+WQWduG2eAFKB9Ik2H9rvl+MgxXf4i3GXiXgJXIc5fsfiXc6BgiO TlpYiOpf9FwIja0Nbkeq+mDq8BKJR5DjRT0rc51XmSvLzoDj66xr3EgaLSTJlfje +7ykWnq0kwJScLiva5eVRoMG/h8sQFFJJVPi7CPGVLr4jXlNshk= -----END CERTIFICATE-----Generated at Thu Sep 24 10:22:52 2026 by rpki-client