$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft File: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft (raw, json) Hash identifier: lKDMjv6q9KerCorIWEWFf0cQa1LRKGbSYMv+YoVvwCk= Subject key identifier: 51:63:06:09:91:EE:63:B9:1A:92:A4:9E:C0:BF:F2:A1:EE:7C:FF:C6 Authority key identifier: 74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA Certificate issuer: /CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Certificate serial: 56F21B2E6C4D217E6E54C9797FE365A0E803CB43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft Manifest number: C7 Signing time: Sun 27 Sep 2026 16:40:11 +0000 Manifest this update: Sun 27 Sep 2026 16:35:11 +0000 Manifest next update: Mon 28 Sep 2026 16:44:11 +0000 Files and hashes: 1: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 2fSfsDWFAVE0WXc/cYm1cwmYQpM+GCRAEbjcX25Cqow=) 2: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl (hash: 8wEhCUkbwXEEfQfv6KtreEzWPHlBN6sEmEnm8zGYsIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f2:1b:2e:6c:4d:21:7e:6e:54:c9:79:7f:e3:65:a0:e8:03:cb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Validity Not Before: Sep 27 16:35:11 2026 GMT Not After : Sep 28 16:44:11 2026 GMT Subject: CN=5163060991EE63B91A92A49EC0BFF2A1EE7CFFC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:a1:e9:a5:9d:31:94:36:d2:06:4a:81:14: 08:a4:86:d5:ed:2f:a7:ee:75:a5:d3:e2:74:b4:bf: 1a:23:c6:be:c0:f5:9e:62:72:e8:49:c7:7d:40:93: c1:f6:59:98:ce:41:dd:d6:a3:e3:e3:4d:76:6d:e3: 4b:ef:58:96:2f:d6:17:12:84:24:da:57:c8:84:c0: 57:fe:37:18:2c:a5:c4:41:5e:02:57:68:95:54:99: 21:91:be:28:d6:08:1f:35:3d:0d:56:90:40:8f:34: 7e:29:32:39:a8:b2:ff:3e:cf:81:2e:cd:ce:86:8d: 97:08:59:99:d6:4a:2b:74:86:aa:aa:f2:b6:f7:2f: 49:50:2d:5f:e1:a2:a0:31:75:f5:97:0e:b0:3f:97: 55:8b:6d:1a:22:12:fe:41:eb:83:c7:ed:92:1d:5a: aa:da:24:81:b9:4b:10:0a:71:bd:59:c6:50:d0:a6: f3:86:21:96:d1:14:bb:c3:84:7e:44:6c:eb:a2:25: d7:70:4d:f6:78:ce:2a:ef:27:db:e8:86:c1:52:7d: 2a:ea:37:c6:3d:ea:e9:2e:68:58:98:e7:ad:c5:8d: a3:32:c5:68:0f:9e:f2:56:65:f9:70:3f:a8:d7:e6: 25:62:a0:ab:39:de:95:0d:17:17:b6:1d:35:ef:08: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:63:06:09:91:EE:63:B9:1A:92:A4:9E:C0:BF:F2:A1:EE:7C:FF:C6 X509v3 Authority Key Identifier: keyid:74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:95:b8:79:63:f2:97:84:08:d1:17:23:15:5c:fb:bd:9d:67: 3e:b9:07:84:55:99:fd:d1:82:f0:20:79:d8:92:dc:84:3a:ed: 80:09:ca:fd:01:cf:95:5d:19:ce:63:b0:30:2f:77:5d:e7:46: eb:31:0d:9c:0e:f4:a6:ae:87:b2:ef:77:cd:54:26:48:6e:7e: 11:80:23:59:7c:f4:a9:16:78:4d:40:e1:9e:e8:00:f7:90:eb: 61:04:62:50:f5:ed:4e:e9:17:dd:a0:80:c3:f1:12:43:c8:48: f2:aa:d6:a0:90:df:0d:10:f7:a5:9e:e9:19:16:84:b0:a0:89: 33:29:72:fd:42:66:67:3c:d8:1f:0a:9e:17:9b:93:93:e6:c8: f9:8d:41:88:e0:40:07:af:a2:9d:f6:a3:57:96:fe:20:fa:48: ef:4f:dc:2b:04:0d:43:30:72:58:71:48:fa:ef:58:3d:45:fe: 98:3d:2c:17:de:0d:c1:2c:46:bf:b7:9d:e2:6b:90:73:2b:07: 2b:36:8d:e6:5f:d2:6d:d3:2c:df:37:76:17:ab:89:1b:cd:fa: 9a:86:67:1b:3c:f5:65:58:ec:9c:f7:d1:d0:29:1f:98:4f:cb: a2:d9:c1:95:8d:ba:a9:8a:b2:bf:6f:16:0b:b0:63:5c:2f:83: 93:de:68:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvIbLmxNIX5uVMl5f+NloOgDy0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyQjJDQTk0MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5MENB MkJERDJDQTAeFw0yNjA5MjcxNjM1MTFaFw0yNjA5MjgxNjQ0MTFaMDMxMTAvBgNV BAMTKDUxNjMwNjA5OTFFRTYzQjkxQTkyQTQ5RUMwQkZGMkExRUU3Q0ZGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOaHppZ0xlDbSBkqBFAikhtXt L6fudaXT4nS0vxojxr7A9Z5icuhJx31Ak8H2WZjOQd3Wo+PjTXZt40vvWJYv1hcS hCTaV8iEwFf+NxgspcRBXgJXaJVUmSGRvijWCB81PQ1WkECPNH4pMjmosv8+z4Eu zc6GjZcIWZnWSit0hqqq8rb3L0lQLV/hoqAxdfWXDrA/l1WLbRoiEv5B64PH7ZId WqraJIG5SxAKcb1ZxlDQpvOGIZbRFLvDhH5EbOuiJddwTfZ4zirvJ9vohsFSfSrq N8Y96ukuaFiY563FjaMyxWgPnvJWZflwP6jX5iVioKs53pUNFxe2HTXvCBqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWMGCZHuY7kakqSewL/yoe58/8YwHwYDVR0j BBgwFoAUdCssqUDZHm+jikRo+Jw5DKK90sowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc4YzNjNjktMzZkMC00YWU4LWE4ZGYtNjNkM2Y0NGNjZDhkLzAvNzQyQjJDQTk0 MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5MENBMkJERDJDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NDJCMkNBOTQwRDkxRTZGQTM4QTQ0NjhGODlDMzkwQ0EyQkRE MkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNzQyQjJDQTk0MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5 MENBMkJERDJDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyVuHlj8peECNEXIxVc+72dZz65B4RVmf3R gvAgediS3IQ67YAJyv0Bz5VdGc5jsDAvd13nRusxDZwO9Kauh7Lvd81UJkhufhGA I1l89KkWeE1A4Z7oAPeQ62EEYlD17U7pF92ggMPxEkPISPKq1qCQ3w0Q96We6RkW hLCgiTMpcv1CZmc82B8Knhebk5PmyPmNQYjgQAevop32o1eW/iD6SO9P3CsEDUMw clhxSPrvWD1F/pg9LBfeDcEsRr+3neJrkHMrBys2jeZf0m3TLN83dheriRvN+pqG Zxs89WVY7Jz30dApH5hPy6LZwZWNuqmKsr9vFguwY1wvg5PeaLg= -----END CERTIFICATE-----Generated at Sun Sep 27 21:38:52 2026 by rpki-client