$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft File: 4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json) Hash identifier: 1Bng6qakEJzJH64CkfuuMRxk1NFGwgEkVndA0XPwwZ4= Subject key identifier: D7:0A:D1:C4:B5:02:30:3C:1F:B3:48:17:F4:38:33:2E:B5:FE:DD:DF Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 700F63FF8D1DDF77C029DCEC639CCA8645CD1C64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:38 +0000 Manifest this update: Tue 12 May 2026 19:25:38 +0000 Manifest next update: Wed 13 May 2026 23:01:38 +0000 Files and hashes: 1: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: b+tYtO4tKv2mkMQn9FtZyjN79mHH6aA7tN73MAc0Spo=) 2: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=) 3: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=) 4: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=) 5: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=) 6: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=) 7: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=) 8: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: 5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=) 9: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=) 10: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=) 11: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=) 12: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=) 13: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0f:63:ff:8d:1d:df:77:c0:29:dc:ec:63:9c:ca:86:45:cd:1c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: May 12 19:25:38 2026 GMT Not After : May 13 23:01:38 2026 GMT Subject: CN=D70AD1C4B502303C1FB34817F438332EB5FEDDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:f9:0d:a5:19:58:6b:93:84:c0:30:e5:f5: 46:bd:d6:31:fb:7e:92:61:6c:ca:66:b6:f2:89:08: 87:55:ba:11:30:d2:be:38:4b:97:fe:eb:94:5d:0c: ab:df:8a:80:9e:01:c7:97:b2:4a:01:33:52:8d:0c: 78:37:ab:86:73:73:b3:24:d7:2b:6e:8c:25:b3:ec: e5:13:db:2a:1e:92:4a:2f:41:6f:ac:6d:66:6f:60: aa:f0:2c:34:c7:3d:7b:a1:f5:44:07:e1:53:ac:28: ca:92:4c:9e:8f:be:36:47:e9:5e:24:9d:1c:a7:93: 34:5d:f9:91:87:f4:0a:af:57:60:3d:c3:6d:7c:b1: 9b:ce:a3:05:b0:1e:48:bf:6b:27:72:88:4d:80:e0: 39:6d:72:ec:8f:99:e1:9f:a5:47:85:11:ec:35:cb: 57:31:01:e4:fd:54:03:48:1f:9b:3f:fd:80:50:49: 2f:2f:ca:25:c6:90:33:b4:53:de:4d:ea:0e:41:89: c4:49:73:0c:1a:45:d3:bd:40:d8:69:d9:38:91:a2: 3d:b7:28:01:b6:d6:ef:9a:91:77:96:61:c3:84:6e: 8f:45:50:87:4b:fa:54:56:33:91:71:42:68:72:d5: 0e:c4:92:2e:54:1b:da:62:51:e0:66:8c:d7:16:45: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:D1:C4:B5:02:30:3C:1F:B3:48:17:F4:38:33:2E:B5:FE:DD:DF X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d6:ec:7f:61:0d:aa:0c:8a:d2:f7:76:1a:4c:d2:61:c4:33: 26:9d:27:1f:b6:a1:22:90:5f:c1:b1:f7:ad:77:41:ac:bd:2c: b4:ae:3c:82:56:ea:4e:f1:67:1d:81:fd:01:dd:48:2d:fa:32: 7e:74:55:97:6a:f4:40:65:e4:01:b5:57:b0:46:2a:bb:fd:e2: d3:c8:a6:eb:38:26:1a:4f:95:83:6a:a8:7b:70:8b:b6:65:07: a6:85:18:a3:1c:58:64:38:c3:c7:30:35:4b:1a:f3:6a:a1:35: 9d:f7:0e:5f:79:ff:b0:e8:23:da:e1:58:f8:d3:56:85:01:e5: 6c:85:d9:df:6d:56:6c:36:07:bf:c1:62:18:95:9d:ef:5b:26: e4:a9:9b:9f:1d:f4:1f:9f:51:7f:32:64:af:3e:08:8c:a9:23: c7:32:92:4b:5e:ed:c8:eb:7b:67:c2:88:d0:56:0e:ff:e4:50: ec:7c:3e:77:a2:90:ff:dc:1a:df:f0:46:68:a5:b1:23:fc:c5: 3d:68:4d:fa:be:fc:ec:8c:c7:a8:28:49:5b:3f:74:60:8a:88: 3a:08:bf:2c:b8:b2:69:f2:fb:0c:6a:ea:bd:96:82:75:66:d0: cc:82:7c:39:6c:28:f4:7e:b1:7c:cf:79:c3:b0:50:c6:34:b2: 52:f1:42:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcA9j/40d33fAKdzsY5zKhkXNHGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA1MTIxOTI1MzhaFw0yNjA1MTMyMzAxMzhaMDMxMTAvBgNV BAMTKEQ3MEFEMUM0QjUwMjMwM0MxRkIzNDgxN0Y0MzgzMzJFQjVGRUREREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwyvkNpRlYa5OEwDDl9Ua91jH7 fpJhbMpmtvKJCIdVuhEw0r44S5f+65RdDKvfioCeAceXskoBM1KNDHg3q4Zzc7Mk 1ytujCWz7OUT2yoekkovQW+sbWZvYKrwLDTHPXuh9UQH4VOsKMqSTJ6PvjZH6V4k nRynkzRd+ZGH9AqvV2A9w218sZvOowWwHki/aydyiE2A4DltcuyPmeGfpUeFEew1 y1cxAeT9VANIH5s//YBQSS8vyiXGkDO0U95N6g5BicRJcwwaRdO9QNhp2TiRoj23 KAG21u+akXeWYcOEbo9FUIdL+lRWM5FxQmhy1Q7Eki5UG9piUeBmjNcWRdwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wrRxLUCMDwfs0gX9DgzLrX+3d8wHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMz MTM4NEVFMTAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnW7H9hDaoMitL3dhpM0mHEMyadJx+2oSKQ X8Gx9613Qay9LLSuPIJW6k7xZx2B/QHdSC36Mn50VZdq9EBl5AG1V7BGKrv94tPI pus4JhpPlYNqqHtwi7ZlB6aFGKMcWGQ4w8cwNUsa82qhNZ33Dl95/7DoI9rhWPjT VoUB5WyF2d9tVmw2B7/BYhiVne9bJuSpm58d9B+fUX8yZK8+CIypI8cykkte7cjr e2fCiNBWDv/kUOx8PneikP/cGt/wRmilsSP8xT1oTfq+/OyMx6goSVs/dGCKiDoI vyy4smny+wxq6r2WgnVm0MyCfDlsKPR+sXzPecOwUMY0slLxQoA= -----END CERTIFICATE-----Generated at Tue May 12 23:27:45 2026 by rpki-client