$ rpki-client -vvvf rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft File: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft (raw, json) Hash identifier: ndef7HrIj4xa8cQtzVlM4JolM70AREm/J3YBGprYDMc= Subject key identifier: 2B:CD:1E:E8:EB:9C:58:40:7E:26:3A:B2:43:12:96:1A:2F:BA:8D:C5 Authority key identifier: 74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA Certificate issuer: /CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Certificate serial: 341DD5493538B635A43C18969D770D36499443FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 12:18:20 +0000 Manifest this update: Mon 02 Nov 2026 12:13:20 +0000 Manifest next update: Tue 03 Nov 2026 12:41:20 +0000 Files and hashes: 1: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl (hash: 9jK1HQJkvcLSrB12f9FcIXYNRP5m/Ui3IquXMreKo7I=) 2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: d8hlpMGwM7inThd2/Asl74/yVlwwKBLZArB/QX8GfGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1d:d5:49:35:38:b6:35:a4:3c:18:96:9d:77:0d:36:49:94:43:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Validity Not Before: Nov 2 12:13:20 2026 GMT Not After : Nov 3 12:41:20 2026 GMT Subject: CN=2BCD1EE8EB9C58407E263AB24312961A2FBA8DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:74:3f:64:7e:c5:47:e6:f4:82:27:a0:0d: 05:88:47:71:06:30:7c:fd:ea:65:71:c4:56:56:e0: 21:73:5b:af:86:b0:86:ba:6b:81:ba:f0:45:7b:31: f1:9f:96:d1:fa:91:06:99:e8:fc:82:64:1e:7b:ee: c3:fc:17:b2:84:89:9b:4a:7f:0d:b7:17:ce:1f:e3: 9f:2a:3a:f3:c3:ba:f7:84:b9:a4:63:71:2f:a5:21: 76:b5:d7:51:18:74:a3:38:92:c9:cf:c1:08:bd:98: f4:f7:7c:41:d4:11:90:04:6a:21:83:d8:8d:0e:62: bc:c6:18:72:be:0f:36:94:5a:b1:fa:50:f1:25:f3: 04:52:d0:6f:2d:39:cf:67:14:11:db:a0:cb:8d:50: ff:7b:f1:f4:02:f6:4a:69:c8:8b:56:e8:95:7a:3a: ff:a4:a0:2d:14:8f:46:b3:0f:77:99:41:64:21:30: 62:3a:cb:2a:19:36:50:fd:a7:65:c1:4e:b4:d2:95: c4:d6:cf:22:03:6a:24:d9:72:65:0e:18:7f:5e:ff: 83:4f:2b:88:bd:96:b3:5a:65:ed:1e:d4:32:da:13: 5f:09:db:d4:27:a5:9a:d1:85:11:a3:30:50:27:83: 2f:a2:6c:c3:f3:af:49:b1:78:99:bd:29:ce:6b:2b: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CD:1E:E8:EB:9C:58:40:7E:26:3A:B2:43:12:96:1A:2F:BA:8D:C5 X509v3 Authority Key Identifier: keyid:74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ac:8a:49:af:a9:d0:a8:78:11:63:29:1f:53:74:7c:61:28: 48:a0:a2:16:34:26:f0:ae:a4:a4:52:83:f1:fb:b2:d5:ad:97: 9d:1b:6b:3d:4c:30:69:55:d9:d0:b8:2f:8f:9a:fd:56:f2:c4: dc:16:8e:94:b4:0d:13:29:67:13:f8:a7:39:6b:0a:0e:cc:1f: ff:8c:01:da:5b:5f:8c:df:c3:1b:25:bd:1a:75:3a:8b:7a:4b: d3:c0:e6:d0:ce:89:71:7d:93:4c:a5:12:76:0c:f0:fd:a8:df: fb:87:99:8a:fb:c4:04:47:db:bc:b1:ff:34:71:6a:27:01:a7: e8:da:e0:85:3d:63:31:5e:45:b1:1c:0e:ef:f7:b2:fd:18:bd: e8:7d:15:0a:40:99:07:3a:77:d9:cb:0f:0e:c6:02:ea:3b:b1: 12:ff:3f:e3:ed:80:58:ce:80:86:69:34:91:e0:d6:de:d6:7a: 82:61:e9:a5:8f:fa:3b:2d:ef:29:c9:f8:4c:7f:30:51:f7:88: b2:96:ec:fc:d5:cc:25:0e:be:31:56:4a:35:67:6d:d7:15:99: 51:23:28:bc:93:78:11:74:87:61:27:88:70:82:2a:c0:d1:3f: 6f:b1:22:15:5f:67:27:2c:5f:4c:4f:59:bc:6f:bf:06:a4:3f: 9d:69:c2:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNB3VSTU4tjWkPBiWnXcNNkmUQ/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZG NTFEN0ZFQTAeFw0yNjExMDIxMjEzMjBaFw0yNjExMDMxMjQxMjBaMDMxMTAvBgNV BAMTKDJCQ0QxRUU4RUI5QzU4NDA3RTI2M0FCMjQzMTI5NjFBMkZCQThEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hHQ/ZH7FR+b0giegDQWIR3EG MHz96mVxxFZW4CFzW6+GsIa6a4G68EV7MfGfltH6kQaZ6PyCZB577sP8F7KEiZtK fw23F84f458qOvPDuveEuaRjcS+lIXa111EYdKM4ksnPwQi9mPT3fEHUEZAEaiGD 2I0OYrzGGHK+DzaUWrH6UPEl8wRS0G8tOc9nFBHboMuNUP978fQC9kppyItW6JV6 Ov+koC0Uj0azD3eZQWQhMGI6yyoZNlD9p2XBTrTSlcTWzyIDaiTZcmUOGH9e/4NP K4i9lrNaZe0e1DLaE18J29QnpZrRhRGjMFAngy+ibMPzr0mxeJm9Kc5rK6k/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK80e6OucWEB+JjqyQxKWGi+6jcUwHwYDVR0j BBgwFoAUdOQt4NGqb6jQVNU++If4T/Udf+owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUzYWM2NjctNGQ5ZS00OGQ3LWFmZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBE MUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZGNTFEN0ZFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NEU0MkRFMEQxQUE2RkE4RDA1NEQ1M0VGODg3Rjg0RkY1MUQ3 RkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4 NEZGNTFEN0ZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIusikmvqdCoeBFjKR9TdHxhKEigohY0JvCu pKRSg/H7stWtl50baz1MMGlV2dC4L4+a/VbyxNwWjpS0DRMpZxP4pzlrCg7MH/+M AdpbX4zfwxslvRp1Oot6S9PA5tDOiXF9k0ylEnYM8P2o3/uHmYr7xARH27yx/zRx aicBp+ja4IU9YzFeRbEcDu/3sv0Yveh9FQpAmQc6d9nLDw7GAuo7sRL/P+PtgFjO gIZpNJHg1t7WeoJh6aWP+jst7ynJ+Ex/MFH3iLKW7PzVzCUOvjFWSjVnbdcVmVEj KLyTeBF0h2EniHCCKsDRP2+xIhVfZycsX0xPWbxvvwakP51pwoQ= -----END CERTIFICATE-----Generated at Mon Nov 2 14:19:52 2026 by rpki-client