$ rpki-client -vvf rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft File: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft (raw, json) Hash identifier: MbSzOmaqxlralHM8AOrICI9sqgxASGKCQaQQlPjbFoc= Subject key identifier: 7D:8B:05:2C:56:94:68:C4:8E:AB:DB:97:E4:43:66:F7:1F:8C:80:5B Authority key identifier: 74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA Certificate issuer: /CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Certificate serial: 7C11DFC385FBBABE0142AEC80C60DC8C46A1D5DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:29:52 +0000 Manifest this update: Tue 02 Jun 2026 20:24:52 +0000 Manifest next update: Wed 03 Jun 2026 21:05:52 +0000 Files and hashes: 1: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl (hash: 7JiBiq/8yuonJmjRnxstJ1bj0rzbsLvzKGSbWFPcsKA=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 2fSfsDWFAVE0WXc/cYm1cwmYQpM+GCRAEbjcX25Cqow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:11:df:c3:85:fb:ba:be:01:42:ae:c8:0c:60:dc:8c:46:a1:d5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Validity Not Before: Jun 2 20:24:52 2026 GMT Not After : Jun 3 21:05:52 2026 GMT Subject: CN=7D8B052C569468C48EABDB97E44366F71F8C805B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:80:97:d5:be:b8:c0:fe:f1:9a:7c:47:d8: 3c:d7:c3:1d:9b:65:16:c4:88:e7:2e:2f:15:f0:92: ee:cb:57:34:95:63:ad:4f:ce:fe:60:45:e4:7e:c8: a9:66:f3:1b:4d:df:c9:fa:5d:44:d5:29:bf:fb:37: 90:8f:2b:40:c7:84:1b:86:a9:61:d2:ff:c1:86:7f: 30:9c:c3:5b:49:25:3e:3f:4f:cb:a2:c8:b2:76:9a: 05:81:be:ac:33:35:aa:9d:57:20:5c:3e:57:91:ff: 0f:be:46:6e:45:9c:b2:77:63:0d:c4:ed:b0:dc:50: 72:f3:e2:15:88:df:e0:95:6a:a7:3a:58:cb:73:4c: 43:82:25:c1:9f:9f:dc:36:f5:d9:cf:d5:28:9d:46: bb:35:09:b9:f6:ed:48:f9:ce:f6:7c:8a:78:98:3e: 31:a3:01:aa:d9:3f:49:bf:66:87:55:dc:2c:6a:57: 5f:48:42:bb:35:96:b4:7b:d8:8a:8e:d5:87:e4:f9: d9:86:ff:90:a4:ed:42:21:54:e8:5e:de:35:1e:a6: 81:32:d4:e4:6a:79:0d:e2:66:f3:0f:03:95:2b:26: d4:c6:1e:bb:85:34:e3:44:7e:47:20:0f:b2:fe:f5: 3f:3d:b0:90:3c:2f:d6:e6:1d:7d:12:91:03:28:6c: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8B:05:2C:56:94:68:C4:8E:AB:DB:97:E4:43:66:F7:1F:8C:80:5B X509v3 Authority Key Identifier: keyid:74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:31:d3:48:52:d6:66:00:a3:85:c1:4f:7b:ad:4a:1f:61:c7: e7:51:e7:a8:c8:e4:06:aa:47:16:7e:bc:d0:b0:4e:60:49:01: 49:bb:97:34:6f:d9:99:86:94:df:c7:94:f4:71:0b:50:29:b3: 9b:c3:9e:82:27:cc:20:60:0b:2a:af:1c:f9:4d:ea:14:a5:a3: 87:bd:93:28:8d:4b:ee:6c:26:3d:fb:b7:c4:23:f2:e9:81:e5: 1e:c9:74:eb:ed:21:af:c8:9e:08:ed:e5:4d:d3:b6:70:0c:1b: 21:07:e0:b9:f3:4b:a5:f4:a9:09:47:cb:ad:fe:b3:be:cc:d7: 86:a1:fa:2b:d6:ca:62:9e:b3:61:0a:60:33:4b:8b:9e:08:f4: 02:a1:30:21:a2:d4:e0:86:c7:37:b9:b4:43:0b:46:2f:78:da: 19:46:98:ef:8e:c7:79:4e:f0:0c:47:4d:5f:c9:11:1d:9e:2f: 1d:ae:b1:88:2b:04:3f:61:d4:38:bf:e9:89:8e:71:f4:71:86: 5e:dd:e2:87:19:be:04:e5:6a:3e:00:3c:dd:17:e1:c1:80:5d: 34:4c:cd:fd:8b:d1:f9:28:f4:f8:08:78:64:cf:68:e2:49:d8: b2:53:45:3b:15:73:50:69:e8:87:4d:d4:47:5c:64:c3:7c:47: f8:60:d8:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBHfw4X7ur4BQq7IDGDcjEah1d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyQjJDQTk0MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5MENB MkJERDJDQTAeFw0yNjA2MDIyMDI0NTJaFw0yNjA2MDMyMTA1NTJaMDMxMTAvBgNV BAMTKDdEOEIwNTJDNTY5NDY4QzQ4RUFCREI5N0U0NDM2NkY3MUY4QzgwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqoCX1b64wP7xmnxH2DzXwx2b ZRbEiOcuLxXwku7LVzSVY61Pzv5gReR+yKlm8xtN38n6XUTVKb/7N5CPK0DHhBuG qWHS/8GGfzCcw1tJJT4/T8uiyLJ2mgWBvqwzNaqdVyBcPleR/w++Rm5FnLJ3Yw3E 7bDcUHLz4hWI3+CVaqc6WMtzTEOCJcGfn9w29dnP1SidRrs1Cbn27Uj5zvZ8iniY PjGjAarZP0m/ZodV3CxqV19IQrs1lrR72IqO1Yfk+dmG/5Ck7UIhVOhe3jUepoEy 1ORqeQ3iZvMPA5UrJtTGHruFNONEfkcgD7L+9T89sJA8L9bmHX0SkQMobFq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYsFLFaUaMSOq9uX5ENm9x+MgFswHwYDVR0j BBgwFoAUdCssqUDZHm+jikRo+Jw5DKK90sowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc4YzNjNjktMzZkMC00YWU4LWE4ZGYtNjNkM2Y0NGNjZDhkLzAvNzQyQjJDQTk0 MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5MENBMkJERDJDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NDJCMkNBOTQwRDkxRTZGQTM4QTQ0NjhGODlDMzkwQ0EyQkRE MkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNzQyQjJDQTk0MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5 MENBMkJERDJDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8x00hS1mYAo4XBT3utSh9hx+dR56jI5Aaq RxZ+vNCwTmBJAUm7lzRv2ZmGlN/HlPRxC1Aps5vDnoInzCBgCyqvHPlN6hSlo4e9 kyiNS+5sJj37t8Qj8umB5R7JdOvtIa/Ingjt5U3TtnAMGyEH4LnzS6X0qQlHy63+ s77M14ah+ivWymKes2EKYDNLi54I9AKhMCGi1OCGxze5tEMLRi942hlGmO+Ox3lO 8AxHTV/JER2eLx2usYgrBD9h1Di/6YmOcfRxhl7d4ocZvgTlaj4APN0X4cGAXTRM zf2L0fko9PgIeGTPaOJJ2LJTRTsVc1Bp6IdN1EdcZMN8R/hg2Lc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:43 2026 by rpki-client