$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft File: 4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json) Hash identifier: /xGVYf59jsNJm0AcceYPxqvzLTqVM6i3mwmlmx6ybxM= Subject key identifier: C9:97:CA:CB:F5:59:14:1D:61:CB:7A:95:67:69:35:40:24:97:8F:F0 Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 3D04FD995BCA88F9DE400FFD9F0634BD81EAC6A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 17:54:41 +0000 Manifest this update: Wed 02 Sep 2026 17:49:41 +0000 Manifest next update: Thu 03 Sep 2026 18:57:41 +0000 Files and hashes: 1: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=) 2: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=) 3: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: cOmAtZ+q3HxOBqD3RMVHyOCoezO7JgvR8jODGbpNuSE=) 4: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=) 5: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=) 6: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=) 7: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=) 8: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=) 9: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=) 10: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=) 11: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=) 12: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=) 13: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: 5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 18:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:04:fd:99:5b:ca:88:f9:de:40:0f:fd:9f:06:34:bd:81:ea:c6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: Sep 2 17:49:41 2026 GMT Not After : Sep 3 18:57:41 2026 GMT Subject: CN=C997CACBF559141D61CB7A956769354024978FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:25:ae:be:0e:19:b8:0e:3a:df:d3:5d:ba: 50:a5:ba:4b:5e:6f:d2:53:1f:10:4c:f7:b8:09:84: e1:c7:44:04:9a:85:e0:b9:b8:c4:3e:ad:e5:4f:6d: 95:56:73:71:6f:f7:26:6c:09:f7:a9:2b:82:9c:9c: 83:a9:c0:af:16:ce:e2:42:88:1d:7f:c2:f9:f1:fc: 67:a6:ce:eb:c1:dd:4d:a8:12:62:0d:4f:24:bb:97: 55:33:84:d4:d8:c2:18:89:78:64:a1:2e:6e:18:fd: 9a:ea:d9:56:ad:6e:23:3c:b7:36:cd:23:07:e3:9e: 0a:36:89:d4:fe:1a:1c:dd:34:bc:28:ac:37:e3:b9: 76:eb:9b:df:df:23:75:28:6b:3a:0a:62:00:88:fb: a3:93:a9:df:ed:1c:4f:18:9a:e7:da:e9:15:e6:ab: a9:20:98:30:4b:2e:60:f5:e1:a7:11:25:84:5c:f6: 8b:58:f3:dd:49:04:57:c8:b3:7f:73:52:9d:dd:96: d5:f2:c3:c6:c7:a5:1f:43:98:55:17:64:27:19:4c: a9:a6:bd:5f:59:b9:e7:6f:b9:9d:a1:61:4c:0f:25: e2:43:22:53:8f:9e:77:f6:ce:f3:92:50:82:06:06: a2:19:83:19:74:86:fa:f0:50:5c:7e:15:da:6e:11: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:CA:CB:F5:59:14:1D:61:CB:7A:95:67:69:35:40:24:97:8F:F0 X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6d:43:cf:bf:8d:a7:c3:23:32:1c:19:11:0a:11:be:f9:ee: c5:59:15:a5:95:1b:4a:ef:e1:24:24:c9:44:56:c9:3d:dc:3d: b9:f6:05:37:b9:b2:7f:c8:80:be:26:4f:b4:2d:ef:67:56:69: db:ac:1c:c1:9e:f0:15:ae:8a:03:b5:15:b2:ea:98:f9:41:d0: 40:c9:a9:9f:27:81:48:e9:88:81:77:7e:d7:94:8e:de:b9:33: 58:70:5e:7e:1d:2f:56:40:b8:94:e1:d5:7d:92:b5:54:8d:f3: c3:d7:2b:85:a6:01:a6:a9:99:e8:3b:4c:46:60:0a:e0:6b:e6: 39:6a:35:a5:97:ad:44:01:cb:8e:40:d9:e5:a9:9c:9a:94:91: f8:00:2d:2a:14:bc:be:97:dc:64:84:11:0d:de:7c:3f:4e:c7: 46:bf:40:f2:4c:1d:79:95:ea:c1:ea:51:d7:49:fc:d8:c1:f8: d9:56:92:4e:22:47:14:5b:ac:a7:45:20:33:60:f3:82:08:38: 0a:06:15:ae:06:7e:c4:13:21:47:63:db:be:83:87:ed:e7:fd: ee:96:94:8d:29:93:19:a1:a1:72:04:2d:f2:84:d6:d6:96:26: c3:76:2c:0f:35:e5:1d:a7:bc:cc:7a:47:2b:3e:13:ca:14:90: 3f:35:6e:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQT9mVvKiPneQA/9nwY0vYHqxqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA5MDIxNzQ5NDFaFw0yNjA5MDMxODU3NDFaMDMxMTAvBgNV BAMTKEM5OTdDQUNCRjU1OTE0MUQ2MUNCN0E5NTY3NjkzNTQwMjQ5NzhGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfCWuvg4ZuA4639NdulClukte b9JTHxBM97gJhOHHRASaheC5uMQ+reVPbZVWc3Fv9yZsCfepK4KcnIOpwK8WzuJC iB1/wvnx/GemzuvB3U2oEmINTyS7l1UzhNTYwhiJeGShLm4Y/Zrq2VatbiM8tzbN Iwfjngo2idT+GhzdNLworDfjuXbrm9/fI3UoazoKYgCI+6OTqd/tHE8Ymufa6RXm q6kgmDBLLmD14acRJYRc9otY891JBFfIs39zUp3dltXyw8bHpR9DmFUXZCcZTKmm vV9ZuedvuZ2hYUwPJeJDIlOPnnf2zvOSUIIGBqIZgxl0hvrwUFx+FdpuEXA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZfKy/VZFB1hy3qVZ2k1QCSXj/AwHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMz MTM4NEVFMTAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVtQ8+/jafDIzIcGREKEb757sVZFaWVG0rv 4SQkyURWyT3cPbn2BTe5sn/IgL4mT7Qt72dWadusHMGe8BWuigO1FbLqmPlB0EDJ qZ8ngUjpiIF3fteUjt65M1hwXn4dL1ZAuJTh1X2StVSN88PXK4WmAaapmeg7TEZg CuBr5jlqNaWXrUQBy45A2eWpnJqUkfgALSoUvL6X3GSEEQ3efD9Ox0a/QPJMHXmV 6sHqUddJ/NjB+NlWkk4iRxRbrKdFIDNg84IIOAoGFa4GfsQTIUdj276Dh+3n/e6W lI0pkxmhoXIELfKE1taWJsN2LA815R2nvMx6Rys+E8oUkD81buA= -----END CERTIFICATE-----Generated at Thu Sep 3 12:35:59 2026 by rpki-client