$ rpki-client -vvf rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft File: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft (raw, json) Hash identifier: XfGqY3Z2OP8B2IiynW1HbejhfVvxWXbgmygEmk89sgg= Subject key identifier: A7:6F:21:78:0D:8E:AE:78:EA:B9:F3:68:DA:63:C4:19:D4:D8:9F:2F Authority key identifier: 74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA Certificate issuer: /CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Certificate serial: 3DA04FB8B6D8AAA75DC08BDA2A2E42A4755F877F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 03:06:14 +0000 Manifest this update: Sun 02 Aug 2026 03:01:14 +0000 Manifest next update: Mon 03 Aug 2026 05:12:14 +0000 Files and hashes: 1: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl (hash: 9f74Il7q+5LPEyOKSgrbb/YfgVqsaQW6/8mGbldt4Q0=) 2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: d8hlpMGwM7inThd2/Asl74/yVlwwKBLZArB/QX8GfGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a0:4f:b8:b6:d8:aa:a7:5d:c0:8b:da:2a:2e:42:a4:75:5f:87:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Validity Not Before: Aug 2 03:01:14 2026 GMT Not After : Aug 3 05:12:14 2026 GMT Subject: CN=A76F21780D8EAE78EAB9F368DA63C419D4D89F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:c6:b2:39:98:24:c3:83:2e:60:6b:53:69: 4b:90:de:24:52:01:e4:30:48:09:62:40:47:9d:f5: 83:67:55:3e:13:e5:50:41:f8:99:6e:21:83:02:d4: 4a:a4:db:af:cf:5c:5a:04:70:5b:39:8c:b0:41:75: f0:cc:9b:cc:04:42:ab:6d:d1:e8:3f:61:e8:a2:24: 53:7d:a8:40:82:b1:a6:58:ed:45:e6:8d:d0:21:a3: 32:d3:b3:cf:43:35:9c:66:4a:55:99:5f:df:ac:f6: c5:97:b0:52:9e:a5:a1:e0:c8:56:a8:d7:c9:40:88: 47:1e:a3:1e:91:c5:92:3e:bf:6b:f3:a5:92:a0:6e: d8:56:f4:2f:c8:0d:f0:b3:41:6b:28:0c:de:fc:d3: ad:be:3a:8d:21:5b:e8:9e:e0:12:cb:9c:06:f1:9b: ef:18:23:91:9e:1d:72:62:f9:bc:72:55:c1:a9:9b: b2:d6:88:b1:34:e2:ce:11:48:19:bd:c9:d3:d1:52: 58:a2:43:b5:78:47:79:b5:b7:af:90:02:33:ab:b4: 50:8d:9b:4c:24:7c:08:3b:22:3a:b9:72:a7:80:14: 7b:e5:bf:33:55:fe:ec:1e:f5:54:ea:cb:88:76:3d: bc:f3:6c:8c:9e:3c:62:bd:f4:21:6d:52:4c:11:bb: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6F:21:78:0D:8E:AE:78:EA:B9:F3:68:DA:63:C4:19:D4:D8:9F:2F X509v3 Authority Key Identifier: keyid:74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:19:a5:90:59:fc:22:9a:44:fe:74:a8:ce:a6:13:4a:6e:27: 72:81:5b:4b:82:3b:85:b1:b4:fa:9d:88:3d:fd:c6:64:5d:e1: dc:43:60:42:20:c8:fa:40:67:c4:f4:0f:a2:b1:82:83:c3:f5: 46:75:71:64:8f:2c:9f:d1:68:d2:f7:fb:02:d7:96:8c:c9:7b: a0:65:d8:84:16:67:33:cd:e7:6f:83:de:cb:51:37:11:83:3f: 40:6f:d7:97:26:2d:85:06:92:e2:1f:ff:56:7c:d6:27:f1:88: c2:d1:76:62:ce:01:1e:1a:72:38:d8:49:cc:89:fc:f3:24:d2: 41:e3:db:73:f5:f9:c0:4c:e6:11:72:19:fb:91:b6:f5:39:7a: da:ef:47:d5:2d:0c:7a:40:3b:25:0e:ec:f5:18:d0:c4:4f:f4: 31:c0:7e:16:1e:39:fa:37:ca:cb:a7:d5:3b:34:8d:06:c4:85: 8a:78:cc:db:09:bd:9e:3b:1f:c7:66:84:00:8d:41:1b:20:10: 6f:d9:e1:ac:e1:5e:2a:63:21:52:d4:88:03:56:46:f8:76:18: 1c:2f:05:37:8e:6b:13:33:e5:9d:06:a5:e2:07:04:bf:d9:23: be:dc:36:28:86:e1:18:b6:d8:c4:b2:8d:d1:b7:0d:b7:9d:d8: 14:7e:af:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaBPuLbYqqddwIvaKi5CpHVfh38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZG NTFEN0ZFQTAeFw0yNjA4MDIwMzAxMTRaFw0yNjA4MDMwNTEyMTRaMDMxMTAvBgNV BAMTKEE3NkYyMTc4MEQ4RUFFNzhFQUI5RjM2OERBNjNDNDE5RDREODlGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOP8ayOZgkw4MuYGtTaUuQ3iRS AeQwSAliQEed9YNnVT4T5VBB+JluIYMC1Eqk26/PXFoEcFs5jLBBdfDMm8wEQqtt 0eg/YeiiJFN9qECCsaZY7UXmjdAhozLTs89DNZxmSlWZX9+s9sWXsFKepaHgyFao 18lAiEceox6RxZI+v2vzpZKgbthW9C/IDfCzQWsoDN78062+Oo0hW+ie4BLLnAbx m+8YI5GeHXJi+bxyVcGpm7LWiLE04s4RSBm9ydPRUliiQ7V4R3m1t6+QAjOrtFCN m0wkfAg7Ijq5cqeAFHvlvzNV/uwe9VTqy4h2PbzzbIyePGK99CFtUkwRuyrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp28heA2OrnjqufNo2mPEGdTYny8wHwYDVR0j BBgwFoAUdOQt4NGqb6jQVNU++If4T/Udf+owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUzYWM2NjctNGQ5ZS00OGQ3LWFmZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBE MUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZGNTFEN0ZFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NEU0MkRFMEQxQUE2RkE4RDA1NEQ1M0VGODg3Rjg0RkY1MUQ3 RkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4 NEZGNTFEN0ZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUZpZBZ/CKaRP50qM6mE0puJ3KBW0uCO4Wx tPqdiD39xmRd4dxDYEIgyPpAZ8T0D6KxgoPD9UZ1cWSPLJ/RaNL3+wLXlozJe6Bl 2IQWZzPN52+D3stRNxGDP0Bv15cmLYUGkuIf/1Z81ifxiMLRdmLOAR4acjjYScyJ /PMk0kHj23P1+cBM5hFyGfuRtvU5etrvR9UtDHpAOyUO7PUY0MRP9DHAfhYeOfo3 ysun1Ts0jQbEhYp4zNsJvZ47H8dmhACNQRsgEG/Z4azhXipjIVLUiANWRvh2GBwv BTeOaxMz5Z0GpeIHBL/ZI77cNiiG4Ri22MSyjdG3Dbed2BR+r/E= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:41 2026 by rpki-client