$ rpki-client -vvvf rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft File: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft (raw, json) Hash identifier: b4tXvshXrS7/ZSTg18CVV0da0rYne+bouxffozQh62M= Subject key identifier: F1:B8:AA:75:90:C3:B5:00:92:A1:7C:1B:00:59:9F:3D:45:10:88:51 Authority key identifier: 74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA Certificate issuer: /CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Certificate serial: 42E2CCBD793D3EC4DE37A8DF26EEC8948973A735 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 13:04:47 +0000 Manifest this update: Thu 17 Sep 2026 12:59:47 +0000 Manifest next update: Fri 18 Sep 2026 15:34:47 +0000 Files and hashes: 1: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: d8hlpMGwM7inThd2/Asl74/yVlwwKBLZArB/QX8GfGM=) 2: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl (hash: VG7O53Ag0Z1GKo3Ss0K5Qtp6OQq0EZNx+3B01UhZZ2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e2:cc:bd:79:3d:3e:c4:de:37:a8:df:26:ee:c8:94:89:73:a7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Validity Not Before: Sep 17 12:59:47 2026 GMT Not After : Sep 18 15:34:47 2026 GMT Subject: CN=F1B8AA7590C3B50092A17C1B00599F3D45108851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:f7:1c:df:a9:55:c0:76:d2:8a:d6:c0:5d: b5:1b:a7:94:91:2e:64:7f:e7:28:9f:8e:9c:dd:52: 24:7b:cc:79:5b:da:8d:b8:e7:73:01:fc:d2:eb:f5: 77:84:e7:8b:18:0b:27:6a:d6:2e:08:01:f4:47:78: 16:50:1c:d1:24:04:31:9b:c8:59:c6:22:70:20:48: 88:e1:4f:b0:29:c1:0b:39:99:c7:84:36:4c:51:87: cb:9c:9d:8a:3f:bf:db:59:e8:b8:e9:ce:4c:48:74: 8b:40:6f:e2:86:fe:34:55:74:fc:53:54:c6:a4:e8: 6a:55:29:59:f1:a9:73:44:00:22:59:55:c3:04:c1: 4d:af:76:5c:5e:da:61:57:b9:9a:b2:36:f8:58:b2: e7:94:2d:23:e9:b3:57:21:a3:94:03:9a:4e:5c:17: 74:9e:df:bd:96:b0:e6:4f:55:1d:eb:bf:41:03:cf: 61:9a:5c:50:fd:75:a3:02:a6:90:a4:79:ad:56:47: 80:27:33:ba:85:19:00:53:94:e2:87:96:ab:f8:e5: f0:be:5d:eb:f3:d7:cb:f3:a7:d1:d5:44:fd:ec:29: 0d:99:51:7b:a7:8e:60:83:c4:e4:f9:2a:05:46:6f: 3b:60:c0:4b:c6:3e:f5:6b:17:59:77:1b:4e:24:ee: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B8:AA:75:90:C3:B5:00:92:A1:7C:1B:00:59:9F:3D:45:10:88:51 X509v3 Authority Key Identifier: keyid:74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:1a:bc:7a:13:95:c3:2e:69:c4:70:c0:27:93:f4:df:3d: 15:60:bf:25:f8:db:37:d3:4d:9a:ec:3f:7e:0d:d0:11:0f:c0: 0e:5f:42:c9:0d:1c:05:58:58:d2:d7:ba:d9:8e:2c:ad:38:b8: 72:bc:65:6e:37:6e:a2:f2:c8:85:9c:05:60:bf:e4:f7:a8:43: 81:9d:6a:e8:b4:0e:4e:b5:87:ee:c7:cb:fe:81:bd:ea:3b:75: b1:1e:d9:13:49:10:78:c2:e3:f2:e8:81:d2:6c:8c:82:4b:fb: 59:53:cd:c0:31:25:d3:1e:2e:33:44:79:87:6c:67:d4:e5:1c: 30:4d:25:9d:6f:55:ee:54:e8:1b:f2:94:c4:da:b8:0e:d9:a5: 85:63:88:08:44:86:a8:7c:83:58:21:4b:3a:e0:5c:b8:a2:8d: 56:c7:79:3c:44:ad:7d:8e:5e:19:91:c4:90:bd:e8:28:41:b9: 7f:68:93:25:81:d8:a8:c8:d6:bd:3f:42:4b:1b:e8:48:39:53: 4d:7b:f2:7b:b7:71:9f:93:03:dd:dc:0f:54:e0:df:4c:9c:22: a2:28:7d:fe:23:42:ea:60:23:b4:fc:2b:2b:6a:a7:b9:59:bf: e5:a1:b6:e1:ec:9d:b5:42:21:6c:74:ff:53:14:4e:4c:ad:d9: 4f:4d:cd:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuLMvXk9PsTeN6jfJu7IlIlzpzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZG NTFEN0ZFQTAeFw0yNjA5MTcxMjU5NDdaFw0yNjA5MTgxNTM0NDdaMDMxMTAvBgNV BAMTKEYxQjhBQTc1OTBDM0I1MDA5MkExN0MxQjAwNTk5RjNENDUxMDg4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSfcc36lVwHbSitbAXbUbp5SR LmR/5yifjpzdUiR7zHlb2o2453MB/NLr9XeE54sYCydq1i4IAfRHeBZQHNEkBDGb yFnGInAgSIjhT7ApwQs5mceENkxRh8ucnYo/v9tZ6LjpzkxIdItAb+KG/jRVdPxT VMak6GpVKVnxqXNEACJZVcMEwU2vdlxe2mFXuZqyNvhYsueULSPps1cho5QDmk5c F3Se372WsOZPVR3rv0EDz2GaXFD9daMCppCkea1WR4AnM7qFGQBTlOKHlqv45fC+ Xevz18vzp9HVRP3sKQ2ZUXunjmCDxOT5KgVGbztgwEvGPvVrF1l3G04k7jC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8biqdZDDtQCSoXwbAFmfPUUQiFEwHwYDVR0j BBgwFoAUdOQt4NGqb6jQVNU++If4T/Udf+owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUzYWM2NjctNGQ5ZS00OGQ3LWFmZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBE MUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZGNTFEN0ZFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NEU0MkRFMEQxQUE2RkE4RDA1NEQ1M0VGODg3Rjg0RkY1MUQ3 RkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4 NEZGNTFEN0ZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFK9Grx6E5XDLmnEcMAnk/TfPRVgvyX42zfT TZrsP34N0BEPwA5fQskNHAVYWNLXutmOLK04uHK8ZW43bqLyyIWcBWC/5PeoQ4Gd aui0Dk61h+7Hy/6Bveo7dbEe2RNJEHjC4/LogdJsjIJL+1lTzcAxJdMeLjNEeYds Z9TlHDBNJZ1vVe5U6BvylMTauA7ZpYVjiAhEhqh8g1ghSzrgXLiijVbHeTxErX2O XhmRxJC96ChBuX9okyWB2KjI1r0/Qksb6Eg5U0178nu3cZ+TA93cD1Tg30ycIqIo ff4jQupgI7T8Kytqp7lZv+WhtuHsnbVCIWx0/1MUTkyt2U9NzfA= -----END CERTIFICATE-----Generated at Thu Sep 17 15:25:45 2026 by rpki-client