$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft File: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft (raw, json) Hash identifier: 96t6x0taZ7JCf//ZwTIJ9TsktYTXdUBO+i1VC7OnM64= Subject key identifier: 85:81:CF:D0:02:46:62:60:59:04:22:6F:A3:96:91:CD:A7:BC:AC:B9 Authority key identifier: 74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA Certificate issuer: /CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Certificate serial: 29682226081F0A9115E42E09F94A0E7DA28FDA8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:44:54 +0000 Manifest this update: Wed 16 Sep 2026 16:39:54 +0000 Manifest next update: Thu 17 Sep 2026 19:21:54 +0000 Files and hashes: 1: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl (hash: sW4DPr89xpsTtbqrUqVXDrzYZcRmcHUOGdj9yUhfnv0=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 2fSfsDWFAVE0WXc/cYm1cwmYQpM+GCRAEbjcX25Cqow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:68:22:26:08:1f:0a:91:15:e4:2e:09:f9:4a:0e:7d:a2:8f:da:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Validity Not Before: Sep 16 16:39:54 2026 GMT Not After : Sep 17 19:21:54 2026 GMT Subject: CN=8581CFD0024662605904226FA39691CDA7BCACB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:fe:e5:25:59:53:af:84:4b:af:dc:28:ce: c6:03:23:03:e5:9b:f0:a3:1c:d4:22:9c:d2:82:d2: f2:76:01:ee:5b:4a:c3:43:0c:8f:27:f1:dd:bb:ab: 89:d0:e0:1a:c4:fb:3c:d4:7b:c4:45:b8:9d:e8:e4: a1:00:7e:dd:b7:6b:03:18:e2:a5:48:6e:2e:b1:ad: 5d:76:32:a0:6d:1e:59:df:9a:d7:09:ae:86:3c:f4: cc:79:fc:f7:4f:d1:43:bd:0f:e0:4b:fc:bb:01:c6: 73:9f:b9:8a:3a:4b:65:67:2f:1e:7b:3b:60:80:08: 72:ea:50:f6:4a:6a:51:46:9f:c4:bc:88:8f:ef:be: 8d:0a:1f:f3:c3:07:59:63:25:bb:fa:89:1d:26:77: 87:b9:b9:ec:dc:e2:74:25:f9:e2:e2:e0:fb:55:e2: b2:05:c3:66:9d:bd:06:74:1b:10:aa:63:07:55:c5: 9e:12:35:ef:94:f4:2b:81:76:c4:e2:26:6d:af:d2: 13:67:70:b9:b1:e9:3c:df:f0:39:0c:f3:26:b3:52: 9b:58:40:c4:fe:47:58:cd:eb:46:80:67:d3:ad:ef: 8b:d3:3e:57:12:74:b6:90:e5:1b:f9:b1:77:31:5a: 7a:65:77:a7:03:13:49:d0:d3:8f:98:24:ef:1c:d1: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:81:CF:D0:02:46:62:60:59:04:22:6F:A3:96:91:CD:A7:BC:AC:B9 X509v3 Authority Key Identifier: keyid:74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:50:8b:4f:0e:9f:67:e2:f8:7d:88:d9:c0:e0:d2:0d:da:39: d0:45:27:e4:a5:de:b6:b3:2f:ee:33:c7:7e:e1:1b:44:d0:3b: 63:a3:1e:56:00:03:57:07:2e:de:a3:c2:62:91:1b:78:e1:69: 51:de:61:1a:2f:2f:d5:f0:b4:a5:77:48:c0:ae:ea:d5:1e:87: af:e3:3d:07:16:08:d0:96:37:37:a9:97:37:99:e4:70:63:33: 4e:a1:53:36:b0:3c:13:c7:de:d4:82:36:5d:f4:23:4f:60:d6: ed:de:6a:fa:4f:de:5d:c0:6b:5c:d6:6a:8e:08:d4:ee:85:7d: ee:0c:4c:ea:94:8c:2d:74:f6:5c:de:04:10:c6:92:f4:4e:40: 33:2a:f9:99:24:b3:0d:cc:f7:63:7f:01:31:97:d8:e2:15:8e: 7d:3d:df:49:23:f0:34:82:e7:d3:03:d9:d3:b5:5f:c4:c7:93: 29:bc:ca:1d:14:7b:6a:56:b5:af:e9:c1:ed:f9:30:79:7a:20: 8d:d4:87:66:1e:2b:c6:0b:e1:59:af:60:cb:2b:c4:ac:76:6b: 88:1f:54:dd:fc:56:cd:20:1e:9d:37:eb:01:8f:13:f6:2e:97: f7:3b:9e:1d:1c:1b:f3:bf:4c:c4:bb:96:a1:8d:2c:21:23:17: ee:f6:d8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWgiJggfCpEV5C4J+UoOfaKP2oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyQjJDQTk0MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5MENB MkJERDJDQTAeFw0yNjA5MTYxNjM5NTRaFw0yNjA5MTcxOTIxNTRaMDMxMTAvBgNV BAMTKDg1ODFDRkQwMDI0NjYyNjA1OTA0MjI2RkEzOTY5MUNEQTdCQ0FDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDv7lJVlTr4RLr9wozsYDIwPl m/CjHNQinNKC0vJ2Ae5bSsNDDI8n8d27q4nQ4BrE+zzUe8RFuJ3o5KEAft23awMY 4qVIbi6xrV12MqBtHlnfmtcJroY89Mx5/PdP0UO9D+BL/LsBxnOfuYo6S2VnLx57 O2CACHLqUPZKalFGn8S8iI/vvo0KH/PDB1ljJbv6iR0md4e5uezc4nQl+eLi4PtV 4rIFw2advQZ0GxCqYwdVxZ4SNe+U9CuBdsTiJm2v0hNncLmx6Tzf8DkM8yazUptY QMT+R1jN60aAZ9Ot74vTPlcSdLaQ5Rv5sXcxWnpld6cDE0nQ04+YJO8c0ek5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYHP0AJGYmBZBCJvo5aRzae8rLkwHwYDVR0j BBgwFoAUdCssqUDZHm+jikRo+Jw5DKK90sowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc4YzNjNjktMzZkMC00YWU4LWE4ZGYtNjNkM2Y0NGNjZDhkLzAvNzQyQjJDQTk0 MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5MENBMkJERDJDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NDJCMkNBOTQwRDkxRTZGQTM4QTQ0NjhGODlDMzkwQ0EyQkRE MkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNzQyQjJDQTk0MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5 MENBMkJERDJDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxQi08On2fi+H2I2cDg0g3aOdBFJ+Sl3raz L+4zx37hG0TQO2OjHlYAA1cHLt6jwmKRG3jhaVHeYRovL9XwtKV3SMCu6tUeh6/j PQcWCNCWNzeplzeZ5HBjM06hUzawPBPH3tSCNl30I09g1u3eavpP3l3Aa1zWao4I 1O6Ffe4MTOqUjC109lzeBBDGkvROQDMq+Zkksw3M92N/ATGX2OIVjn0930kj8DSC 59MD2dO1X8THkym8yh0Ue2pWta/pwe35MHl6II3Uh2YeK8YL4VmvYMsrxKx2a4gf VN38Vs0gHp036wGPE/Yul/c7nh0cG/O/TMS7lqGNLCEjF+722Bo= -----END CERTIFICATE-----Generated at Thu Sep 17 12:41:17 2026 by rpki-client