$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft File: 4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json) Hash identifier: w4Vc+u447hmPIVsxHDJW7u0J6seLfYtEH5PXdMOvYr0= Subject key identifier: 8C:E8:09:BB:DA:73:4D:F4:38:A2:A7:55:A3:3D:03:B3:7A:05:EE:98 Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 5E10EDEF926D8388462DAC1A9D86B06F192F4770 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft Manifest number: 61 Signing time: Mon 13 Jul 2026 11:07:15 +0000 Manifest this update: Mon 13 Jul 2026 11:02:15 +0000 Manifest next update: Tue 14 Jul 2026 12:03:15 +0000 Files and hashes: 1: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=) 2: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=) 3: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=) 4: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=) 5: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=) 6: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=) 7: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=) 8: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=) 9: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=) 10: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=) 11: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: PUVFb/uIG+TBSh5XREcEAczH6SUZhLfRJW0MffWa3tw=) 12: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=) 13: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: 5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 12:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:10:ed:ef:92:6d:83:88:46:2d:ac:1a:9d:86:b0:6f:19:2f:47:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: Jul 13 11:02:15 2026 GMT Not After : Jul 14 12:03:15 2026 GMT Subject: CN=8CE809BBDA734DF438A2A755A33D03B37A05EE98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:b7:d7:ad:b9:54:29:92:2e:9b:30:01:f9: aa:9b:25:b9:54:f6:ea:8b:e5:14:e9:2e:65:9f:12: 7b:9d:c6:50:36:51:f5:d2:d7:2e:f5:55:ef:30:a2: d8:2d:fb:b8:17:97:b0:c4:6e:56:3e:01:62:ce:20: 98:53:8d:6e:1b:d2:a4:0e:b4:66:4c:73:df:ad:8b: 60:34:6d:e3:85:ec:30:1b:d5:2f:1d:fe:57:98:30: ab:45:0e:2e:16:20:2c:7f:88:aa:55:23:59:16:ba: f6:7c:2f:02:96:5a:b9:27:2e:32:b3:7e:0e:39:29: 2e:95:68:39:2d:14:6d:7a:a3:d2:95:24:6e:4a:b6: 33:0a:a5:d8:88:a6:1b:31:51:bc:4b:78:65:12:0a: 71:da:69:c7:19:60:15:95:88:73:98:90:05:c6:b1: ed:8d:83:2c:4d:77:ca:e4:86:51:20:96:f1:5f:a3: 1b:61:54:a5:68:75:0b:b4:7c:0e:57:b1:82:fa:08: 3f:ad:b9:96:3e:eb:34:e1:a0:ca:76:a9:33:66:73: 66:de:c7:90:af:96:44:80:56:96:2c:14:54:46:f9: 14:73:6c:10:62:7c:cd:59:82:bb:26:bb:fa:33:e5: 5b:f7:b7:bc:af:fd:28:16:21:70:18:22:0c:ca:df: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E8:09:BB:DA:73:4D:F4:38:A2:A7:55:A3:3D:03:B3:7A:05:EE:98 X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:51:0d:87:38:5d:b2:30:a4:d3:5e:5e:ef:57:97:b7:b6:4b: d8:ff:4b:b1:d3:56:1d:df:e7:d1:81:18:5a:d2:10:b7:fc:4b: 38:a6:2b:a2:db:04:06:6e:58:11:12:75:00:51:dd:bb:42:1e: 53:7f:5a:d1:3d:e5:2c:4b:cc:c0:90:89:36:9b:57:70:c0:e1: 1e:11:2f:c7:58:d5:8b:31:98:73:84:95:00:bc:ab:aa:40:d2: 72:7b:db:32:58:8a:4b:19:1a:e0:9b:4d:6f:45:b9:97:53:af: 1d:eb:1a:40:c8:ee:60:77:03:c9:a4:36:03:96:0c:f2:e5:d2: d8:5d:16:e3:cd:97:f0:59:6b:e9:93:1e:e7:f6:10:84:e3:b5: 37:f6:19:d3:d2:bd:bc:2f:93:08:e1:ba:8b:67:5c:78:f5:8d: 4c:70:c9:9f:94:c9:85:6a:fd:9d:54:49:ca:09:04:bc:19:83: ec:67:88:dc:fa:ce:78:9a:74:a7:2c:37:17:35:0f:30:d6:04: 45:9a:a9:7e:b8:1c:a2:a2:7f:64:e0:87:4e:b2:82:d5:5c:9e: ff:35:70:01:82:a6:ca:14:75:14:f1:16:50:c3:f6:cf:c4:56: 4b:e3:65:48:a6:e6:d7:cf:6e:5e:9f:14:c0:6f:c7:99:fb:2c: 2f:13:82:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhDt75Jtg4hGLawanYawbxkvR3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA3MTMxMTAyMTVaFw0yNjA3MTQxMjAzMTVaMDMxMTAvBgNV BAMTKDhDRTgwOUJCREE3MzRERjQzOEEyQTc1NUEzM0QwM0IzN0EwNUVFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jbfXrblUKZIumzAB+aqbJblU 9uqL5RTpLmWfEnudxlA2UfXS1y71Ve8wotgt+7gXl7DEblY+AWLOIJhTjW4b0qQO tGZMc9+ti2A0beOF7DAb1S8d/leYMKtFDi4WICx/iKpVI1kWuvZ8LwKWWrknLjKz fg45KS6VaDktFG16o9KVJG5KtjMKpdiIphsxUbxLeGUSCnHaaccZYBWViHOYkAXG se2NgyxNd8rkhlEglvFfoxthVKVodQu0fA5XsYL6CD+tuZY+6zThoMp2qTNmc2be x5CvlkSAVpYsFFRG+RRzbBBifM1Zgrsmu/oz5Vv3t7yv/SgWIXAYIgzK3xM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOgJu9pzTfQ4oqdVoz0Ds3oF7pgwHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMz MTM4NEVFMTAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBRDYc4XbIwpNNeXu9Xl7e2S9j/S7HTVh3f 59GBGFrSELf8SzimK6LbBAZuWBESdQBR3btCHlN/WtE95SxLzMCQiTabV3DA4R4R L8dY1YsxmHOElQC8q6pA0nJ72zJYiksZGuCbTW9FuZdTrx3rGkDI7mB3A8mkNgOW DPLl0thdFuPNl/BZa+mTHuf2EITjtTf2GdPSvbwvkwjhuotnXHj1jUxwyZ+UyYVq /Z1UScoJBLwZg+xniNz6zniadKcsNxc1DzDWBEWaqX64HKKif2Tgh06ygtVcnv81 cAGCpsoUdRTxFlDD9s/EVkvjZUim5tfPbl6fFMBvx5n7LC8Tgog= -----END CERTIFICATE-----Generated at Tue Jul 14 03:40:09 2026 by rpki-client