$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft File: 4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json) Hash identifier: O+iKlUFWAO4ddJTX7xn9cEqRiKTrePrDUATaFSaity4= Subject key identifier: 25:FD:19:20:7A:E8:55:6B:C3:39:D7:6F:6F:B5:65:8E:2E:46:CA:96 Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 1E21EDDAF5A62986E25042EDBDF8ACA1F81A2105 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft Manifest number: 14 Signing time: Sat 16 May 2026 15:03:11 +0000 Manifest this update: Sat 16 May 2026 14:58:11 +0000 Manifest next update: Sun 17 May 2026 16:46:11 +0000 Files and hashes: 1: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=) 2: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=) 3: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=) 4: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: 5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=) 5: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=) 6: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=) 7: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=) 8: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=) 9: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=) 10: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=) 11: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=) 12: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: vxRFHQCFsk+vzf3YtgniSI8dbbMQL0+2qhB2tUtB/n0=) 13: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:21:ed:da:f5:a6:29:86:e2:50:42:ed:bd:f8:ac:a1:f8:1a:21:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: May 16 14:58:11 2026 GMT Not After : May 17 16:46:11 2026 GMT Subject: CN=25FD19207AE8556BC339D76F6FB5658E2E46CA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:01:3e:8b:52:56:29:7b:07:8a:b6:a4:53: fd:21:0f:24:f8:7d:fc:0c:20:4b:d9:f1:01:51:09: c8:be:a7:fa:61:9d:56:b8:06:e7:b5:7b:f9:93:23: 10:3d:1a:47:21:c8:c9:f9:fa:e0:3f:bc:f9:67:6f: c1:59:9e:29:21:0c:fd:ee:da:c7:8d:f2:fb:2a:4a: fb:93:8a:74:4b:d0:8f:37:d2:47:25:d2:3b:8b:54: 6e:77:f4:1d:79:47:7f:d0:d1:b8:b4:bd:9e:7e:60: 48:1a:85:bf:b7:97:1a:41:91:d6:93:a9:8d:83:01: 2d:f1:4c:65:c1:e5:bf:45:8b:c3:1f:82:f5:74:f4: e1:f1:b6:4d:f5:bc:be:48:6b:06:b2:db:29:6a:36: 33:1b:34:71:12:76:5a:24:84:89:6a:cc:ca:8b:08: 54:3f:23:bb:a1:dd:0d:0c:d6:cd:f1:42:5d:b0:65: c6:65:8c:91:7b:39:cb:55:da:f5:c1:4e:93:f5:17: b7:38:65:9f:c4:fc:9c:e4:13:5f:38:bb:77:99:b5: 77:32:f0:82:69:f6:f5:71:4c:1e:a8:89:13:2c:b2: 1b:cb:7f:88:e7:9c:3a:f7:92:30:4f:8c:10:05:2e: ac:42:2b:a1:dd:73:89:72:16:ae:e9:98:a5:79:ef: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FD:19:20:7A:E8:55:6B:C3:39:D7:6F:6F:B5:65:8E:2E:46:CA:96 X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:27:c7:80:a0:c8:27:b4:6b:7d:e0:63:58:d0:4d:d4:cb:fc: ca:0e:0a:45:78:c8:53:25:4e:90:64:7d:d5:d1:76:99:83:d6: d6:ee:bd:94:cc:92:8c:87:68:00:b2:55:2a:ec:fa:28:b3:98: 54:fd:93:84:fd:46:73:51:a8:0e:2f:89:15:08:c5:68:81:b8: 6c:6f:3d:38:15:94:26:e0:86:48:d5:e2:d1:a2:55:4f:3d:ab: aa:07:7c:83:e3:4b:63:d9:3e:7a:ff:3f:9e:0e:c7:81:d3:cc: 0d:79:3b:bf:c7:a6:81:ce:14:8a:46:f1:28:a1:06:2e:5c:f3: 82:71:31:f7:10:45:66:f8:d4:71:27:d5:1e:6c:bd:31:44:d6: 82:f5:f0:ca:f8:c8:fe:94:24:11:87:63:83:8a:af:f3:ad:32: 10:29:90:11:22:37:f0:82:e6:52:f5:79:4b:0c:5f:bc:00:3b: c3:6b:1b:5c:22:07:7c:c1:67:9c:13:0d:11:aa:bf:b9:62:29: a6:7c:48:14:ad:4c:4f:e0:fd:8e:96:e7:f8:23:3e:10:7f:12: ba:2b:05:9e:1f:16:89:00:0d:eb:ac:a6:cc:9b:de:17:95:b1: 58:44:70:bd:87:a9:55:0f:9a:ad:ab:37:60:25:db:bd:e0:97: 1c:ec:ed:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiHt2vWmKYbiUELtvfisofgaIQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA1MTYxNDU4MTFaFw0yNjA1MTcxNjQ2MTFaMDMxMTAvBgNV BAMTKDI1RkQxOTIwN0FFODU1NkJDMzM5RDc2RjZGQjU2NThFMkU0NkNBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0wE+i1JWKXsHirakU/0hDyT4 ffwMIEvZ8QFRCci+p/phnVa4Bue1e/mTIxA9GkchyMn5+uA/vPlnb8FZnikhDP3u 2seN8vsqSvuTinRL0I830kcl0juLVG539B15R3/Q0bi0vZ5+YEgahb+3lxpBkdaT qY2DAS3xTGXB5b9Fi8MfgvV09OHxtk31vL5Iaway2ylqNjMbNHESdlokhIlqzMqL CFQ/I7uh3Q0M1s3xQl2wZcZljJF7OctV2vXBTpP1F7c4ZZ/E/JzkE184u3eZtXcy 8IJp9vVxTB6oiRMsshvLf4jnnDr3kjBPjBAFLqxCK6Hdc4lyFq7pmKV576YrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJf0ZIHroVWvDOddvb7Vlji5GypYwHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMz MTM4NEVFMTAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEnx4CgyCe0a33gY1jQTdTL/MoOCkV4yFMl TpBkfdXRdpmD1tbuvZTMkoyHaACyVSrs+iizmFT9k4T9RnNRqA4viRUIxWiBuGxv PTgVlCbghkjV4tGiVU89q6oHfIPjS2PZPnr/P54Ox4HTzA15O7/HpoHOFIpG8Sih Bi5c84JxMfcQRWb41HEn1R5svTFE1oL18Mr4yP6UJBGHY4OKr/OtMhApkBEiN/CC 5lL1eUsMX7wAO8NrG1wiB3zBZ5wTDRGqv7liKaZ8SBStTE/g/Y6W5/gjPhB/Eror BZ4fFokADeuspsyb3heVsVhEcL2HqVUPmq2rN2Al273glxzs7Qg= -----END CERTIFICATE-----Generated at Sun May 17 00:03:24 2026 by rpki-client