$ rpki-client -vvvf rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft File: 74968D237E4D28CC12725975DFEBE487B0EAA72F.mft (raw, json) Hash identifier: fRT6Im7RCNb4OC3rVgzcnH1cHzLOJ3d/HusDXjiPgFE= Subject key identifier: CE:FF:09:49:6A:66:E8:DD:73:54:06:59:8A:D7:48:7E:7C:64:4A:DA Authority key identifier: 74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F Certificate issuer: /CN=74968D237E4D28CC12725975DFEBE487B0EAA72F Certificate serial: 43429FC9F14C538D203CE71FD1E3C28AE6C0CA11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft Manifest number: BC Signing time: Sun 20 Sep 2026 05:39:08 +0000 Manifest this update: Sun 20 Sep 2026 05:34:08 +0000 Manifest next update: Mon 21 Sep 2026 07:40:08 +0000 Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: AWLeqSIPPGZYHKfAsY5sORe/thUthJhR3mD21mk84m8=) 2: 74968D237E4D28CC12725975DFEBE487B0EAA72F.crl (hash: QlNRaKDwBLEX0kbHiWFsLxpLBSiBjM9liYLwzwJYjNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 07:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:42:9f:c9:f1:4c:53:8d:20:3c:e7:1f:d1:e3:c2:8a:e6:c0:ca:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74968D237E4D28CC12725975DFEBE487B0EAA72F Validity Not Before: Sep 20 05:34:08 2026 GMT Not After : Sep 21 07:40:08 2026 GMT Subject: CN=CEFF09496A66E8DD735406598AD7487E7C644ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:bb:17:fa:2d:f4:3b:ee:df:67:75:a1:53: a9:6c:09:d8:be:45:79:9b:5c:15:51:8b:a9:2b:ba: cd:80:90:e6:6f:4f:ab:fd:ca:13:b1:d3:a7:49:4d: 79:5d:38:6e:63:21:36:6b:b9:8a:a7:e3:aa:e6:89: 30:8f:66:eb:7c:68:32:ec:b7:90:6b:c9:c3:e0:a6: a8:fe:b8:d4:5f:f7:3c:00:39:2f:f6:f8:85:2d:a2: 0c:10:2d:b6:04:5a:0e:22:55:f2:e2:f1:dc:c5:75: 02:29:23:b5:5b:28:41:fb:4e:92:23:17:f2:44:66: a5:a9:34:36:5d:b2:72:ab:7c:30:fb:b2:4c:d8:9e: f4:10:3d:2b:62:59:71:4c:29:f8:af:95:ac:fb:4d: 8a:cb:93:0b:58:0a:e4:5b:36:a2:7a:8f:8a:46:17: 08:95:74:5c:f3:f2:41:4a:b9:ce:3f:46:f5:73:72: 0b:ae:f8:b8:3c:1f:22:ca:1f:4b:9f:37:d8:be:26: e9:00:6d:35:75:47:6d:a1:8f:5f:ad:ee:95:fa:0d: f2:ed:1a:fc:f1:73:6a:01:ce:c2:37:3b:9f:1b:61: c0:b2:33:a4:f3:a0:e8:71:d3:f5:89:ff:8e:9e:4a: 63:1a:4d:41:a8:e4:d5:c9:4a:ad:e7:ab:a9:58:a0: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FF:09:49:6A:66:E8:DD:73:54:06:59:8A:D7:48:7E:7C:64:4A:DA X509v3 Authority Key Identifier: keyid:74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:36:13:f3:8e:59:69:7e:6b:b0:60:94:b1:2a:4e:af:3c:6a: d0:d8:8f:f8:b9:45:bc:8a:4e:f8:72:54:44:e1:03:99:85:e3: 62:16:8a:d2:bb:5c:c1:6f:06:c0:9c:d5:a1:54:1d:7c:2f:9c: 03:a9:e3:d3:67:c0:e3:38:5c:3c:1f:82:9c:80:cd:cd:d9:2a: d0:b4:83:6c:4d:73:d3:55:dd:9e:f7:af:4f:ab:28:c1:b7:41: 3b:ae:cb:48:10:87:f5:8b:20:75:ed:49:d1:be:87:62:86:fe: 4f:2e:96:76:c3:84:a1:66:49:c9:70:0a:81:e9:91:61:fc:34: a5:53:26:3d:06:00:29:d8:9c:93:fe:35:27:ab:b1:ca:35:56: 4a:7f:4f:01:07:7c:db:9b:af:2f:42:78:7d:27:4c:24:fb:e0: 83:10:02:f8:92:e3:ce:b4:87:d0:33:c9:24:26:0c:e3:f9:80: a0:56:a7:ff:84:d9:8e:5d:07:e3:01:56:09:bd:f8:b9:31:7e: 72:5f:b1:f7:af:01:70:8d:01:a0:e8:51:14:39:bb:eb:cf:32: 16:6d:b8:6c:e6:19:a9:ad:10:fb:72:32:0f:1a:11:ec:20:66: ad:e8:2b:20:76:e0:69:99:79:5a:dd:6c:16:b3:07:40:f9:be: fa:20:32:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0KfyfFMU40gPOcf0ePCiubAyhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5NjhEMjM3RTREMjhDQzEyNzI1OTc1REZFQkU0ODdC MEVBQTcyRjAeFw0yNjA5MjAwNTM0MDhaFw0yNjA5MjEwNzQwMDhaMDMxMTAvBgNV BAMTKENFRkYwOTQ5NkE2NkU4REQ3MzU0MDY1OThBRDc0ODdFN0M2NDRBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPbsX+i30O+7fZ3WhU6lsCdi+ RXmbXBVRi6krus2AkOZvT6v9yhOx06dJTXldOG5jITZruYqn46rmiTCPZut8aDLs t5BrycPgpqj+uNRf9zwAOS/2+IUtogwQLbYEWg4iVfLi8dzFdQIpI7VbKEH7TpIj F/JEZqWpNDZdsnKrfDD7skzYnvQQPStiWXFMKfivlaz7TYrLkwtYCuRbNqJ6j4pG FwiVdFzz8kFKuc4/RvVzcguu+Lg8HyLKH0ufN9i+JukAbTV1R22hj1+t7pX6DfLt Gvzxc2oBzsI3O58bYcCyM6TzoOhx0/WJ/46eSmMaTUGo5NXJSq3nq6lYoJINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzv8JSWpm6N1zVAZZitdIfnxkStowHwYDVR0j BBgwFoAUdJaNI35NKMwScll13+vkh7Dqpy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM5ZWFkODEtYWMxMi00NDc5LWIyZmItOTk4ZTAxODU0NTUxLzAvNzQ5NjhEMjM3 RTREMjhDQzEyNzI1OTc1REZFQkU0ODdCMEVBQTcyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NDk2OEQyMzdFNEQyOENDMTI3MjU5NzVERkVCRTQ4N0IwRUFB NzJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvNzQ5NjhEMjM3RTREMjhDQzEyNzI1OTc1REZFQkU0 ODdCMEVBQTcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI2E/OOWWl+a7BglLEqTq88atDYj/i5RbyK TvhyVEThA5mF42IWitK7XMFvBsCc1aFUHXwvnAOp49NnwOM4XDwfgpyAzc3ZKtC0 g2xNc9NV3Z73r0+rKMG3QTuuy0gQh/WLIHXtSdG+h2KG/k8ulnbDhKFmSclwCoHp kWH8NKVTJj0GACnYnJP+NSersco1Vkp/TwEHfNubry9CeH0nTCT74IMQAviS4860 h9AzySQmDOP5gKBWp/+E2Y5dB+MBVgm9+LkxfnJfsfevAXCNAaDoURQ5u+vPMhZt uGzmGamtEPtyMg8aEewgZq3oKyB24GmZeVrdbBazB0D5vvogMng= -----END CERTIFICATE-----Generated at Sun Sep 20 22:23:54 2026 by rpki-client