$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft File: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft (raw, json) Hash identifier: +OrHb77giN0PO21a3i5VZ0BbozOEJ1dUZN5+AFU9uRc= Subject key identifier: 45:23:1E:E5:D4:15:7E:EB:DF:9F:CE:DC:26:15:39:BF:D4:EB:AB:95 Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA Certificate issuer: /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Certificate serial: 4840D6C7C17B161F6D3EE82AEA1608B44D839A1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:48:40 +0000 Manifest this update: Mon 21 Sep 2026 09:43:40 +0000 Manifest next update: Tue 22 Sep 2026 12:12:40 +0000 Files and hashes: 1: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl (hash: fmF8A/Bwl91UINGJ68zreqGU8Wo8Tva4KWCuSh9Q8hY=) 2: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: j5WFyDrMaI9n63JSzTSL6p6/2kiX350w7znF9gXn6oE=) 3: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: wrUQ4EMVX+PJSZbONtjRtGC7+n3R84eMm7t/IYNPjw8=) 4: 3130332e3234332e31302e302f32342d3234203d3e203536323334.roa (hash: zufjgeZw/w05det8sEI0LnaWHbULyBgD0ra6w23cC5w=) 5: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: +bPIyCGaEGWvS82VlAv2EHMMfj7mjRKwJoRxD8Cvfm0=) 6: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: iZLgBREB8douvHYZz9gauKXSkvDFXVOW+Mvm3xgORFU=) 7: 3130332e3234332e31312e302f32342d3234203d3e203536323334.roa (hash: dTKCe4paU2IY2Oh+L5IqUZGGFO4TUfQMNiigaYInGe4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:40:d6:c7:c1:7b:16:1f:6d:3e:e8:2a:ea:16:08:b4:4d:83:9a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Validity Not Before: Sep 21 09:43:40 2026 GMT Not After : Sep 22 12:12:40 2026 GMT Subject: CN=45231EE5D4157EEBDF9FCEDC261539BFD4EBAB95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b6:b3:ae:9f:76:fe:f1:ec:f6:d6:87:b2:b0: b5:fa:d2:e6:ef:02:65:17:73:83:05:99:60:39:f0: aa:4f:28:25:56:ad:d1:b0:9d:95:33:7e:4f:76:c8: e6:c9:ea:57:d5:30:bd:01:f4:a8:1e:ee:91:1e:da: a0:8d:18:dc:64:ce:a6:95:c9:65:21:55:ef:d0:13: d9:2b:80:c2:43:58:eb:d5:c4:55:5d:51:fc:55:91: 98:10:1f:dd:0c:42:6a:2f:ee:29:4c:60:e3:bc:be: 1a:fb:71:e1:25:7f:25:71:c0:05:37:bc:fc:a2:33: 04:7d:13:77:2c:c1:f2:70:0a:2e:56:72:e5:02:ea: 0a:cb:66:75:91:e7:9a:20:a6:78:dd:23:1b:03:e0: 38:d6:ac:72:e6:eb:73:a2:f8:e1:4d:ce:4b:da:e1: 93:38:f1:a2:52:e9:4a:56:2a:23:c9:91:51:d3:c5: 2d:2b:db:aa:e1:d9:74:36:ad:23:45:32:c5:54:b1: 12:0e:da:05:7e:4d:2d:5b:95:7d:3a:13:da:ed:11: 6d:2c:20:8b:e3:64:67:89:4c:82:67:3e:cc:d2:70: ee:cc:c9:c9:de:09:c1:46:40:32:70:c1:db:a6:72: 09:d1:47:9b:c9:84:f4:f9:54:4d:53:8c:12:97:58: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:23:1E:E5:D4:15:7E:EB:DF:9F:CE:DC:26:15:39:BF:D4:EB:AB:95 X509v3 Authority Key Identifier: keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:21:e5:c0:b0:df:7c:aa:1b:ca:4c:89:b0:7b:43:a8:eb:0d: 1a:bd:b1:fa:49:aa:f4:f3:19:b2:06:57:cf:da:65:82:c1:ce: 6e:5c:3e:b9:5f:de:77:ac:72:2c:69:7d:b7:37:03:82:67:33: 3f:24:d8:51:3b:00:ed:8d:51:52:b6:ef:4d:49:a5:ff:c9:3e: e8:90:1a:a6:69:63:bf:37:7b:69:5b:d9:6c:02:23:7f:2a:75: 09:d6:1c:ee:9a:ae:c2:39:5e:b0:bb:89:4b:73:af:4c:27:8b: 8f:37:55:92:81:a9:50:f4:69:c0:cd:ab:7b:18:ea:44:b8:23: 0a:de:97:0b:9d:20:92:c9:50:94:73:e7:63:6e:92:ad:7b:40: b9:19:af:8a:87:4b:1d:02:0d:79:de:9e:93:f8:d3:e9:11:d2: 71:07:02:1e:7b:ef:1e:03:36:2a:6d:34:57:b3:d2:00:c9:97: 8a:3e:4a:5e:4b:f9:d9:73:0d:30:6b:29:6f:20:f6:c6:bf:05: a6:6e:d0:19:3b:38:4b:04:84:d2:fc:cc:51:e1:1f:b2:4f:54: 03:21:bf:75:14:a3:1e:ec:36:15:a0:33:62:5b:1c:06:73:72: 57:4d:e2:ef:34:6a:76:46:20:31:5b:8a:92:1e:88:a6:0f:3c: fd:d7:15:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEDWx8F7Fh9tPugq6hYItE2Dmh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5 RDRCNkFEQTAeFw0yNjA5MjEwOTQzNDBaFw0yNjA5MjIxMjEyNDBaMDMxMTAvBgNV BAMTKDQ1MjMxRUU1RDQxNTdFRUJERjlGQ0VEQzI2MTUzOUJGRDRFQkFCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYtrOun3b+8ez21oeysLX60ubv AmUXc4MFmWA58KpPKCVWrdGwnZUzfk92yObJ6lfVML0B9Kge7pEe2qCNGNxkzqaV yWUhVe/QE9krgMJDWOvVxFVdUfxVkZgQH90MQmov7ilMYOO8vhr7ceElfyVxwAU3 vPyiMwR9E3cswfJwCi5WcuUC6grLZnWR55ogpnjdIxsD4DjWrHLm63Oi+OFNzkva 4ZM48aJS6UpWKiPJkVHTxS0r26rh2XQ2rSNFMsVUsRIO2gV+TS1blX06E9rtEW0s IIvjZGeJTIJnPszScO7MycneCcFGQDJwwdumcgnRR5vJhPT5VE1TjBKXWNYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURSMe5dQVfuvfn87cJhU5v9Trq5UwHwYDVR0j BBgwFoAUkkJ5kIpHwQEbS2pUqgXHvZ1LatowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJjN2RmZDQtZTUxMC00NzA3LTk4MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4 QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5RDRCNkFEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjQyNzk5MDhBNDdDMTAxMUI0QjZBNTRBQTA1QzdCRDlENEI2 QURBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3 QkQ5RDRCNkFEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgh5cCw33yqG8pMibB7Q6jrDRq9sfpJqvTz GbIGV8/aZYLBzm5cPrlf3nescixpfbc3A4JnMz8k2FE7AO2NUVK2701Jpf/JPuiQ GqZpY783e2lb2WwCI38qdQnWHO6arsI5XrC7iUtzr0wni483VZKBqVD0acDNq3sY 6kS4IwrelwudIJLJUJRz52Nukq17QLkZr4qHSx0CDXnenpP40+kR0nEHAh577x4D NiptNFez0gDJl4o+Sl5L+dlzDTBrKW8g9sa/BaZu0Bk7OEsEhNL8zFHhH7JPVAMh v3UUox7sNhWgM2JbHAZzcldN4u80anZGIDFbipIeiKYPPP3XFTQ= -----END CERTIFICATE-----Generated at Mon Sep 21 16:09:59 2026 by rpki-client