$ rpki-client -vvvf rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft File: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft (raw, json) Hash identifier: 7JcSQb0/izDfR0B8MaFLPsLUXDaKggwZtRhnOM+buJQ= Subject key identifier: 3D:98:F5:00:EF:72:A1:AC:2E:DC:9C:23:35:36:0B:D1:5A:31:06:13 Authority key identifier: 74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA Certificate issuer: /CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Certificate serial: 5C3EC89A375B46BDA578ECA369A83CA84EC0DCE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:23:19 +0000 Manifest this update: Mon 21 Sep 2026 05:18:19 +0000 Manifest next update: Tue 22 Sep 2026 06:27:19 +0000 Files and hashes: 1: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: d8hlpMGwM7inThd2/Asl74/yVlwwKBLZArB/QX8GfGM=) 2: 74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl (hash: EE+OA15IhZlmmjs24SNilegYzDFWDgdWItodVEgo7F0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3e:c8:9a:37:5b:46:bd:a5:78:ec:a3:69:a8:3c:a8:4e:c0:dc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA Validity Not Before: Sep 21 05:18:19 2026 GMT Not After : Sep 22 06:27:19 2026 GMT Subject: CN=3D98F500EF72A1AC2EDC9C2335360BD15A310613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:dd:9b:b6:91:1f:74:14:21:8a:0a:92:38: 68:09:2f:24:eb:6b:17:a3:fe:68:5d:88:c9:18:29: 2f:61:57:d5:a1:46:83:47:c8:61:c1:ed:6f:25:35: 46:65:46:bc:7d:c2:a9:2c:b0:d0:7c:1d:1c:9b:7f: 1d:03:79:88:97:0e:90:bb:31:04:f3:df:6f:c9:76: 2c:ee:68:2e:16:05:90:ff:f6:80:f0:ab:b7:1c:5c: 72:9e:d0:aa:df:9d:db:3b:7d:1a:f6:ed:d9:44:75: 46:df:37:80:2b:1c:ea:00:f3:2f:d5:5e:c4:b2:c1: bc:be:0c:92:bd:57:9b:f9:9b:40:38:4c:28:a0:8d: fc:5b:42:e1:75:b0:11:14:0c:f3:78:dc:37:4b:09: 79:d5:54:37:0a:44:18:83:b3:ca:f4:58:a6:01:94: 03:74:1e:ea:b7:f4:f5:96:92:a8:54:6f:f8:09:7e: df:d0:f7:12:0d:b8:fb:6a:7a:15:13:a7:7d:cf:97: 0b:3f:ad:9c:81:fa:e5:77:14:c3:05:ab:58:b7:5a: a3:52:e8:27:ca:42:b7:05:ec:6c:36:39:b6:69:6f: 20:7a:d4:38:fb:22:47:c8:c3:ea:eb:e1:f5:89:b9: d8:c7:f4:bd:6b:70:ce:4c:80:f5:60:b4:58:f9:46: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:98:F5:00:EF:72:A1:AC:2E:DC:9C:23:35:36:0B:D1:5A:31:06:13 X509v3 Authority Key Identifier: keyid:74:E4:2D:E0:D1:AA:6F:A8:D0:54:D5:3E:F8:87:F8:4F:F5:1D:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/74E42DE0D1AA6FA8D054D53EF887F84FF51D7FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ef:3d:11:65:90:0e:f0:18:75:b4:54:cb:5f:f4:ae:4a:a0: f5:88:a6:b2:6c:d6:67:20:75:6f:9f:98:6e:5a:56:b2:3b:8b: 5b:61:81:49:6e:87:d9:f7:00:e5:3b:27:23:a8:ec:8c:72:91: 72:4e:6d:ae:1f:c9:28:5c:77:50:21:03:a3:2c:3e:68:52:89: 65:93:2d:9e:9d:1b:8b:2d:e6:7b:3e:2e:43:cf:90:5f:83:2d: 1c:4f:76:ee:24:b9:b4:62:24:df:86:18:4d:e4:44:cf:bf:7e: 49:c5:81:5e:fc:70:09:b4:43:45:44:23:3d:6b:e4:2d:6d:1f: 0a:0a:09:fd:70:32:30:3c:05:97:f0:8b:a9:9a:56:05:f7:05: 03:86:21:9b:19:14:26:22:19:9c:01:55:53:f6:a1:2a:0b:8f: 3c:95:c5:d7:59:ff:9a:a1:d0:68:41:f4:e2:2c:88:ec:a6:66: de:22:bf:15:64:8f:88:4c:8e:2b:83:bb:55:9b:99:05:1e:9f: 06:35:b0:57:2d:33:1e:35:c2:38:ee:6f:d6:e0:9a:41:3d:87: f6:a2:4a:72:98:5c:ad:dc:1b:82:6e:55:49:62:74:c8:57:67: 00:06:04:c3:6d:38:8f:c9:cb:2d:c6:62:be:ed:d5:7d:10:ec: 16:a9:53:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXD7ImjdbRr2leOyjaag8qE7A3OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZG NTFEN0ZFQTAeFw0yNjA5MjEwNTE4MTlaFw0yNjA5MjIwNjI3MTlaMDMxMTAvBgNV BAMTKDNEOThGNTAwRUY3MkExQUMyRURDOUMyMzM1MzYwQkQxNUEzMTA2MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrtt2btpEfdBQhigqSOGgJLyTr axej/mhdiMkYKS9hV9WhRoNHyGHB7W8lNUZlRrx9wqkssNB8HRybfx0DeYiXDpC7 MQTz32/JdizuaC4WBZD/9oDwq7ccXHKe0Krfnds7fRr27dlEdUbfN4ArHOoA8y/V XsSywby+DJK9V5v5m0A4TCigjfxbQuF1sBEUDPN43DdLCXnVVDcKRBiDs8r0WKYB lAN0Huq39PWWkqhUb/gJft/Q9xINuPtqehUTp33Plws/rZyB+uV3FMMFq1i3WqNS 6CfKQrcF7Gw2ObZpbyB61Dj7IkfIw+rr4fWJudjH9L1rcM5MgPVgtFj5RoOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZj1AO9yoawu3JwjNTYL0VoxBhMwHwYDVR0j BBgwFoAUdOQt4NGqb6jQVNU++If4T/Udf+owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUzYWM2NjctNGQ5ZS00OGQ3LWFmZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBE MUFBNkZBOEQwNTRENTNFRjg4N0Y4NEZGNTFEN0ZFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NEU0MkRFMEQxQUE2RkE4RDA1NEQ1M0VGODg3Rjg0RkY1MUQ3 RkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvNzRFNDJERTBEMUFBNkZBOEQwNTRENTNFRjg4N0Y4 NEZGNTFEN0ZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3vPRFlkA7wGHW0VMtf9K5KoPWIprJs1mcg dW+fmG5aVrI7i1thgUluh9n3AOU7JyOo7IxykXJOba4fyShcd1AhA6MsPmhSiWWT LZ6dG4st5ns+LkPPkF+DLRxPdu4kubRiJN+GGE3kRM+/fknFgV78cAm0Q0VEIz1r 5C1tHwoKCf1wMjA8BZfwi6maVgX3BQOGIZsZFCYiGZwBVVP2oSoLjzyVxddZ/5qh 0GhB9OIsiOymZt4ivxVkj4hMjiuDu1WbmQUenwY1sFctMx41wjjub9bgmkE9h/ai SnKYXK3cG4JuVUlidMhXZwAGBMNtOI/Jyy3GYr7t1X0Q7BapU3A= -----END CERTIFICATE-----Generated at Mon Sep 21 08:08:00 2026 by rpki-client