$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft File: 4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json) Hash identifier: ZIXV5Q9VL4yGmsZiK6PIsMH6hRHYubX8d228U14DGS0= Subject key identifier: 53:49:6E:67:2B:FF:18:E2:48:81:92:89:FF:C4:B0:9D:0D:8A:D1:B3 Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 Certificate issuer: /CN=4202428F6F3C953C642F298719C5C35E169724A2 Certificate serial: 36F5C3819A2A035E3E2D1A04DCBDCB5B76C9AEE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:20:38 +0000 Manifest this update: Mon 21 Sep 2026 15:15:38 +0000 Manifest next update: Tue 22 Sep 2026 17:19:38 +0000 Files and hashes: 1: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=) 2: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: N1h4OwEiy/EQsCMNojMLdLkz01v6lSbKuMVcRsoxZ5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f5:c3:81:9a:2a:03:5e:3e:2d:1a:04:dc:bd:cb:5b:76:c9:ae:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2 Validity Not Before: Sep 21 15:15:38 2026 GMT Not After : Sep 22 17:19:38 2026 GMT Subject: CN=53496E672BFF18E248819289FFC4B09D0D8AD1B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:ef:d3:21:d7:08:fa:58:b9:6c:35:ff:26: 47:25:82:f0:74:58:e7:6a:5f:1e:99:be:fa:be:04: ab:ec:28:62:66:8f:66:a9:b0:d1:86:f0:39:cf:17: 9e:b6:7a:ee:f4:69:a5:98:c3:93:be:24:3b:7d:bc: d5:15:a0:50:bf:a1:d3:78:bc:f4:45:72:64:6f:40: 63:7a:a7:37:0e:1e:36:f8:a0:08:0a:29:00:0f:c9: 21:e5:b9:f9:67:5e:53:ba:71:20:26:66:f6:a5:e6: fe:1b:47:2e:47:1d:c1:b8:f7:4c:14:17:5f:8d:0d: a7:40:f8:52:08:28:6f:63:a4:23:4d:37:72:da:f6: 5e:4b:eb:e4:7f:0c:14:e8:58:07:b1:b2:b0:59:90: 2d:69:72:c6:d0:59:a5:f7:c0:1f:97:e5:64:84:8a: e3:8e:13:fe:a8:19:f4:ad:9c:61:14:f2:25:b2:0c: bb:d2:b8:45:6d:31:cd:3e:1c:b9:c2:8a:b6:13:75: b7:e6:36:da:cf:33:3c:f2:7b:bd:cc:2b:6c:b2:5c: 71:48:92:d7:a6:ee:a1:26:2c:f4:a5:25:7a:2e:14: 3c:17:d5:51:15:ff:23:61:0c:37:ca:93:9a:74:b7: 53:d4:c8:76:40:3a:18:69:65:5f:02:ca:eb:9d:78: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:49:6E:67:2B:FF:18:E2:48:81:92:89:FF:C4:B0:9D:0D:8A:D1:B3 X509v3 Authority Key Identifier: keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:52:b7:38:5a:e4:c1:85:b4:8a:75:39:9d:77:38:58:4d: 44:23:ab:9b:8b:9d:27:83:bb:0b:00:f9:af:2d:9f:6d:45:c9: f5:00:c2:1e:60:b1:f1:40:c3:e7:ff:70:e2:d5:cf:c5:da:33: 0c:6c:1e:b9:c1:f2:34:c4:d0:cc:85:1c:2b:cb:39:af:0a:8c: 93:40:c9:22:90:25:1d:c3:4d:a9:b3:36:81:28:08:95:92:3f: bd:f4:f3:4f:48:e1:1b:bd:dc:b4:e8:b9:98:7e:05:93:39:05: fb:63:3a:72:f0:4f:3d:a4:f7:64:dc:06:73:d2:d6:46:7f:6e: b0:6d:b3:83:2a:f4:5c:f0:58:55:6b:8d:17:69:94:df:fd:2e: 7a:b3:4c:f8:81:8b:af:3d:8d:3e:ae:9d:26:63:0c:58:1e:cc: d9:a8:48:de:04:6b:7b:f6:44:68:6d:72:f3:39:20:a0:8e:0f: 91:bc:12:90:b7:b2:f9:8b:ef:6c:fe:0d:90:3b:db:d4:74:c0: 01:ab:1a:80:d7:11:d8:db:d7:2e:98:8b:5d:db:cc:1b:a8:20: a6:9d:70:10:79:f6:fb:75:f3:55:39:e2:83:21:f0:a9:f2:3c: 50:7e:80:60:1a:49:e1:1c:81:81:d3:d2:94:aa:6e:0a:75:e7: b2:72:61:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvXDgZoqA14+LRoE3L3LW3bJruMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUx Njk3MjRBMjAeFw0yNjA5MjExNTE1MzhaFw0yNjA5MjIxNzE5MzhaMDMxMTAvBgNV BAMTKDUzNDk2RTY3MkJGRjE4RTI0ODgxOTI4OUZGQzRCMDlEMEQ4QUQxQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChF+/TIdcI+li5bDX/JkclgvB0 WOdqXx6Zvvq+BKvsKGJmj2apsNGG8DnPF562eu70aaWYw5O+JDt9vNUVoFC/odN4 vPRFcmRvQGN6pzcOHjb4oAgKKQAPySHluflnXlO6cSAmZval5v4bRy5HHcG490wU F1+NDadA+FIIKG9jpCNNN3La9l5L6+R/DBToWAexsrBZkC1pcsbQWaX3wB+X5WSE iuOOE/6oGfStnGEU8iWyDLvSuEVtMc0+HLnCirYTdbfmNtrPMzzye73MK2yyXHFI ktem7qEmLPSlJXouFDwX1VEV/yNhDDfKk5p0t1PUyHZAOhhpZV8CyuudeINxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU0luZyv/GOJIgZKJ/8SwnQ2K0bMwHwYDVR0j BBgwFoAUQgJCj288lTxkLymHGcXDXhaXJKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiODA4ZWItYzk4ZS00MDM2LWJlOWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2 RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUxNjk3MjRBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MjAyNDI4RjZGM0M5NTNDNjQyRjI5ODcxOUM1QzM1RTE2OTcy NEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMz NUUxNjk3MjRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJnUrc4WuTBhbSKdTmddzhYTUQjq5uLnSeD uwsA+a8tn21FyfUAwh5gsfFAw+f/cOLVz8XaMwxsHrnB8jTE0MyFHCvLOa8KjJNA ySKQJR3DTamzNoEoCJWSP730809I4Ru93LTouZh+BZM5BftjOnLwTz2k92TcBnPS 1kZ/brBts4Mq9FzwWFVrjRdplN/9LnqzTPiBi689jT6unSZjDFgezNmoSN4Ea3v2 RGhtcvM5IKCOD5G8EpC3svmL72z+DZA729R0wAGrGoDXEdjb1y6Yi13bzBuoIKad cBB59vt181U54oMh8KnyPFB+gGAaSeEcgYHT0pSqbgp157JyYQo= -----END CERTIFICATE-----Generated at Mon Sep 21 23:42:31 2026 by rpki-client