$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft File: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft (raw, json) Hash identifier: BnAqWCF8Rid6QUl0Tz0OuHguCDe5Z2RYs/JIPefGY/Y= Subject key identifier: 8F:00:C5:CF:4F:55:96:69:53:E2:54:9C:65:C4:E9:13:98:F6:2A:88 Authority key identifier: 74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA Certificate issuer: /CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Certificate serial: 65EC1443C35ED44827FDB6A55890F94EF226E15B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:24:26 +0000 Manifest this update: Mon 21 Sep 2026 22:19:26 +0000 Manifest next update: Tue 22 Sep 2026 22:56:26 +0000 Files and hashes: 1: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 2fSfsDWFAVE0WXc/cYm1cwmYQpM+GCRAEbjcX25Cqow=) 2: 742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl (hash: N0H88c8M+bYesZ/uujVxILhz1i6CiafAUNYjR1UTIUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ec:14:43:c3:5e:d4:48:27:fd:b6:a5:58:90:f9:4e:f2:26:e1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742B2CA940D91E6FA38A4468F89C390CA2BDD2CA Validity Not Before: Sep 21 22:19:26 2026 GMT Not After : Sep 22 22:56:26 2026 GMT Subject: CN=8F00C5CF4F55966953E2549C65C4E91398F62A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:33:75:97:21:a7:84:c5:15:b1:e5:d6:4f:f2: 67:9c:15:cd:11:73:ad:a5:ce:ff:44:da:ca:8e:f1: f1:99:d6:29:a5:04:ea:93:12:72:9e:86:f4:ad:f4: 67:b0:38:33:3e:7b:86:5b:b1:87:0c:8a:5e:b6:ee: a2:59:ff:8d:15:94:30:58:f5:d0:dd:91:cf:f6:38: 63:e5:2e:65:68:c5:59:ec:4c:fc:0d:60:f0:b4:d1: 65:ba:6d:37:68:c9:de:55:bc:21:a9:0f:8a:9d:04: d4:38:41:49:46:41:0a:9a:9f:72:7c:8c:e9:67:cb: d3:7a:7a:fc:00:34:38:9c:52:69:36:bd:d1:95:59: 85:37:ca:43:ba:f8:0f:db:c7:1c:7c:2c:73:5e:79: bb:be:88:44:d9:66:18:d1:6b:40:9d:38:bc:2c:c8: d9:47:b6:d2:71:91:44:85:47:1c:18:f6:7a:9b:63: 5d:cd:0f:9d:a6:25:67:0e:e5:6c:8f:60:1a:a0:1c: a2:54:34:1b:6b:9a:1a:f5:93:4c:1b:0a:a2:fe:b4: d7:d5:97:83:ef:92:c5:3f:1b:18:91:0e:3b:63:16: b7:f2:bc:93:da:bf:e1:1b:5a:d9:6e:02:b1:1e:09: cd:cc:99:91:eb:23:5c:93:41:d9:a6:4f:82:fa:e3: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:00:C5:CF:4F:55:96:69:53:E2:54:9C:65:C4:E9:13:98:F6:2A:88 X509v3 Authority Key Identifier: keyid:74:2B:2C:A9:40:D9:1E:6F:A3:8A:44:68:F8:9C:39:0C:A2:BD:D2:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/742B2CA940D91E6FA38A4468F89C390CA2BDD2CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8e:5e:83:7b:55:6b:35:74:2e:8f:ee:d3:50:7a:8b:1d:f1: 7f:8a:b4:4a:a7:11:c6:85:73:c4:82:93:bf:4b:ad:24:42:b2: be:5d:21:9e:d1:98:76:9f:0f:e9:55:ed:dd:66:51:13:cd:a4: 7f:9d:f7:19:d0:b1:20:d7:04:6f:b0:15:95:ec:5e:88:5d:43: 7e:11:45:f8:49:c9:2d:5f:34:94:a5:cf:cc:b1:c5:13:2b:ad: 36:32:40:d8:d4:9d:4b:a6:51:8b:73:6e:4f:d3:3b:1e:8b:52: 9e:3d:1b:03:2a:4e:95:25:66:ea:36:47:c4:dc:f0:eb:20:4b: e5:18:e0:a9:cc:fe:01:1e:9c:b1:bd:23:79:b5:a4:30:f4:47: 62:87:50:b3:64:c8:f1:ad:5d:49:ec:13:a9:1e:a2:5e:4d:47: 21:96:7d:42:cf:d3:40:b3:1a:29:16:cb:cf:2f:cf:0d:3d:2b: fb:a8:ec:24:f9:2d:ef:40:a4:39:2e:48:bb:1b:30:17:10:43: 19:4a:9c:77:f3:d3:e4:e7:12:ff:cb:4b:1e:b9:55:12:ee:5d: 29:5a:c8:a3:f8:d1:a3:30:e8:39:49:81:39:3e:7a:d0:41:3b: c1:0f:f2:8b:71:24:6a:bf:cd:c0:3d:49:65:15:cb:71:55:27: 5b:43:e1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZewUQ8Ne1Egn/balWJD5TvIm4VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyQjJDQTk0MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5MENB MkJERDJDQTAeFw0yNjA5MjEyMjE5MjZaFw0yNjA5MjIyMjU2MjZaMDMxMTAvBgNV BAMTKDhGMDBDNUNGNEY1NTk2Njk1M0UyNTQ5QzY1QzRFOTEzOThGNjJBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtM3WXIaeExRWx5dZP8mecFc0R c62lzv9E2sqO8fGZ1imlBOqTEnKehvSt9GewODM+e4ZbsYcMil627qJZ/40VlDBY 9dDdkc/2OGPlLmVoxVnsTPwNYPC00WW6bTdoyd5VvCGpD4qdBNQ4QUlGQQqan3J8 jOlny9N6evwANDicUmk2vdGVWYU3ykO6+A/bxxx8LHNeebu+iETZZhjRa0CdOLws yNlHttJxkUSFRxwY9nqbY13ND52mJWcO5WyPYBqgHKJUNBtrmhr1k0wbCqL+tNfV l4PvksU/GxiRDjtjFrfyvJPav+EbWtluArEeCc3MmZHrI1yTQdmmT4L64xSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwDFz09VlmlT4lScZcTpE5j2KogwHwYDVR0j BBgwFoAUdCssqUDZHm+jikRo+Jw5DKK90sowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc4YzNjNjktMzZkMC00YWU4LWE4ZGYtNjNkM2Y0NGNjZDhkLzAvNzQyQjJDQTk0 MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5MENBMkJERDJDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NDJCMkNBOTQwRDkxRTZGQTM4QTQ0NjhGODlDMzkwQ0EyQkRE MkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNzQyQjJDQTk0MEQ5MUU2RkEzOEE0NDY4Rjg5QzM5 MENBMkJERDJDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqOXoN7VWs1dC6P7tNQeosd8X+KtEqnEcaF c8SCk79LrSRCsr5dIZ7RmHafD+lV7d1mURPNpH+d9xnQsSDXBG+wFZXsXohdQ34R RfhJyS1fNJSlz8yxxRMrrTYyQNjUnUumUYtzbk/TOx6LUp49GwMqTpUlZuo2R8Tc 8OsgS+UY4KnM/gEenLG9I3m1pDD0R2KHULNkyPGtXUnsE6keol5NRyGWfULP00Cz GikWy88vzw09K/uo7CT5Le9ApDkuSLsbMBcQQxlKnHfz0+TnEv/LSx65VRLuXSla yKP40aMw6DlJgTk+etBBO8EP8otxJGq/zcA9SWUVy3FVJ1tD4UQ= -----END CERTIFICATE-----Generated at Tue Sep 22 16:15:43 2026 by rpki-client