$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft File: 4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json) Hash identifier: 4AAbak+7Lm+iE+LrFdUiQrEfA629kNAzim04D8x5b/k= Subject key identifier: D5:28:17:68:A2:2F:9B:83:9B:18:A6:1B:4C:7C:C1:77:63:68:D6:7B Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 5AEA28FCCCE2F8383D6D9821FEA6474EED9F1902 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:28:15 +0000 Manifest this update: Mon 21 Sep 2026 13:23:15 +0000 Manifest next update: Tue 22 Sep 2026 13:30:15 +0000 Files and hashes: 1: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=) 2: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=) 3: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: 5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=) 4: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=) 5: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=) 6: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: bLFH+0RNmOKmxc5Ok27Hr3vWIQy9dgf03JKuhLMcRW0=) 7: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=) 8: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=) 9: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=) 10: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=) 11: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=) 12: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=) 13: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ea:28:fc:cc:e2:f8:38:3d:6d:98:21:fe:a6:47:4e:ed:9f:19:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: Sep 21 13:23:15 2026 GMT Not After : Sep 22 13:30:15 2026 GMT Subject: CN=D5281768A22F9B839B18A61B4C7CC1776368D67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5b:f1:76:93:ba:ad:69:82:11:7d:39:ce:1b: 5e:84:b9:7c:07:7d:e3:0e:4a:ea:85:ae:08:e0:2e: 48:8d:96:e0:26:37:59:34:04:81:14:83:68:ea:e2: dc:28:dd:12:7b:c8:2f:d2:9c:c5:5e:27:72:4e:53: 79:34:27:5a:ef:3c:f8:e1:8b:1b:19:9e:c6:c6:4b: 0e:06:bc:02:86:84:91:68:97:95:a1:3a:6d:89:d5: a9:80:16:46:9c:20:fe:1f:dc:e7:2b:92:44:39:db: 99:8b:67:83:76:88:69:4c:2b:66:4e:bd:73:cf:78: df:39:ca:c1:fe:78:d1:ff:d6:d7:83:1b:3f:3b:20: e0:8b:59:df:54:29:06:fd:1d:6b:42:ae:d9:9e:f7: 5e:cb:5a:75:3c:7b:88:e4:2c:0b:3a:25:8b:2b:d2: 17:48:7f:02:89:ae:b2:57:7a:c4:e9:fe:a1:fa:af: 6f:b3:2f:18:39:a9:40:07:2c:35:dc:c5:ba:8a:90: af:c1:0f:29:9d:34:13:50:19:58:d2:80:24:6e:06: 60:aa:7a:6a:92:84:76:c5:93:31:43:0e:35:7f:6a: b9:01:34:e5:db:2f:a3:d8:98:84:ec:25:55:dc:1d: 89:80:8f:e5:6e:b8:b6:27:ff:a9:d4:cc:b3:f9:e7: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:28:17:68:A2:2F:9B:83:9B:18:A6:1B:4C:7C:C1:77:63:68:D6:7B X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:40:78:e3:12:3c:eb:98:12:66:03:65:d8:7d:03:83:fe:1e: a4:23:77:65:89:c8:6a:63:bd:50:ab:e4:8b:44:b5:61:b5:97: 8c:2c:b5:80:ac:95:46:b3:a0:fb:8c:0c:98:7d:9a:80:b4:a7: ca:25:91:07:5d:21:67:ec:fd:36:9d:3f:32:7b:c9:21:bd:00: 7a:71:65:65:0c:d6:78:5f:4e:02:ce:e0:e9:9c:bc:eb:82:de: 0d:64:bc:39:50:7f:09:ab:53:2c:08:ed:ce:9a:a4:b4:9d:49: 8b:46:17:b1:ff:1a:ac:3f:ad:83:1a:c3:3d:90:15:e9:a8:48: dd:f3:4e:74:a3:46:b2:4c:b3:a5:75:08:c0:6a:18:ee:89:5b: 0c:9a:e2:95:d1:92:d6:c9:cd:aa:ee:bf:e6:40:b3:ef:90:47: 13:ab:de:91:f7:73:2c:d8:54:16:1b:72:d2:33:b7:6e:f2:b8: d6:35:80:f3:74:f6:be:37:fe:cd:ce:16:ae:57:07:2a:4a:3d: c1:8e:c2:09:e4:71:66:4b:a7:ab:8c:41:a8:6c:ee:e8:e1:6f: ca:49:8d:b4:db:81:3f:f3:21:cf:33:96:4a:f4:4b:4c:8b:ec: 3e:85:d9:b4:c0:4c:ed:74:59:2c:9a:1a:28:4a:e9:6a:7c:bc: 5d:76:75:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWuoo/Mzi+Dg9bZgh/qZHTu2fGQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA5MjExMzIzMTVaFw0yNjA5MjIxMzMwMTVaMDMxMTAvBgNV BAMTKEQ1MjgxNzY4QTIyRjlCODM5QjE4QTYxQjRDN0NDMTc3NjM2OEQ2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyW/F2k7qtaYIRfTnOG16EuXwH feMOSuqFrgjgLkiNluAmN1k0BIEUg2jq4two3RJ7yC/SnMVeJ3JOU3k0J1rvPPjh ixsZnsbGSw4GvAKGhJFol5WhOm2J1amAFkacIP4f3OcrkkQ525mLZ4N2iGlMK2ZO vXPPeN85ysH+eNH/1teDGz87IOCLWd9UKQb9HWtCrtme917LWnU8e4jkLAs6JYsr 0hdIfwKJrrJXesTp/qH6r2+zLxg5qUAHLDXcxbqKkK/BDymdNBNQGVjSgCRuBmCq emqShHbFkzFDDjV/arkBNOXbL6PYmITsJVXcHYmAj+VuuLYn/6nUzLP55x9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1SgXaKIvm4ObGKYbTHzBd2No1nswHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMz MTM4NEVFMTAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlAeOMSPOuYEmYDZdh9A4P+HqQjd2WJyGpj vVCr5ItEtWG1l4wstYCslUazoPuMDJh9moC0p8olkQddIWfs/TadPzJ7ySG9AHpx ZWUM1nhfTgLO4OmcvOuC3g1kvDlQfwmrUywI7c6apLSdSYtGF7H/Gqw/rYMawz2Q FemoSN3zTnSjRrJMs6V1CMBqGO6JWwya4pXRktbJzaruv+ZAs++QRxOr3pH3cyzY VBYbctIzt27yuNY1gPN09r43/s3OFq5XBypKPcGOwgnkcWZLp6uMQahs7ujhb8pJ jbTbgT/zIc8zlkr0S0yL7D6F2bTATO10WSyaGihK6Wp8vF12dSs= -----END CERTIFICATE-----Generated at Mon Sep 21 17:34:35 2026 by rpki-client