$ rpki-client -vvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft File: 42955E8C3DC21355BF059E242A225C672E72495D.mft (raw, json) Hash identifier: f245IkFk05FKXL21Hykfbmom4Xd9qzsO/lSlXpfh+QA= Subject key identifier: 39:C3:69:06:C0:0C:60:DC:3F:86:81:5C:62:7E:0B:44:C0:27:5C:8A Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D Certificate serial: 59287CEB4D6B8AE833B50D1E97EFE612C5CCDA0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:09:04 +0000 Manifest this update: Tue 12 May 2026 14:04:04 +0000 Manifest next update: Wed 13 May 2026 14:25:04 +0000 Files and hashes: 1: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: 2CMQaUiQoQ303FG9N23TNjSo84VYynTfyliYe9EeUaQ=) 2: 42955E8C3DC21355BF059E242A225C672E72495D.crl (hash: ISnndXBVciKTswmWeA1045zaaZEniBS04G+ilQZyo6A=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w=) 4: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: VZHkvbzveP1h564Iy05+FNc1buJ+NUe/OEOtBSa02rk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:28:7c:eb:4d:6b:8a:e8:33:b5:0d:1e:97:ef:e6:12:c5:cc:da:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D Validity Not Before: May 12 14:04:04 2026 GMT Not After : May 13 14:25:04 2026 GMT Subject: CN=39C36906C00C60DC3F86815C627E0B44C0275C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:e8:6d:7b:c9:7b:09:ea:4e:51:8a:03:d4: a1:44:fe:ef:02:6b:95:a0:a9:19:e2:4d:a6:bc:32: 3a:46:70:cd:be:0f:21:ef:b3:e5:77:21:22:90:43: 31:02:d0:12:53:6c:24:99:7a:fa:2a:98:53:e1:af: b5:1b:64:6d:49:8a:3e:b5:6f:a4:61:87:43:2d:b8: d2:19:ac:47:2f:64:77:93:50:a4:75:3b:ee:07:42: 51:cd:89:01:c1:22:07:13:df:8e:b3:dd:9e:08:12: 4b:9b:e2:f3:ff:b2:6c:1c:da:76:db:28:6f:e3:f4: 86:9c:51:78:6e:a1:70:5e:e0:ad:17:89:9e:7e:9d: cd:58:f6:14:ad:2d:81:58:ed:62:58:7f:d5:06:b7: c7:14:4a:e5:f9:b3:3f:4a:1e:af:6d:2b:f0:24:66: 49:02:98:ba:0f:10:d7:90:9c:63:87:f7:e5:23:4d: 19:ad:25:0f:ec:71:62:8e:ea:17:5a:c1:81:85:bb: 30:d7:bf:16:99:82:c5:1a:4d:08:3c:e3:6c:8a:98: bc:ea:db:74:f1:9a:b6:ea:91:3c:c2:c6:78:c0:88: e4:64:b0:79:96:da:6a:94:07:e7:0f:0a:2b:1b:df: c7:a5:b5:36:9d:63:6d:ce:13:a4:bd:70:8a:10:52: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:69:06:C0:0C:60:DC:3F:86:81:5C:62:7E:0B:44:C0:27:5C:8A X509v3 Authority Key Identifier: keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:27:f5:b8:e8:63:65:b0:69:3c:7c:82:bd:d8:70:1c:64:eb: a4:22:1b:e0:44:10:82:60:c6:eb:19:ac:e2:76:e8:73:a8:bc: ab:14:38:55:7c:f7:46:55:b6:b0:2b:a4:5c:e1:f0:ff:bd:92: a3:3a:af:2a:9f:42:0e:6d:6e:2c:19:35:1b:f8:b7:99:2c:7e: d5:8a:a4:cc:aa:23:a3:24:55:80:21:f0:58:5e:ac:b3:c2:c5: d8:40:94:c7:0d:20:58:9d:bb:4d:71:eb:89:9a:cb:e5:92:f1: 94:69:ec:d9:73:03:60:76:6d:81:d1:6c:ad:f9:32:07:8f:04: 93:b7:d5:07:05:ab:4e:75:a8:f5:97:5a:7f:69:be:b5:c4:93: 88:28:af:ca:f2:1c:1d:9d:b4:6e:7c:37:7a:f9:84:58:20:56: d1:f1:9f:1d:24:df:95:21:ec:22:dc:aa:ab:d0:6d:ef:79:2f: 29:6a:f7:13:a6:37:a8:9f:60:d9:3d:28:45:24:d7:87:d2:ff: 91:96:24:ab:7e:50:36:35:f9:a8:fc:ff:e7:93:e8:45:fb:4b: 4a:86:7a:2b:1c:57:51:28:dc:1d:aa:af:8e:ae:a5:c6:28:0a: 43:97:18:d3:8d:f2:9e:0f:51:57:1f:56:72:de:5f:ac:65:dd: 46:a8:28:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSh8601riugztQ0el+/mEsXM2g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVDNjcy RTcyNDk1RDAeFw0yNjA1MTIxNDA0MDRaFw0yNjA1MTMxNDI1MDRaMDMxMTAvBgNV BAMTKDM5QzM2OTA2QzAwQzYwREMzRjg2ODE1QzYyN0UwQjQ0QzAyNzVDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9Ohte8l7CepOUYoD1KFE/u8C a5WgqRniTaa8MjpGcM2+DyHvs+V3ISKQQzEC0BJTbCSZevoqmFPhr7UbZG1Jij61 b6Rhh0MtuNIZrEcvZHeTUKR1O+4HQlHNiQHBIgcT346z3Z4IEkub4vP/smwc2nbb KG/j9IacUXhuoXBe4K0XiZ5+nc1Y9hStLYFY7WJYf9UGt8cUSuX5sz9KHq9tK/Ak ZkkCmLoPENeQnGOH9+UjTRmtJQ/scWKO6hdawYGFuzDXvxaZgsUaTQg842yKmLzq 23TxmrbqkTzCxnjAiORksHmW2mqUB+cPCisb38eltTadY23OE6S9cIoQUhjZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOcNpBsAMYNw/hoFcYn4LRMAnXIowHwYDVR0j BBgwFoAUQpVejD3CE1W/BZ4kKiJcZy5ySV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEyN2VhZmQtYTY3NC00NDM3LWFiZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMz REMyMTM1NUJGMDU5RTI0MkEyMjVDNjcyRTcyNDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjk1NUU4QzNEQzIxMzU1QkYwNTlFMjQyQTIyNUM2NzJFNzI0 OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVD NjcyRTcyNDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAn9bjoY2WwaTx8gr3YcBxk66QiG+BEEIJg xusZrOJ26HOovKsUOFV890ZVtrArpFzh8P+9kqM6ryqfQg5tbiwZNRv4t5ksftWK pMyqI6MkVYAh8FherLPCxdhAlMcNIFidu01x64may+WS8ZRp7NlzA2B2bYHRbK35 MgePBJO31QcFq051qPWXWn9pvrXEk4gor8ryHB2dtG58N3r5hFggVtHxnx0k35Uh 7CLcqqvQbe95Lylq9xOmN6ifYNk9KEUk14fS/5GWJKt+UDY1+aj8/+eT6EX7S0qG eiscV1Eo3B2qr46upcYoCkOXGNON8p4PUVcfVnLeX6xl3UaoKCM= -----END CERTIFICATE-----Generated at Wed May 13 01:35:55 2026 by rpki-client