$ rpki-client -vvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft File: 42955E8C3DC21355BF059E242A225C672E72495D.mft (raw, json) Hash identifier: z3d8FYCXHdAUS/QcPGHV72/ILMuEgCAGI211sxnEThg= Subject key identifier: B9:51:41:C3:BD:4C:17:E8:C2:A7:15:8D:A0:02:66:F4:74:0A:1B:7B Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D Certificate serial: 0BBB944ECFDE9BF430E5F6E1FD104CF862C7A8D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:36:43 +0000 Manifest this update: Thu 23 Jul 2026 17:31:43 +0000 Manifest next update: Fri 24 Jul 2026 19:44:43 +0000 Files and hashes: 1: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: VZHkvbzveP1h564Iy05+FNc1buJ+NUe/OEOtBSa02rk=) 2: 42955E8C3DC21355BF059E242A225C672E72495D.crl (hash: 0kxP1zvnsQzdcZRyWz8uOaYRheu2+dvM+oq2sdS+rwM=) 3: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: 2CMQaUiQoQ303FG9N23TNjSo84VYynTfyliYe9EeUaQ=) 4: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bb:94:4e:cf:de:9b:f4:30:e5:f6:e1:fd:10:4c:f8:62:c7:a8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D Validity Not Before: Jul 23 17:31:43 2026 GMT Not After : Jul 24 19:44:43 2026 GMT Subject: CN=B95141C3BD4C17E8C2A7158DA00266F4740A1B7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:ca:c3:35:b6:df:66:f0:3b:cb:b2:e5:02: ec:4b:da:9c:c4:b1:b9:a1:55:d8:eb:31:88:69:f4: 1b:68:99:d8:e3:bd:99:6b:12:5f:6b:88:e3:17:ab: 70:81:1e:4a:1e:a0:ba:a2:df:6f:50:14:60:c5:20: 34:6e:ac:2b:8e:ff:2b:2b:c7:a7:8b:c7:e8:a2:d8: b7:81:f2:f9:39:be:6a:4e:05:36:5c:01:5f:12:0a: 22:64:b9:23:53:75:db:b3:0e:46:0d:9b:6d:67:f1: 44:da:39:35:76:e9:28:bf:95:33:be:cb:66:b2:63: eb:55:a4:70:33:5f:7e:df:bd:41:52:36:27:bf:84: d4:f1:be:0a:67:ab:46:28:90:59:9e:fb:98:69:49: 18:2e:64:81:27:24:aa:97:43:0e:bc:65:46:2a:30: c9:62:e4:14:42:86:d2:86:54:72:08:57:94:8c:b9: dc:57:4c:4e:77:2f:e5:13:d4:5e:80:5c:c0:55:ad: 91:af:e4:e4:a3:a7:f8:9f:ff:35:53:9f:77:65:04: f2:d2:3c:90:c2:56:32:4b:77:85:dc:9c:7e:4a:fb: 38:09:a9:c3:5e:26:6e:b4:d6:c0:e9:18:9f:a3:69: eb:ac:6e:6f:fe:f8:81:d5:46:e5:aa:da:ac:40:c4: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:41:C3:BD:4C:17:E8:C2:A7:15:8D:A0:02:66:F4:74:0A:1B:7B X509v3 Authority Key Identifier: keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a7:60:ba:94:a1:9f:ee:2b:ea:9b:ee:2f:9d:1c:eb:19:1c: 14:60:6b:e0:34:50:ea:8a:a6:cf:c9:e3:f7:de:e7:5f:14:95: c7:ad:6e:4b:74:d4:51:7e:7e:b9:75:b9:93:f5:da:e3:be:f1: 5b:03:8f:63:f0:19:12:b1:12:aa:db:60:24:ea:b4:32:05:0f: 97:eb:8d:93:81:bc:68:07:36:61:8b:92:7b:e4:95:e1:09:2f: 0c:65:5b:f0:07:7b:6b:a7:77:a0:10:0e:fc:26:3b:8b:97:b7: 96:24:0b:86:b3:dd:eb:90:23:7c:30:81:5f:45:34:39:d4:73: c6:80:b0:7f:e0:7e:0b:09:e4:85:5b:74:e5:d4:48:39:d2:82: 38:60:68:23:ee:dd:8a:bb:60:b5:36:b2:0b:72:77:87:4e:7b: 1b:ea:b7:e6:ec:9a:d0:ad:8e:3d:b8:fc:e4:ec:d3:37:f2:3e: 52:07:3c:af:16:29:63:31:87:c1:b0:7d:55:cc:11:d6:a7:7b: cf:5e:1e:4b:4f:dc:e7:9c:fa:49:1a:ef:28:48:e0:f8:91:e5: 88:bc:0e:5b:06:36:e7:1e:d4:0d:17:06:b9:75:52:0f:58:b9: 69:d4:61:da:bb:b8:1b:8d:e2:47:0e:b8:98:a7:bb:bb:02:27: 77:7f:ee:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7uUTs/em/Qw5fbh/RBM+GLHqNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVDNjcy RTcyNDk1RDAeFw0yNjA3MjMxNzMxNDNaFw0yNjA3MjQxOTQ0NDNaMDMxMTAvBgNV BAMTKEI5NTE0MUMzQkQ0QzE3RThDMkE3MTU4REEwMDI2NkY0NzQwQTFCN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zcrDNbbfZvA7y7LlAuxL2pzE sbmhVdjrMYhp9BtomdjjvZlrEl9riOMXq3CBHkoeoLqi329QFGDFIDRurCuO/ysr x6eLx+ii2LeB8vk5vmpOBTZcAV8SCiJkuSNTdduzDkYNm21n8UTaOTV26Si/lTO+ y2ayY+tVpHAzX37fvUFSNie/hNTxvgpnq0YokFme+5hpSRguZIEnJKqXQw68ZUYq MMli5BRChtKGVHIIV5SMudxXTE53L+UT1F6AXMBVrZGv5OSjp/if/zVTn3dlBPLS PJDCVjJLd4XcnH5K+zgJqcNeJm601sDpGJ+jaeusbm/++IHVRuWq2qxAxBKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVFBw71MF+jCpxWNoAJm9HQKG3swHwYDVR0j BBgwFoAUQpVejD3CE1W/BZ4kKiJcZy5ySV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEyN2VhZmQtYTY3NC00NDM3LWFiZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMz REMyMTM1NUJGMDU5RTI0MkEyMjVDNjcyRTcyNDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjk1NUU4QzNEQzIxMzU1QkYwNTlFMjQyQTIyNUM2NzJFNzI0 OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVD NjcyRTcyNDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGynYLqUoZ/uK+qb7i+dHOsZHBRga+A0UOqK ps/J4/fe518Ulcetbkt01FF+frl1uZP12uO+8VsDj2PwGRKxEqrbYCTqtDIFD5fr jZOBvGgHNmGLknvkleEJLwxlW/AHe2und6AQDvwmO4uXt5YkC4az3euQI3wwgV9F NDnUc8aAsH/gfgsJ5IVbdOXUSDnSgjhgaCPu3Yq7YLU2sgtyd4dOexvqt+bsmtCt jj24/OTs0zfyPlIHPK8WKWMxh8GwfVXMEdane89eHktP3Oec+kka7yhI4PiR5Yi8 DlsGNuce1A0XBrl1Ug9YuWnUYdq7uBuN4kcOuJinu7sCJ3d/7q0= -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:48 2026 by rpki-client