$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft File: 42955E8C3DC21355BF059E242A225C672E72495D.mft (raw, json) Hash identifier: YTDsuyZ8wHi5awX5Wx5HkGH78PizUiFkFiLQLnfSGmM= Subject key identifier: D1:8B:F8:D8:68:2A:CF:7A:11:EB:87:F3:39:07:E3:70:B8:BC:5D:29 Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D Certificate serial: 20C73247BB9372241FB38FE4C9F90DB6D7F6F754 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:18:41 +0000 Manifest this update: Thu 24 Sep 2026 14:13:41 +0000 Manifest next update: Fri 25 Sep 2026 17:45:41 +0000 Files and hashes: 1: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: VZHkvbzveP1h564Iy05+FNc1buJ+NUe/OEOtBSa02rk=) 2: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: 2CMQaUiQoQ303FG9N23TNjSo84VYynTfyliYe9EeUaQ=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w=) 4: 42955E8C3DC21355BF059E242A225C672E72495D.crl (hash: vKFOUnJO/jNTKlcITBfZiISUrdw5LNezZ8ri6EpUuPg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c7:32:47:bb:93:72:24:1f:b3:8f:e4:c9:f9:0d:b6:d7:f6:f7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D Validity Not Before: Sep 24 14:13:41 2026 GMT Not After : Sep 25 17:45:41 2026 GMT Subject: CN=D18BF8D8682ACF7A11EB87F33907E370B8BC5D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:14:74:7d:d2:cf:d6:35:25:91:46:6c:37: 64:b8:27:41:d3:72:91:95:99:64:f5:a2:a6:7d:01: ea:4d:d5:4c:8a:55:37:ff:ed:60:d7:32:60:01:64: a9:71:0c:dc:7b:b0:1d:74:a2:94:f8:68:bb:65:ae: 71:1b:7f:48:4b:b9:11:7c:1f:1c:f8:14:01:e7:35: 0a:09:8f:79:06:9b:85:d9:9d:8b:53:b4:1f:0b:4f: bc:c4:d6:6d:0c:33:5e:2a:0a:cb:d9:b1:2c:60:62: e1:8f:f0:f2:54:d5:0c:f7:21:58:4b:37:0e:00:50: 3e:f4:f5:5e:bd:97:fb:58:0f:13:04:a8:1e:57:6b: 78:4e:81:16:0a:6d:3b:5e:6f:98:e8:c0:8d:2e:8f: 72:74:e5:c6:e8:5c:e0:94:0e:35:6d:c5:03:67:13: da:7e:d6:33:b5:11:ec:95:ca:83:86:b8:b5:06:ad: ec:d2:d7:a1:bf:f5:09:69:72:0f:d8:93:26:c6:69: 22:13:c5:bf:6c:94:e3:e9:86:e5:e5:87:fb:8e:f2: ea:12:2d:bf:95:13:f0:6e:49:cc:b8:43:a9:03:94: a4:96:5e:91:02:3d:f7:35:44:e3:da:3a:f4:17:67: 6e:78:aa:b2:6d:a0:ac:de:c2:0b:c9:3f:cf:14:33: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8B:F8:D8:68:2A:CF:7A:11:EB:87:F3:39:07:E3:70:B8:BC:5D:29 X509v3 Authority Key Identifier: keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e5:2e:9e:e2:d6:a8:ae:dd:e9:23:fb:de:74:f4:f1:cd:8e: 46:4f:6d:e4:4e:ce:13:bb:50:95:e1:fd:f1:a9:91:4f:45:45: 70:60:cb:ff:18:b3:ca:8f:fe:b0:e1:df:39:4d:20:b9:b2:4b: 0b:fa:40:d8:67:d9:66:6c:de:9e:b4:59:0d:ab:a9:d7:1c:c2: 23:a0:f8:25:f6:11:0f:80:6f:6a:05:c1:db:bc:d2:24:d9:f0: cd:9d:4f:ee:58:06:fa:64:ee:c1:84:d7:ff:6c:8d:1b:90:df: 20:27:92:74:94:eb:b8:29:1e:ae:d4:69:eb:db:e7:0b:f7:67: c8:24:8a:fd:a9:13:cc:15:d9:0a:2d:cc:15:ab:fb:42:ce:71: 65:fb:6e:70:28:1f:e0:08:d7:32:9c:c4:3e:6f:6f:49:e4:12: ad:f9:c3:77:c6:df:c8:53:b8:c9:ba:48:d6:54:9e:6f:40:7c: 96:29:70:d3:81:45:b4:2b:40:b2:be:eb:db:29:6a:db:1d:4c: fa:58:23:3a:dd:2c:ac:8b:b2:bc:00:eb:b7:14:1f:79:4a:95: b2:73:d8:b8:b7:da:0e:45:84:18:23:55:97:b3:1d:a5:e5:36: 77:b8:b9:5b:62:1d:d6:1c:7a:f6:a0:ef:f8:b9:b7:f0:dd:de: a0:50:95:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMcyR7uTciQfs4/kyfkNttf291QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVDNjcy RTcyNDk1RDAeFw0yNjA5MjQxNDEzNDFaFw0yNjA5MjUxNzQ1NDFaMDMxMTAvBgNV BAMTKEQxOEJGOEQ4NjgyQUNGN0ExMUVCODdGMzM5MDdFMzcwQjhCQzVEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qhR0fdLP1jUlkUZsN2S4J0HT cpGVmWT1oqZ9AepN1UyKVTf/7WDXMmABZKlxDNx7sB10opT4aLtlrnEbf0hLuRF8 Hxz4FAHnNQoJj3kGm4XZnYtTtB8LT7zE1m0MM14qCsvZsSxgYuGP8PJU1Qz3IVhL Nw4AUD709V69l/tYDxMEqB5Xa3hOgRYKbTteb5jowI0uj3J05cboXOCUDjVtxQNn E9p+1jO1EeyVyoOGuLUGrezS16G/9Qlpcg/YkybGaSITxb9slOPphuXlh/uO8uoS Lb+VE/BuScy4Q6kDlKSWXpECPfc1ROPaOvQXZ254qrJtoKzewgvJP88UMw+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Yv42Ggqz3oR64fzOQfjcLi8XSkwHwYDVR0j BBgwFoAUQpVejD3CE1W/BZ4kKiJcZy5ySV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEyN2VhZmQtYTY3NC00NDM3LWFiZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMz REMyMTM1NUJGMDU5RTI0MkEyMjVDNjcyRTcyNDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjk1NUU4QzNEQzIxMzU1QkYwNTlFMjQyQTIyNUM2NzJFNzI0 OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVD NjcyRTcyNDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjlLp7i1qiu3ekj+9509PHNjkZPbeROzhO7 UJXh/fGpkU9FRXBgy/8Ys8qP/rDh3zlNILmySwv6QNhn2WZs3p60WQ2rqdccwiOg +CX2EQ+Ab2oFwdu80iTZ8M2dT+5YBvpk7sGE1/9sjRuQ3yAnknSU67gpHq7Uaevb 5wv3Z8gkiv2pE8wV2QotzBWr+0LOcWX7bnAoH+AI1zKcxD5vb0nkEq35w3fG38hT uMm6SNZUnm9AfJYpcNOBRbQrQLK+69spatsdTPpYIzrdLKyLsrwA67cUH3lKlbJz 2Li32g5FhBgjVZezHaXlNne4uVtiHdYcevag7/i5t/Dd3qBQlTg= -----END CERTIFICATE-----Generated at Fri Sep 25 06:22:44 2026 by rpki-client