$ rpki-client -vvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: 83ZumVIl54fSmxfbpjqnPIcW5LoWL4JOlIHspm/oDJY= Subject key identifier: 02:1F:9F:BE:36:55:64:A8:9F:F8:F5:35:F9:E1:6A:4A:FE:B3:E3:49 Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 0E7BB110D3DDEC594718890B752925F4117B557C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:32:28 +0000 Manifest this update: Tue 12 May 2026 06:27:28 +0000 Manifest next update: Wed 13 May 2026 09:54:28 +0000 Files and hashes: 1: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: 5O1LSkZAyXnjqunXpHksfmxaztBS8A9wo0dS1CMvM1g=) 2: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7b:b1:10:d3:dd:ec:59:47:18:89:0b:75:29:25:f4:11:7b:55:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: May 12 06:27:28 2026 GMT Not After : May 13 09:54:28 2026 GMT Subject: CN=021F9FBE365564A89FF8F535F9E16A4AFEB3E349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:dc:3e:38:cf:61:67:d6:a4:71:75:19:59: 67:9d:73:03:8e:22:37:ae:21:aa:c6:c5:e0:7d:ad: 19:96:00:3b:f7:95:1d:eb:67:77:7f:53:9d:48:30: 83:e9:47:07:24:ff:8d:af:2a:4a:da:1a:37:cd:51: 1a:bb:c2:7c:8d:1b:52:b8:10:04:12:cf:7d:f0:4f: eb:18:17:74:25:f8:73:64:5a:e0:47:9e:ef:25:e8: 61:da:70:93:82:20:06:1d:9e:29:f5:75:13:ff:3c: 83:f9:1c:10:3a:d7:c9:d8:10:54:6b:7d:4d:7f:94: b7:c5:01:9f:d2:dd:2a:8a:5f:3d:bf:e3:50:d0:7d: 73:8e:14:cb:83:d4:c6:76:13:40:7c:cd:da:1c:86: 97:86:04:0d:48:24:d5:71:95:9f:7c:e1:8b:31:1b: 3d:49:af:5c:17:1c:be:f5:ec:4d:c0:b8:98:88:51: 95:02:ea:8c:ed:18:5d:f6:e4:de:c8:24:6c:39:03: ca:40:76:f1:66:bc:2a:93:73:bb:c0:49:31:47:da: 2f:54:b6:40:8b:ad:22:fb:6d:f7:45:90:c4:d1:18: d0:b2:53:5b:c5:d4:5b:eb:a7:8c:54:df:1b:5b:87: dc:1c:1f:46:19:f1:62:92:83:57:cd:4b:40:35:8d: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1F:9F:BE:36:55:64:A8:9F:F8:F5:35:F9:E1:6A:4A:FE:B3:E3:49 X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7d:c3:61:ba:93:81:b1:be:2e:89:2b:d7:4c:7f:c5:b0:af: dc:ed:08:e4:7a:44:d6:a9:31:24:c0:f8:9d:6b:8f:23:c3:d6: 0e:b3:38:a0:63:eb:57:24:ff:ed:20:12:a4:c4:c8:9d:a2:bf: b7:37:2f:f3:51:92:89:67:eb:8b:57:f4:93:58:b5:b3:6d:12: 05:4f:a3:d5:d1:0a:2a:f9:a2:a3:f9:3f:35:b8:e1:be:f6:a7: a4:04:d2:24:db:1f:39:1a:b6:c8:0d:c1:ac:c8:a1:4c:24:2c: ea:f5:8f:34:76:21:5f:2d:70:28:d4:e1:0a:42:e0:7d:52:75: e7:d6:b3:fe:94:20:0f:3d:ac:fc:0b:1e:99:38:5f:ea:ce:8e: a2:d2:e3:e4:b3:16:c7:3c:ab:53:91:04:c2:1a:d0:02:c2:9d: f0:21:35:a9:59:82:8e:a2:2f:08:69:89:b6:ce:76:87:95:e2: f4:3e:b7:a9:ae:d1:0c:48:04:95:b1:e3:cb:fb:09:b5:7b:63: e8:9c:91:2a:fb:d0:a8:fb:e7:2b:cf:bf:35:3d:60:37:32:16: ba:ee:54:26:2b:24:63:61:4c:85:d5:eb:72:c4:bb:d8:6d:22: ef:99:61:b2:f7:fc:86:43:23:91:2a:50:c3:13:49:33:2c:bc: de:d6:53:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnuxENPd7FlHGIkLdSkl9BF7VXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjA1MTIwNjI3MjhaFw0yNjA1MTMwOTU0MjhaMDMxMTAvBgNV BAMTKDAyMUY5RkJFMzY1NTY0QTg5RkY4RjUzNUY5RTE2QTRBRkVCM0UzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1dw+OM9hZ9akcXUZWWedcwOO IjeuIarGxeB9rRmWADv3lR3rZ3d/U51IMIPpRwck/42vKkraGjfNURq7wnyNG1K4 EAQSz33wT+sYF3Ql+HNkWuBHnu8l6GHacJOCIAYdnin1dRP/PIP5HBA618nYEFRr fU1/lLfFAZ/S3SqKXz2/41DQfXOOFMuD1MZ2E0B8zdochpeGBA1IJNVxlZ984Ysx Gz1Jr1wXHL717E3AuJiIUZUC6oztGF325N7IJGw5A8pAdvFmvCqTc7vASTFH2i9U tkCLrSL7bfdFkMTRGNCyU1vF1Fvrp4xU3xtbh9wcH0YZ8WKSg1fNS0A1jXgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAh+fvjZVZKif+PU1+eFqSv6z40kwHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADN9w2G6k4Gxvi6JK9dMf8Wwr9ztCOR6RNap MSTA+J1rjyPD1g6zOKBj61ck/+0gEqTEyJ2iv7c3L/NRkoln64tX9JNYtbNtEgVP o9XRCir5oqP5PzW44b72p6QE0iTbHzkatsgNwazIoUwkLOr1jzR2IV8tcCjU4QpC 4H1SdefWs/6UIA89rPwLHpk4X+rOjqLS4+SzFsc8q1ORBMIa0ALCnfAhNalZgo6i LwhpibbOdoeV4vQ+t6mu0QxIBJWx48v7CbV7Y+ickSr70Kj75yvPvzU9YDcyFrru VCYrJGNhTIXV63LEu9htIu+ZYbL3/IZDI5EqUMMTSTMsvN7WU3Y= -----END CERTIFICATE-----Generated at Wed May 13 01:11:07 2026 by rpki-client