$ rpki-client -vvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: vH+fRS9SeEmpAlHNxy3nqYq3EF314cchcV55dqScV2U= Subject key identifier: 4E:8D:DE:F9:E6:E1:A5:AB:84:57:1A:5B:6D:2F:83:3B:29:72:29:83 Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 29AE8B8C089E882B52D7FB2ACEBE9876140C0CB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:35:26 +0000 Manifest this update: Thu 23 Jul 2026 12:30:26 +0000 Manifest next update: Fri 24 Jul 2026 14:59:26 +0000 Files and hashes: 1: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: j6KNZibEPBXmDDdmvcdkOTy7mlmqEhrx8JfAmrZC5PQ=) 2: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) 3: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ae:8b:8c:08:9e:88:2b:52:d7:fb:2a:ce:be:98:76:14:0c:0c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: Jul 23 12:30:26 2026 GMT Not After : Jul 24 14:59:26 2026 GMT Subject: CN=4E8DDEF9E6E1A5AB84571A5B6D2F833B29722983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:08:d9:ed:d5:5b:5d:21:7c:05:5f:73:04:5e: f9:bd:b3:68:ba:92:e8:e4:dd:d2:bb:93:05:d8:66: 15:01:c0:32:38:f8:20:a8:ad:28:dc:0e:47:6f:e2: 44:d7:e7:0f:48:45:02:46:28:9d:54:5c:9e:b1:9e: 15:75:77:95:5f:b4:d2:ba:d0:fa:82:17:fc:7f:2b: 7a:34:75:40:4e:35:dd:9a:c5:12:19:7d:a9:d0:5e: 52:5f:79:f8:89:02:5d:ff:07:9c:07:af:21:b2:19: 2b:a6:8a:00:03:02:94:6c:25:25:9a:87:0c:91:e9: 33:c9:b0:01:27:fe:28:7c:82:20:54:73:89:b9:87: 39:dc:df:e6:8b:4c:aa:31:be:88:a1:fb:48:10:bb: 20:2c:b4:6e:08:c2:6b:d6:16:ec:d3:64:cc:32:5f: c0:61:6c:af:d5:91:5c:e0:2e:ea:80:87:cf:02:a8: fc:80:72:07:a5:fa:5c:4e:ea:ca:be:23:45:29:3e: 19:b2:c7:b7:3e:0e:4d:55:45:2d:da:ac:fc:e4:dd: 68:6d:39:c7:c2:dc:8e:a0:61:d2:cc:59:b5:4d:ff: 3f:5f:1f:e7:24:1a:91:51:9b:6a:05:8e:e0:4f:43: b8:09:c5:a8:25:83:ef:7e:80:59:cc:60:56:8b:2b: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8D:DE:F9:E6:E1:A5:AB:84:57:1A:5B:6D:2F:83:3B:29:72:29:83 X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:be:7a:3d:73:47:79:c3:cf:6d:52:90:ee:37:44:ba:00:bb: ce:5b:8a:17:6c:9e:6a:70:a6:14:7f:93:90:d7:b0:aa:a7:b8: 03:f2:68:87:56:b3:20:ef:dd:9e:6c:5f:b7:3d:a8:55:1f:44: 25:94:fa:10:30:ba:1c:fc:be:a5:da:37:9e:54:09:73:b8:4d: 20:1b:d3:c9:ee:15:e8:53:c6:c6:a0:82:c2:45:39:5a:25:7d: 8f:78:91:f2:f4:a8:7c:3e:9e:1e:40:44:0d:b5:0d:97:90:6c: e3:46:d1:3a:c5:bf:23:69:85:bf:21:39:6b:e4:02:5f:a3:68: 5e:21:56:a0:70:ea:3b:fe:e8:3f:b0:60:22:ed:48:73:8d:d1: d7:e7:92:69:54:87:d8:48:70:95:fa:e9:a8:91:b6:c5:63:b5: 12:36:3e:fa:17:09:8f:8c:1d:16:5a:bb:59:2a:5f:dc:31:ec: 76:71:f9:b8:54:0a:04:50:83:48:23:f5:e3:20:f7:42:df:43: 40:a3:c6:f3:3a:65:e9:95:56:7e:5e:09:7f:d7:8c:b5:13:87: 7b:e9:90:8a:4b:6f:b0:90:5b:61:38:17:84:e4:b7:61:47:77: 4e:28:3c:4d:da:5a:c4:52:73:a5:ce:41:2b:57:28:e8:4d:7d: 77:da:fe:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKa6LjAieiCtS1/sqzr6YdhQMDLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjA3MjMxMjMwMjZaFw0yNjA3MjQxNDU5MjZaMDMxMTAvBgNV BAMTKDRFOERERUY5RTZFMUE1QUI4NDU3MUE1QjZEMkY4MzNCMjk3MjI5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0CNnt1VtdIXwFX3MEXvm9s2i6 kujk3dK7kwXYZhUBwDI4+CCorSjcDkdv4kTX5w9IRQJGKJ1UXJ6xnhV1d5VftNK6 0PqCF/x/K3o0dUBONd2axRIZfanQXlJfefiJAl3/B5wHryGyGSumigADApRsJSWa hwyR6TPJsAEn/ih8giBUc4m5hznc3+aLTKoxvoih+0gQuyAstG4IwmvWFuzTZMwy X8BhbK/VkVzgLuqAh88CqPyAcgel+lxO6sq+I0UpPhmyx7c+Dk1VRS3arPzk3Wht OcfC3I6gYdLMWbVN/z9fH+ckGpFRm2oFjuBPQ7gJxaglg+9+gFnMYFaLK5OTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTo3e+ebhpauEVxpbbS+DOylyKYMwHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB++ej1zR3nDz21SkO43RLoAu85bihdsnmpw phR/k5DXsKqnuAPyaIdWsyDv3Z5sX7c9qFUfRCWU+hAwuhz8vqXaN55UCXO4TSAb 08nuFehTxsaggsJFOVolfY94kfL0qHw+nh5ARA21DZeQbONG0TrFvyNphb8hOWvk Al+jaF4hVqBw6jv+6D+wYCLtSHON0dfnkmlUh9hIcJX66aiRtsVjtRI2PvoXCY+M HRZau1kqX9wx7HZx+bhUCgRQg0gj9eMg90LfQ0CjxvM6ZemVVn5eCX/XjLUTh3vp kIpLb7CQW2E4F4Tkt2FHd04oPE3aWsRSc6XOQStXKOhNfXfa/jk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:48:08 2026 by rpki-client