$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: sqSOngIkmJsFElv4EUSSI9uVfAZmgs9rPrcPujjBMqM= Subject key identifier: AB:08:3C:ED:14:28:26:C6:14:99:3C:95:F7:AA:C3:6E:C9:73:7D:8B Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 6D32162BF3FDB3667F1C48E9BCFB53D8200D026D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:22:20 +0000 Manifest this update: Thu 24 Sep 2026 09:17:20 +0000 Manifest next update: Fri 25 Sep 2026 13:19:20 +0000 Files and hashes: 1: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) 2: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: /wmKfA+oe4drjdjYl//aFfnxOztbjUutPCksuEMrvZQ=) 3: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:32:16:2b:f3:fd:b3:66:7f:1c:48:e9:bc:fb:53:d8:20:0d:02:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: Sep 24 09:17:20 2026 GMT Not After : Sep 25 13:19:20 2026 GMT Subject: CN=AB083CED142826C614993C95F7AAC36EC9737D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c9:ef:81:3e:0c:fc:e6:c8:44:cd:f5:d9:a4: 14:23:17:ac:aa:7f:a5:df:7d:c3:f7:36:72:aa:e8: 51:5d:cb:ea:a6:b8:bc:be:75:f7:6b:5c:97:e3:5f: 61:d6:fa:5f:0f:0d:43:f5:75:02:c2:95:ce:76:2a: 33:b4:9f:f7:b2:c3:2a:01:7e:c3:7f:9b:ab:e9:9b: 53:55:24:87:d4:41:f6:14:44:c6:1a:56:82:8c:a3: 7c:a3:b4:cd:d9:31:d5:52:59:a1:7a:a5:53:d4:61: c9:25:90:46:ff:9f:94:56:55:01:6f:1c:ff:b0:38: ab:ce:14:7c:1e:c0:a6:ff:ca:6e:b3:c7:a9:37:29: 63:99:07:c1:a8:5b:c6:5c:cc:09:dd:6b:76:a2:a1: c1:91:27:55:e9:04:5a:0a:3d:4c:a4:5f:f0:c2:19: 61:8c:9f:27:64:6c:d2:aa:d9:1e:3f:23:04:bb:67: be:c9:c6:35:34:3a:bd:c0:fc:5c:e8:81:48:2d:5a: ad:b7:85:49:0d:c2:fd:ce:7d:6c:c9:b2:6f:e1:56: fd:79:2f:d3:85:ed:57:1c:0c:3d:79:1d:7e:c5:63: 4c:0d:4e:ca:53:83:10:2a:37:4b:fc:b5:3e:be:96: 78:66:53:b8:b9:e9:2b:fa:ae:0d:ab:54:bf:b6:81: 7f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:08:3C:ED:14:28:26:C6:14:99:3C:95:F7:AA:C3:6E:C9:73:7D:8B X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:01:ef:83:5e:83:fa:f8:32:b2:a3:cc:04:dc:84:fe:17:ac: 5b:cc:2a:6b:14:eb:1a:09:f5:52:e0:fc:25:fb:32:ea:45:f2: 1e:83:f3:12:e7:ef:67:e4:10:e1:55:0d:76:56:a1:9f:db:30: c4:3e:ae:cc:9d:f3:ca:b4:44:3d:c1:17:2d:67:df:3d:d8:f8: 01:11:c6:d5:9f:0a:08:69:c6:58:7b:5f:98:8d:e5:01:36:e7: a0:a8:7b:c7:ce:64:d5:29:1c:1c:0b:03:70:76:c0:9d:39:ac: 73:13:ba:7b:ca:77:f5:31:fa:99:04:6c:be:21:4f:25:fb:be: f1:31:22:8b:41:38:cb:3c:f1:72:e5:b5:5a:ef:dd:70:3e:bf: 72:af:f0:6e:97:a6:96:76:4a:0d:a7:61:82:91:a8:d4:26:3c: 73:a3:92:d4:bb:d0:dc:e0:b6:29:09:0a:18:3c:aa:0e:5a:97: 4c:de:c3:7a:73:53:e2:5a:4e:f3:05:4d:8c:89:60:0d:1f:6e: d2:b4:f0:f8:d4:01:50:2d:ab:62:bf:8e:24:f0:8c:5e:f7:50: 56:5e:27:29:9b:f8:69:2c:10:fd:9d:d6:62:2e:2c:55:50:34: 82:66:5e:fd:a3:75:a8:09:46:66:68:eb:ba:f8:9e:83:ef:19: 4a:7f:80:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTIWK/P9s2Z/HEjpvPtT2CANAm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjA5MjQwOTE3MjBaFw0yNjA5MjUxMzE5MjBaMDMxMTAvBgNV BAMTKEFCMDgzQ0VEMTQyODI2QzYxNDk5M0M5NUY3QUFDMzZFQzk3MzdEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRye+BPgz85shEzfXZpBQjF6yq f6XffcP3NnKq6FFdy+qmuLy+dfdrXJfjX2HW+l8PDUP1dQLClc52KjO0n/eywyoB fsN/m6vpm1NVJIfUQfYURMYaVoKMo3yjtM3ZMdVSWaF6pVPUYcklkEb/n5RWVQFv HP+wOKvOFHwewKb/ym6zx6k3KWOZB8GoW8ZczAnda3aiocGRJ1XpBFoKPUykX/DC GWGMnydkbNKq2R4/IwS7Z77JxjU0Or3A/FzogUgtWq23hUkNwv3OfWzJsm/hVv15 L9OF7VccDD15HX7FY0wNTspTgxAqN0v8tT6+lnhmU7i56Sv6rg2rVL+2gX/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqwg87RQoJsYUmTyV96rDbslzfYswHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4B74Neg/r4MrKjzATchP4XrFvMKmsU6xoJ 9VLg/CX7MupF8h6D8xLn72fkEOFVDXZWoZ/bMMQ+rsyd88q0RD3BFy1n3z3Y+AER xtWfCghpxlh7X5iN5QE256Coe8fOZNUpHBwLA3B2wJ05rHMTunvKd/Ux+pkEbL4h TyX7vvExIotBOMs88XLltVrv3XA+v3Kv8G6XppZ2Sg2nYYKRqNQmPHOjktS70Nzg tikJChg8qg5al0zew3pzU+JaTvMFTYyJYA0fbtK08PjUAVAtq2K/jiTwjF73UFZe Jymb+GksEP2d1mIuLFVQNIJmXv2jdagJRmZo67r4noPvGUp/gJk= -----END CERTIFICATE-----Generated at Thu Sep 24 14:41:44 2026 by rpki-client