$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft File: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft (raw, json) Hash identifier: S8pSCNuxluEhP4dUIuGdDYKkrDiKBmctEsyW5klpHbo= Subject key identifier: BC:68:0D:43:78:1E:00:64:29:C6:25:35:5D:26:85:F7:46:3A:24:14 Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB Certificate issuer: /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Certificate serial: 3ED6AE67FAC36C6B0335CAF6B649FB63383D0C94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:32:48 +0000 Manifest this update: Wed 23 Sep 2026 21:27:48 +0000 Manifest next update: Thu 24 Sep 2026 23:04:48 +0000 Files and hashes: 1: 323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (hash: anNDqws9MomLhYogS/yrt3t4/vBpWeVST2NjVPJXERI=) 2: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (hash: Y11dlVlt6+3oD4JtJmp7MCEET4NoNGtXuRA6xU0HxaQ=) 3: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl (hash: C6l70EZTI8AK8J3cnl2yHYAosAClxx5s90VzrtMOHHQ=) 4: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (hash: Wot4Fg65UHELPYSjNtGBiNTS+yl3LZ1iOPF4d5K6uzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d6:ae:67:fa:c3:6c:6b:03:35:ca:f6:b6:49:fb:63:38:3d:0c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Validity Not Before: Sep 23 21:27:48 2026 GMT Not After : Sep 24 23:04:48 2026 GMT Subject: CN=BC680D43781E006429C625355D2685F7463A2414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:37:72:c2:11:1d:8c:ea:90:9d:e4:6d:f8: 83:a8:b3:3c:eb:9e:9c:65:d5:5a:5d:5f:bc:93:4f: c0:7b:60:27:60:73:98:0f:86:54:7f:88:fa:88:da: 13:b7:2f:5c:ac:f0:ff:17:fb:68:39:cf:d5:eb:2a: 98:a7:64:4b:8f:be:07:4c:6b:58:75:0c:d8:5c:e8: cc:f9:01:f2:e7:5a:45:f4:63:1b:eb:5d:85:41:45: f9:50:6c:69:b7:13:a8:4a:9f:9e:a6:54:ad:bb:79: 8b:61:93:88:cf:3e:1c:23:09:f2:2d:8b:b5:a6:06: 20:c2:40:7b:23:0c:f1:99:f1:2e:13:a6:ce:02:fa: 62:02:41:7c:47:6d:c4:0d:36:1b:c0:9b:df:34:11: f0:1d:8f:25:c6:af:94:3a:91:a0:32:ef:fa:82:49: 3c:e4:48:ca:2f:61:34:9f:26:c7:ed:e0:60:86:f8: 35:51:c9:20:d1:b5:23:f3:40:0d:e3:3d:36:1c:71: fc:aa:5d:2d:76:9a:ef:af:58:ba:79:4f:9c:a6:12: 00:e2:c9:7a:09:2a:4d:25:f5:d0:7b:87:34:83:60: 1a:b6:87:1d:9e:a3:96:80:04:43:a3:b7:09:fb:14: 76:2d:a6:ae:a7:7c:3d:95:c7:67:61:13:71:b4:09: 41:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:68:0D:43:78:1E:00:64:29:C6:25:35:5D:26:85:F7:46:3A:24:14 X509v3 Authority Key Identifier: keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b1:3d:14:ab:a2:76:5c:2c:3e:b7:05:ac:61:7f:e3:00:e7: 39:ea:5c:aa:63:29:86:40:fd:94:79:1b:1b:bd:dd:d1:2d:30: a8:19:76:18:ed:b7:6b:a7:64:7b:94:88:e4:21:fc:b4:7c:1c: f7:9f:3d:1b:d5:60:ea:ef:2b:7d:04:05:0c:94:e1:59:93:b2: 58:d4:28:59:bb:df:0f:e6:a2:93:c8:12:76:f8:45:4d:2b:a1: a7:7f:13:80:ff:b8:49:29:2b:a0:7f:95:c1:5e:8b:ea:62:f3: 47:2a:95:c6:4f:9d:02:a3:e5:35:7c:a4:83:9a:53:82:1b:06: 70:6f:71:11:df:1b:f3:b9:da:3b:de:05:26:41:ae:0a:b8:06: a2:c8:9f:63:4b:e7:56:cc:22:e5:51:7b:7c:8c:20:fd:38:5c: ac:ec:67:12:b2:de:36:56:d3:62:94:80:0c:05:0a:8c:df:66: ca:c1:b9:ca:53:de:1a:57:cb:f8:0e:5a:c9:2c:4b:c1:c5:ac: 51:32:e8:43:e8:a3:74:6a:84:73:fe:69:55:91:fe:16:8f:5e: 0d:90:08:65:f1:fa:6d:dc:0a:3d:66:81:6f:51:e8:8e:97:68: 3d:d3:09:db:9d:f7:33:fa:cc:c7:a2:63:31:19:e1:62:c7:66: 03:c2:dc:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtauZ/rDbGsDNcr2tkn7Yzg9DJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFENEVC NjYwOUNGQjAeFw0yNjA5MjMyMTI3NDhaFw0yNjA5MjQyMzA0NDhaMDMxMTAvBgNV BAMTKEJDNjgwRDQzNzgxRTAwNjQyOUM2MjUzNTVEMjY4NUY3NDYzQTI0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoTdywhEdjOqQneRt+IOoszzr npxl1VpdX7yTT8B7YCdgc5gPhlR/iPqI2hO3L1ys8P8X+2g5z9XrKpinZEuPvgdM a1h1DNhc6Mz5AfLnWkX0YxvrXYVBRflQbGm3E6hKn56mVK27eYthk4jPPhwjCfIt i7WmBiDCQHsjDPGZ8S4Tps4C+mICQXxHbcQNNhvAm980EfAdjyXGr5Q6kaAy7/qC STzkSMovYTSfJsft4GCG+DVRySDRtSPzQA3jPTYccfyqXS12mu+vWLp5T5ymEgDi yXoJKk0l9dB7hzSDYBq2hx2eo5aABEOjtwn7FHYtpq6nfD2Vx2dhE3G0CUHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvGgNQ3geAGQpxiU1XSaF90Y6JBQwHwYDVR0j BBgwFoAUEELF9eryLakKBywU9+odTrZgnPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljZWY4YjAtYmE2NC00YzBjLThkZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVF QUYyMkRBOTBBMDcyQzE0RjdFQTFENEVCNjYwOUNGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDQyQzVGNUVBRjIyREE5MEEwNzJDMTRGN0VBMUQ0RUI2NjA5 Q0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljZWY4YjAtYmE2NC00YzBjLThk ZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFE NEVCNjYwOUNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuxPRSronZcLD63Baxhf+MA5znqXKpjKYZA /ZR5Gxu93dEtMKgZdhjtt2unZHuUiOQh/LR8HPefPRvVYOrvK30EBQyU4VmTsljU KFm73w/mopPIEnb4RU0road/E4D/uEkpK6B/lcFei+pi80cqlcZPnQKj5TV8pIOa U4IbBnBvcRHfG/O52jveBSZBrgq4BqLIn2NL51bMIuVRe3yMIP04XKzsZxKy3jZW 02KUgAwFCozfZsrBucpT3hpXy/gOWsksS8HFrFEy6EPoo3RqhHP+aVWR/haPXg2Q CGXx+m3cCj1mgW9R6I6XaD3TCdud9zP6zMeiYzEZ4WLHZgPC3Ig= -----END CERTIFICATE-----Generated at Thu Sep 24 04:27:22 2026 by rpki-client