$ rpki-client -vvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft File: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft (raw, json) Hash identifier: 0CGs1zFDIGLm64fPkMj/PNRsF/K/4K0SRY/xCpUs0mc= Subject key identifier: A9:65:8F:28:5D:33:05:52:0D:82:F0:C8:42:7A:89:18:EB:E0:1C:E3 Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB Certificate issuer: /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Certificate serial: 7EF0A09B759E5619AB82C163F9447A977D79869C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:31:10 +0000 Manifest this update: Tue 12 May 2026 16:26:10 +0000 Manifest next update: Wed 13 May 2026 17:10:10 +0000 Files and hashes: 1: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (hash: Wot4Fg65UHELPYSjNtGBiNTS+yl3LZ1iOPF4d5K6uzM=) 2: 323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (hash: anNDqws9MomLhYogS/yrt3t4/vBpWeVST2NjVPJXERI=) 3: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (hash: Y11dlVlt6+3oD4JtJmp7MCEET4NoNGtXuRA6xU0HxaQ=) 4: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl (hash: kNCxKLP4ZSd5gHBCXigTFO9+skUo2pOifIdyEq2z4BA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f0:a0:9b:75:9e:56:19:ab:82:c1:63:f9:44:7a:97:7d:79:86:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Validity Not Before: May 12 16:26:10 2026 GMT Not After : May 13 17:10:10 2026 GMT Subject: CN=A9658F285D3305520D82F0C8427A8918EBE01CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:49:08:99:f6:73:ea:dc:b4:04:47:66:2f: 74:91:d4:27:19:8f:58:73:20:83:99:a0:d0:df:eb: c0:91:c9:d0:f0:67:a2:ea:61:70:1e:ef:17:6a:a4: 1b:06:1e:93:ea:87:cb:3e:d8:f6:b9:2d:2b:55:99: 57:44:af:99:da:14:38:26:a9:2a:34:56:bd:58:61: c7:7e:42:28:69:28:c8:2e:3f:f8:25:fe:e6:19:7b: 88:05:eb:9d:54:00:3f:eb:34:a2:d0:0d:bb:b4:c6: ae:33:df:c5:f7:62:94:83:c5:2e:be:31:3b:ca:e2: 7f:99:8e:dd:9a:d4:44:72:0d:d8:b3:8b:d3:62:e6: 1b:ad:80:a7:f3:71:e7:db:6e:33:e0:a7:47:d4:bc: 88:17:ce:4b:8d:3b:4e:08:50:5f:27:0f:45:80:ab: 07:eb:13:eb:1b:c1:2b:ce:22:b6:ba:34:58:05:a1: ab:32:15:d7:21:8e:df:73:f5:b4:52:07:73:1c:f8: 8a:00:93:01:84:20:ca:d8:8b:f3:dd:98:24:9f:ed: 43:d5:e4:60:d5:bc:7c:b1:f6:90:ae:3b:d2:45:44: 79:5d:cf:12:15:3c:6f:41:74:38:fb:a5:98:64:13: 5d:96:6b:09:d6:98:97:e3:7c:cd:69:52:ac:7d:a1: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:8F:28:5D:33:05:52:0D:82:F0:C8:42:7A:89:18:EB:E0:1C:E3 X509v3 Authority Key Identifier: keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1a:42:75:9d:ad:62:22:45:76:b4:36:2b:05:d1:e6:38:04: 29:55:e0:66:be:39:d8:6d:53:f5:82:f4:6e:39:5e:a7:21:09: 33:9a:ab:d4:49:b2:b3:cb:8b:1c:94:42:6b:0a:31:f4:0c:97: 47:6f:6a:7e:c5:b8:34:6e:11:99:0a:b4:cf:6f:a4:b1:65:b8: f6:33:6e:08:8c:b8:51:39:a4:f4:5f:ad:08:a5:bd:80:0c:a3: 2a:83:62:6a:ac:0f:bb:70:7e:9e:34:78:ca:83:95:ce:b1:cc: f1:bb:33:5a:15:09:13:b6:2e:e3:5f:ad:02:d3:2c:79:2c:a2: 60:3a:61:f5:01:f8:d9:7b:d6:a8:aa:f0:e5:07:fc:96:f2:0b: 51:05:ff:4e:c1:d0:7f:97:c6:bd:be:ff:81:6b:d9:74:52:88: 10:cc:be:76:60:9f:97:75:06:88:62:be:88:04:6e:46:cc:a9: 40:24:1f:24:6a:8b:f5:c2:ae:ef:37:cd:f0:fd:fe:11:f3:3c: be:46:5a:08:26:ea:bd:72:9b:f3:8d:94:4a:15:85:98:9d:4f: 47:c3:23:28:32:12:c9:00:27:7f:01:3f:4f:02:99:32:5e:fe: 3d:3f:5f:eb:72:50:21:8f:55:74:bb:c9:1a:a7:84:2a:d8:89: 79:4b:f6:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvCgm3WeVhmrgsFj+UR6l315hpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFENEVC NjYwOUNGQjAeFw0yNjA1MTIxNjI2MTBaFw0yNjA1MTMxNzEwMTBaMDMxMTAvBgNV BAMTKEE5NjU4RjI4NUQzMzA1NTIwRDgyRjBDODQyN0E4OTE4RUJFMDFDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk10kImfZz6ty0BEdmL3SR1CcZ j1hzIIOZoNDf68CRydDwZ6LqYXAe7xdqpBsGHpPqh8s+2Pa5LStVmVdEr5naFDgm qSo0Vr1YYcd+QihpKMguP/gl/uYZe4gF651UAD/rNKLQDbu0xq4z38X3YpSDxS6+ MTvK4n+Zjt2a1ERyDdizi9Ni5hutgKfzcefbbjPgp0fUvIgXzkuNO04IUF8nD0WA qwfrE+sbwSvOIra6NFgFoasyFdchjt9z9bRSB3Mc+IoAkwGEIMrYi/PdmCSf7UPV 5GDVvHyx9pCuO9JFRHldzxIVPG9BdDj7pZhkE12WawnWmJfjfM1pUqx9oYFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqWWPKF0zBVINgvDIQnqJGOvgHOMwHwYDVR0j BBgwFoAUEELF9eryLakKBywU9+odTrZgnPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljZWY4YjAtYmE2NC00YzBjLThkZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVF QUYyMkRBOTBBMDcyQzE0RjdFQTFENEVCNjYwOUNGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDQyQzVGNUVBRjIyREE5MEEwNzJDMTRGN0VBMUQ0RUI2NjA5 Q0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljZWY4YjAtYmE2NC00YzBjLThk ZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFE NEVCNjYwOUNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQaQnWdrWIiRXa0NisF0eY4BClV4Ga+Odht U/WC9G45XqchCTOaq9RJsrPLixyUQmsKMfQMl0dvan7FuDRuEZkKtM9vpLFluPYz bgiMuFE5pPRfrQilvYAMoyqDYmqsD7twfp40eMqDlc6xzPG7M1oVCRO2LuNfrQLT LHksomA6YfUB+Nl71qiq8OUH/JbyC1EF/07B0H+Xxr2+/4Fr2XRSiBDMvnZgn5d1 BohivogEbkbMqUAkHyRqi/XCru83zfD9/hHzPL5GWggm6r1ym/ONlEoVhZidT0fD IygyEskAJ38BP08CmTJe/j0/X+tyUCGPVXS7yRqnhCrYiXlL9nA= -----END CERTIFICATE-----Generated at Wed May 13 00:31:33 2026 by rpki-client