$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft File: 42955E8C3DC21355BF059E242A225C672E72495D.mft (raw, json) Hash identifier: OfPukkiSd4umuYxNoiGWQ6StXVHkUMeFFdCtSWXYmDI= Subject key identifier: AF:AB:DA:32:48:34:39:64:E4:B9:52:F2:F6:EF:9D:E2:1F:98:A4:BF Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D Certificate serial: 7FA566F23CD3213D368BC962916B94566977D878 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft Manifest number: BE Signing time: Sun 20 Sep 2026 17:43:52 +0000 Manifest this update: Sun 20 Sep 2026 17:38:52 +0000 Manifest next update: Mon 21 Sep 2026 21:26:52 +0000 Files and hashes: 1: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w=) 2: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: 2CMQaUiQoQ303FG9N23TNjSo84VYynTfyliYe9EeUaQ=) 3: 42955E8C3DC21355BF059E242A225C672E72495D.crl (hash: pytKo2BaJ5g0LeSaoe6TYw4ZlxEnMpJOAX+RaYO+6kg=) 4: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: VZHkvbzveP1h564Iy05+FNc1buJ+NUe/OEOtBSa02rk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a5:66:f2:3c:d3:21:3d:36:8b:c9:62:91:6b:94:56:69:77:d8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D Validity Not Before: Sep 20 17:38:52 2026 GMT Not After : Sep 21 21:26:52 2026 GMT Subject: CN=AFABDA3248343964E4B952F2F6EF9DE21F98A4BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:cd:3b:cc:54:f5:3b:50:51:0c:63:a7:6b: d4:b3:74:bd:9d:50:94:32:a2:4c:b0:70:29:de:f4: 10:f2:04:67:73:5e:26:e1:35:72:a5:5d:71:b3:62: e8:0a:44:2e:86:1d:3e:be:ae:2e:e9:ef:20:bc:ba: ad:df:4c:8d:0b:ac:c2:69:98:c3:d5:c6:52:1f:ad: ed:37:66:b0:e9:07:2f:77:ca:ef:47:af:86:5e:92: 51:cd:36:56:9d:06:16:8c:fb:07:bc:9b:4c:85:56: 5e:21:80:e8:48:ba:7f:44:4b:55:9a:40:66:3c:5d: c8:17:89:ba:ed:cc:be:b2:32:74:f2:10:a2:c6:41: 2b:40:4b:cc:93:67:ae:23:db:11:dd:10:5f:6f:a8: 7a:dc:31:b0:df:d4:23:17:11:51:bb:99:b6:96:62: 37:81:20:5a:5d:ed:c8:b4:e2:57:6f:3e:96:26:c7: 41:36:0f:ca:54:9b:79:b9:5e:bc:bb:06:70:c9:0d: a7:29:94:f2:98:b7:5d:b5:66:29:bb:62:bf:8c:ba: b8:4e:bc:b3:16:50:c5:95:56:55:29:d1:fa:af:2c: 06:9b:4f:e1:e6:e4:bf:ad:0f:ed:03:f1:83:cb:6c: 97:d8:cc:94:1d:3a:ec:fe:0b:d7:9d:0f:a5:ed:77: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AB:DA:32:48:34:39:64:E4:B9:52:F2:F6:EF:9D:E2:1F:98:A4:BF X509v3 Authority Key Identifier: keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a6:d1:03:8e:eb:97:cf:0f:18:6c:53:64:b3:19:09:9a:8d: 2c:7d:9e:e8:dd:9a:cb:29:99:45:36:6d:71:b8:cd:06:03:7e: 60:04:cc:bc:7a:bc:2f:9e:b0:be:50:b5:be:a0:4f:d5:f4:83: 6c:33:a8:fc:33:e7:18:68:01:17:d6:03:89:0a:9d:21:5c:05: 03:3f:cd:84:ea:68:22:57:79:cf:b5:8f:96:d6:d3:06:67:e6: 6b:53:d4:69:d9:c4:0f:76:e9:b4:5f:29:c2:88:41:35:63:71: f7:4d:13:7b:8f:94:9b:79:e3:e6:2d:25:22:df:8a:15:db:a3: 19:83:28:0c:2b:e0:01:88:11:1e:3f:8c:0d:66:a8:45:81:46: 54:f7:57:cf:7c:b7:69:a1:18:8c:c3:07:a7:ee:49:f7:0e:04: 81:bd:08:d1:29:97:27:a7:90:03:18:90:8f:b1:00:ab:bd:06: 59:2d:41:94:66:c8:a4:ea:59:a1:06:19:12:25:12:c3:fb:76: 7e:88:90:0a:5d:13:27:dd:dc:45:f7:ae:1d:67:22:b5:cb:12: f0:e9:67:c5:05:47:df:55:94:68:90:b7:92:a0:1f:3e:53:3f: b1:dd:ac:d2:31:23:02:da:ee:a3:7d:4e:de:66:4a:d6:fa:47: 3c:e6:08:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6Vm8jzTIT02i8likWuUVml32HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVDNjcy RTcyNDk1RDAeFw0yNjA5MjAxNzM4NTJaFw0yNjA5MjEyMTI2NTJaMDMxMTAvBgNV BAMTKEFGQUJEQTMyNDgzNDM5NjRFNEI5NTJGMkY2RUY5REUyMUY5OEE0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRc07zFT1O1BRDGOna9SzdL2d UJQyokywcCne9BDyBGdzXibhNXKlXXGzYugKRC6GHT6+ri7p7yC8uq3fTI0LrMJp mMPVxlIfre03ZrDpBy93yu9Hr4ZeklHNNladBhaM+we8m0yFVl4hgOhIun9ES1Wa QGY8XcgXibrtzL6yMnTyEKLGQStAS8yTZ64j2xHdEF9vqHrcMbDf1CMXEVG7mbaW YjeBIFpd7ci04ldvPpYmx0E2D8pUm3m5Xry7BnDJDacplPKYt121Zim7Yr+MurhO vLMWUMWVVlUp0fqvLAabT+Hm5L+tD+0D8YPLbJfYzJQdOuz+C9edD6Xtd5RjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr6vaMkg0OWTkuVLy9u+d4h+YpL8wHwYDVR0j BBgwFoAUQpVejD3CE1W/BZ4kKiJcZy5ySV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEyN2VhZmQtYTY3NC00NDM3LWFiZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMz REMyMTM1NUJGMDU5RTI0MkEyMjVDNjcyRTcyNDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjk1NUU4QzNEQzIxMzU1QkYwNTlFMjQyQTIyNUM2NzJFNzI0 OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVD NjcyRTcyNDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSm0QOO65fPDxhsU2SzGQmajSx9nujdmssp mUU2bXG4zQYDfmAEzLx6vC+esL5Qtb6gT9X0g2wzqPwz5xhoARfWA4kKnSFcBQM/ zYTqaCJXec+1j5bW0wZn5mtT1GnZxA926bRfKcKIQTVjcfdNE3uPlJt54+YtJSLf ihXboxmDKAwr4AGIER4/jA1mqEWBRlT3V898t2mhGIzDB6fuSfcOBIG9CNEplyen kAMYkI+xAKu9BlktQZRmyKTqWaEGGRIlEsP7dn6IkApdEyfd3EX3rh1nIrXLEvDp Z8UFR99VlGiQt5KgHz5TP7HdrNIxIwLa7qN9Tt5mStb6RzzmCD8= -----END CERTIFICATE-----Generated at Mon Sep 21 09:19:37 2026 by rpki-client