$ rpki-client -vvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft File: 42955E8C3DC21355BF059E242A225C672E72495D.mft (raw, json) Hash identifier: 5nzxeOgpkzIubfwpuY7HMUC+QaVfm2rIMnqKw9WiJNU= Subject key identifier: 14:EC:C6:A7:04:B7:96:CB:33:09:64:5A:BD:46:97:34:34:CD:9C:2B Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D Certificate serial: 73D1253A97367DC52DAEA6B5071CAEB79838B929 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:31:31 +0000 Manifest this update: Tue 16 Jun 2026 22:26:31 +0000 Manifest next update: Thu 18 Jun 2026 00:05:31 +0000 Files and hashes: 1: 42955E8C3DC21355BF059E242A225C672E72495D.crl (hash: 31mUCq4P9qgQSx1DNukUSdEGZxTDqSH2HOVrKcUb2Ag=) 2: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: 2CMQaUiQoQ303FG9N23TNjSo84VYynTfyliYe9EeUaQ=) 3: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: VZHkvbzveP1h564Iy05+FNc1buJ+NUe/OEOtBSa02rk=) 4: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d1:25:3a:97:36:7d:c5:2d:ae:a6:b5:07:1c:ae:b7:98:38:b9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D Validity Not Before: Jun 16 22:26:31 2026 GMT Not After : Jun 18 00:05:31 2026 GMT Subject: CN=14ECC6A704B796CB3309645ABD46973434CD9C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:8c:22:74:5f:5d:05:af:8d:ba:7e:17:78: e5:ae:ee:aa:e9:91:86:ea:df:61:ba:7d:ba:bb:b6: bf:ed:de:df:21:cf:bd:90:91:5d:32:83:6e:59:d5: 03:41:26:8e:b6:d9:d6:a8:c7:6b:b9:40:a8:e8:b7: a0:fe:21:54:ea:72:ff:8f:2c:ee:9f:d8:d5:14:e9: 20:8d:9b:1f:76:a4:03:16:40:9f:1e:23:f9:d8:5f: 54:79:4d:97:bb:1c:b0:3e:f4:ca:48:5e:f0:5d:69: 8e:b9:cc:bb:f1:43:6e:64:6f:e5:3b:29:7d:2e:0c: 1c:59:11:05:64:95:02:b4:61:0f:50:7f:25:95:39: a8:63:25:d7:79:e9:43:7f:7e:74:70:74:9e:9f:b0: e5:70:b6:04:9b:31:09:f9:b7:7a:16:d6:37:c9:ab: b8:22:46:b5:04:94:48:79:c1:15:e5:d1:23:21:09: 1f:ed:c3:85:06:a8:b7:9a:a0:e3:29:94:fb:83:77: f4:39:18:9f:e6:09:8f:9b:96:f7:f0:d7:2e:b5:f3: 6b:4a:a3:b9:d7:c0:14:ba:be:0d:ee:f5:89:6f:9b: 14:d2:cd:48:e1:ea:ac:4f:aa:71:c2:74:0c:57:56: 07:b7:fb:9b:94:03:46:9d:36:87:06:bc:85:86:81: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EC:C6:A7:04:B7:96:CB:33:09:64:5A:BD:46:97:34:34:CD:9C:2B X509v3 Authority Key Identifier: keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ea:2a:71:a4:11:9d:34:8b:81:f2:e3:87:fd:18:8e:79:f8: bf:86:be:9d:0b:29:a2:82:9e:95:e8:cd:d9:70:68:68:ce:46: 9c:02:1e:17:d4:54:7c:72:07:b0:b3:6b:f8:ba:db:02:71:1c: dc:43:d8:0a:10:4d:d0:c2:4e:4e:07:05:de:2c:5c:eb:e8:74: 0b:16:5e:70:31:1a:dd:ae:0a:25:49:83:68:cc:d8:69:54:9a: 0b:87:ed:a5:41:cf:85:64:08:a4:60:20:7f:01:d4:b1:b3:5c: 42:db:80:ae:ac:ee:80:f4:56:7c:dd:56:c6:b4:62:84:e9:7f: 8d:65:33:2b:e3:d2:c8:80:7b:1f:56:b9:b3:d5:a1:e5:9f:e0: 72:17:37:99:78:13:5f:0f:8f:d6:bb:63:b9:91:a1:d4:9a:08: 17:dd:3e:dc:03:ea:75:cf:ac:f6:9a:a8:a6:13:29:fa:a1:33: 5f:8d:04:03:d6:1d:4c:b6:38:2b:c2:14:28:ea:ce:a9:f9:1b: 02:91:03:37:7a:f2:d8:7a:25:8c:7b:1d:ac:75:52:3c:f2:bb: 30:9a:6b:9c:b2:da:b2:39:d7:d5:5f:cc:16:7e:97:03:da:5c: ca:f3:4c:7c:1f:2c:af:90:5a:1e:2d:74:a6:85:14:68:85:45: 8f:88:70:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9ElOpc2fcUtrqa1Bxyut5g4uSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVDNjcy RTcyNDk1RDAeFw0yNjA2MTYyMjI2MzFaFw0yNjA2MTgwMDA1MzFaMDMxMTAvBgNV BAMTKDE0RUNDNkE3MDRCNzk2Q0IzMzA5NjQ1QUJENDY5NzM0MzRDRDlDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDagowidF9dBa+Nun4XeOWu7qrp kYbq32G6fbq7tr/t3t8hz72QkV0yg25Z1QNBJo622daox2u5QKjot6D+IVTqcv+P LO6f2NUU6SCNmx92pAMWQJ8eI/nYX1R5TZe7HLA+9MpIXvBdaY65zLvxQ25kb+U7 KX0uDBxZEQVklQK0YQ9QfyWVOahjJdd56UN/fnRwdJ6fsOVwtgSbMQn5t3oW1jfJ q7giRrUElEh5wRXl0SMhCR/tw4UGqLeaoOMplPuDd/Q5GJ/mCY+blvfw1y6182tK o7nXwBS6vg3u9YlvmxTSzUjh6qxPqnHCdAxXVge3+5uUA0adNocGvIWGgWRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOzGpwS3lsszCWRavUaXNDTNnCswHwYDVR0j BBgwFoAUQpVejD3CE1W/BZ4kKiJcZy5ySV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEyN2VhZmQtYTY3NC00NDM3LWFiZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMz REMyMTM1NUJGMDU5RTI0MkEyMjVDNjcyRTcyNDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjk1NUU4QzNEQzIxMzU1QkYwNTlFMjQyQTIyNUM2NzJFNzI0 OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVD NjcyRTcyNDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPqKnGkEZ00i4Hy44f9GI55+L+Gvp0LKaKC npXozdlwaGjORpwCHhfUVHxyB7Cza/i62wJxHNxD2AoQTdDCTk4HBd4sXOvodAsW XnAxGt2uCiVJg2jM2GlUmguH7aVBz4VkCKRgIH8B1LGzXELbgK6s7oD0VnzdVsa0 YoTpf41lMyvj0siAex9WubPVoeWf4HIXN5l4E18Pj9a7Y7mRodSaCBfdPtwD6nXP rPaaqKYTKfqhM1+NBAPWHUy2OCvCFCjqzqn5GwKRAzd68th6JYx7Hax1UjzyuzCa a5yy2rI519VfzBZ+lwPaXMrzTHwfLK+QWh4tdKaFFGiFRY+IcAA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:04 2026 by rpki-client