$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: ImfRxhbFSE9wJDjDmFBq+8G5EIhm+Juj3jF4qETQHpM= Subject key identifier: 4C:32:46:BC:2A:7D:2A:16:58:7E:04:F9:B9:B5:47:D4:67:B8:BA:AF Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 3D4C9FD92969BF61A8DCECBEAF574F65F2C1FADB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:42:03 +0000 Manifest this update: Mon 21 Sep 2026 12:37:03 +0000 Manifest next update: Tue 22 Sep 2026 13:32:03 +0000 Files and hashes: 1: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: CRWyBCH+2liX5z84eQ1u6mxVYr9DivrKRBNanDUXCJo=) 2: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4c:9f:d9:29:69:bf:61:a8:dc:ec:be:af:57:4f:65:f2:c1:fa:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: Sep 21 12:37:03 2026 GMT Not After : Sep 22 13:32:03 2026 GMT Subject: CN=4C3246BC2A7D2A16587E04F9B9B547D467B8BAAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:60:17:62:2d:68:c7:ab:15:47:74:6e:30: 9d:97:a9:06:0f:ca:e8:1e:70:48:1d:d3:43:91:94: 5d:42:15:81:0a:dc:c3:7e:1f:35:d4:ac:f6:65:48: 04:b3:0a:b3:e7:1b:cb:38:e8:41:46:30:50:94:7c: d9:5d:72:26:5d:05:c3:dd:95:6b:05:d5:c9:f0:ff: a3:33:7d:a5:61:da:73:d9:d8:c6:ed:e0:96:48:7d: f6:d9:60:26:2a:52:96:fb:8b:1a:54:6a:b2:34:82: 6a:bb:bd:60:c7:da:6d:0e:63:9f:e4:41:17:e5:59: 97:28:17:6c:95:bb:48:44:0c:df:c9:51:5f:fa:b5: 44:ef:17:5d:1d:95:40:68:c1:1d:03:c6:15:97:fb: b9:0f:c0:f7:4c:d0:23:07:52:76:2a:6d:30:d3:2b: ef:78:1a:77:7e:1a:ec:d2:cb:36:80:f3:12:16:fa: 5e:db:f6:00:de:83:91:79:81:39:fa:1c:a2:91:f8: bc:a1:eb:89:70:e7:12:e1:8f:d2:4d:e9:e5:b0:7e: 05:52:ed:73:95:0c:3a:77:3b:db:da:2d:dd:80:47: 7b:ea:34:a2:3b:22:ba:37:60:3f:06:ef:50:0b:60: 8d:02:3f:e5:1b:a5:d2:28:2f:f9:14:00:e5:ca:ea: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:32:46:BC:2A:7D:2A:16:58:7E:04:F9:B9:B5:47:D4:67:B8:BA:AF X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9a:32:7d:cf:6c:84:8a:5f:a1:50:da:55:71:68:27:1d:5e: 58:ef:58:e8:ff:24:c3:75:06:20:98:be:55:c5:b4:71:32:ee: 33:f3:9a:29:d5:8b:85:1b:ed:5f:58:fd:1e:51:4a:78:43:be: bf:6c:b1:23:c5:e0:6d:15:64:ee:51:6b:4b:7d:10:3d:2e:3e: ad:e9:3f:ee:1a:59:db:9d:3b:6e:a2:dc:f3:f3:06:22:74:61: ef:7c:7f:94:af:ec:e2:c6:f1:2b:5f:63:45:5c:93:69:91:6d: c4:f6:8f:d1:87:9e:fa:f2:56:cd:df:e7:fa:22:32:e0:4d:f0: bf:e3:88:eb:f7:3a:ad:fd:3d:9b:5c:d4:55:c6:18:40:1a:76: cb:ba:a1:19:f4:b6:ad:d4:b5:52:05:53:ff:14:19:90:b0:0a: bf:3e:25:fb:2f:69:7a:98:1c:be:eb:e4:12:a6:e4:87:9e:e9: d9:35:51:28:35:3c:83:96:7d:3f:8c:64:6b:82:92:3a:03:00: 8a:74:de:87:36:39:87:ad:b8:f4:26:8d:3d:84:09:0e:41:86: 3e:e3:08:80:51:26:f9:72:12:8a:74:8f:5e:94:82:d2:61:0b: d6:ce:84:16:28:1a:ba:61:70:0e:17:6e:67:65:a0:a7:0e:99: 18:d8:04:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUyf2Slpv2Go3Oy+r1dPZfLB+tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjA5MjExMjM3MDNaFw0yNjA5MjIxMzMyMDNaMDMxMTAvBgNV BAMTKDRDMzI0NkJDMkE3RDJBMTY1ODdFMDRGOUI5QjU0N0Q0NjdCOEJBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkWAXYi1ox6sVR3RuMJ2XqQYP yugecEgd00ORlF1CFYEK3MN+HzXUrPZlSASzCrPnG8s46EFGMFCUfNldciZdBcPd lWsF1cnw/6MzfaVh2nPZ2Mbt4JZIffbZYCYqUpb7ixpUarI0gmq7vWDH2m0OY5/k QRflWZcoF2yVu0hEDN/JUV/6tUTvF10dlUBowR0DxhWX+7kPwPdM0CMHUnYqbTDT K+94Gnd+GuzSyzaA8xIW+l7b9gDeg5F5gTn6HKKR+Lyh64lw5xLhj9JN6eWwfgVS 7XOVDDp3O9vaLd2AR3vqNKI7Iro3YD8G71ALYI0CP+UbpdIoL/kUAOXK6ltdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDJGvCp9KhZYfgT5ubVH1Ge4uq8wHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeaMn3PbISKX6FQ2lVxaCcdXljvWOj/JMN1 BiCYvlXFtHEy7jPzminVi4Ub7V9Y/R5RSnhDvr9ssSPF4G0VZO5Ra0t9ED0uPq3p P+4aWdudO26i3PPzBiJ0Ye98f5Sv7OLG8StfY0Vck2mRbcT2j9GHnvryVs3f5/oi MuBN8L/jiOv3Oq39PZtc1FXGGEAadsu6oRn0tq3UtVIFU/8UGZCwCr8+JfsvaXqY HL7r5BKm5Iee6dk1USg1PIOWfT+MZGuCkjoDAIp03oc2OYetuPQmjT2ECQ5Bhj7j CIBRJvlyEop0j16UgtJhC9bOhBYoGrphcA4XbmdloKcOmRjYBDY= -----END CERTIFICATE-----Generated at Mon Sep 21 15:45:12 2026 by rpki-client