$ rpki-client -vvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: aYT5xn+o0/SkuTxJkXLgmD0Rb8I+PoK2yDwZlvDNcm8= Subject key identifier: E2:59:F2:0D:73:E8:BC:B7:83:44:F8:A6:8B:6B:04:11:9C:5A:10:7D Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 3911EF05471CBC31081F04B2AD42D21A085918B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 22:44:52 +0000 Manifest this update: Tue 28 Jul 2026 22:39:52 +0000 Manifest next update: Thu 30 Jul 2026 01:58:52 +0000 Files and hashes: 1: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) 2: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) 3: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: Y9Ul65viC/jDLfdTRvn/Gi/VJeg86HuCOBCwBhdqOow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:11:ef:05:47:1c:bc:31:08:1f:04:b2:ad:42:d2:1a:08:59:18:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: Jul 28 22:39:52 2026 GMT Not After : Jul 30 01:58:52 2026 GMT Subject: CN=E259F20D73E8BCB78344F8A68B6B04119C5A107D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:dc:a2:66:ba:59:b4:dc:e0:df:c3:51:c2: 03:d7:20:cc:96:8a:49:e1:6f:fe:3f:ae:88:25:33: 39:cc:69:12:39:78:6c:e7:8e:67:45:06:81:d1:6a: 4e:c9:d9:a8:69:3d:f3:d4:9f:8b:ee:60:da:af:b1: 7b:1f:c0:aa:11:a2:bf:f7:56:68:7c:8e:56:5b:69: 73:08:17:3e:c9:20:10:c1:c4:9b:0d:ec:d1:33:a7: 88:20:a3:fb:91:97:e7:b4:eb:34:d4:20:ec:44:dd: 8c:f1:07:32:a3:5f:b7:df:c3:54:92:73:ef:91:42: 5d:d5:a6:14:96:b9:1e:25:56:f0:f2:7a:fd:b5:8a: b6:a4:0a:9a:2c:64:ec:4c:18:6a:99:dd:84:0f:19: 2b:82:ff:ab:1c:2c:76:87:ca:3e:98:8e:74:c9:49: 55:c3:af:8d:72:96:c7:5c:48:19:23:85:94:3d:3f: bc:5a:2a:12:f3:33:64:33:15:1f:b9:3d:2b:5e:15: 6b:cc:9b:0e:91:2e:58:13:01:ae:68:4b:56:74:49: 4f:a2:10:bc:36:76:88:e7:b4:76:05:9b:5e:ef:a8: 52:58:20:41:30:73:58:18:c3:b4:49:cf:83:6d:64: bd:38:ad:01:f0:dc:74:69:29:e3:c9:d9:d0:5c:d8: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:59:F2:0D:73:E8:BC:B7:83:44:F8:A6:8B:6B:04:11:9C:5A:10:7D X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c4:d8:9c:55:99:56:7e:3c:57:8f:52:31:95:74:19:4d:75: cb:33:ae:f1:ce:76:c2:d9:88:91:6d:ca:24:fd:d0:ae:a5:e3: db:88:49:52:9b:e6:21:74:02:1a:23:c1:85:e9:17:d5:7d:63: 0e:70:15:8c:eb:5c:97:77:5b:43:74:bc:fe:94:77:15:af:6b: ef:70:8e:52:ec:1c:fc:40:cc:26:f7:23:aa:0a:74:ab:f2:39: d9:a1:cb:49:5d:78:ae:f8:9e:a8:91:61:14:db:9e:10:94:d2: 9f:ac:ed:23:c7:07:d8:3b:48:78:21:fe:c2:16:09:a1:c1:a7: 6b:04:47:82:7c:2a:8a:13:77:c4:60:b3:25:11:6c:55:eb:b2: 5f:56:01:79:df:9a:4f:0b:6a:a1:36:e6:35:f3:79:6b:f8:1f: 97:00:ec:de:fa:68:0d:a2:b1:dd:46:59:7b:1b:d9:da:34:7d: ee:be:0d:0b:d4:c5:c4:e1:2a:57:43:dd:4c:a4:04:3f:61:cf: 94:ca:a2:ea:28:65:90:20:89:4a:25:67:60:8c:30:2f:b1:2e: 7c:71:ff:07:f4:89:fe:47:e9:5d:f6:08:fd:07:cc:4a:1e:70: 13:03:4d:8d:dc:b7:47:03:98:0d:ca:06:20:cd:27:be:57:f2: 18:af:f7:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORHvBUccvDEIHwSyrULSGghZGLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjA3MjgyMjM5NTJaFw0yNjA3MzAwMTU4NTJaMDMxMTAvBgNV BAMTKEUyNTlGMjBENzNFOEJDQjc4MzQ0RjhBNjhCNkIwNDExOUM1QTEwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQ9yiZrpZtNzg38NRwgPXIMyW iknhb/4/roglMznMaRI5eGznjmdFBoHRak7J2ahpPfPUn4vuYNqvsXsfwKoRor/3 Vmh8jlZbaXMIFz7JIBDBxJsN7NEzp4ggo/uRl+e06zTUIOxE3YzxBzKjX7ffw1SS c++RQl3VphSWuR4lVvDyev21irakCposZOxMGGqZ3YQPGSuC/6scLHaHyj6YjnTJ SVXDr41ylsdcSBkjhZQ9P7xaKhLzM2QzFR+5PSteFWvMmw6RLlgTAa5oS1Z0SU+i ELw2dojntHYFm17vqFJYIEEwc1gYw7RJz4NtZL04rQHw3HRpKePJ2dBc2Md1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lnyDXPovLeDRPimi2sEEZxaEH0wHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPE2JxVmVZ+PFePUjGVdBlNdcszrvHOdsLZ iJFtyiT90K6l49uISVKb5iF0AhojwYXpF9V9Yw5wFYzrXJd3W0N0vP6UdxWva+9w jlLsHPxAzCb3I6oKdKvyOdmhy0ldeK74nqiRYRTbnhCU0p+s7SPHB9g7SHgh/sIW CaHBp2sER4J8KooTd8RgsyURbFXrsl9WAXnfmk8LaqE25jXzeWv4H5cA7N76aA2i sd1GWXsb2do0fe6+DQvUxcThKldD3UykBD9hz5TKouooZZAgiUolZ2CMMC+xLnxx /wf0if5H6V32CP0HzEoecBMDTY3ct0cDmA3KBiDNJ75X8hiv99Q= -----END CERTIFICATE-----Generated at Wed Jul 29 09:15:45 2026 by rpki-client