$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft File: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft (raw, json) Hash identifier: rAo3B6Y9KCb4CNloXbpn4zkyJnESJ4TyhR6S6R0VllA= Subject key identifier: F3:C8:23:49:02:F4:5C:E9:44:9B:41:F8:DD:B0:23:16:05:99:95:41 Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB Certificate issuer: /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Certificate serial: 79744AF1817ED21EC84B8209B1E8293B60DAB451 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:25:53 +0000 Manifest this update: Sun 20 Sep 2026 23:20:53 +0000 Manifest next update: Tue 22 Sep 2026 00:20:53 +0000 Files and hashes: 1: 323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (hash: anNDqws9MomLhYogS/yrt3t4/vBpWeVST2NjVPJXERI=) 2: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (hash: Y11dlVlt6+3oD4JtJmp7MCEET4NoNGtXuRA6xU0HxaQ=) 3: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (hash: Wot4Fg65UHELPYSjNtGBiNTS+yl3LZ1iOPF4d5K6uzM=) 4: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl (hash: HU5ZWaMy3sLRl3X/J6irkrIgRE0oPdAzuzoAkVqrV9A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:74:4a:f1:81:7e:d2:1e:c8:4b:82:09:b1:e8:29:3b:60:da:b4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Validity Not Before: Sep 20 23:20:53 2026 GMT Not After : Sep 22 00:20:53 2026 GMT Subject: CN=F3C8234902F45CE9449B41F8DDB0231605999541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:59:dd:3b:1a:ad:93:f1:b1:10:1a:6b:71: b8:d0:3b:8e:0d:4e:d2:b8:90:3e:fa:b3:04:f7:c1: c6:ed:da:7e:9d:46:e1:68:72:61:f1:b4:7d:ad:30: 42:04:f7:2d:c7:38:7e:45:92:a9:f1:e9:31:01:ef: 2c:a4:ea:48:ae:f9:77:0b:5f:b5:2e:23:c3:9a:6a: 3c:b6:17:b8:28:25:29:56:56:3c:bb:2a:d4:61:c6: 76:e3:46:0d:90:ed:46:77:d6:7e:af:0b:41:cc:a8: f5:2a:ac:d9:22:94:c5:a1:30:9c:2e:c5:6a:90:4c: bf:b2:b6:3b:45:88:1f:12:af:d0:e7:64:cc:7e:b6: 56:18:db:3d:65:d0:98:fb:18:81:c0:37:ef:40:ba: fe:b5:24:18:9f:84:c3:ef:13:f1:72:09:17:5d:ed: 4d:40:a8:98:ba:ff:a2:ff:f5:77:d7:6a:aa:60:38: d0:12:b8:9e:9f:ca:97:24:fb:f6:e7:96:50:f0:ac: cc:e3:45:f9:e8:ac:53:02:7c:d1:10:25:ca:b8:12: 72:a0:32:c2:42:e4:89:96:c6:d0:a1:5e:0e:d3:36: 45:a6:e5:22:83:da:73:93:f2:7d:54:9d:1f:ec:51: ec:0b:03:0a:f6:87:9a:2f:02:c7:cd:ea:3c:c7:05: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C8:23:49:02:F4:5C:E9:44:9B:41:F8:DD:B0:23:16:05:99:95:41 X509v3 Authority Key Identifier: keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b7:37:29:48:b3:3b:4c:c5:7f:f1:f9:79:7d:67:8a:59:6a: d1:4a:9b:9b:6a:5f:7b:27:cc:a6:14:d1:d6:d4:fd:62:47:bd: 75:6c:16:c9:35:73:a3:80:3a:3c:14:bd:4a:a4:c1:66:92:8f: f8:0f:47:3d:73:29:03:b8:df:16:d9:bd:e7:ed:3a:a7:16:9b: ca:00:95:a6:9b:2b:a9:d7:df:e5:bb:90:a2:60:bb:81:c8:bd: 10:0e:01:e9:9c:c8:7c:16:6a:2f:e8:ef:c2:37:29:93:85:a5: 6c:5b:18:4c:e4:ff:22:bf:11:0f:56:52:3c:c4:2b:1b:d9:8a: 4b:5c:9b:b1:00:15:06:0f:17:d0:1f:04:9c:31:69:dc:91:7b: 5f:5b:71:e4:33:d0:ef:cc:3e:85:67:64:ca:a9:06:79:0e:cf: cd:b4:63:6a:65:cf:d0:34:ae:34:32:4c:ea:1c:f5:90:a5:2d: dc:01:f8:51:48:a8:07:23:54:9d:b1:1e:22:5d:21:9e:0e:0e: e5:56:d2:8f:03:c8:62:77:a8:1b:ac:df:e5:e1:a6:ec:47:aa: 31:89:e5:67:0f:3e:77:47:bc:12:68:da:00:1b:a7:d5:e5:2e: fe:b2:3f:f1:82:3d:e0:55:1d:fb:f3:02:54:23:60:e7:f9:66: 93:9c:d3:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXRK8YF+0h7IS4IJsegpO2DatFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFENEVC NjYwOUNGQjAeFw0yNjA5MjAyMzIwNTNaFw0yNjA5MjIwMDIwNTNaMDMxMTAvBgNV BAMTKEYzQzgyMzQ5MDJGNDVDRTk0NDlCNDFGOEREQjAyMzE2MDU5OTk1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKFndOxqtk/GxEBprcbjQO44N TtK4kD76swT3wcbt2n6dRuFocmHxtH2tMEIE9y3HOH5Fkqnx6TEB7yyk6kiu+XcL X7UuI8Oaajy2F7goJSlWVjy7KtRhxnbjRg2Q7UZ31n6vC0HMqPUqrNkilMWhMJwu xWqQTL+ytjtFiB8Sr9DnZMx+tlYY2z1l0Jj7GIHAN+9Auv61JBifhMPvE/FyCRdd 7U1AqJi6/6L/9XfXaqpgONASuJ6fypck+/bnllDwrMzjRfnorFMCfNEQJcq4EnKg MsJC5ImWxtChXg7TNkWm5SKD2nOT8n1UnR/sUewLAwr2h5ovAsfN6jzHBeW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU88gjSQL0XOlEm0H43bAjFgWZlUEwHwYDVR0j BBgwFoAUEELF9eryLakKBywU9+odTrZgnPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljZWY4YjAtYmE2NC00YzBjLThkZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVF QUYyMkRBOTBBMDcyQzE0RjdFQTFENEVCNjYwOUNGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDQyQzVGNUVBRjIyREE5MEEwNzJDMTRGN0VBMUQ0RUI2NjA5 Q0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljZWY4YjAtYmE2NC00YzBjLThk ZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFE NEVCNjYwOUNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS3NylIsztMxX/x+Xl9Z4pZatFKm5tqX3sn zKYU0dbU/WJHvXVsFsk1c6OAOjwUvUqkwWaSj/gPRz1zKQO43xbZveftOqcWm8oA laabK6nX3+W7kKJgu4HIvRAOAemcyHwWai/o78I3KZOFpWxbGEzk/yK/EQ9WUjzE KxvZiktcm7EAFQYPF9AfBJwxadyRe19bceQz0O/MPoVnZMqpBnkOz820Y2plz9A0 rjQyTOoc9ZClLdwB+FFIqAcjVJ2xHiJdIZ4ODuVW0o8DyGJ3qBus3+XhpuxHqjGJ 5WcPPndHvBJo2gAbp9XlLv6yP/GCPeBVHfvzAlQjYOf5ZpOc06o= -----END CERTIFICATE-----Generated at Mon Sep 21 14:23:53 2026 by rpki-client