$ rpki-client -vvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft File: 42955E8C3DC21355BF059E242A225C672E72495D.mft (raw, json) Hash identifier: vZRNcBiDolI68mpvuahFFaerXoY9Git84Zzlq5XT5YI= Subject key identifier: 65:3F:F6:73:8B:14:8E:BC:8E:4D:05:AA:E2:4D:CD:D0:FE:FE:D3:26 Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D Certificate serial: 32977C444C39923D5DA68E182B0138E545E28E0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:37:58 +0000 Manifest this update: Tue 02 Jun 2026 14:32:58 +0000 Manifest next update: Wed 03 Jun 2026 18:33:58 +0000 Files and hashes: 1: 42955E8C3DC21355BF059E242A225C672E72495D.crl (hash: 3TIQ0t2qZAWe9QlpY5Y2JMjK6lA07uu38kHv/wvewqs=) 2: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: VZHkvbzveP1h564Iy05+FNc1buJ+NUe/OEOtBSa02rk=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w=) 4: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: 2CMQaUiQoQ303FG9N23TNjSo84VYynTfyliYe9EeUaQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:97:7c:44:4c:39:92:3d:5d:a6:8e:18:2b:01:38:e5:45:e2:8e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D Validity Not Before: Jun 2 14:32:58 2026 GMT Not After : Jun 3 18:33:58 2026 GMT Subject: CN=653FF6738B148EBC8E4D05AAE24DCDD0FEFED326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:e3:40:25:75:ec:39:a9:f7:25:52:b0:b7: 04:75:8b:01:48:52:5f:3c:7e:00:88:a5:2f:16:72: 22:99:ba:26:e5:23:42:02:52:51:a3:46:e5:da:fa: e5:d7:73:a6:54:02:a4:2e:44:57:0e:19:15:a8:9c: 35:d9:1e:b8:43:72:30:44:86:dc:8a:70:4d:1e:14: c1:95:f8:7d:43:51:bb:4d:25:64:04:b3:f1:80:4f: f6:ba:40:dc:a3:da:f2:dc:8c:ec:b4:d1:85:4b:78: e3:35:ac:ec:02:be:15:28:dd:39:d8:80:38:f9:4e: 95:33:4b:60:7f:66:81:00:db:1e:87:e7:2f:07:7b: 13:f6:2e:20:5c:fd:94:72:db:cf:a4:cd:4b:91:f8: 89:81:97:ac:ab:77:d9:ee:ee:b1:6b:80:de:68:e4: fc:4c:f2:be:48:78:88:18:5f:5c:d2:6f:d6:ec:1f: 9c:eb:fd:c9:ed:c2:32:0a:f5:01:2f:09:c5:93:a2: 91:80:5b:a0:1a:d7:da:66:0f:f3:55:27:82:e4:c9: 38:8d:3b:29:21:97:1e:2f:0b:29:cb:1a:31:3b:10: e6:f3:6a:68:0b:82:7b:ea:e7:07:9b:66:c5:59:ec: 77:8d:a2:d6:4a:ab:21:20:f0:cf:f5:59:e7:5a:9c: a2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3F:F6:73:8B:14:8E:BC:8E:4D:05:AA:E2:4D:CD:D0:FE:FE:D3:26 X509v3 Authority Key Identifier: keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ef:65:d0:ae:b1:10:cb:57:7e:b5:88:38:45:df:0f:3d:55: 33:25:52:0c:d4:96:d6:a9:2d:5e:78:fb:da:8b:c1:0b:a4:52: e2:c3:76:82:84:ed:b3:77:4d:cc:e1:f3:fd:34:98:1a:31:59: 46:d1:6d:1c:d9:d0:00:f1:e5:06:b5:b8:79:ca:68:4e:5a:2d: c8:df:ef:46:3d:3d:91:c4:b3:dd:ce:63:e8:5f:c9:0b:2f:42: dc:52:7d:09:7c:7f:47:e0:f8:c1:5f:02:74:40:f9:a0:e0:44: e5:e2:13:06:09:37:3b:5c:8f:00:2d:7c:ad:7f:b1:9d:7d:42: e7:7e:26:3f:df:ff:22:dc:66:c2:00:51:c0:cf:1b:4b:e1:85: 4c:8b:74:f2:1d:8b:3b:b7:7b:11:9e:8a:97:58:1f:02:65:e4: 42:76:99:b6:ab:3b:ea:94:71:c7:26:34:75:03:fa:15:ee:14: 1d:cc:8a:4d:13:ae:fb:b1:22:54:35:36:11:9e:ab:8f:6c:de: b0:78:ec:e2:aa:62:8d:56:4d:70:40:37:da:69:a8:1a:10:83: fb:eb:56:da:aa:cc:e1:08:03:7b:c2:e6:9c:7b:c1:3b:c3:34: 15:76:b5:cb:ac:b9:3f:f7:4b:75:2a:e6:e2:c3:3a:b9:16:8c: 89:22:75:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpd8REw5kj1dpo4YKwE45UXijgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVDNjcy RTcyNDk1RDAeFw0yNjA2MDIxNDMyNThaFw0yNjA2MDMxODMzNThaMDMxMTAvBgNV BAMTKDY1M0ZGNjczOEIxNDhFQkM4RTREMDVBQUUyNERDREQwRkVGRUQzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5meNAJXXsOan3JVKwtwR1iwFI Ul88fgCIpS8WciKZuiblI0ICUlGjRuXa+uXXc6ZUAqQuRFcOGRWonDXZHrhDcjBE htyKcE0eFMGV+H1DUbtNJWQEs/GAT/a6QNyj2vLcjOy00YVLeOM1rOwCvhUo3TnY gDj5TpUzS2B/ZoEA2x6H5y8HexP2LiBc/ZRy28+kzUuR+ImBl6yrd9nu7rFrgN5o 5PxM8r5IeIgYX1zSb9bsH5zr/cntwjIK9QEvCcWTopGAW6Aa19pmD/NVJ4LkyTiN Oykhlx4vCynLGjE7EObzamgLgnvq5webZsVZ7HeNotZKqyEg8M/1WedanKJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZT/2c4sUjryOTQWq4k3N0P7+0yYwHwYDVR0j BBgwFoAUQpVejD3CE1W/BZ4kKiJcZy5ySV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEyN2VhZmQtYTY3NC00NDM3LWFiZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMz REMyMTM1NUJGMDU5RTI0MkEyMjVDNjcyRTcyNDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjk1NUU4QzNEQzIxMzU1QkYwNTlFMjQyQTIyNUM2NzJFNzI0 OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVD NjcyRTcyNDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTvZdCusRDLV361iDhF3w89VTMlUgzUltap LV54+9qLwQukUuLDdoKE7bN3Tczh8/00mBoxWUbRbRzZ0ADx5Qa1uHnKaE5aLcjf 70Y9PZHEs93OY+hfyQsvQtxSfQl8f0fg+MFfAnRA+aDgROXiEwYJNztcjwAtfK1/ sZ19Qud+Jj/f/yLcZsIAUcDPG0vhhUyLdPIdizu3exGeipdYHwJl5EJ2mbarO+qU cccmNHUD+hXuFB3Mik0TrvuxIlQ1NhGeq49s3rB47OKqYo1WTXBAN9ppqBoQg/vr VtqqzOEIA3vC5px7wTvDNBV2tcusuT/3S3Uq5uLDOrkWjIkidYs= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:10 2026 by rpki-client