$ rpki-client -vvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft File: 42955E8C3DC21355BF059E242A225C672E72495D.mft (raw, json) Hash identifier: tIuaIq5KR6wB1ezD6ON8r8oliSsCBgxmgtTUzvo2PUY= Subject key identifier: 96:6C:A4:64:1C:52:31:49:78:7A:6E:7A:D4:D8:A8:03:2A:4A:E2:6C Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D Certificate serial: 13D48FC5A53392B6439C80C2F26C28F4FD53ACDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:19:17 +0000 Manifest this update: Mon 20 Jul 2026 18:14:17 +0000 Manifest next update: Tue 21 Jul 2026 20:29:17 +0000 Files and hashes: 1: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w=) 2: 42955E8C3DC21355BF059E242A225C672E72495D.crl (hash: 8BvSZycGyaYThxYDuZjBMs9hSEUPUToXij1FVYP4c3Q=) 3: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: 2CMQaUiQoQ303FG9N23TNjSo84VYynTfyliYe9EeUaQ=) 4: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: VZHkvbzveP1h564Iy05+FNc1buJ+NUe/OEOtBSa02rk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d4:8f:c5:a5:33:92:b6:43:9c:80:c2:f2:6c:28:f4:fd:53:ac:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D Validity Not Before: Jul 20 18:14:17 2026 GMT Not After : Jul 21 20:29:17 2026 GMT Subject: CN=966CA4641C523149787A6E7AD4D8A8032A4AE26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:9b:ba:9a:5f:64:b2:67:46:8f:a5:b8:96: ec:10:ff:dc:7c:46:06:a7:0a:2a:3f:e8:df:92:e5: 62:af:c5:22:00:6a:fc:b5:aa:dc:ce:b7:3b:bf:55: 22:50:78:75:6b:d6:c1:fb:5f:cb:df:6e:e4:f2:f8: 94:1f:92:72:ed:80:d5:2d:1d:f0:07:1a:e5:c4:20: 94:c8:cd:ae:4a:47:e9:96:fd:39:94:d1:29:0b:f4: ce:24:6c:e1:9a:47:a2:a5:a0:97:c7:b1:cd:ad:d4: df:c3:13:83:ef:90:54:95:9f:e6:b9:f6:29:d1:c3: c4:c1:7f:b9:b2:d5:ae:b3:76:4c:5c:af:44:96:d0: 81:c4:5a:90:29:c9:44:d6:a0:35:2f:00:af:21:77: ea:30:c5:20:5e:ca:47:43:c8:9d:9a:3f:6b:d0:b4: 5d:d2:66:57:bd:17:56:e9:aa:45:88:59:40:b9:4c: 0e:41:f1:9c:5c:4a:a6:c8:c2:01:c6:27:0d:b6:a3: 02:ea:f7:d0:67:34:0b:ae:dd:91:2a:cb:6b:94:f5: 70:7f:96:65:80:60:56:a3:c4:a8:f4:e0:47:4c:fd: 9a:60:80:91:d0:28:c6:65:38:9b:83:4b:70:02:df: 87:d5:f4:8b:63:5c:bd:60:69:ae:cb:5b:96:7f:e5: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6C:A4:64:1C:52:31:49:78:7A:6E:7A:D4:D8:A8:03:2A:4A:E2:6C X509v3 Authority Key Identifier: keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:9a:57:29:95:17:58:db:e5:69:fd:56:f8:c2:87:31:35:5d: 81:8a:de:86:b4:d2:68:57:b8:af:2b:73:15:32:3f:78:ac:08: 89:16:4e:5a:61:78:2b:50:2c:5b:ee:64:d3:72:9b:e8:b2:e3: 17:dd:ce:6b:04:53:60:95:39:27:f7:93:b0:c9:3d:b7:fd:88: ea:5e:58:df:6a:fc:8d:4c:34:ff:ed:32:1d:5b:f8:2d:79:e6: f2:e3:65:4e:24:45:6b:6a:a8:3c:00:96:47:ce:d5:15:cd:18: 54:0d:68:13:e5:48:26:b8:9a:dc:70:34:47:d5:6a:c0:60:47: 91:c5:73:2d:5e:74:2a:91:ec:2c:e1:65:25:4d:c9:e4:1c:73: 3d:50:5b:57:04:a8:0d:8d:12:c4:a0:fd:c0:ad:bb:19:d5:df: 13:7e:54:1c:fd:74:bc:09:72:65:86:30:e5:1c:66:7f:ef:b9: 0b:89:5f:7e:d3:a5:29:fa:1a:1a:88:9c:55:d3:24:68:0a:49: ec:80:bd:12:b9:a4:73:49:c3:7c:80:d8:5f:22:00:d9:9f:92: 04:22:b3:b9:5c:a6:e4:3a:e2:de:9d:c9:35:90:33:24:24:9c: b3:fe:b6:86:4c:bb:86:6e:d8:d4:22:88:f6:1f:f8:d2:1a:01: f5:81:7b:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9SPxaUzkrZDnIDC8mwo9P1TrNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVDNjcy RTcyNDk1RDAeFw0yNjA3MjAxODE0MTdaFw0yNjA3MjEyMDI5MTdaMDMxMTAvBgNV BAMTKDk2NkNBNDY0MUM1MjMxNDk3ODdBNkU3QUQ0RDhBODAzMkE0QUUyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0Ju6ml9ksmdGj6W4luwQ/9x8 RganCio/6N+S5WKvxSIAavy1qtzOtzu/VSJQeHVr1sH7X8vfbuTy+JQfknLtgNUt HfAHGuXEIJTIza5KR+mW/TmU0SkL9M4kbOGaR6KloJfHsc2t1N/DE4PvkFSVn+a5 9inRw8TBf7my1a6zdkxcr0SW0IHEWpApyUTWoDUvAK8hd+owxSBeykdDyJ2aP2vQ tF3SZle9F1bpqkWIWUC5TA5B8ZxcSqbIwgHGJw22owLq99BnNAuu3ZEqy2uU9XB/ lmWAYFajxKj04EdM/ZpggJHQKMZlOJuDS3AC34fV9ItjXL1gaa7LW5Z/5VQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlmykZBxSMUl4em561NioAypK4mwwHwYDVR0j BBgwFoAUQpVejD3CE1W/BZ4kKiJcZy5ySV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEyN2VhZmQtYTY3NC00NDM3LWFiZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMz REMyMTM1NUJGMDU5RTI0MkEyMjVDNjcyRTcyNDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjk1NUU4QzNEQzIxMzU1QkYwNTlFMjQyQTIyNUM2NzJFNzI0 OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvNDI5NTVFOEMzREMyMTM1NUJGMDU5RTI0MkEyMjVD NjcyRTcyNDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCaVymVF1jb5Wn9VvjChzE1XYGK3oa00mhX uK8rcxUyP3isCIkWTlpheCtQLFvuZNNym+iy4xfdzmsEU2CVOSf3k7DJPbf9iOpe WN9q/I1MNP/tMh1b+C155vLjZU4kRWtqqDwAlkfO1RXNGFQNaBPlSCa4mtxwNEfV asBgR5HFcy1edCqR7CzhZSVNyeQccz1QW1cEqA2NEsSg/cCtuxnV3xN+VBz9dLwJ cmWGMOUcZn/vuQuJX37TpSn6GhqInFXTJGgKSeyAvRK5pHNJw3yA2F8iANmfkgQi s7lcpuQ64t6dyTWQMyQknLP+toZMu4Zu2NQiiPYf+NIaAfWBe7A= -----END CERTIFICATE-----Generated at Tue Jul 21 08:30:51 2026 by rpki-client