$ rpki-client -vvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: ebgxLpxjHVnA6VyqS67JBSYhCwPaHU82hkYBlHTNbZU= Subject key identifier: 0A:74:32:84:FB:98:CF:46:A0:D6:A6:71:8D:26:1B:C7:15:B8:E0:54 Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 53718C83F282714BC71357ABFBA6CC3FB8A30D16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: 08 Signing time: Thu 07 May 2026 16:28:46 +0000 Manifest this update: Thu 07 May 2026 16:23:46 +0000 Manifest next update: Fri 08 May 2026 19:44:46 +0000 Files and hashes: 1: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) 2: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) 3: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: kRZk0Hly7dpDUJN8fnZ9MGobN1mdvG48C3XcZxxkHaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 19:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:71:8c:83:f2:82:71:4b:c7:13:57:ab:fb:a6:cc:3f:b8:a3:0d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: May 7 16:23:46 2026 GMT Not After : May 8 19:44:46 2026 GMT Subject: CN=0A743284FB98CF46A0D6A6718D261BC715B8E054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:b5:49:b4:d0:2e:aa:ed:e1:c7:2e:8e:5c: de:0b:8d:d6:57:9e:eb:0f:ec:a1:3d:bf:cc:6e:3f: a1:2b:f8:80:84:e5:f4:40:7c:c4:bd:df:10:96:3a: e2:2d:55:a3:db:02:04:41:42:db:3e:e8:64:07:a0: c6:3c:dc:d8:7c:ee:ff:ea:a7:32:2d:2b:80:94:f8: f8:d7:4a:46:57:6d:c7:33:39:b3:ab:f6:8c:99:e7: 0e:1f:fa:1a:c3:01:40:a3:99:c0:1a:f1:16:4a:a4: 4d:5a:0d:72:f7:c8:99:a9:a5:fa:9a:75:98:c1:eb: 4e:68:fe:da:63:9c:f9:4a:f1:83:b0:c6:e3:51:ef: b9:0c:e8:c3:09:6d:72:5c:75:ef:e3:c7:71:8a:d9: b9:ea:19:39:0e:5e:09:fa:2c:b8:f8:d2:89:50:ff: 1e:7b:3b:8e:1c:9f:c5:35:58:a9:66:92:84:04:d8: 4e:f6:01:ee:4c:8c:66:f9:79:91:bb:aa:8c:51:af: b5:f7:b3:ca:60:ea:46:6a:50:60:4d:71:85:bf:01: 93:86:f5:03:79:63:d9:b9:fd:b8:fa:f5:37:a7:1b: 98:62:28:f9:14:ec:52:62:15:a1:b3:0c:0d:ff:cc: 61:06:df:e9:0d:cf:79:a6:4b:6d:a5:ce:05:c8:bb: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:74:32:84:FB:98:CF:46:A0:D6:A6:71:8D:26:1B:C7:15:B8:E0:54 X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fb:ad:48:1d:b4:d5:d7:af:df:aa:23:ea:eb:b8:97:a5:cd: 99:aa:86:cf:ce:00:b2:20:fa:db:ec:35:cc:ac:c6:0b:54:82: 5a:1b:05:7e:b1:8b:7d:a2:fc:04:25:93:e4:5c:bf:bf:38:87: fd:33:a6:4a:35:37:9c:f2:3b:9d:91:b5:5b:c0:3c:e9:bf:89: 5b:6c:fa:f2:93:2d:a7:22:46:a6:65:f1:17:59:b3:57:76:22: 68:8e:53:7b:34:1f:fd:26:c4:e4:43:d3:40:a0:d6:b0:68:f0: f6:a4:60:76:61:20:c3:fb:d2:c7:e3:da:15:71:a2:03:82:44: 78:21:84:15:10:d8:dd:d8:16:e5:8c:45:35:24:e7:19:56:ba: 93:96:c5:fc:a7:0d:66:90:31:8c:11:8f:0a:46:0a:47:99:c5: 71:c1:a6:cd:8e:46:dc:80:fc:9f:ce:89:82:e6:9f:24:6b:48: d9:65:96:7d:cd:61:6d:15:29:f9:66:f6:c9:b5:12:48:b3:3a: 12:aa:a3:62:46:57:ac:d1:b4:92:4a:bd:81:c1:c4:33:24:8d: 4e:31:86:98:d4:f0:a5:43:88:a7:23:5a:a9:d8:ee:c8:4e:79: b1:d2:a3:1f:2d:7e:47:00:37:6e:d8:22:d5:0e:91:3e:61:ee: 6b:d2:40:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3GMg/KCcUvHE1er+6bMP7ijDRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjA1MDcxNjIzNDZaFw0yNjA1MDgxOTQ0NDZaMDMxMTAvBgNV BAMTKDBBNzQzMjg0RkI5OENGNDZBMEQ2QTY3MThEMjYxQkM3MTVCOEUwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3LVJtNAuqu3hxy6OXN4LjdZX nusP7KE9v8xuP6Er+ICE5fRAfMS93xCWOuItVaPbAgRBQts+6GQHoMY83Nh87v/q pzItK4CU+PjXSkZXbcczObOr9oyZ5w4f+hrDAUCjmcAa8RZKpE1aDXL3yJmppfqa dZjB605o/tpjnPlK8YOwxuNR77kM6MMJbXJcde/jx3GK2bnqGTkOXgn6LLj40olQ /x57O44cn8U1WKlmkoQE2E72Ae5MjGb5eZG7qoxRr7X3s8pg6kZqUGBNcYW/AZOG 9QN5Y9m5/bj69TenG5hiKPkU7FJiFaGzDA3/zGEG3+kNz3mmS22lzgXIu0BbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCnQyhPuYz0ag1qZxjSYbxxW44FQwHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGb7rUgdtNXXr9+qI+rruJelzZmqhs/OALIg +tvsNcysxgtUglobBX6xi32i/AQlk+Rcv784h/0zpko1N5zyO52RtVvAPOm/iVts +vKTLaciRqZl8RdZs1d2ImiOU3s0H/0mxORD00Cg1rBo8PakYHZhIMP70sfj2hVx ogOCRHghhBUQ2N3YFuWMRTUk5xlWupOWxfynDWaQMYwRjwpGCkeZxXHBps2ORtyA /J/OiYLmnyRrSNllln3NYW0VKflm9sm1EkizOhKqo2JGV6zRtJJKvYHBxDMkjU4x hpjU8KVDiKcjWqnY7shOebHSox8tfkcAN27YItUOkT5h7mvSQLQ= -----END CERTIFICATE-----Generated at Fri May 8 07:29:34 2026 by rpki-client