
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft
File: 42955E8C3DC21355BF059E242A225C672E72495D.mft (raw, json)
Hash identifier: mHTeCDYe03NTPP1vOYOs1JwLjHHoe+07ZxVFZLDwyhs=
Subject key identifier: 5A:37:1E:9A:B0:27:47:A6:E3:A9:BA:68:64:F1:CF:38:86:14:F9:9C
Authority key identifier: 42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D
Certificate issuer: /CN=42955E8C3DC21355BF059E242A225C672E72495D
Certificate serial: 2477C8E21C3FC663AC4CB4DA6EA59B78BD126B25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 22:21:37 +0000
Manifest this update: Wed 16 Sep 2026 22:16:37 +0000
Manifest next update: Fri 18 Sep 2026 00:15:37 +0000
Files and hashes: 1: 42955E8C3DC21355BF059E242A225C672E72495D.crl (hash: rF92OdGwMYtJUgRzhhFO8ToxnbdCqFynOp3xfSTNxxw=)
2: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: nx+/lh2jtsh9jrUTGm6/+XC8mwH+G/IX3/FaclbP58w=)
3: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: VZHkvbzveP1h564Iy05+FNc1buJ+NUe/OEOtBSa02rk=)
4: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: 2CMQaUiQoQ303FG9N23TNjSo84VYynTfyliYe9EeUaQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl
rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:77:c8:e2:1c:3f:c6:63:ac:4c:b4:da:6e:a5:9b:78:bd:12:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42955E8C3DC21355BF059E242A225C672E72495D
Validity
Not Before: Sep 16 22:16:37 2026 GMT
Not After : Sep 18 00:15:37 2026 GMT
Subject: CN=5A371E9AB02747A6E3A9BA6864F1CF388614F99C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:c5:b5:59:5a:79:f8:90:be:63:d7:d8:c0:
f6:b1:1b:f8:76:34:7f:b0:b2:87:43:92:25:75:1e:
55:b2:14:00:75:cf:3a:a1:f0:14:4e:21:15:cc:c9:
bc:4d:f3:05:c5:09:82:cb:5b:b8:a0:e1:93:cb:ff:
d1:7e:de:f1:84:8b:94:5b:39:53:fd:f6:85:a3:b6:
a3:26:e9:c5:bc:25:95:fd:63:48:d0:46:5d:78:52:
a2:8a:c4:da:36:a6:eb:00:5b:31:68:44:f1:44:8b:
a9:a2:f3:6b:af:88:4a:2e:78:d8:e6:fb:e0:78:81:
3a:04:ed:b4:0b:1f:af:41:4c:ac:ae:6c:2b:64:79:
37:3c:fd:f3:93:d3:06:74:0f:89:3a:62:cf:ed:e4:
43:6c:fe:a1:fe:c4:88:fe:5f:61:b5:ef:04:b6:9c:
e7:ef:25:af:df:ec:e5:8e:67:2f:4b:88:3f:0d:61:
f3:e5:9b:f9:24:47:6c:ff:19:d8:29:11:c7:9b:cd:
ce:78:69:11:6f:18:37:d6:2a:fb:ee:cc:f7:18:8c:
5a:81:ca:7a:96:d9:55:67:ee:15:98:c2:8e:c2:40:
2a:1d:dd:0d:5c:d0:09:11:1a:e4:f5:a7:ce:9e:0e:
73:95:8c:80:b7:c8:40:a7:e2:c9:cb:1b:fa:02:a7:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:1E:9A:B0:27:47:A6:E3:A9:BA:68:64:F1:CF:38:86:14:F9:9C
X509v3 Authority Key Identifier:
keyid:42:95:5E:8C:3D:C2:13:55:BF:05:9E:24:2A:22:5C:67:2E:72:49:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42955E8C3DC21355BF059E242A225C672E72495D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/42955E8C3DC21355BF059E242A225C672E72495D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f3:34:4a:38:b7:22:bf:81:0f:7c:b8:17:54:97:a2:be:ec:
17:38:fc:d7:f6:61:4e:6c:06:b0:33:13:f3:f8:7d:eb:9a:cf:
92:28:09:2c:f9:b5:b7:ff:58:78:d1:b2:d3:03:74:cc:91:da:
a6:fa:f9:0b:c9:27:50:49:8d:ff:86:62:ff:e3:49:15:e6:94:
66:2e:36:50:0e:6f:7e:d1:e1:ff:cf:2f:af:3a:3d:b4:bb:22:
1e:d7:9f:2a:4a:26:b2:55:ce:1d:81:0f:7e:3a:9f:a0:7c:b2:
71:26:e5:de:5f:3f:31:4e:71:03:1a:30:d6:48:9a:f2:da:5f:
b8:5e:58:4b:9e:6d:65:50:10:73:f2:f9:cf:61:d6:3d:61:c6:
80:fd:e2:af:1a:65:7e:55:8a:2a:dc:6b:3c:d5:fc:6e:ae:62:
e0:55:49:0b:bb:97:2a:bd:65:20:10:63:4a:73:e5:4e:9a:72:
9f:07:68:9a:f4:c3:62:9b:6a:72:e9:98:b3:94:fa:aa:bc:f0:
ac:fd:a7:ba:2f:b3:35:b6:2b:44:a0:2a:13:37:c0:7e:e2:46:
7d:b4:9c:e7:d6:75:ee:ce:4c:91:82:20:ac:35:c1:e5:38:46:
91:8d:66:b6:61:70:92:98:95:ef:c8:1b:08:84:d9:c8:9f:8e:
1a:b3:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:49:28 2026 by rpki-client