$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: yfff8iV6H1JgQx/4/OgadcQyFO/LviV7oOH4tHKvQu8= Subject key identifier: FC:C5:0E:35:09:65:B9:83:03:92:8F:EB:EF:5C:E8:DC:78:D4:E0:20 Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 276D29904574F3650C5A3FCCA6CD82B085ACA1B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 07:37:31 +0000 Manifest this update: Thu 08 Oct 2026 07:32:31 +0000 Manifest next update: Fri 09 Oct 2026 08:51:31 +0000 Files and hashes: 1: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) 2: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: BegtAxm7DE4/uUebw/7cLbExvZ2D6/lazXqi1jodM7k=) 3: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 08:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6d:29:90:45:74:f3:65:0c:5a:3f:cc:a6:cd:82:b0:85:ac:a1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: Oct 8 07:32:31 2026 GMT Not After : Oct 9 08:51:31 2026 GMT Subject: CN=FCC50E350965B98303928FEBEF5CE8DC78D4E020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:d1:ab:eb:31:c4:df:a6:b2:73:0a:a3:4b: 3b:ee:80:91:c7:ac:85:6e:09:8e:a6:ce:f9:58:e1: ae:8e:92:71:1f:83:d3:c9:33:dc:d0:96:ec:cc:c5: 02:ca:2b:bb:27:a9:9d:72:ad:52:6b:3f:26:a6:94: 61:1c:8e:7a:e2:83:31:9a:df:18:47:77:bc:88:7c: ee:3c:8a:38:0a:81:f8:3b:58:42:3b:ea:74:b9:2b: e3:93:4d:b6:66:50:f2:5e:b6:b7:e3:15:34:6e:d2: 26:7b:43:fc:f1:e9:6f:81:15:f0:49:72:ee:3f:86: 33:9d:47:86:bd:8b:81:e1:2c:f9:c1:6e:20:31:e9: 20:75:75:9c:6b:60:51:35:25:b5:1f:9b:fa:34:d8: e3:38:b2:04:b2:15:ac:fe:b7:a6:38:57:f4:2b:c6: a1:ee:b0:47:ff:06:ef:ad:92:38:14:b7:f4:85:83: a6:1e:7a:12:e7:10:be:53:40:23:6e:4a:f0:e1:fb: 5d:48:0c:2c:81:d3:06:99:5d:b7:1c:0b:b2:41:44: ff:01:2d:1d:e8:49:f2:e7:7d:96:b3:7e:9f:b2:73: b3:53:cf:44:71:d9:8b:f2:e9:91:a5:a4:22:46:5e: 3f:6c:43:68:d2:78:9f:7e:44:f1:cd:cf:d7:92:ee: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C5:0E:35:09:65:B9:83:03:92:8F:EB:EF:5C:E8:DC:78:D4:E0:20 X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:15:4b:5e:66:1b:d8:f1:74:e0:ac:d0:1c:c4:22:e4:cc:ef: 51:01:28:5e:d3:e5:fb:1c:7c:df:ac:e9:ea:23:79:c4:77:56: 23:da:3e:59:87:c6:d7:25:60:9b:87:0b:5d:91:db:71:4f:17: c7:6f:2e:e2:75:a4:2b:51:2e:ae:27:61:94:3b:b3:85:92:d6: ac:d5:f7:04:44:08:ad:b1:2d:d8:10:b7:ea:c9:53:63:79:32: 70:f5:1c:69:83:e3:fa:ed:9f:42:50:24:8c:77:00:0b:18:18: 83:a7:72:48:02:a5:92:7b:04:29:ba:bd:d9:4f:90:7f:15:42: 7b:2c:bf:c3:75:4f:a5:44:02:54:68:f8:f2:bd:cd:2b:92:67: 5f:81:c8:ea:a0:86:33:44:9b:49:16:f6:f6:f3:ff:51:8f:21: 9b:6c:77:de:5f:97:bb:0a:11:ab:02:6a:47:1f:28:a4:a2:af: 20:ca:f4:31:cc:68:1e:57:d2:05:ce:da:a6:b0:90:4c:5d:f1: 0b:c5:8b:ce:ec:aa:31:d3:46:25:a9:8a:4e:71:59:e0:2b:d2: 7b:13:cd:4e:fe:10:ea:42:1d:2e:8d:86:c3:ea:05:47:49:3a: 94:b5:a5:79:25:06:79:65:3d:f3:7d:51:0d:52:c8:22:88:3c: c8:e4:a8:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ20pkEV082UMWj/Mps2CsIWsobQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjEwMDgwNzMyMzFaFw0yNjEwMDkwODUxMzFaMDMxMTAvBgNV BAMTKEZDQzUwRTM1MDk2NUI5ODMwMzkyOEZFQkVGNUNFOERDNzhENEUwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0NGr6zHE36aycwqjSzvugJHH rIVuCY6mzvlY4a6OknEfg9PJM9zQluzMxQLKK7snqZ1yrVJrPyamlGEcjnrigzGa 3xhHd7yIfO48ijgKgfg7WEI76nS5K+OTTbZmUPJetrfjFTRu0iZ7Q/zx6W+BFfBJ cu4/hjOdR4a9i4HhLPnBbiAx6SB1dZxrYFE1JbUfm/o02OM4sgSyFaz+t6Y4V/Qr xqHusEf/Bu+tkjgUt/SFg6YeehLnEL5TQCNuSvDh+11IDCyB0waZXbccC7JBRP8B LR3oSfLnfZazfp+yc7NTz0Rx2Yvy6ZGlpCJGXj9sQ2jSeJ9+RPHNz9eS7ke5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/MUONQlluYMDko/r71zo3HjU4CAwHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMVS15mG9jxdOCs0BzEIuTM71EBKF7T5fsc fN+s6eojecR3ViPaPlmHxtclYJuHC12R23FPF8dvLuJ1pCtRLq4nYZQ7s4WS1qzV 9wRECK2xLdgQt+rJU2N5MnD1HGmD4/rtn0JQJIx3AAsYGIOnckgCpZJ7BCm6vdlP kH8VQnssv8N1T6VEAlRo+PK9zSuSZ1+ByOqghjNEm0kW9vbz/1GPIZtsd95fl7sK EasCakcfKKSiryDK9DHMaB5X0gXO2qawkExd8QvFi87sqjHTRiWpik5xWeAr0nsT zU7+EOpCHS6NhsPqBUdJOpS1pXklBnllPfN9UQ1SyCKIPMjkqHM= -----END CERTIFICATE-----Generated at Thu Oct 8 10:32:45 2026 by rpki-client