$ rpki-client -vvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: iQ6s3K/H7VOEl4AEpbmMgLIP9GPUkxmiPGU85M9UufM= Subject key identifier: 81:B9:2C:25:3E:F1:76:D8:3C:64:46:80:03:5E:40:4E:44:59:46:A0 Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 5733477A17621514B040C420512701930FE14365 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: 48 Signing time: Wed 24 Jun 2026 09:11:27 +0000 Manifest this update: Wed 24 Jun 2026 09:06:27 +0000 Manifest next update: Thu 25 Jun 2026 11:36:27 +0000 Files and hashes: 1: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) 2: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: NvNDTg5HEytzmb+QXFKtn1yYBh3lhxnuAbhZwLxGqtE=) 3: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 06:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:33:47:7a:17:62:15:14:b0:40:c4:20:51:27:01:93:0f:e1:43:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: Jun 24 09:06:27 2026 GMT Not After : Jun 25 11:36:27 2026 GMT Subject: CN=81B92C253EF176D83C644680035E404E445946A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:31:25:b5:ff:4d:da:a7:c9:fb:67:90:83: 57:80:63:27:21:18:93:79:58:41:5e:17:cd:27:91: b2:cc:f4:c6:4c:f9:02:ee:f7:14:33:fe:f9:13:2c: 10:c8:80:47:f8:ea:e7:ef:c4:97:c7:8c:18:9d:e9: 59:59:e0:fd:95:a4:b4:dd:5a:22:f4:31:7e:5b:73: 85:71:67:ad:65:f3:43:db:67:be:6e:c0:86:1d:b1: 61:ec:90:8a:48:bb:7e:8d:c0:c0:46:ac:a1:f2:39: ea:ac:b5:c1:d0:a9:7d:43:4c:6d:61:9f:e6:6a:26: 26:81:f2:d6:b5:8f:1c:53:b4:40:d4:69:15:a0:bb: d3:ef:75:39:e7:3e:ba:e0:8c:50:b6:41:2f:ef:7c: 29:5a:b2:0f:33:39:cf:17:82:ff:b4:f0:30:59:1f: f7:9d:aa:09:5a:f3:6d:0d:b4:f9:d4:3c:a8:80:06: 82:f6:6a:ba:99:40:a5:3f:e8:39:b7:13:a9:8c:e7: 6e:76:04:f0:80:dd:3a:32:84:ae:bf:e9:6f:08:21: c2:6b:f6:09:f0:e7:ca:6a:05:db:db:39:f0:5d:5f: 0f:ee:a5:82:f0:72:3c:62:ab:0e:0c:77:06:0b:35: 8b:36:16:09:5d:c6:33:83:11:ad:8c:5d:61:73:95: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B9:2C:25:3E:F1:76:D8:3C:64:46:80:03:5E:40:4E:44:59:46:A0 X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ea:2b:e0:45:c3:fc:c5:f7:29:34:d4:92:49:73:f3:3a:0f: e4:9a:d2:40:ae:2c:6b:81:53:0a:82:72:c6:e2:50:2b:5f:e5: b1:b7:9f:a9:25:ba:bc:b2:8c:1f:d0:66:ce:0e:22:5c:da:1b: 10:98:be:1a:e8:99:89:0d:34:43:5e:62:70:1f:0f:23:4a:ec: 9c:72:3c:56:b4:df:df:44:a9:60:9e:72:41:ca:b3:5c:74:ca: c5:b8:4e:1d:74:00:96:a6:1c:e0:97:74:41:7f:96:82:3b:18: fc:8e:ff:31:4d:4c:13:c4:b3:8c:22:a6:34:2f:7d:28:17:fd: 4a:48:a3:0d:20:d8:8b:2f:32:eb:8a:e1:2c:35:66:a8:cd:6e: 61:1a:9d:4b:5a:1a:d7:c6:52:3b:fe:35:20:74:a5:14:b2:f7: d3:76:23:04:d1:99:66:4f:73:98:13:ef:f8:aa:06:6a:be:ad: 88:f7:89:46:b8:56:7f:2c:71:cb:e1:ba:14:2e:4f:2b:4c:e7: 1a:0c:6d:6c:53:e1:b4:36:61:33:fe:c4:38:aa:f1:80:30:b7: 24:30:1f:e2:b4:0e:18:9f:98:1b:5e:9f:05:0e:94:ef:86:ff: 26:1c:5e:aa:4d:8c:73:6b:3e:a5:45:80:ba:e0:74:45:14:0a: 52:46:9a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzNHehdiFRSwQMQgUScBkw/hQ2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjA2MjQwOTA2MjdaFw0yNjA2MjUxMTM2MjdaMDMxMTAvBgNV BAMTKDgxQjkyQzI1M0VGMTc2RDgzQzY0NDY4MDAzNUU0MDRFNDQ1OTQ2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6TEltf9N2qfJ+2eQg1eAYych GJN5WEFeF80nkbLM9MZM+QLu9xQz/vkTLBDIgEf46ufvxJfHjBid6VlZ4P2VpLTd WiL0MX5bc4VxZ61l80PbZ75uwIYdsWHskIpIu36NwMBGrKHyOeqstcHQqX1DTG1h n+ZqJiaB8ta1jxxTtEDUaRWgu9PvdTnnPrrgjFC2QS/vfClasg8zOc8Xgv+08DBZ H/edqgla820NtPnUPKiABoL2arqZQKU/6Dm3E6mM5252BPCA3ToyhK6/6W8IIcJr 9gnw58pqBdvbOfBdXw/upYLwcjxiqw4MdwYLNYs2FgldxjODEa2MXWFzlZ19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgbksJT7xdtg8ZEaAA15ATkRZRqAwHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXqK+BFw/zF9yk01JJJc/M6D+Sa0kCuLGuB UwqCcsbiUCtf5bG3n6kluryyjB/QZs4OIlzaGxCYvhromYkNNENeYnAfDyNK7Jxy PFa0399EqWCeckHKs1x0ysW4Th10AJamHOCXdEF/loI7GPyO/zFNTBPEs4wipjQv fSgX/UpIow0g2IsvMuuK4Sw1ZqjNbmEanUtaGtfGUjv+NSB0pRSy99N2IwTRmWZP c5gT7/iqBmq+rYj3iUa4Vn8sccvhuhQuTytM5xoMbWxT4bQ2YTP+xDiq8YAwtyQw H+K0DhifmBtenwUOlO+G/yYcXqpNjHNrPqVFgLrgdEUUClJGmlc= -----END CERTIFICATE-----Generated at Wed Jun 24 15:29:50 2026 by rpki-client