$ rpki-client -vvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft File: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft (raw, json) Hash identifier: wx4Bj2FIz8rsaxv02k+7Fgdsp2ZOalmQL983xCBBYjo= Subject key identifier: 42:41:3D:2E:C6:06:49:A5:74:A4:CF:80:46:B1:AD:A1:A7:2D:E3:51 Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE Certificate issuer: /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Certificate serial: 5D08D109A7182F545F23AF2C7A7A491E6C501DB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 00:21:51 +0000 Manifest this update: Wed 19 Aug 2026 00:16:51 +0000 Manifest next update: Thu 20 Aug 2026 01:17:51 +0000 Files and hashes: 1: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: IAPE0EDL07eBOAUYgqUUBY8IxNeYuADU8ero1ox/JUo=) 2: 42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl (hash: oaGtyt0N7zYhlR/LBR/HSNSSZxGkjtmzxlKvVd/WaEg=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 01:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:08:d1:09:a7:18:2f:54:5f:23:af:2c:7a:7a:49:1e:6c:50:1d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE Validity Not Before: Aug 19 00:16:51 2026 GMT Not After : Aug 20 01:17:51 2026 GMT Subject: CN=42413D2EC60649A574A4CF8046B1ADA1A72DE351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:3b:77:10:df:27:2a:45:5e:6a:39:99:7e: 3b:4b:57:b4:85:b6:43:b1:26:a5:8d:be:38:74:41: 94:9f:ea:cd:21:95:df:72:8a:81:9c:57:42:71:c4: 60:8b:a0:8b:69:0f:1f:70:60:2a:dd:2a:b5:50:28: d2:c7:fa:fa:4e:d8:27:8f:9a:8b:38:a2:df:a3:2d: ec:89:33:b1:ee:d6:17:67:52:2e:d4:a3:b6:2f:2b: f4:0b:38:d7:89:54:65:5d:8d:4f:99:7e:0f:9f:ac: de:42:32:35:9a:1e:00:1c:8b:db:58:00:35:1f:37: 88:a5:26:43:ee:bf:50:3d:2b:6b:49:46:5e:77:c0: cf:70:8a:55:39:4f:ee:ab:ac:17:6e:28:b2:c9:f5: 6a:a0:08:9a:98:3c:5c:4f:6c:2d:3c:49:f1:a6:4f: 18:d9:c3:8c:ec:a2:ac:1f:f7:4c:1f:42:20:23:35: cf:92:b1:e7:ff:2c:f9:e0:44:f7:75:9a:46:02:e8: a4:13:59:7c:18:66:ee:8c:90:5d:06:6c:73:29:ee: 95:ea:01:4a:63:99:fe:27:d4:0d:60:41:c9:dd:81: c2:31:47:18:05:68:65:22:33:78:cb:e3:a5:96:8b: df:65:9b:f4:e2:26:a2:3b:62:31:f7:cb:85:63:0f: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:41:3D:2E:C6:06:49:A5:74:A4:CF:80:46:B1:AD:A1:A7:2D:E3:51 X509v3 Authority Key Identifier: keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e6:b0:ee:88:4a:bf:df:a4:c7:7b:74:35:a4:b1:b9:24:9c: c2:dd:48:2e:2b:05:8c:38:e3:0d:41:be:8b:ae:6f:47:81:fd: e9:9e:ec:49:ef:74:72:9d:ed:ab:93:17:e9:38:4a:18:47:1e: d3:77:51:de:eb:eb:6a:2f:b4:8c:95:f6:48:69:74:65:70:0d: 07:fc:cb:7d:ed:ca:3e:8e:65:cc:de:66:b0:ad:2c:15:a2:14: c2:24:ff:2b:1b:1e:60:3d:3f:c2:81:63:8d:cc:82:a5:61:c8: 6b:31:fc:d1:53:33:f7:46:aa:03:9a:26:00:4c:9c:57:a9:16: 39:40:2b:a1:3b:16:2d:63:d5:e9:63:e6:a5:43:a0:1b:d8:e1: 1f:06:9c:1d:c7:1d:f8:38:52:a2:e5:d2:a5:ee:d0:9f:3c:68: cb:7f:e7:d9:07:b9:ef:2b:33:fb:e0:89:8c:6a:ef:b3:db:5c: 26:06:e7:e9:54:de:42:75:3d:74:b0:5b:7e:0d:28:fd:82:b4: 20:67:c7:b4:55:ea:ed:84:72:50:4d:54:04:0f:6f:4e:46:ef: a6:4a:e3:ab:8d:a0:12:8b:99:8a:4f:34:b5:48:8c:6f:26:e8: dc:31:97:d8:d8:93:b0:0a:35:5f:74:72:f9:2e:35:06:71:09: 72:ef:e4:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQjRCacYL1RfI68senpJHmxQHbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBF MTQzRkFDRTAeFw0yNjA4MTkwMDE2NTFaFw0yNjA4MjAwMTE3NTFaMDMxMTAvBgNV BAMTKDQyNDEzRDJFQzYwNjQ5QTU3NEE0Q0Y4MDQ2QjFBREExQTcyREUzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCDt3EN8nKkVeajmZfjtLV7SF tkOxJqWNvjh0QZSf6s0hld9yioGcV0JxxGCLoItpDx9wYCrdKrVQKNLH+vpO2CeP mos4ot+jLeyJM7Hu1hdnUi7Uo7YvK/QLONeJVGVdjU+Zfg+frN5CMjWaHgAci9tY ADUfN4ilJkPuv1A9K2tJRl53wM9wilU5T+6rrBduKLLJ9WqgCJqYPFxPbC08SfGm TxjZw4zsoqwf90wfQiAjNc+Ssef/LPngRPd1mkYC6KQTWXwYZu6MkF0GbHMp7pXq AUpjmf4n1A1gQcndgcIxRxgFaGUiM3jL46WWi99lm/TiJqI7YjH3y4VjD7Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkE9LsYGSaV0pM+ARrGtoact41EwHwYDVR0j BBgwFoAUQoQqrucRf7b39EHyEBnp0OFD+s4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY3N2IwMGMtZGMyYy00MTljLWExMDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVF NzExN0ZCNkY3RjQ0MUYyMTAxOUU5RDBFMTQzRkFDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Mjg0MkFBRUU3MTE3RkI2RjdGNDQxRjIxMDE5RTlEMEUxNDNG QUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvNDI4NDJBQUVFNzExN0ZCNkY3RjQ0MUYyMTAxOUU5 RDBFMTQzRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvmsO6ISr/fpMd7dDWksbkknMLdSC4rBYw4 4w1Bvouub0eB/eme7EnvdHKd7auTF+k4ShhHHtN3Ud7r62ovtIyV9khpdGVwDQf8 y33tyj6OZczeZrCtLBWiFMIk/ysbHmA9P8KBY43MgqVhyGsx/NFTM/dGqgOaJgBM nFepFjlAK6E7Fi1j1elj5qVDoBvY4R8GnB3HHfg4UqLl0qXu0J88aMt/59kHue8r M/vgiYxq77PbXCYG5+lU3kJ1PXSwW34NKP2CtCBnx7RV6u2EclBNVAQPb05G76ZK 46uNoBKLmYpPNLVIjG8m6Nwxl9jYk7AKNV90cvkuNQZxCXLv5Lg= -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:04 2026 by rpki-client