$ rpki-client -vvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft File: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft (raw, json) Hash identifier: GFCnFU6KyKdydpQywvi92AX9++A2fIXkr0CagGz0qIY= Subject key identifier: 35:71:87:47:DB:4A:E4:A3:32:1D:F2:E8:16:A8:E9:87:51:79:B4:23 Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB Certificate issuer: /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Certificate serial: 2A3DD1B1CFD7CF98E686492AA6603E8511CAA148 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft Manifest number: 74 Signing time: Mon 27 Jul 2026 01:19:22 +0000 Manifest this update: Mon 27 Jul 2026 01:14:22 +0000 Manifest next update: Tue 28 Jul 2026 03:46:22 +0000 Files and hashes: 1: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl (hash: hJfB+RLQW00qmx4fPi6Bfj4lHvaa4I7oFMzsPtPbgwo=) 2: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (hash: Y11dlVlt6+3oD4JtJmp7MCEET4NoNGtXuRA6xU0HxaQ=) 3: 323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (hash: anNDqws9MomLhYogS/yrt3t4/vBpWeVST2NjVPJXERI=) 4: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (hash: Wot4Fg65UHELPYSjNtGBiNTS+yl3LZ1iOPF4d5K6uzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3d:d1:b1:cf:d7:cf:98:e6:86:49:2a:a6:60:3e:85:11:ca:a1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Validity Not Before: Jul 27 01:14:22 2026 GMT Not After : Jul 28 03:46:22 2026 GMT Subject: CN=35718747DB4AE4A3321DF2E816A8E9875179B423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:d3:be:3c:4e:4e:b1:06:c1:5a:46:06:bd: 7a:80:50:01:90:51:7d:c7:2b:e9:0c:44:5c:ca:b7: f5:fa:b5:75:74:f3:52:5c:57:a5:7f:c3:38:4e:8c: 6f:e9:42:bf:02:0b:c1:ad:1c:d1:b7:34:c5:a4:b8: 83:03:81:0f:d8:28:52:f9:81:54:38:5c:27:cd:d9: 17:27:7d:de:ac:bc:7f:81:4d:88:88:22:43:b9:56: fe:74:5a:e4:a4:b3:80:d2:b2:5a:0a:6c:05:58:3a: a5:25:a7:e0:75:ba:a9:07:89:af:2e:54:48:ca:4c: 14:d0:7d:f6:4c:6b:d8:1f:4b:29:ef:3a:92:bc:7d: a1:5b:95:f6:46:bd:a7:49:b0:c3:bf:7d:82:bc:d8: f6:bc:06:93:a5:9e:11:3e:84:78:d2:b4:ab:cd:11: b8:91:02:b6:26:fe:3a:bf:6e:65:98:42:28:fe:fc: 2b:7f:99:b3:35:af:69:5b:5f:05:64:dd:b4:a7:03: 40:80:a5:5d:86:9c:47:b6:d6:66:b5:4f:86:20:91: c2:f2:c6:93:b2:08:2d:1f:78:16:77:65:77:26:06: cd:56:0c:21:ab:e4:fd:21:b3:f0:88:d9:2e:32:f3: cb:02:3c:79:4a:e3:a5:e5:eb:ef:44:81:dd:92:16: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:71:87:47:DB:4A:E4:A3:32:1D:F2:E8:16:A8:E9:87:51:79:B4:23 X509v3 Authority Key Identifier: keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a5:16:f7:d9:53:f8:1a:df:60:2b:a3:03:2f:7f:36:24:4f: 2b:d0:5c:98:90:25:c4:95:15:48:6d:7e:be:d6:26:b4:05:d4: 47:15:cb:5e:61:d3:f7:96:ed:17:f2:8b:63:c3:fb:88:c0:08: fa:88:09:c2:63:07:76:ad:5c:a7:58:ea:72:98:30:c3:7f:6b: e7:68:82:9c:42:b4:2c:e9:04:17:c3:b6:9c:7a:83:12:5a:37: 9b:bd:10:0d:1b:12:a2:3c:94:70:ff:d1:fd:96:65:c6:86:32: 6a:6e:39:b2:1a:4e:c0:3d:b0:3d:45:d2:2b:73:d9:b0:f3:de: 1e:f3:dd:03:69:6c:c1:a1:44:85:fe:76:6d:b1:63:bb:d3:4e: 1e:da:81:e1:da:22:46:6e:58:61:1c:89:da:7e:69:dc:ff:84: 21:7c:1e:d2:43:95:53:ab:94:ec:e0:b9:c0:c3:31:48:34:7c: 60:5d:4f:d2:e0:88:5d:b7:0f:99:92:6e:3e:45:db:96:44:b7: 87:98:ab:4b:3a:33:30:f5:07:6c:f8:ca:8d:42:dc:21:d1:b3: 49:6e:09:b6:0c:71:8f:98:fe:25:83:fb:1d:30:65:24:98:d2: de:5e:9d:fa:35:ac:2d:2d:f5:83:1e:91:d0:5e:d6:1e:ac:c2: 3b:71:01:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKj3Rsc/Xz5jmhkkqpmA+hRHKoUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFENEVC NjYwOUNGQjAeFw0yNjA3MjcwMTE0MjJaFw0yNjA3MjgwMzQ2MjJaMDMxMTAvBgNV BAMTKDM1NzE4NzQ3REI0QUU0QTMzMjFERjJFODE2QThFOTg3NTE3OUI0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWNO+PE5OsQbBWkYGvXqAUAGQ UX3HK+kMRFzKt/X6tXV081JcV6V/wzhOjG/pQr8CC8GtHNG3NMWkuIMDgQ/YKFL5 gVQ4XCfN2Rcnfd6svH+BTYiIIkO5Vv50WuSks4DSsloKbAVYOqUlp+B1uqkHia8u VEjKTBTQffZMa9gfSynvOpK8faFblfZGvadJsMO/fYK82Pa8BpOlnhE+hHjStKvN EbiRArYm/jq/bmWYQij+/Ct/mbM1r2lbXwVk3bSnA0CApV2GnEe21ma1T4YgkcLy xpOyCC0feBZ3ZXcmBs1WDCGr5P0hs/CI2S4y88sCPHlK46Xl6+9Egd2SFrwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXGHR9tK5KMyHfLoFqjph1F5tCMwHwYDVR0j BBgwFoAUEELF9eryLakKBywU9+odTrZgnPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljZWY4YjAtYmE2NC00YzBjLThkZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVF QUYyMkRBOTBBMDcyQzE0RjdFQTFENEVCNjYwOUNGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDQyQzVGNUVBRjIyREE5MEEwNzJDMTRGN0VBMUQ0RUI2NjA5 Q0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljZWY4YjAtYmE2NC00YzBjLThk ZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFE NEVCNjYwOUNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+lFvfZU/ga32ArowMvfzYkTyvQXJiQJcSV FUhtfr7WJrQF1EcVy15h0/eW7Rfyi2PD+4jACPqICcJjB3atXKdY6nKYMMN/a+do gpxCtCzpBBfDtpx6gxJaN5u9EA0bEqI8lHD/0f2WZcaGMmpuObIaTsA9sD1F0itz 2bDz3h7z3QNpbMGhRIX+dm2xY7vTTh7ageHaIkZuWGEcidp+adz/hCF8HtJDlVOr lOzgucDDMUg0fGBdT9LgiF23D5mSbj5F25ZEt4eYq0s6MzD1B2z4yo1C3CHRs0lu CbYMcY+Y/iWD+x0wZSSY0t5enfo1rC0t9YMekdBe1h6swjtxAUw= -----END CERTIFICATE-----Generated at Mon Jul 27 14:19:21 2026 by rpki-client