$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft File: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft (raw, json) Hash identifier: 9IsQQmGcYucjnxOitioqNOrsQp8arkY3EPFQxqWOP5s= Subject key identifier: 9D:5D:09:F2:99:5D:5E:06:C5:D3:BA:42:F4:FA:F2:0A:BC:77:8A:CE Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB Certificate issuer: /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Certificate serial: 58EA29667886F7D458C180D32E41FFA11ECFB170 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft Manifest number: B1 Signing time: Fri 11 Sep 2026 02:08:36 +0000 Manifest this update: Fri 11 Sep 2026 02:03:36 +0000 Manifest next update: Sat 12 Sep 2026 04:38:36 +0000 Files and hashes: 1: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (hash: Y11dlVlt6+3oD4JtJmp7MCEET4NoNGtXuRA6xU0HxaQ=) 2: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (hash: Wot4Fg65UHELPYSjNtGBiNTS+yl3LZ1iOPF4d5K6uzM=) 3: 323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (hash: anNDqws9MomLhYogS/yrt3t4/vBpWeVST2NjVPJXERI=) 4: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl (hash: rcqnHLXOH8aY5b8gEqjkbD4N2pzzv4KdcNKeo8L0u2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ea:29:66:78:86:f7:d4:58:c1:80:d3:2e:41:ff:a1:1e:cf:b1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Validity Not Before: Sep 11 02:03:36 2026 GMT Not After : Sep 12 04:38:36 2026 GMT Subject: CN=9D5D09F2995D5E06C5D3BA42F4FAF20ABC778ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:9e:2e:8c:ee:00:6e:f4:d1:e4:66:be:cc: fe:90:52:df:25:32:c6:75:86:36:8e:59:96:c3:94: de:07:6e:cf:1f:97:31:bf:a5:2c:cc:39:d6:20:98: 5e:d4:9e:bc:9b:ce:0e:12:da:a5:e1:34:b3:bd:d3: 6b:70:88:a3:38:e5:80:88:71:34:09:e6:57:be:3a: ef:cf:e1:db:01:d6:9f:5b:fd:3e:a0:1c:a1:c3:ef: 96:ba:70:7d:c8:bc:70:9a:0f:10:f1:63:d3:d9:b3: 42:27:3f:bb:12:42:26:6e:79:aa:f5:67:b8:47:c7: 7f:f3:06:dc:69:76:f5:3c:36:82:27:73:77:52:62: 41:a6:af:c8:33:24:62:35:d5:b9:0b:a1:66:6c:2a: b2:43:7f:d9:89:c2:0f:37:7d:60:3f:bb:b2:b8:b4: b2:b3:ff:e0:3a:41:bd:64:74:c1:63:f7:ae:a8:71: 36:7b:69:d0:4b:20:9c:de:2e:5d:6a:26:51:89:a8: 72:74:c4:e8:6d:0d:6c:52:45:92:4d:97:07:5c:91: 54:54:b5:ed:2f:79:4f:4b:00:78:22:70:af:24:da: 4b:55:d1:67:73:c4:c3:6d:5c:61:81:e1:5a:7e:65: ba:c9:43:91:48:a8:f3:b6:f9:6e:b2:2e:74:d5:7f: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5D:09:F2:99:5D:5E:06:C5:D3:BA:42:F4:FA:F2:0A:BC:77:8A:CE X509v3 Authority Key Identifier: keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:34:d9:3a:14:e6:d7:38:e8:72:2f:e5:9b:7d:36:86:07:51: 94:5b:c8:02:df:6c:00:7d:b1:21:2e:74:d5:7f:4e:1f:8f:e9: 02:83:ca:14:1c:24:1e:be:a3:01:7e:17:50:d6:88:06:70:90: 91:fa:ea:bd:96:2b:57:98:a3:c9:8b:2a:3b:bd:0b:25:f6:b9: 1c:29:19:d4:1e:50:f1:95:4b:b5:99:4d:74:9c:84:50:7e:d9: a8:85:39:3a:54:26:18:1c:0f:6c:d8:7c:30:ec:25:c2:5b:09: d0:6c:58:0c:1f:25:91:34:f7:b5:af:cb:55:61:11:9e:c1:7d: 07:d4:5c:0d:34:35:f5:0a:94:7a:5e:3b:c8:a0:62:5f:a2:9e: 25:15:a7:40:a5:72:43:9b:c5:3a:6b:03:42:ec:07:66:e2:43: 12:c9:d4:6c:c6:34:ed:60:5d:63:e5:fb:b5:7e:28:1c:06:c9: 69:dc:b1:98:05:a9:0b:36:c6:b9:3b:d5:06:68:1a:4f:c2:79: 62:74:cd:33:a0:4c:7c:5d:15:5e:4c:36:bb:20:b9:b0:04:80: ef:8c:84:dd:a8:9b:37:eb:d8:70:bb:de:c3:26:8e:d8:33:c5: c4:e9:5f:ee:2f:b7:0f:b2:bb:6e:8d:88:e8:e2:f9:c5:20:53: 6f:69:73:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOopZniG99RYwYDTLkH/oR7PsXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFENEVC NjYwOUNGQjAeFw0yNjA5MTEwMjAzMzZaFw0yNjA5MTIwNDM4MzZaMDMxMTAvBgNV BAMTKDlENUQwOUYyOTk1RDVFMDZDNUQzQkE0MkY0RkFGMjBBQkM3NzhBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Rp4ujO4AbvTR5Ga+zP6QUt8l MsZ1hjaOWZbDlN4Hbs8flzG/pSzMOdYgmF7Unrybzg4S2qXhNLO902twiKM45YCI cTQJ5le+Ou/P4dsB1p9b/T6gHKHD75a6cH3IvHCaDxDxY9PZs0InP7sSQiZuear1 Z7hHx3/zBtxpdvU8NoInc3dSYkGmr8gzJGI11bkLoWZsKrJDf9mJwg83fWA/u7K4 tLKz/+A6Qb1kdMFj966ocTZ7adBLIJzeLl1qJlGJqHJ0xOhtDWxSRZJNlwdckVRU te0veU9LAHgicK8k2ktV0WdzxMNtXGGB4Vp+ZbrJQ5FIqPO2+W6yLnTVfwI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnV0J8pldXgbF07pC9PryCrx3is4wHwYDVR0j BBgwFoAUEELF9eryLakKBywU9+odTrZgnPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljZWY4YjAtYmE2NC00YzBjLThkZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVF QUYyMkRBOTBBMDcyQzE0RjdFQTFENEVCNjYwOUNGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDQyQzVGNUVBRjIyREE5MEEwNzJDMTRGN0VBMUQ0RUI2NjA5 Q0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljZWY4YjAtYmE2NC00YzBjLThk ZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFE NEVCNjYwOUNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs02ToU5tc46HIv5Zt9NoYHUZRbyALfbAB9 sSEudNV/Th+P6QKDyhQcJB6+owF+F1DWiAZwkJH66r2WK1eYo8mLKju9CyX2uRwp GdQeUPGVS7WZTXSchFB+2aiFOTpUJhgcD2zYfDDsJcJbCdBsWAwfJZE097Wvy1Vh EZ7BfQfUXA00NfUKlHpeO8igYl+iniUVp0ClckObxTprA0LsB2biQxLJ1GzGNO1g XWPl+7V+KBwGyWncsZgFqQs2xrk71QZoGk/CeWJ0zTOgTHxdFV5MNrsgubAEgO+M hN2omzfr2HC73sMmjtgzxcTpX+4vtw+yu26NiOji+cUgU29pcyo= -----END CERTIFICATE-----Generated at Fri Sep 11 09:48:52 2026 by rpki-client