$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft File: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft (raw, json) Hash identifier: HVB76NzNTL3utjZ7lcUnPqW4I2u9fr8RYcCfhbVfHX0= Subject key identifier: 90:41:7E:58:A8:0F:2B:F6:B9:A6:58:30:F5:A5:6D:D6:D4:E4:82:50 Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB Certificate issuer: /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Certificate serial: 75A0B7767A0831BD4D4A74D33B59E8028F64C4C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft Manifest number: EE Signing time: Tue 27 Oct 2026 01:27:05 +0000 Manifest this update: Tue 27 Oct 2026 01:22:05 +0000 Manifest next update: Wed 28 Oct 2026 01:36:05 +0000 Files and hashes: 1: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (hash: Y11dlVlt6+3oD4JtJmp7MCEET4NoNGtXuRA6xU0HxaQ=) 2: 1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl (hash: SHGZoiLGAdL4umP6mqN1Xt05hJgQP/GbFsPWRtrd+/Q=) 3: 323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (hash: anNDqws9MomLhYogS/yrt3t4/vBpWeVST2NjVPJXERI=) 4: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (hash: Wot4Fg65UHELPYSjNtGBiNTS+yl3LZ1iOPF4d5K6uzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a0:b7:76:7a:08:31:bd:4d:4a:74:d3:3b:59:e8:02:8f:64:c4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Validity Not Before: Oct 27 01:22:05 2026 GMT Not After : Oct 28 01:36:05 2026 GMT Subject: CN=90417E58A80F2BF6B9A65830F5A56DD6D4E48250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:34:65:e9:d0:df:b4:4a:33:3e:04:db:16: 73:fa:28:f1:bd:8c:26:0f:58:eb:cd:b4:06:15:13: 6a:cb:62:1c:08:de:57:26:b1:3f:0f:fb:b1:7f:0b: 8f:ae:7a:2b:cf:46:68:19:68:1b:5a:a6:28:ad:d8: 4f:19:a2:41:51:70:c8:70:20:f3:be:03:08:fc:52: f9:50:9e:91:80:52:57:7a:55:f1:26:c0:01:6e:95: 0a:6c:eb:40:f1:f7:a9:f0:2c:29:98:94:9e:de:48: e5:ca:6b:2f:45:4e:e7:f0:5b:3a:fe:58:8c:c2:95: 2e:ab:df:f1:fe:bf:73:92:81:c6:59:31:2e:be:9b: 93:b5:a1:ca:95:87:69:98:3b:f3:a7:b4:7c:5e:b1: 55:2e:ea:3a:c4:51:0d:30:f2:93:8b:73:55:b8:ed: 7c:4c:8c:07:f0:f2:80:a2:b1:68:1a:00:ca:34:5d: eb:b6:3f:ba:35:0b:97:d8:de:52:68:b5:62:8c:a1: ef:c2:00:a0:91:ea:42:3c:4d:59:8c:3b:95:02:b0: 55:2c:08:29:59:07:88:8c:1c:39:d0:a1:f7:ab:bb: e8:9c:4f:e7:29:b6:c4:c3:f6:0d:a1:7e:83:f9:42: ae:84:ad:3a:a8:a0:7f:30:7f:ff:f9:81:84:c8:85: 99:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:41:7E:58:A8:0F:2B:F6:B9:A6:58:30:F5:A5:6D:D6:D4:E4:82:50 X509v3 Authority Key Identifier: keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c8:ac:fa:08:ab:71:47:4b:92:3a:75:de:bf:11:e2:e0:7a: 5b:ae:28:e2:ff:82:37:b8:97:9a:5b:98:5e:11:ee:08:c2:aa: ba:11:0a:be:a8:81:ac:78:02:7a:b2:0c:27:7f:d5:b1:17:30: a5:65:4c:c5:49:e4:65:c1:fc:79:4e:ee:68:c2:1a:ae:1d:31: c8:c0:6c:1f:f8:65:03:2d:0a:ce:c4:58:00:99:30:4d:23:b1: f6:3e:f9:8a:81:16:22:b3:5a:78:f1:8d:1f:4b:39:29:d5:e3: 76:1e:22:a0:35:f3:13:02:0c:51:59:33:2b:c5:73:ac:12:22: 44:71:d6:a2:0d:8c:46:8e:0a:f1:bf:d1:19:5f:1c:e3:50:17: 7e:f9:6a:67:73:75:47:f9:db:21:ad:84:0e:97:40:3a:3a:41: 8c:3b:a7:69:73:96:1e:52:60:c4:14:c5:7c:a2:7e:cf:6e:ca: 8a:e9:b9:80:89:ce:bd:43:0e:1e:43:31:b2:c9:ab:5a:18:76: 01:2a:c4:71:b2:93:bc:ad:16:22:59:f7:92:1e:50:a7:d4:98: a8:44:db:b2:db:6a:f5:d8:4e:fa:e9:63:2b:6b:60:02:6f:9d: 83:b4:77:7d:5c:2a:9f:12:85:b7:31:23:21:35:f7:51:5a:7d: a4:22:27:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdaC3dnoIMb1NSnTTO1noAo9kxMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFENEVC NjYwOUNGQjAeFw0yNjEwMjcwMTIyMDVaFw0yNjEwMjgwMTM2MDVaMDMxMTAvBgNV BAMTKDkwNDE3RTU4QTgwRjJCRjZCOUE2NTgzMEY1QTU2REQ2RDRFNDgyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVkDRl6dDftEozPgTbFnP6KPG9 jCYPWOvNtAYVE2rLYhwI3lcmsT8P+7F/C4+ueivPRmgZaBtapiit2E8ZokFRcMhw IPO+Awj8UvlQnpGAUld6VfEmwAFulQps60Dx96nwLCmYlJ7eSOXKay9FTufwWzr+ WIzClS6r3/H+v3OSgcZZMS6+m5O1ocqVh2mYO/OntHxesVUu6jrEUQ0w8pOLc1W4 7XxMjAfw8oCisWgaAMo0Xeu2P7o1C5fY3lJotWKMoe/CAKCR6kI8TVmMO5UCsFUs CClZB4iMHDnQoferu+icT+cptsTD9g2hfoP5Qq6ErTqooH8wf//5gYTIhZnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEF+WKgPK/a5plgw9aVt1tTkglAwHwYDVR0j BBgwFoAUEELF9eryLakKBywU9+odTrZgnPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljZWY4YjAtYmE2NC00YzBjLThkZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVF QUYyMkRBOTBBMDcyQzE0RjdFQTFENEVCNjYwOUNGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDQyQzVGNUVBRjIyREE5MEEwNzJDMTRGN0VBMUQ0RUI2NjA5 Q0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljZWY4YjAtYmE2NC00YzBjLThk ZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFE NEVCNjYwOUNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbIrPoIq3FHS5I6dd6/EeLgeluuKOL/gje4 l5pbmF4R7gjCqroRCr6ogax4AnqyDCd/1bEXMKVlTMVJ5GXB/HlO7mjCGq4dMcjA bB/4ZQMtCs7EWACZME0jsfY++YqBFiKzWnjxjR9LOSnV43YeIqA18xMCDFFZMyvF c6wSIkRx1qINjEaOCvG/0RlfHONQF375amdzdUf52yGthA6XQDo6QYw7p2lzlh5S YMQUxXyifs9uyorpuYCJzr1DDh5DMbLJq1oYdgEqxHGyk7ytFiJZ95IeUKfUmKhE 27LbavXYTvrpYytrYAJvnYO0d31cKp8ShbcxIyE191FafaQiJxQ= -----END CERTIFICATE-----Generated at Tue Oct 27 04:36:24 2026 by rpki-client