$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft File: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft (raw, json) Hash identifier: Vf/F+PAJW/psGi+a26NsHzO/vySHVS1cc8Ejy++9Gfs= Subject key identifier: 27:B0:BF:94:38:AA:EC:CB:0D:14:D7:5C:86:86:E7:CF:DA:BB:91:EE Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 Certificate issuer: /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Certificate serial: 20BB5BBFCBD8925994D26D9690CB3DD76B52B3D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 06:27:16 +0000 Manifest this update: Fri 24 Jul 2026 06:22:16 +0000 Manifest next update: Sat 25 Jul 2026 07:37:16 +0000 Files and hashes: 1: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: DJ1pTMncFJ6wx2kosKdl3HZzZxnaGs/l+vVMUm8/H+U=) 2: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl (hash: 3vCNDVa+6BK/69+wu8sAPB9ecxZu2mJjL64Oh+RyGRY=) 3: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=) 4: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: WYzWECJswPuDdOJ6s8DgvpO0dlp9PAdq1CvX0vtmC3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bb:5b:bf:cb:d8:92:59:94:d2:6d:96:90:cb:3d:d7:6b:52:b3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Validity Not Before: Jul 24 06:22:16 2026 GMT Not After : Jul 25 07:37:16 2026 GMT Subject: CN=27B0BF9438AAECCB0D14D75C8686E7CFDABB91EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:f2:7d:7e:1b:8b:c2:84:18:0c:26:e4:4a: ed:72:c6:7e:43:dd:3a:b7:e8:ce:70:2f:fc:5e:38: 51:05:c5:fa:6a:d3:20:55:a3:c6:62:fb:d4:b7:ad: d1:81:35:d4:8c:d2:48:8c:3a:c9:45:9d:9f:5a:60: 2f:69:cd:af:bd:f7:d9:99:1e:d1:fa:15:d9:f1:5b: ce:74:7b:b6:03:ac:a5:3d:fa:ab:7d:d4:72:da:5a: 2b:dd:69:c2:22:a9:34:07:40:ab:da:11:65:05:05: 69:79:76:dc:f9:2b:80:8a:5d:7b:b0:ab:42:ee:43: 46:1e:df:fa:8f:6f:4b:63:23:ee:ac:23:8a:f8:90: 40:f8:c0:69:af:be:d7:4f:d7:38:42:27:70:b4:dc: 09:0a:06:7a:33:e8:2f:ce:c8:17:1f:ff:ff:48:03: a3:51:b4:42:6d:f3:39:6f:9d:3a:d3:db:08:66:64: af:29:f4:9f:b2:fd:b9:cb:d6:85:14:9d:59:28:7a: dd:e9:0e:1a:27:65:c8:53:b3:52:82:7e:9d:36:9a: fb:9b:8d:c9:56:4d:61:0a:a0:2c:df:fc:64:c3:75: 6b:34:07:90:0b:5e:b3:e5:72:2a:9b:e0:3a:85:7b: 75:91:09:66:92:62:f1:f8:40:56:18:be:bf:7e:a8: da:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B0:BF:94:38:AA:EC:CB:0D:14:D7:5C:86:86:E7:CF:DA:BB:91:EE X509v3 Authority Key Identifier: keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:b9:ee:41:cb:db:38:ae:d7:72:52:b4:29:de:f7:a4:bb:36: bd:85:8a:31:cf:ab:12:97:e5:76:bf:96:e0:dd:21:25:60:35: d0:06:01:50:c6:5b:6b:7a:09:ba:ed:25:7d:21:6b:fa:eb:0d: 6c:da:97:45:8a:a4:53:b3:e1:2e:d3:41:08:ac:ff:92:18:30: 8a:13:5f:8c:62:4f:ed:2c:f0:08:fb:12:e3:88:91:04:60:3a: a3:4c:66:5b:c5:23:b1:a5:5e:fa:e0:9a:e4:d9:3b:67:51:7a: 05:7b:e7:c6:91:4e:ae:d4:11:a9:ce:ee:c5:cd:c8:6a:11:32: ee:21:46:c2:01:c5:75:fd:68:70:77:00:92:c5:34:e7:bc:31: 4c:16:44:06:66:c0:7d:18:cc:a7:27:98:25:84:de:89:a9:15: d9:c9:b2:7b:3c:b3:81:f3:89:30:6e:8d:32:28:b4:e1:bb:78: bb:cf:45:32:1b:d4:68:a1:7a:c7:07:86:2b:d9:af:9a:d8:2c: 2a:01:28:cb:d4:a2:89:bf:d1:81:49:51:ba:61:8d:63:a2:0b: 2f:df:31:92:5d:25:79:4b:4e:84:0a:9a:a6:e2:73:b2:ac:f6: e3:f3:7b:a0:35:90:dc:d7:e7:d3:87:a8:f7:90:8e:d6:3c:e9: 17:53:b6:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILtbv8vYklmU0m2WkMs912tSs9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0QkZF MDk4RUIwMTAeFw0yNjA3MjQwNjIyMTZaFw0yNjA3MjUwNzM3MTZaMDMxMTAvBgNV BAMTKDI3QjBCRjk0MzhBQUVDQ0IwRDE0RDc1Qzg2ODZFN0NGREFCQjkxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryfJ9fhuLwoQYDCbkSu1yxn5D 3Tq36M5wL/xeOFEFxfpq0yBVo8Zi+9S3rdGBNdSM0kiMOslFnZ9aYC9pza+999mZ HtH6FdnxW850e7YDrKU9+qt91HLaWivdacIiqTQHQKvaEWUFBWl5dtz5K4CKXXuw q0LuQ0Ye3/qPb0tjI+6sI4r4kED4wGmvvtdP1zhCJ3C03AkKBnoz6C/OyBcf//9I A6NRtEJt8zlvnTrT2whmZK8p9J+y/bnL1oUUnVkoet3pDhonZchTs1KCfp02mvub jclWTWEKoCzf/GTDdWs0B5ALXrPlciqb4DqFe3WRCWaSYvH4QFYYvr9+qNpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ7C/lDiq7MsNFNdchobnz9q7ke4wHwYDVR0j BBgwFoAUXDQrSTcUp3/eHi8eg3mkv+CY6wEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1N2Q1NDMtYmFmMC00MzQ4LTg4NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkz NzE0QTc3RkRFMUUyRjFFODM3OUE0QkZFMDk4RUIwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzM0MkI0OTM3MTRBNzdGREUxRTJGMUU4Mzc5QTRCRkUwOThF QjAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0 QkZFMDk4RUIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALy57kHL2ziu13JStCne96S7Nr2FijHPqxKX 5Xa/luDdISVgNdAGAVDGW2t6CbrtJX0ha/rrDWzal0WKpFOz4S7TQQis/5IYMIoT X4xiT+0s8Aj7EuOIkQRgOqNMZlvFI7GlXvrgmuTZO2dRegV758aRTq7UEanO7sXN yGoRMu4hRsIBxXX9aHB3AJLFNOe8MUwWRAZmwH0YzKcnmCWE3ompFdnJsns8s4Hz iTBujTIotOG7eLvPRTIb1GihescHhivZr5rYLCoBKMvUoom/0YFJUbphjWOiCy/f MZJdJXlLToQKmqbic7Ks9uPze6A1kNzX59OHqPeQjtY86RdTtrA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:22 2026 by rpki-client