$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft File: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft (raw, json) Hash identifier: p67uk2JGGtj6PWK4/1SLQZxU69gupoNjmlHEvZgqJ/s= Subject key identifier: 50:C5:5B:29:2E:6B:29:D3:D4:0C:FA:47:C3:D9:1A:E6:68:DE:2F:85 Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 Certificate issuer: /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Certificate serial: 271B31CFDB9BFF4EF799616CAB0020B96C5C6A0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 04:36:18 +0000 Manifest this update: Thu 24 Sep 2026 04:31:18 +0000 Manifest next update: Fri 25 Sep 2026 05:39:18 +0000 Files and hashes: 1: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: DJ1pTMncFJ6wx2kosKdl3HZzZxnaGs/l+vVMUm8/H+U=) 2: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl (hash: BtNJit7Wd3i+1l38o3mb60oQQPav8PiPx7FQ0+dveGU=) 3: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=) 4: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: WYzWECJswPuDdOJ6s8DgvpO0dlp9PAdq1CvX0vtmC3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1b:31:cf:db:9b:ff:4e:f7:99:61:6c:ab:00:20:b9:6c:5c:6a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Validity Not Before: Sep 24 04:31:18 2026 GMT Not After : Sep 25 05:39:18 2026 GMT Subject: CN=50C55B292E6B29D3D40CFA47C3D91AE668DE2F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:4a:18:13:66:ad:f0:f6:ed:0d:28:67:8c: 8d:88:5f:65:75:d1:ad:27:4d:2a:64:9b:85:90:77: 65:82:ce:35:86:5a:5b:89:8e:6d:88:4e:fd:95:f0: 6f:2b:1d:be:6a:a7:34:64:d5:1e:a7:d7:db:74:6f: 6a:0d:b6:fe:d7:2d:a4:a8:24:36:15:15:3d:27:45: 56:64:bf:8b:a1:ba:52:06:11:66:9d:61:5a:c6:53: e6:68:72:ab:c1:55:cc:de:87:3e:41:75:73:b9:88: 95:69:21:ff:73:8c:e5:b6:3f:58:4d:bf:b5:90:a7: f0:91:ac:75:28:8a:27:a3:64:d3:c6:8f:bf:e3:7f: 74:9c:3d:a1:25:c7:7e:5c:8c:f6:01:66:85:84:8c: a1:2e:f6:f4:20:e4:ff:ef:84:53:5b:1a:2a:b7:31: 31:65:61:91:ec:4b:e4:0b:a2:1f:d0:bd:68:86:38: 93:62:9d:0c:62:51:92:75:fb:9c:91:b3:27:84:71: f4:c8:0b:2d:2a:01:1e:df:78:91:ba:18:2b:21:ea: 05:0a:9e:80:2f:f4:27:37:26:66:b6:69:53:fd:43: 71:dc:57:ca:96:e3:7b:0f:3d:4e:87:1e:79:ed:82: c2:0f:a2:0e:07:6a:59:06:7d:9c:e0:5e:7c:04:7c: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C5:5B:29:2E:6B:29:D3:D4:0C:FA:47:C3:D9:1A:E6:68:DE:2F:85 X509v3 Authority Key Identifier: keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9f:42:00:11:4e:13:3f:08:3b:64:4f:b5:c6:b4:25:f7:4a: 67:0b:ae:59:8e:7a:2d:fc:27:e7:ac:e9:91:38:e3:36:f7:2e: 7a:0a:c5:02:e1:92:e9:0a:58:f2:93:3f:3c:9d:9f:b9:15:3a: 64:00:e3:37:39:5a:ee:21:bc:3b:28:61:cc:bc:55:4c:b0:ea: 36:aa:00:a5:a2:b5:f1:f6:7b:40:ff:61:45:62:25:07:46:2e: 23:cb:01:d0:6c:bb:d8:43:66:bb:43:0a:c1:4f:db:69:6b:69: ab:d1:ae:19:e6:86:56:20:d1:46:95:48:c5:13:39:e5:f8:b5: ee:1c:54:6d:27:44:c3:39:93:a9:fe:23:db:e7:45:56:2e:fe: 4f:35:98:4c:e5:9d:75:f7:ff:e9:b2:f1:b8:df:28:dc:73:01: 88:56:c5:ef:64:1f:89:c7:8a:83:2c:79:78:ec:f6:88:2f:06: 77:7e:74:df:c8:19:73:7b:27:d4:b3:8a:8f:68:2e:ff:02:e0: 05:f4:ba:db:3e:f8:27:de:ee:5b:a3:2d:bf:49:88:77:d9:ba: a3:a4:01:64:4c:99:ab:82:1e:58:84:db:05:c2:5e:58:e3:57: 1a:cf:80:94:88:4d:e9:9f:c0:da:80:0d:90:e2:09:07:a8:86: 56:4e:f7:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxsxz9ub/073mWFsqwAguWxcagwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0QkZF MDk4RUIwMTAeFw0yNjA5MjQwNDMxMThaFw0yNjA5MjUwNTM5MThaMDMxMTAvBgNV BAMTKDUwQzU1QjI5MkU2QjI5RDNENDBDRkE0N0MzRDkxQUU2NjhERTJGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRUoYE2at8PbtDShnjI2IX2V1 0a0nTSpkm4WQd2WCzjWGWluJjm2ITv2V8G8rHb5qpzRk1R6n19t0b2oNtv7XLaSo JDYVFT0nRVZkv4uhulIGEWadYVrGU+ZocqvBVczehz5BdXO5iJVpIf9zjOW2P1hN v7WQp/CRrHUoiiejZNPGj7/jf3ScPaElx35cjPYBZoWEjKEu9vQg5P/vhFNbGiq3 MTFlYZHsS+QLoh/QvWiGOJNinQxiUZJ1+5yRsyeEcfTICy0qAR7feJG6GCsh6gUK noAv9Cc3Jma2aVP9Q3HcV8qW43sPPU6HHnntgsIPog4HalkGfZzgXnwEfFWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUMVbKS5rKdPUDPpHw9ka5mjeL4UwHwYDVR0j BBgwFoAUXDQrSTcUp3/eHi8eg3mkv+CY6wEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1N2Q1NDMtYmFmMC00MzQ4LTg4NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkz NzE0QTc3RkRFMUUyRjFFODM3OUE0QkZFMDk4RUIwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzM0MkI0OTM3MTRBNzdGREUxRTJGMUU4Mzc5QTRCRkUwOThF QjAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0 QkZFMDk4RUIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABefQgARThM/CDtkT7XGtCX3SmcLrlmOei38 J+es6ZE44zb3LnoKxQLhkukKWPKTPzydn7kVOmQA4zc5Wu4hvDsoYcy8VUyw6jaq AKWitfH2e0D/YUViJQdGLiPLAdBsu9hDZrtDCsFP22lraavRrhnmhlYg0UaVSMUT OeX4te4cVG0nRMM5k6n+I9vnRVYu/k81mEzlnXX3/+my8bjfKNxzAYhWxe9kH4nH ioMseXjs9ogvBnd+dN/IGXN7J9Szio9oLv8C4AX0uts++Cfe7lujLb9JiHfZuqOk AWRMmauCHliE2wXCXljjVxrPgJSITemfwNqADZDiCQeohlZO904= -----END CERTIFICATE-----Generated at Thu Sep 24 11:46:29 2026 by rpki-client