$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft File: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft (raw, json) Hash identifier: N3WJi/S4b73fMNxMXevc10Rv0saaF6ejf/Y68p8/LOg= Subject key identifier: E7:73:57:33:C4:73:C2:2E:3E:D0:FD:7E:1F:5D:76:57:15:58:B4:7F Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 Certificate issuer: /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Certificate serial: 6B6BE62C22ABDC776522B9DCDACA9341378A2079 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:20:34 +0000 Manifest this update: Tue 12 May 2026 22:15:34 +0000 Manifest next update: Wed 13 May 2026 22:25:34 +0000 Files and hashes: 1: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: DJ1pTMncFJ6wx2kosKdl3HZzZxnaGs/l+vVMUm8/H+U=) 2: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl (hash: WdwjHaREdTyHr4cMK6kd6w/XyjJbsHgsaqlsVP5TNeg=) 3: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: WYzWECJswPuDdOJ6s8DgvpO0dlp9PAdq1CvX0vtmC3A=) 4: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6b:e6:2c:22:ab:dc:77:65:22:b9:dc:da:ca:93:41:37:8a:20:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Validity Not Before: May 12 22:15:34 2026 GMT Not After : May 13 22:25:34 2026 GMT Subject: CN=E7735733C473C22E3ED0FD7E1F5D76571558B47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:36:2e:82:08:15:57:b0:5f:5b:8a:26:93: 2f:ac:3e:c3:63:3a:1e:78:04:ae:75:8b:55:9a:35: 4c:ea:3a:66:dc:52:a0:1f:eb:0e:e7:c5:0f:c7:74: ce:7a:59:b9:72:c3:e0:9a:7c:38:d5:4d:cd:1f:64: 64:9d:4a:02:15:87:d7:d9:82:41:cc:f5:58:c8:10: 3b:1c:0c:c3:32:10:3a:85:5a:8c:dd:45:c0:3b:bd: a5:3b:9e:41:ac:c4:25:2b:b7:b6:32:6d:fe:aa:cc: 1e:15:dc:49:bc:81:10:f8:d5:e7:95:68:ba:78:a1: 5e:01:65:fc:28:cc:98:0d:3d:cd:fb:98:f3:9e:df: 8d:1b:d8:3a:c5:76:e9:a2:f6:a3:58:25:52:d6:67: 18:ff:e0:5c:77:ff:9e:ad:27:5b:4d:b2:fd:11:45: 27:c5:8f:83:6e:ae:10:e1:7e:f4:80:8f:fe:79:ba: cb:44:55:44:b0:eb:af:04:e6:68:e1:64:37:b8:ca: f8:8b:f5:46:d4:e2:2a:bb:62:dc:0f:8a:9f:09:95: 1e:20:37:34:89:0f:68:10:83:42:9c:3a:91:ac:63: 4a:81:ed:b7:b0:18:24:32:fb:c7:7b:63:b0:70:45: 8d:1a:8b:24:c4:6c:3c:47:bf:2d:89:a4:5d:07:de: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:73:57:33:C4:73:C2:2E:3E:D0:FD:7E:1F:5D:76:57:15:58:B4:7F X509v3 Authority Key Identifier: keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fc:fb:32:c5:b4:bb:78:7a:60:89:08:45:9f:bf:50:08:42: 44:d6:6b:72:47:ca:13:00:d8:93:c4:53:92:7a:90:ea:86:88: 70:71:e8:9f:0d:f9:7b:0d:1b:e5:77:6c:76:1f:73:2d:28:76: f7:35:ec:52:70:b9:c1:84:2b:14:a4:93:f6:7b:a2:11:01:12: c2:3e:89:50:d0:58:71:5f:59:88:a4:aa:13:3c:dc:79:40:02: 23:59:10:25:b6:5e:c3:3e:82:09:33:76:b0:41:81:ad:5b:16: e4:28:61:2d:95:8f:3d:e3:43:8d:7a:47:30:2a:7e:93:2d:74: e1:13:1f:c4:7e:5a:99:0f:fa:48:2a:ea:d9:00:d6:a2:a9:e4: 6c:68:40:38:90:80:87:67:47:69:7e:68:a8:b5:b6:0b:27:a4: 78:16:51:72:37:66:22:b0:71:20:b5:9f:7e:87:72:d4:e4:3e: 4f:18:0e:26:e1:4f:80:3b:70:53:4c:36:98:f8:a1:69:f9:24: 6a:ce:c4:f1:19:a9:42:ec:c3:fc:a0:27:d7:56:9d:d3:23:b3: a6:53:56:43:f3:8d:ee:9c:ca:8b:22:21:5d:c0:87:47:eb:01: 54:93:fb:9a:47:09:b1:00:c4:fb:fa:11:b9:61:07:54:18:af: 61:28:1e:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2vmLCKr3HdlIrnc2sqTQTeKIHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0QkZF MDk4RUIwMTAeFw0yNjA1MTIyMjE1MzRaFw0yNjA1MTMyMjI1MzRaMDMxMTAvBgNV BAMTKEU3NzM1NzMzQzQ3M0MyMkUzRUQwRkQ3RTFGNUQ3NjU3MTU1OEI0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXTYugggVV7BfW4omky+sPsNj Oh54BK51i1WaNUzqOmbcUqAf6w7nxQ/HdM56Wblyw+CafDjVTc0fZGSdSgIVh9fZ gkHM9VjIEDscDMMyEDqFWozdRcA7vaU7nkGsxCUrt7Yybf6qzB4V3Em8gRD41eeV aLp4oV4BZfwozJgNPc37mPOe340b2DrFdumi9qNYJVLWZxj/4Fx3/56tJ1tNsv0R RSfFj4NurhDhfvSAj/55ustEVUSw668E5mjhZDe4yviL9UbU4iq7YtwPip8JlR4g NzSJD2gQg0KcOpGsY0qB7bewGCQy+8d7Y7BwRY0aiyTEbDxHvy2JpF0H3tPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53NXM8Rzwi4+0P1+H112VxVYtH8wHwYDVR0j BBgwFoAUXDQrSTcUp3/eHi8eg3mkv+CY6wEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1N2Q1NDMtYmFmMC00MzQ4LTg4NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkz NzE0QTc3RkRFMUUyRjFFODM3OUE0QkZFMDk4RUIwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzM0MkI0OTM3MTRBNzdGREUxRTJGMUU4Mzc5QTRCRkUwOThF QjAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0 QkZFMDk4RUIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA78+zLFtLt4emCJCEWfv1AIQkTWa3JHyhMA 2JPEU5J6kOqGiHBx6J8N+XsNG+V3bHYfcy0odvc17FJwucGEKxSkk/Z7ohEBEsI+ iVDQWHFfWYikqhM83HlAAiNZECW2XsM+ggkzdrBBga1bFuQoYS2Vjz3jQ416RzAq fpMtdOETH8R+WpkP+kgq6tkA1qKp5GxoQDiQgIdnR2l+aKi1tgsnpHgWUXI3ZiKw cSC1n36HctTkPk8YDibhT4A7cFNMNpj4oWn5JGrOxPEZqULsw/ygJ9dWndMjs6ZT VkPzje6cyosiIV3Ah0frAVST+5pHCbEAxPv6EblhB1QYr2EoHt8= -----END CERTIFICATE-----Generated at Wed May 13 04:26:10 2026 by rpki-client