$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: IF/qUu2evsSlPOCIyXffLsGnpYPhG5GWvHE9qoFe1pY= Subject key identifier: DA:97:1B:5A:6E:D2:2E:18:94:E0:26:10:69:EE:5C:85:6A:93:82:84 Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 7EED5A1DFBA73982D958FE046E867968D7070190 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:43:05 +0000 Manifest this update: Tue 12 May 2026 03:38:05 +0000 Manifest next update: Wed 13 May 2026 07:37:05 +0000 Files and hashes: 1: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) 2: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) 3: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: vhgOveoAoRFPEHcj9uMl76ZMcfB707z+LpMAhonsXsM=) 4: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ed:5a:1d:fb:a7:39:82:d9:58:fe:04:6e:86:79:68:d7:07:01:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: May 12 03:38:05 2026 GMT Not After : May 13 07:37:05 2026 GMT Subject: CN=DA971B5A6ED22E1894E0261069EE5C856A938284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7d:e6:f3:ae:94:80:6d:93:f6:df:8b:1b:15: 53:83:eb:65:08:64:4e:df:b1:93:a9:e4:a9:57:5a: 9c:26:0d:36:d0:33:50:ec:40:bc:de:5f:26:50:83: 66:f4:8f:96:d7:e9:0e:31:dd:ab:6c:0e:84:3e:f8: 3c:7a:27:7b:89:2b:ce:69:cc:ae:7d:3c:22:f7:af: 15:21:e6:f9:76:49:d9:3b:4d:bd:63:19:4f:1d:2d: a7:29:c9:24:66:b2:63:79:fd:68:bc:2f:d9:75:10: f0:0a:61:18:6c:ba:4b:88:4f:e9:c5:40:bc:28:b5: eb:60:c3:53:5c:92:7e:b9:0e:ca:de:c0:8b:4c:d7: 2d:1f:e4:f8:d4:4a:d3:25:ce:bd:d1:95:bc:77:2a: c0:d2:84:c3:76:a9:56:cf:f3:07:2b:79:7b:a9:53: 62:ad:ed:16:74:3a:6b:d2:11:6c:d1:21:37:3e:e1: b1:a0:15:a1:b6:fa:ad:11:99:50:04:45:f7:4e:d9: 8d:48:d6:5f:2e:83:fc:3a:96:0f:0c:ff:c8:c5:c5: f7:27:6b:2c:8f:98:7b:bc:11:fb:4a:6d:e7:1b:f4: b3:19:cc:86:8f:10:95:86:dd:9a:04:39:b8:28:af: 5a:15:28:9d:12:9d:dd:4f:5f:0a:af:3d:be:ef:53: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:97:1B:5A:6E:D2:2E:18:94:E0:26:10:69:EE:5C:85:6A:93:82:84 X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:11:7f:27:e6:54:46:8c:61:f5:3e:04:b6:4f:f4:10:5a:58: fb:1b:09:6f:b3:11:3a:55:58:bd:ad:90:d9:10:3a:cc:c5:a3: 89:4a:ea:83:19:45:0c:1f:d4:ee:e2:e9:d2:42:ee:e6:a7:87: 0a:de:1f:38:95:d3:5e:f6:79:87:1b:20:7d:9b:11:06:da:8b: 09:1b:98:1f:e9:b7:b8:e3:5b:e1:dc:20:b5:32:04:84:42:6d: 29:f1:fd:63:38:06:98:92:f6:48:02:29:63:7e:30:b6:53:4b: 28:b5:62:f5:78:e9:d5:41:df:1a:3d:a8:ea:b5:b7:11:63:11: 2a:83:59:50:f0:91:f0:79:71:47:3f:d1:7f:d7:74:02:e9:ae: f6:0e:3b:66:05:6a:39:20:20:a8:f1:2a:26:2c:a1:af:9c:90: 54:b9:4f:bf:08:ae:39:4e:b5:b5:33:69:58:ac:c0:dd:ad:f0: 4d:0c:fd:57:a3:88:f8:37:e6:cb:ec:cc:67:0c:1f:ca:b4:7e: 6c:4b:94:b5:6b:18:4a:a8:7e:89:41:c6:ec:c2:d8:41:18:ee: 6a:cb:38:0d:84:4e:8b:54:0b:51:08:94:9e:8a:d8:75:d9:f1: 2a:a9:f7:b1:d6:c7:91:4d:39:77:fb:97:b5:cc:b9:a3:9c:8a: 9b:47:bd:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfu1aHfunOYLZWP4EboZ5aNcHAZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA1MTIwMzM4MDVaFw0yNjA1MTMwNzM3MDVaMDMxMTAvBgNV BAMTKERBOTcxQjVBNkVEMjJFMTg5NEUwMjYxMDY5RUU1Qzg1NkE5MzgyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlfebzrpSAbZP234sbFVOD62UI ZE7fsZOp5KlXWpwmDTbQM1DsQLzeXyZQg2b0j5bX6Q4x3atsDoQ++Dx6J3uJK85p zK59PCL3rxUh5vl2Sdk7Tb1jGU8dLacpySRmsmN5/Wi8L9l1EPAKYRhsukuIT+nF QLwotetgw1Nckn65DsrewItM1y0f5PjUStMlzr3Rlbx3KsDShMN2qVbP8wcreXup U2Kt7RZ0OmvSEWzRITc+4bGgFaG2+q0RmVAERfdO2Y1I1l8ug/w6lg8M/8jFxfcn ayyPmHu8EftKbecb9LMZzIaPEJWG3ZoEObgor1oVKJ0Snd1PXwqvPb7vUzjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pcbWm7SLhiU4CYQae5chWqTgoQwHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsRfyfmVEaMYfU+BLZP9BBaWPsbCW+zETpV WL2tkNkQOszFo4lK6oMZRQwf1O7i6dJC7uanhwreHziV0172eYcbIH2bEQbaiwkb mB/pt7jjW+HcILUyBIRCbSnx/WM4BpiS9kgCKWN+MLZTSyi1YvV46dVB3xo9qOq1 txFjESqDWVDwkfB5cUc/0X/XdALprvYOO2YFajkgIKjxKiYsoa+ckFS5T78IrjlO tbUzaViswN2t8E0M/VejiPg35svszGcMH8q0fmxLlLVrGEqofolBxuzC2EEY7mrL OA2ETotUC1EIlJ6K2HXZ8Sqp97HWx5FNOXf7l7XMuaOciptHvZ0= -----END CERTIFICATE-----Generated at Tue May 12 22:46:33 2026 by rpki-client