$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: U7Rqh0jTVtkIRHyffKs4n2sE3o0qJI8R7H5S7O6w4uA= Subject key identifier: B3:C0:16:53:69:7B:B1:47:14:77:B5:66:C9:EF:9B:2B:37:95:42:08 Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 0B5ADE4BB92521E42D76850486A5BD3BE137868B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:19:52 +0000 Manifest this update: Thu 23 Jul 2026 20:14:52 +0000 Manifest next update: Fri 24 Jul 2026 21:18:52 +0000 Files and hashes: 1: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) 2: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: 6DspLiizSvzbPkjh3mTBPmmVcpVikY3sBfAvi913x+c=) 3: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) 4: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5a:de:4b:b9:25:21:e4:2d:76:85:04:86:a5:bd:3b:e1:37:86:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: Jul 23 20:14:52 2026 GMT Not After : Jul 24 21:18:52 2026 GMT Subject: CN=B3C01653697BB1471477B566C9EF9B2B37954208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:66:80:1c:1a:9f:e5:aa:92:ea:57:aa:3e: 30:0f:8f:d5:27:96:a2:49:4b:4b:fc:87:d8:60:b8: ed:e1:2b:df:ab:8c:e8:1e:ec:5a:f6:8b:75:e3:38: dc:a8:6a:77:56:24:dd:9b:33:ba:a9:7f:4c:2f:71: 1e:89:b6:6d:7c:a7:49:8a:38:e5:4e:68:a6:d8:f0: a9:52:98:5d:56:45:f6:e8:9d:c8:7c:0b:23:06:f7: f8:0d:59:4e:65:c6:5b:5c:a2:af:64:66:54:38:72: 74:aa:1c:a1:15:06:58:d1:48:33:91:87:47:aa:98: 5c:80:34:4c:6f:66:51:7d:7b:f1:01:d0:bd:fc:8a: e0:bb:3b:d7:b5:20:4b:a1:f6:2c:8c:4e:aa:b0:87: 5a:e1:12:65:6a:2d:34:94:77:15:47:0b:22:fc:a6: 70:03:ff:7f:ea:ed:47:07:ec:f8:07:b6:e4:a0:7e: ed:10:3d:18:e0:ba:65:24:60:63:5f:29:1c:80:29: df:2c:6f:1f:40:4b:6b:8b:65:79:57:43:3c:54:7d: 69:df:55:13:4b:b8:c2:93:fc:eb:e9:14:3f:2f:5f: ea:24:5d:db:e9:49:f9:27:dc:52:0a:fb:85:0e:f0: 81:dd:87:b3:ac:71:98:9a:5a:6b:05:6d:69:30:64: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C0:16:53:69:7B:B1:47:14:77:B5:66:C9:EF:9B:2B:37:95:42:08 X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:29:6c:71:68:2b:4b:f9:6a:4e:67:00:6a:d8:5a:cf:35:ab: 8f:85:a3:a2:b0:76:9b:31:c3:aa:14:e8:8f:14:be:ef:f4:ea: 9e:73:f7:c3:b7:24:32:2b:35:c8:f9:21:86:12:c5:a7:e6:40: 5d:34:11:a7:84:19:21:2a:a1:d9:25:44:52:07:38:7d:72:bd: b7:84:59:26:6b:dc:b6:48:c0:6e:6a:12:83:41:5c:fd:3e:79: d5:02:eb:0e:6c:9b:56:70:e8:fd:46:77:52:e0:15:00:fc:da: 0d:43:fd:db:84:a9:67:08:48:9e:b6:0c:0a:a5:e9:f3:8d:d7: d4:4d:ef:6c:74:78:1e:04:df:f4:85:1b:31:49:59:e1:96:17: d6:f4:8a:45:2f:35:b9:58:6c:d6:ee:8a:e0:43:9a:d2:0f:be: 80:1f:c5:5d:4c:60:fb:59:8a:ea:8c:e7:7e:68:a7:10:0c:40: 03:a3:ef:56:95:14:99:89:87:b8:3d:62:24:2a:3c:ea:7a:78: 3e:70:50:73:6f:ce:e7:11:7e:14:b1:40:af:eb:57:ec:8d:78: 84:a6:33:53:b0:b2:7e:3d:a9:c0:a4:21:e7:c4:5d:5e:7c:ae: bf:54:f2:28:39:4b:ba:f2:df:bc:76:ac:c0:06:e2:5f:14:f8: fa:81:a0:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1reS7klIeQtdoUEhqW9O+E3hoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA3MjMyMDE0NTJaFw0yNjA3MjQyMTE4NTJaMDMxMTAvBgNV BAMTKEIzQzAxNjUzNjk3QkIxNDcxNDc3QjU2NkM5RUY5QjJCMzc5NTQyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTK2aAHBqf5aqS6leqPjAPj9Un lqJJS0v8h9hguO3hK9+rjOge7Fr2i3XjONyoandWJN2bM7qpf0wvcR6Jtm18p0mK OOVOaKbY8KlSmF1WRfbonch8CyMG9/gNWU5lxltcoq9kZlQ4cnSqHKEVBljRSDOR h0eqmFyANExvZlF9e/EB0L38iuC7O9e1IEuh9iyMTqqwh1rhEmVqLTSUdxVHCyL8 pnAD/3/q7UcH7PgHtuSgfu0QPRjgumUkYGNfKRyAKd8sbx9AS2uLZXlXQzxUfWnf VRNLuMKT/OvpFD8vX+okXdvpSfkn3FIK+4UO8IHdh7OscZiaWmsFbWkwZFUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs8AWU2l7sUcUd7Vmye+bKzeVQggwHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANApbHFoK0v5ak5nAGrYWs81q4+Fo6Kwdpsx w6oU6I8Uvu/06p5z98O3JDIrNcj5IYYSxafmQF00EaeEGSEqodklRFIHOH1yvbeE WSZr3LZIwG5qEoNBXP0+edUC6w5sm1Zw6P1Gd1LgFQD82g1D/duEqWcISJ62DAql 6fON19RN72x0eB4E3/SFGzFJWeGWF9b0ikUvNblYbNbuiuBDmtIPvoAfxV1MYPtZ iuqM535opxAMQAOj71aVFJmJh7g9YiQqPOp6eD5wUHNvzucRfhSxQK/rV+yNeISm M1Owsn49qcCkIefEXV58rr9U8ig5S7ry37x2rMAG4l8U+PqBoKE= -----END CERTIFICATE-----Generated at Fri Jul 24 01:22:10 2026 by rpki-client