$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: W9QguHQ/tthPqGuJLmTjXHgvVHV8qh5ar9Uwe2v9oCo= Subject key identifier: 01:4D:A8:17:34:87:05:18:39:DE:BF:05:21:12:0E:51:30:FA:50:C7 Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 5B1F323AE9C0C83819744F56D358293A0C7441A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:36:43 +0000 Manifest this update: Wed 23 Sep 2026 12:31:43 +0000 Manifest next update: Thu 24 Sep 2026 13:45:43 +0000 Files and hashes: 1: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) 2: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: HqxUA4s84VwE32dttXpY2RTTQcsy0KN1TGUNsUSbldg=) 3: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) 4: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1f:32:3a:e9:c0:c8:38:19:74:4f:56:d3:58:29:3a:0c:74:41:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: Sep 23 12:31:43 2026 GMT Not After : Sep 24 13:45:43 2026 GMT Subject: CN=014DA8173487051839DEBF0521120E5130FA50C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:3f:8d:a7:95:05:90:f4:8a:1b:1a:1e:4f: 7c:ff:35:ad:f4:49:1b:60:49:44:7a:9e:6a:85:a3: 41:6a:b2:7a:30:b4:05:15:4e:d9:72:64:fc:74:ed: fa:75:c5:67:e1:e3:ef:ee:68:ce:30:28:e0:7b:32: 6d:86:50:37:f5:a4:3f:22:35:57:bc:99:6b:84:54: 7e:e1:48:b4:09:c1:55:38:d1:7d:e9:74:f4:ee:c2: e8:3a:63:44:b8:95:d7:97:b8:e8:ba:b1:18:63:56: fd:e1:cc:26:3f:0a:40:aa:91:80:23:a8:e3:53:ee: e3:64:07:c2:ad:37:71:ae:e2:ea:c0:34:02:30:92: ca:ff:ec:f2:c0:ce:28:29:b2:b5:04:f7:24:0a:b9: 6c:37:06:1a:75:e9:45:9b:7b:62:b9:14:6c:24:c0: eb:54:30:95:b2:ce:d0:6b:28:e7:2d:65:7b:97:d3: 2d:0c:e7:09:c8:23:6a:6d:e0:8a:b1:12:f4:66:c6: a5:75:fa:d4:b6:83:6d:17:13:c8:bb:a4:e2:3d:1c: 93:ae:0a:8c:68:a9:7d:8d:fa:49:f8:42:eb:ff:ee: c9:c5:4a:7f:ec:9c:c6:fb:f3:46:39:01:90:ee:93: 69:f9:71:0d:04:d5:7d:cd:6c:bc:78:80:25:90:18: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4D:A8:17:34:87:05:18:39:DE:BF:05:21:12:0E:51:30:FA:50:C7 X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3a:60:b5:53:e0:7c:7b:a3:94:23:e3:44:cf:77:05:53:5d: 33:be:4c:2f:27:8b:77:6f:fb:47:f2:16:cc:88:d7:5c:ce:66: 24:d6:36:53:b8:e6:48:35:8a:80:9c:ac:4b:b7:e0:f3:fc:ca: 16:8e:2d:74:3b:aa:0d:a9:ac:d1:ad:31:b6:ba:0c:69:e6:de: 4f:c5:0e:14:4e:3f:45:41:89:ac:e1:a4:c9:c5:c4:66:73:bf: f9:53:ae:fd:23:7c:c8:9c:3f:cc:cf:ec:f3:84:48:c0:71:14: 2a:b0:1f:02:71:12:2d:77:0f:08:62:aa:80:7d:c3:18:fa:9c: b4:09:ba:ad:95:b5:9a:e3:68:0e:f1:8b:50:5e:fb:a2:cf:16: 18:ba:c6:a4:a9:8c:eb:1f:27:70:a3:ac:1b:9b:24:f4:8e:fe: 4e:6c:4e:1f:5a:7b:f3:ca:de:6d:02:0c:81:58:4e:d3:36:f2: e4:08:ee:ab:6e:de:67:88:d0:13:ad:32:37:fe:74:d6:af:ca: 9e:aa:a6:b6:b1:6d:94:89:aa:05:16:b8:5d:b1:0c:72:01:1b: 0b:b1:0b:13:cb:c1:78:69:b4:e5:a6:33:41:08:c5:09:da:f0: 5f:f0:60:74:fd:ce:0c:a3:9c:e1:10:fd:fa:d9:22:16:ed:88: 7a:44:e0:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWx8yOunAyDgZdE9W01gpOgx0QacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA5MjMxMjMxNDNaFw0yNjA5MjQxMzQ1NDNaMDMxMTAvBgNV BAMTKDAxNERBODE3MzQ4NzA1MTgzOURFQkYwNTIxMTIwRTUxMzBGQTUwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUWT+Np5UFkPSKGxoeT3z/Na30 SRtgSUR6nmqFo0FqsnowtAUVTtlyZPx07fp1xWfh4+/uaM4wKOB7Mm2GUDf1pD8i NVe8mWuEVH7hSLQJwVU40X3pdPTuwug6Y0S4ldeXuOi6sRhjVv3hzCY/CkCqkYAj qONT7uNkB8KtN3Gu4urANAIwksr/7PLAzigpsrUE9yQKuWw3Bhp16UWbe2K5FGwk wOtUMJWyztBrKOctZXuX0y0M5wnII2pt4IqxEvRmxqV1+tS2g20XE8i7pOI9HJOu CoxoqX2N+kn4Quv/7snFSn/snMb780Y5AZDuk2n5cQ0E1X3NbLx4gCWQGIttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAU2oFzSHBRg53r8FIRIOUTD6UMcwHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ6YLVT4Hx7o5Qj40TPdwVTXTO+TC8ni3dv +0fyFsyI11zOZiTWNlO45kg1ioCcrEu34PP8yhaOLXQ7qg2prNGtMba6DGnm3k/F DhROP0VBiazhpMnFxGZzv/lTrv0jfMicP8zP7POESMBxFCqwHwJxEi13DwhiqoB9 wxj6nLQJuq2VtZrjaA7xi1Be+6LPFhi6xqSpjOsfJ3CjrBubJPSO/k5sTh9ae/PK 3m0CDIFYTtM28uQI7qtu3meI0BOtMjf+dNavyp6qpraxbZSJqgUWuF2xDHIBGwux CxPLwXhptOWmM0EIxQna8F/wYHT9zgyjnOEQ/frZIhbtiHpE4O0= -----END CERTIFICATE-----Generated at Thu Sep 24 05:58:27 2026 by rpki-client