$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft File: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft (raw, json) Hash identifier: yUAI9iycdt4Js5PiMzlUFu5I6/N9BDCVrktUR/Q+fW8= Subject key identifier: 16:EE:0F:EC:EE:D9:02:E9:E6:1C:65:DD:6E:61:97:E1:D1:23:C7:27 Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 Certificate issuer: /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Certificate serial: 49886D83B15D9C8FD5B89614C369E900695C2011 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:12:39 +0000 Manifest this update: Tue 02 Jun 2026 22:07:39 +0000 Manifest next update: Wed 03 Jun 2026 22:44:39 +0000 Files and hashes: 1: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl (hash: WKEkhYArO5FD1pdg7LGBES5h9sx1IXg4rVdQZ/bkJrg=) 2: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=) 3: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: WYzWECJswPuDdOJ6s8DgvpO0dlp9PAdq1CvX0vtmC3A=) 4: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: DJ1pTMncFJ6wx2kosKdl3HZzZxnaGs/l+vVMUm8/H+U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:88:6d:83:b1:5d:9c:8f:d5:b8:96:14:c3:69:e9:00:69:5c:20:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Validity Not Before: Jun 2 22:07:39 2026 GMT Not After : Jun 3 22:44:39 2026 GMT Subject: CN=16EE0FECEED902E9E61C65DD6E6197E1D123C727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4c:eb:81:f6:dd:80:62:5f:be:d9:e7:3e:a2: 35:59:05:f9:37:ff:6c:c1:7a:35:f8:69:33:ac:fc: 0d:ae:2c:17:23:49:6f:bc:bb:6f:51:8c:ae:92:e9: b9:a6:ac:04:c7:17:f5:90:99:5f:ed:fb:ce:6c:45: 32:b2:d3:76:62:40:6f:47:3d:c4:68:64:99:96:39: 7f:eb:ec:bd:9a:ab:8d:f8:26:ae:08:00:8e:d3:1e: 65:b3:79:cd:c5:b2:66:e7:b5:44:f1:eb:a3:c1:ed: 6a:3e:22:0c:13:ea:74:3f:e4:28:74:16:da:b0:11: 57:04:b2:f5:51:01:1b:18:c9:99:65:70:67:58:fd: 24:89:0f:42:aa:5f:98:c8:b5:44:02:3f:f7:a0:3b: 9d:0e:c7:f7:28:64:b5:ed:23:14:29:24:b3:81:42: 78:5a:1f:a3:19:82:f0:78:27:7c:69:b3:ac:94:88: 6c:0d:9b:c6:65:3a:f1:42:07:3b:8d:7c:7f:c8:99: 3a:5d:93:52:f2:b8:bd:1f:b2:1c:4a:3e:65:3b:91: b2:87:2b:d9:06:cf:47:1a:9d:d7:bf:f5:27:44:63: 98:e9:a7:58:8a:cf:88:38:4b:ef:3f:ba:39:9a:04: 9b:4d:51:5a:3e:1e:ee:16:b5:5f:39:69:c3:94:c7: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EE:0F:EC:EE:D9:02:E9:E6:1C:65:DD:6E:61:97:E1:D1:23:C7:27 X509v3 Authority Key Identifier: keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b7:77:f6:7c:25:c0:48:1b:bb:17:7d:ab:f9:cb:78:f6:a3: 73:3d:f3:34:dc:68:67:4f:c8:80:fa:e5:af:58:06:fe:10:4b: 68:c4:e8:4a:e3:38:6f:16:43:c1:e7:ad:86:82:ca:a5:7c:0c: 13:8d:47:ee:51:e6:bd:45:18:c4:57:a8:54:51:81:53:a5:4e: 9b:71:3e:d6:11:e3:ff:6c:95:c6:a0:1f:9e:6c:63:91:d1:7b: 7f:fd:84:94:0d:4d:ac:85:05:69:59:22:55:7a:44:f1:6e:63: 03:b8:45:d0:08:21:d3:55:e1:8d:f1:e3:40:dd:e5:11:04:97: f6:e1:b1:99:ae:06:35:d8:bf:2c:fc:41:27:e5:2d:a6:8c:60: f4:a6:e4:a3:be:6d:b6:d4:d2:59:9a:18:c1:7e:ae:e4:2c:d8: ef:99:f0:48:82:a8:a9:11:2c:d4:89:65:0d:53:b8:82:b6:59: 0b:f8:a7:94:53:14:ba:76:80:34:4a:a4:30:ab:8a:55:7b:91: 6f:85:74:d6:14:ff:74:8c:cf:2d:aa:28:ca:6f:ed:2e:4f:dd: e3:e7:17:a9:85:c4:88:49:9c:ff:06:ff:b2:e1:21:b4:cb:bf: 40:95:c1:a0:4e:b2:59:1a:9d:b7:2a:79:63:5d:4e:aa:7b:61: dc:03:ec:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSYhtg7FdnI/VuJYUw2npAGlcIBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0QkZF MDk4RUIwMTAeFw0yNjA2MDIyMjA3MzlaFw0yNjA2MDMyMjQ0MzlaMDMxMTAvBgNV BAMTKDE2RUUwRkVDRUVEOTAyRTlFNjFDNjVERDZFNjE5N0UxRDEyM0M3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoTOuB9t2AYl++2ec+ojVZBfk3 /2zBejX4aTOs/A2uLBcjSW+8u29RjK6S6bmmrATHF/WQmV/t+85sRTKy03ZiQG9H PcRoZJmWOX/r7L2aq434Jq4IAI7THmWzec3FsmbntUTx66PB7Wo+IgwT6nQ/5Ch0 FtqwEVcEsvVRARsYyZllcGdY/SSJD0KqX5jItUQCP/egO50Ox/coZLXtIxQpJLOB QnhaH6MZgvB4J3xps6yUiGwNm8ZlOvFCBzuNfH/ImTpdk1LyuL0fshxKPmU7kbKH K9kGz0cande/9SdEY5jpp1iKz4g4S+8/ujmaBJtNUVo+Hu4WtV85acOUx5ynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFu4P7O7ZAunmHGXdbmGX4dEjxycwHwYDVR0j BBgwFoAUXDQrSTcUp3/eHi8eg3mkv+CY6wEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1N2Q1NDMtYmFmMC00MzQ4LTg4NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkz NzE0QTc3RkRFMUUyRjFFODM3OUE0QkZFMDk4RUIwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzM0MkI0OTM3MTRBNzdGREUxRTJGMUU4Mzc5QTRCRkUwOThF QjAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0 QkZFMDk4RUIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIi3d/Z8JcBIG7sXfav5y3j2o3M98zTcaGdP yID65a9YBv4QS2jE6ErjOG8WQ8HnrYaCyqV8DBONR+5R5r1FGMRXqFRRgVOlTptx PtYR4/9slcagH55sY5HRe3/9hJQNTayFBWlZIlV6RPFuYwO4RdAIIdNV4Y3x40Dd 5REEl/bhsZmuBjXYvyz8QSflLaaMYPSm5KO+bbbU0lmaGMF+ruQs2O+Z8EiCqKkR LNSJZQ1TuIK2WQv4p5RTFLp2gDRKpDCrilV7kW+FdNYU/3SMzy2qKMpv7S5P3ePn F6mFxIhJnP8G/7LhIbTLv0CVwaBOslkanbcqeWNdTqp7YdwD7FU= -----END CERTIFICATE-----Generated at Wed Jun 3 03:47:08 2026 by rpki-client