$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: oMz9/Ah2X8lMMtipSg6pt3oX//wNRuzQ32NwHwVLNMk= Subject key identifier: FD:2C:AE:F6:87:B5:A2:19:4C:AE:F5:CF:AC:52:AB:A7:B4:C4:D3:5E Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 3A0BFFBEC24592E3DDBA9D27508280AF016847BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 12:23:37 +0000 Manifest this update: Tue 03 Nov 2026 12:18:37 +0000 Manifest next update: Wed 04 Nov 2026 14:25:37 +0000 Files and hashes: 1: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) 2: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: QEakB4BkNlYiLx6lb1IwHNq/cfDYFZHPNhLvALddqNU=) 3: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) 4: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0b:ff:be:c2:45:92:e3:dd:ba:9d:27:50:82:80:af:01:68:47:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: Nov 3 12:18:37 2026 GMT Not After : Nov 4 14:25:37 2026 GMT Subject: CN=FD2CAEF687B5A2194CAEF5CFAC52ABA7B4C4D35E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:be:a0:6d:9b:05:eb:12:6e:e4:50:0d:a7: b3:c9:23:36:80:6c:e8:84:21:88:45:29:7f:18:de: 0e:0f:32:e4:af:63:10:c0:d5:18:dd:b9:ae:55:c3: a3:a5:ed:de:f0:b0:43:a1:2e:23:4b:bd:2d:2a:cf: 8b:7c:fb:c5:ca:96:de:c1:d6:7c:15:d4:8e:97:ed: ca:3b:41:6d:b9:31:04:f4:9f:19:5d:24:71:7a:bd: 75:45:4b:40:9d:2d:47:76:18:58:37:d9:d3:23:4b: c8:01:4e:70:cd:18:ab:39:90:80:7b:7e:cd:ae:7e: 8c:d8:bc:cd:ba:4e:32:af:63:e7:7c:56:a9:e1:7f: 6e:3a:d3:b8:27:c4:df:6c:d9:fa:75:d2:c5:98:4a: 68:6a:5a:cd:17:bf:91:e3:d8:22:79:6c:8d:37:c6: 0b:47:7f:af:a5:b7:51:db:32:de:05:66:87:da:ba: e7:22:38:29:a5:f5:18:3c:69:21:cb:05:2a:c3:c6: d7:ae:e6:01:95:53:a5:83:bc:b0:1f:71:70:17:0b: c2:d7:f3:5c:67:14:ce:3d:ae:67:e4:02:28:b5:c9: c3:96:b4:92:a2:bd:43:d9:76:71:aa:09:b0:63:c8: ea:81:d7:4b:0c:af:62:7b:fa:15:30:53:82:7b:bc: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:AE:F6:87:B5:A2:19:4C:AE:F5:CF:AC:52:AB:A7:B4:C4:D3:5E X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:75:63:7e:82:2e:98:11:e1:58:5b:34:0e:04:a2:3e:c5:5e: 0e:96:1c:9f:30:ae:06:a2:bf:20:82:e9:9b:cd:99:6c:94:49: c1:0b:18:07:23:1a:a2:49:b6:7f:22:36:20:6e:eb:99:63:a5: df:d2:a5:ba:28:d0:f5:80:f7:8a:86:b7:35:5f:f9:15:45:f0: 81:00:2e:b7:6f:ff:10:f4:da:ab:8f:70:0b:5f:5e:41:0b:99: 80:dc:cb:e8:91:39:be:3d:65:69:e1:e7:b7:cd:17:95:36:7b: 9d:02:2a:67:3b:fe:3b:79:c9:c2:c7:fb:e0:58:8a:f3:15:a2: 06:99:59:b0:4e:6f:ea:fe:d8:6e:a0:62:35:96:7a:14:2e:f0: a2:6b:57:80:31:f1:8f:53:9c:b2:0b:f1:8d:53:db:46:8b:ca: 8a:2e:4e:de:13:af:43:34:27:c2:cc:9a:49:ab:10:0c:c2:90: c5:99:00:62:5b:b1:cd:69:d8:74:9a:c4:27:be:06:09:64:0f: ac:c8:d2:46:32:f9:0f:86:86:28:2f:fc:fe:b5:15:77:2f:d6: 8e:03:77:7e:46:b1:03:78:42:60:16:69:52:20:e2:15:8b:05: ad:47:ae:ec:ea:e8:b7:02:68:49:92:08:dd:f0:83:8e:e2:f2: fc:52:32:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgv/vsJFkuPdup0nUIKArwFoR70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjExMDMxMjE4MzdaFw0yNjExMDQxNDI1MzdaMDMxMTAvBgNV BAMTKEZEMkNBRUY2ODdCNUEyMTk0Q0FFRjVDRkFDNTJBQkE3QjRDNEQzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk076gbZsF6xJu5FANp7PJIzaA bOiEIYhFKX8Y3g4PMuSvYxDA1Rjdua5Vw6Ol7d7wsEOhLiNLvS0qz4t8+8XKlt7B 1nwV1I6X7co7QW25MQT0nxldJHF6vXVFS0CdLUd2GFg32dMjS8gBTnDNGKs5kIB7 fs2ufozYvM26TjKvY+d8Vqnhf24607gnxN9s2fp10sWYSmhqWs0Xv5Hj2CJ5bI03 xgtHf6+lt1HbMt4FZofauuciOCml9Rg8aSHLBSrDxteu5gGVU6WDvLAfcXAXC8LX 81xnFM49rmfkAii1ycOWtJKivUPZdnGqCbBjyOqB10sMr2J7+hUwU4J7vFeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Syu9oe1ohlMrvXPrFKrp7TE014wHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF91Y36CLpgR4VhbNA4Eoj7FXg6WHJ8wrgai vyCC6ZvNmWyUScELGAcjGqJJtn8iNiBu65ljpd/Spboo0PWA94qGtzVf+RVF8IEA Lrdv/xD02quPcAtfXkELmYDcy+iROb49ZWnh57fNF5U2e50CKmc7/jt5ycLH++BY ivMVogaZWbBOb+r+2G6gYjWWehQu8KJrV4Ax8Y9TnLIL8Y1T20aLyoouTt4Tr0M0 J8LMmkmrEAzCkMWZAGJbsc1p2HSaxCe+BglkD6zI0kYy+Q+Ghigv/P61FXcv1o4D d35GsQN4QmAWaVIg4hWLBa1Hruzq6LcCaEmSCN3wg47i8vxSMtA= -----END CERTIFICATE-----Generated at Wed Nov 4 02:55:05 2026 by rpki-client