$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: +WIXEa+bmol4p0TvPlLkQ80Fnn9apRZn1mgb3SqoWDU= Subject key identifier: 04:9E:00:3E:9C:C3:A5:B0:04:D1:A7:5A:A6:DE:12:49:D9:2E:60:E7 Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 344A8F918B2528440F5195950995D0958494D15C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 00:05:53 +0000 Manifest this update: Tue 21 Jul 2026 00:00:53 +0000 Manifest next update: Wed 22 Jul 2026 01:19:53 +0000 Files and hashes: 1: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: BYChnsAl5WgJLA/f3G20uYfRgpEaeBor8d+59ZNvPxA=) 2: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) 3: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) 4: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4a:8f:91:8b:25:28:44:0f:51:95:95:09:95:d0:95:84:94:d1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: Jul 21 00:00:53 2026 GMT Not After : Jul 22 01:19:53 2026 GMT Subject: CN=049E003E9CC3A5B004D1A75AA6DE1249D92E60E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:e2:80:7b:ec:b9:fc:2d:fd:cf:d9:e9:fb: d5:b3:00:dc:aa:eb:85:92:e7:6e:52:d1:78:20:4b: 84:fa:a0:c8:b4:b4:de:5f:05:c4:f9:f7:60:75:44: bf:de:04:a1:1e:c3:0c:98:bf:b2:05:b7:f1:8f:33: 04:62:58:04:99:07:63:67:41:94:ca:4d:1c:99:92: a5:5a:ec:ef:1c:07:c0:d8:94:1e:3d:50:34:a6:bd: 57:d4:2c:6d:3a:9e:70:d6:17:c6:73:fb:bc:3f:ef: ea:d2:b9:96:d8:92:b6:36:29:94:bb:d5:38:d1:cb: 40:23:15:19:3a:c0:0c:08:cf:6e:65:f0:1b:74:1e: 4d:da:cf:f2:0f:1e:94:d1:97:9a:09:39:4a:45:75: c0:ae:2b:d6:d7:61:b9:25:75:e1:96:7d:bb:35:13: 65:ca:80:1e:fc:63:da:58:b1:0a:ec:90:58:59:96: 9a:d9:3e:09:d3:82:99:14:9d:44:df:4a:97:ff:82: 23:1d:ee:99:62:95:91:cd:dd:e2:1d:ca:39:3f:72: 66:7a:d5:36:37:88:d9:54:a6:79:9d:4f:4f:c9:72: 1c:25:64:92:c3:c3:85:cb:4a:b5:01:0f:8f:72:9f: 1a:4d:37:e2:45:66:e3:46:2b:9b:ea:72:5f:3d:07: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:00:3E:9C:C3:A5:B0:04:D1:A7:5A:A6:DE:12:49:D9:2E:60:E7 X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:fa:99:08:b1:32:78:20:32:07:67:00:c9:f8:a1:22:1f:43: 9f:4c:0e:93:15:c0:31:f1:d2:5c:ac:4d:47:7c:7f:43:3d:c9: c8:d6:bb:f3:c0:76:8a:35:bd:9d:e2:ed:c9:dc:49:ff:20:33: c1:0f:0a:a7:bc:b9:f0:04:ce:2f:12:84:8b:06:8e:9f:a6:a4: 3c:86:69:19:74:76:05:cb:2b:42:83:8d:7d:f3:ff:5f:90:46: c3:1c:c3:fd:0a:a9:08:e8:de:d4:92:c7:a7:f1:80:87:1f:4b: 68:4f:9a:a2:51:2f:94:68:9e:85:20:73:a6:3c:24:03:77:94: ba:95:e2:d4:cd:2f:e0:14:ad:55:7e:28:79:d2:6a:2a:0f:87: 06:de:6c:2a:24:2f:e6:d3:98:b4:79:08:a1:48:e4:bd:89:ba: c7:5a:36:5c:ec:c2:64:4f:64:45:6c:fc:4a:ad:91:20:bd:75: 86:a7:31:05:b9:19:62:67:87:01:29:24:78:e3:82:29:d4:75: 04:cd:61:f7:c7:79:1b:b0:03:b5:0c:46:2d:38:fe:c6:7b:30: c9:03:a4:0b:67:cb:ef:03:54:4e:6c:1b:46:23:e2:89:a0:32: 2b:4d:af:46:ce:83:1d:35:f5:12:75:83:95:7e:16:f7:30:b6: 77:6c:2f:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEqPkYslKEQPUZWVCZXQlYSU0VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA3MjEwMDAwNTNaFw0yNjA3MjIwMTE5NTNaMDMxMTAvBgNV BAMTKDA0OUUwMDNFOUNDM0E1QjAwNEQxQTc1QUE2REUxMjQ5RDkyRTYwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1uKAe+y5/C39z9np+9WzANyq 64WS525S0XggS4T6oMi0tN5fBcT592B1RL/eBKEewwyYv7IFt/GPMwRiWASZB2Nn QZTKTRyZkqVa7O8cB8DYlB49UDSmvVfULG06nnDWF8Zz+7w/7+rSuZbYkrY2KZS7 1TjRy0AjFRk6wAwIz25l8Bt0Hk3az/IPHpTRl5oJOUpFdcCuK9bXYbkldeGWfbs1 E2XKgB78Y9pYsQrskFhZlprZPgnTgpkUnUTfSpf/giMd7plilZHN3eIdyjk/cmZ6 1TY3iNlUpnmdT0/JchwlZJLDw4XLSrUBD49ynxpNN+JFZuNGK5vqcl89B5MLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJ4APpzDpbAE0adapt4SSdkuYOcwHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHj6mQixMnggMgdnAMn4oSIfQ59MDpMVwDHx 0lysTUd8f0M9ycjWu/PAdoo1vZ3i7cncSf8gM8EPCqe8ufAEzi8ShIsGjp+mpDyG aRl0dgXLK0KDjX3z/1+QRsMcw/0KqQjo3tSSx6fxgIcfS2hPmqJRL5RonoUgc6Y8 JAN3lLqV4tTNL+AUrVV+KHnSaioPhwbebCokL+bTmLR5CKFI5L2JusdaNlzswmRP ZEVs/EqtkSC9dYanMQW5GWJnhwEpJHjjginUdQTNYffHeRuwA7UMRi04/sZ7MMkD pAtny+8DVE5sG0Yj4omgMitNr0bOgx019RJ1g5V+FvcwtndsLxU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:34 2026 by rpki-client