$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: ay1iZo4vtvXBvkEH+Cjf72HRWDyBmpkaKscO0wCAcgo= Subject key identifier: 80:9A:31:CE:87:4A:94:46:21:B7:E8:BC:38:D7:29:87:F0:BF:7A:A2 Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 0C2D671F14425ED701B5434FE7134909735F9549 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:57:20 +0000 Manifest this update: Tue 02 Jun 2026 09:52:20 +0000 Manifest next update: Wed 03 Jun 2026 12:19:20 +0000 Files and hashes: 1: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) 2: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) 3: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) 4: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: wcNJw0dP34a5LRZH+PfMmPbxqXF+rZPKvlRoQyd69DA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2d:67:1f:14:42:5e:d7:01:b5:43:4f:e7:13:49:09:73:5f:95:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: Jun 2 09:52:20 2026 GMT Not After : Jun 3 12:19:20 2026 GMT Subject: CN=809A31CE874A944621B7E8BC38D72987F0BF7AA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:a0:b4:c7:fb:09:c8:19:ba:fe:ee:3a:07: b7:c3:3a:14:68:7c:e9:9b:c3:22:47:c9:7e:38:4a: a6:50:d5:c4:db:d1:bc:23:ca:81:cd:12:85:7e:41: 71:9d:82:02:d8:28:9e:f7:d0:c4:0c:43:25:44:02: 27:dd:75:16:1d:4d:28:34:93:8c:b3:67:d6:d2:e3: b7:35:77:2f:1f:4e:8d:20:05:73:4c:7f:27:2a:fe: 58:52:f1:29:df:f4:7f:67:25:d8:9a:02:4c:70:ad: ba:69:e5:a4:43:7b:2e:b4:5f:be:d7:bc:a6:92:ec: 05:02:69:fa:80:09:56:52:3f:30:2e:21:0e:60:c7: 09:9f:68:c9:d6:78:9c:fa:5c:63:29:0a:c9:e1:98: 74:b5:a1:61:6b:25:3a:ae:11:5f:53:42:fa:6d:2e: 65:51:5a:c2:ed:f1:33:a0:c5:b7:a9:68:e0:a0:b7: 76:2d:2a:e1:7b:f6:7c:42:a8:06:b2:d3:80:42:7f: 25:34:68:c1:20:2e:65:42:12:ee:64:bf:b5:17:00: 92:4e:17:cb:48:5f:9b:e5:39:c2:56:3c:1f:73:1f: 8d:b1:bc:92:4f:42:75:db:e7:70:a5:e6:cd:e2:17: 51:3e:ce:ac:7d:38:a1:8a:e2:af:ea:2e:56:97:82: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9A:31:CE:87:4A:94:46:21:B7:E8:BC:38:D7:29:87:F0:BF:7A:A2 X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:43:bc:fa:0e:bb:0f:d0:74:64:e5:b4:85:fe:f0:1d:e1:a2: 05:8a:b0:85:21:60:ae:30:95:9e:7d:0c:47:0a:ec:a0:95:68: b6:80:9c:96:b9:95:b8:8d:82:dd:12:aa:f8:bf:f6:3d:ce:fb: 5c:6f:d8:e2:85:e3:21:12:c6:9a:ea:71:a0:bc:3e:fb:da:b6: 56:a7:1d:5f:b7:b7:fd:72:ad:f9:cb:07:01:89:f3:fd:b3:9b: 55:b6:1c:a2:97:81:0a:62:c3:65:39:e1:93:5a:d7:a2:50:dc: 90:cf:8b:ab:e2:3f:39:cd:e1:f6:e3:4f:c9:ca:a1:fa:26:a2: e1:7f:34:87:3a:86:f9:9f:38:cc:8b:bd:ec:b5:8c:48:e9:3a: 48:a0:e7:be:e6:1a:41:95:45:56:bb:c0:b6:ab:53:b8:7f:cb: e2:e7:85:23:cc:90:ef:f2:51:2a:8d:8b:2b:40:22:ca:cb:cc: ec:d5:35:de:06:57:08:83:9c:49:d5:a8:7b:76:52:a3:0d:1a: e5:d3:81:37:83:12:33:22:8e:fc:d4:ab:12:d0:13:2e:f4:64: b2:5c:ba:1b:bb:4e:f6:31:c8:a3:e1:45:ab:13:6e:fe:cb:3f: 87:d1:e3:36:ea:54:92:4d:64:88:da:cb:bd:6f:8c:bb:7f:71: c9:f9:d2:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDC1nHxRCXtcBtUNP5xNJCXNflUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA2MDIwOTUyMjBaFw0yNjA2MDMxMjE5MjBaMDMxMTAvBgNV BAMTKDgwOUEzMUNFODc0QTk0NDYyMUI3RThCQzM4RDcyOTg3RjBCRjdBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnb6C0x/sJyBm6/u46B7fDOhRo fOmbwyJHyX44SqZQ1cTb0bwjyoHNEoV+QXGdggLYKJ730MQMQyVEAifddRYdTSg0 k4yzZ9bS47c1dy8fTo0gBXNMfycq/lhS8Snf9H9nJdiaAkxwrbpp5aRDey60X77X vKaS7AUCafqACVZSPzAuIQ5gxwmfaMnWeJz6XGMpCsnhmHS1oWFrJTquEV9TQvpt LmVRWsLt8TOgxbepaOCgt3YtKuF79nxCqAay04BCfyU0aMEgLmVCEu5kv7UXAJJO F8tIX5vlOcJWPB9zH42xvJJPQnXb53Cl5s3iF1E+zqx9OKGK4q/qLlaXgtM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgJoxzodKlEYht+i8ONcph/C/eqIwHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtDvPoOuw/QdGTltIX+8B3hogWKsIUhYK4w lZ59DEcK7KCVaLaAnJa5lbiNgt0Sqvi/9j3O+1xv2OKF4yESxprqcaC8Pvvatlan HV+3t/1yrfnLBwGJ8/2zm1W2HKKXgQpiw2U54ZNa16JQ3JDPi6viPznN4fbjT8nK ofomouF/NIc6hvmfOMyLvey1jEjpOkig577mGkGVRVa7wLarU7h/y+LnhSPMkO/y USqNiytAIsrLzOzVNd4GVwiDnEnVqHt2UqMNGuXTgTeDEjMijvzUqxLQEy70ZLJc uhu7TvYxyKPhRasTbv7LP4fR4zbqVJJNZIjay71vjLt/ccn50ig= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:54 2026 by rpki-client