$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft File: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft (raw, json) Hash identifier: glS+BXQh041145W8J8nUMykyxcNNStb1g6VxSbwNIZg= Subject key identifier: 7A:E2:7A:3F:1B:30:19:E4:47:4F:CD:93:4A:3A:00:11:D0:A8:DE:46 Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 Certificate issuer: /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Certificate serial: 6DF8B890D1C0FFBACD0F1A9024DA7BB54B2F1AA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 23:48:18 +0000 Manifest this update: Wed 16 Sep 2026 23:43:18 +0000 Manifest next update: Thu 17 Sep 2026 23:58:18 +0000 Files and hashes: 1: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: WYzWECJswPuDdOJ6s8DgvpO0dlp9PAdq1CvX0vtmC3A=) 2: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: DJ1pTMncFJ6wx2kosKdl3HZzZxnaGs/l+vVMUm8/H+U=) 3: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl (hash: h7pgymhVzfBKIcjY5UOKHybusEX41micLvFSZsU/oJk=) 4: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f8:b8:90:d1:c0:ff:ba:cd:0f:1a:90:24:da:7b:b5:4b:2f:1a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Validity Not Before: Sep 16 23:43:18 2026 GMT Not After : Sep 17 23:58:18 2026 GMT Subject: CN=7AE27A3F1B3019E4474FCD934A3A0011D0A8DE46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:31:27:e6:e4:04:81:a7:d9:13:58:f5:c3: b2:58:86:fe:56:e8:57:58:9b:52:13:3f:42:f7:45: b5:42:a9:84:da:80:f6:9e:a9:2d:7d:71:d1:ab:58: 93:7b:e0:c3:53:eb:2f:55:ee:7f:6b:e3:d9:de:fd: e1:cd:c9:1b:e5:9a:29:6f:b2:c8:cc:3d:db:09:c4: b0:96:87:ff:72:5d:a3:14:c5:42:df:09:0c:76:de: e2:61:18:94:f5:dc:d6:ec:35:59:ef:c7:d4:42:32: 7c:84:e6:97:25:fb:f0:63:dd:6d:bf:a5:a0:bc:ca: cc:de:6b:bb:75:82:6d:92:5c:8b:d9:a9:27:28:02: 05:59:2f:98:8a:f1:14:78:f5:0d:0d:23:09:18:f9: 7c:41:15:9c:94:02:b0:5e:02:64:13:d2:2d:3a:2d: 46:e8:cf:f8:a0:39:d6:44:f8:e6:80:cc:65:a3:64: 63:8a:74:7b:b2:e1:dd:19:05:6f:b3:fd:1b:a9:28: ad:95:e2:bb:d5:21:e9:57:a6:c3:c1:9b:0a:00:a8: 92:23:91:89:d5:5a:95:c7:dc:ed:28:3b:aa:f4:cf: c2:39:ec:7b:98:12:88:44:5b:66:3a:68:ad:a8:87: 15:14:4c:23:da:0c:da:fb:b6:d3:78:b9:15:70:c6: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E2:7A:3F:1B:30:19:E4:47:4F:CD:93:4A:3A:00:11:D0:A8:DE:46 X509v3 Authority Key Identifier: keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:fc:a7:9a:d6:2a:f7:d6:0b:ec:dc:05:e1:97:b4:ee:92:2d: 27:24:06:55:6e:d2:21:fd:0e:3e:ae:09:3d:20:94:81:01:3f: c7:22:e3:96:a1:b0:13:29:3e:ed:a0:ce:f5:87:c6:33:d5:93: e9:5c:7f:c8:ab:4e:72:16:40:ec:a3:68:30:67:ae:42:87:02: af:aa:98:c8:a6:1c:a9:7d:2b:7a:64:1a:57:31:97:1c:44:df: 6e:c4:63:f0:21:21:5d:26:2a:c6:a2:8b:42:7e:51:2d:e7:c8: 4f:2b:36:f4:95:5b:f9:76:0e:06:0c:01:4c:7d:04:5f:46:d3: 41:fd:36:3b:59:9a:d2:f8:02:7e:51:97:69:c9:62:1d:59:a9: f3:c3:d1:90:54:77:39:07:3b:8b:5f:df:42:81:52:bf:2d:32: 70:c8:00:f5:f5:18:de:d7:e6:35:30:6f:cf:2e:cc:2f:13:cd: 60:84:19:92:10:18:e5:5b:ce:c0:75:f7:ae:37:fb:0d:0b:7c: 70:f6:05:68:6c:71:0c:e0:c6:87:4a:27:9d:84:8b:d5:df:cb: 90:26:da:5c:c4:d8:8b:85:0b:a4:cb:e6:a4:64:a8:42:71:cc: 4d:6a:a0:5a:99:21:cb:e4:d2:16:7f:58:54:78:97:22:90:8c: 00:82:d0:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbfi4kNHA/7rNDxqQJNp7tUsvGqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0QkZF MDk4RUIwMTAeFw0yNjA5MTYyMzQzMThaFw0yNjA5MTcyMzU4MThaMDMxMTAvBgNV BAMTKDdBRTI3QTNGMUIzMDE5RTQ0NzRGQ0Q5MzRBM0EwMDExRDBBOERFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCTEn5uQEgafZE1j1w7JYhv5W 6FdYm1ITP0L3RbVCqYTagPaeqS19cdGrWJN74MNT6y9V7n9r49ne/eHNyRvlmilv ssjMPdsJxLCWh/9yXaMUxULfCQx23uJhGJT13NbsNVnvx9RCMnyE5pcl+/Bj3W2/ paC8yszea7t1gm2SXIvZqScoAgVZL5iK8RR49Q0NIwkY+XxBFZyUArBeAmQT0i06 LUboz/igOdZE+OaAzGWjZGOKdHuy4d0ZBW+z/RupKK2V4rvVIelXpsPBmwoAqJIj kYnVWpXH3O0oO6r0z8I57HuYEohEW2Y6aK2ohxUUTCPaDNr7ttN4uRVwxoABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeuJ6PxswGeRHT82TSjoAEdCo3kYwHwYDVR0j BBgwFoAUXDQrSTcUp3/eHi8eg3mkv+CY6wEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1N2Q1NDMtYmFmMC00MzQ4LTg4NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkz NzE0QTc3RkRFMUUyRjFFODM3OUE0QkZFMDk4RUIwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzM0MkI0OTM3MTRBNzdGREUxRTJGMUU4Mzc5QTRCRkUwOThF QjAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0 QkZFMDk4RUIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJf8p5rWKvfWC+zcBeGXtO6SLSckBlVu0iH9 Dj6uCT0glIEBP8ci45ahsBMpPu2gzvWHxjPVk+lcf8irTnIWQOyjaDBnrkKHAq+q mMimHKl9K3pkGlcxlxxE327EY/AhIV0mKsaii0J+US3nyE8rNvSVW/l2DgYMAUx9 BF9G00H9NjtZmtL4An5Rl2nJYh1ZqfPD0ZBUdzkHO4tf30KBUr8tMnDIAPX1GN7X 5jUwb88uzC8TzWCEGZIQGOVbzsB19643+w0LfHD2BWhscQzgxodKJ52Ei9Xfy5Am 2lzE2IuFC6TL5qRkqEJxzE1qoFqZIcvk0hZ/WFR4lyKQjACC0Pk= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:00 2026 by rpki-client