$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: O36K4mbevpDEIAPfh/BAEBUuKWBuXpn7r+FS+kB6m0A= Subject key identifier: 5E:5D:93:B7:7A:52:4F:AD:E2:19:14:90:99:C8:0D:66:8D:3C:5C:E1 Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: D0DE9D3911021E001813B62E0A3D9C2A61D314 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:32:48 +0000 Manifest this update: Thu 17 Sep 2026 07:27:48 +0000 Manifest next update: Fri 18 Sep 2026 10:47:48 +0000 Files and hashes: 1: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) 2: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: XQLEHjQwFoH2pweShHhS03+fnPvyOavLxWTpr/E3LiA=) 3: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) 4: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d0:de:9d:39:11:02:1e:00:18:13:b6:2e:0a:3d:9c:2a:61:d3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: Sep 17 07:27:48 2026 GMT Not After : Sep 18 10:47:48 2026 GMT Subject: CN=5E5D93B77A524FADE219149099C80D668D3C5CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:81:27:32:f5:d9:af:22:db:b8:4e:37:d1: db:8b:9b:0c:40:c4:af:a2:da:b9:05:a2:1b:3e:ff: 46:61:d3:62:df:b7:da:43:cf:d5:3a:34:bc:8a:c2: 77:f2:ea:29:41:00:f3:25:0a:4d:07:cb:41:dc:3b: 7b:c5:7d:63:68:82:88:3a:cc:3c:6a:e5:7e:02:95: 42:d1:9a:2f:2e:a2:56:9e:ad:49:3f:61:1d:6a:1d: d8:ea:a9:f1:a9:18:7a:1e:94:6c:fd:ac:53:d5:53: 8b:d3:22:bf:46:5b:29:65:b3:f1:5c:8c:b4:62:86: 75:3a:f0:0d:ce:60:eb:2f:8d:d7:5b:36:b6:e7:00: b0:8a:ea:66:9b:63:a8:7c:8b:0e:9b:d2:c8:5a:39: f7:fb:b2:6d:c3:ca:10:1b:97:2b:e9:c2:38:e6:87: 76:95:41:57:9e:b3:50:6e:ac:28:09:d9:99:52:c0: 89:f5:8f:bc:2f:f4:28:80:3f:6d:98:14:4c:3f:d9: 4a:25:45:c1:82:be:f9:52:85:fa:66:3a:fe:f6:15: e2:e4:40:4d:4e:b2:cf:db:09:55:3f:ef:bd:01:fe: 85:01:a1:5b:4a:82:4b:af:c6:57:e0:a5:bd:e0:df: 27:cb:49:0a:62:54:ce:8d:0c:c7:d3:7f:9c:48:1a: 4d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5D:93:B7:7A:52:4F:AD:E2:19:14:90:99:C8:0D:66:8D:3C:5C:E1 X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0d:c2:8c:54:2c:78:ff:5f:2e:18:96:52:9e:fe:92:63:4c: 63:5d:96:8e:c7:95:f6:d5:c6:9f:82:1e:8b:29:4a:6f:39:6f: 17:c5:27:5f:1a:34:60:5a:bb:47:ab:e6:56:1d:ed:72:a4:9e: 25:5e:d5:75:e1:4f:2c:72:9f:44:65:36:e5:6e:e7:0d:ab:15: 82:4a:b4:6e:26:f7:2e:3c:64:91:cb:33:ae:2e:37:e8:ee:66: 00:28:ca:31:1c:e2:87:cf:31:9e:c6:a9:dd:1a:c6:62:b9:db: 70:4f:d5:77:f2:3c:fa:25:bc:e2:94:49:9c:cd:22:c0:c5:b4: e5:1e:90:8a:6b:d2:5b:e0:ba:53:6d:30:2f:bc:db:30:38:33: 42:9d:f0:42:56:91:0e:80:86:46:d4:40:21:9a:d8:08:6a:42: 31:0b:55:c7:b8:66:3e:a4:d3:34:5f:be:a0:e0:d6:1f:1e:65: dd:29:ee:36:b1:d6:95:bb:73:b2:df:87:8b:b9:5d:91:b6:88: 84:ed:03:fa:75:cc:6e:46:6a:31:c0:21:e2:74:1f:3a:77:cb: f9:ef:e1:96:14:af:38:35:da:6b:7f:0c:7e:6f:b6:d5:ed:77: 0e:23:c8:a6:bf:d3:23:36:87:0e:49:40:79:a1:de:7c:06:84: 1e:fa:af:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANDenTkRAh4AGBO2Lgo9nCph0xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA5MTcwNzI3NDhaFw0yNjA5MTgxMDQ3NDhaMDMxMTAvBgNV BAMTKDVFNUQ5M0I3N0E1MjRGQURFMjE5MTQ5MDk5QzgwRDY2OEQzQzVDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQQoEnMvXZryLbuE430duLmwxA xK+i2rkFohs+/0Zh02Lft9pDz9U6NLyKwnfy6ilBAPMlCk0Hy0HcO3vFfWNogog6 zDxq5X4ClULRmi8uolaerUk/YR1qHdjqqfGpGHoelGz9rFPVU4vTIr9GWylls/Fc jLRihnU68A3OYOsvjddbNrbnALCK6mabY6h8iw6b0shaOff7sm3DyhAblyvpwjjm h3aVQVees1BurCgJ2ZlSwIn1j7wv9CiAP22YFEw/2UolRcGCvvlShfpmOv72FeLk QE1Oss/bCVU/770B/oUBoVtKgkuvxlfgpb3g3yfLSQpiVM6NDMfTf5xIGk23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXl2Tt3pST63iGRSQmcgNZo08XOEwHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQNwoxULHj/Xy4YllKe/pJjTGNdlo7HlfbV xp+CHospSm85bxfFJ18aNGBau0er5lYd7XKkniVe1XXhTyxyn0RlNuVu5w2rFYJK tG4m9y48ZJHLM64uN+juZgAoyjEc4ofPMZ7Gqd0axmK523BP1XfyPPolvOKUSZzN IsDFtOUekIpr0lvgulNtMC+82zA4M0Kd8EJWkQ6AhkbUQCGa2AhqQjELVce4Zj6k 0zRfvqDg1h8eZd0p7jax1pW7c7Lfh4u5XZG2iITtA/p1zG5GajHAIeJ0Hzp3y/nv 4ZYUrzg12mt/DH5vttXtdw4jyKa/0yM2hw5JQHmh3nwGhB76rzw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:47:14 2026 by rpki-client