$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft File: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft (raw, json) Hash identifier: BzokaAt454Qr0TKMOcgY7EyZq7jQYvM5wKZt4dET2xk= Subject key identifier: D9:FD:52:D4:03:D2:E8:7B:77:6F:CD:3C:26:72:10:47:FD:3A:B6:66 Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 Certificate issuer: /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Certificate serial: 07F2A42DA9511DB5CB7D87308D78AFA38F256DF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:45:36 +0000 Manifest this update: Tue 16 Jun 2026 17:40:36 +0000 Manifest next update: Wed 17 Jun 2026 19:14:36 +0000 Files and hashes: 1: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=) 2: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl (hash: gDRkThwCCfTqZD6czwHSisZIl7XqZaHOJkXYGwel654=) 3: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: DJ1pTMncFJ6wx2kosKdl3HZzZxnaGs/l+vVMUm8/H+U=) 4: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: WYzWECJswPuDdOJ6s8DgvpO0dlp9PAdq1CvX0vtmC3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f2:a4:2d:a9:51:1d:b5:cb:7d:87:30:8d:78:af:a3:8f:25:6d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Validity Not Before: Jun 16 17:40:36 2026 GMT Not After : Jun 17 19:14:36 2026 GMT Subject: CN=D9FD52D403D2E87B776FCD3C26721047FD3AB666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:ef:f4:fe:43:37:cb:86:89:bc:4d:f9:25: 1e:31:d9:5c:d9:b7:02:1d:6c:f9:65:53:4c:85:3f: de:99:87:5a:d2:98:f3:2f:ac:4b:09:57:2c:07:35: 06:78:b4:7d:38:70:a8:3a:c5:f1:ab:78:34:a7:46: 51:5b:a7:72:4b:e4:17:fc:84:cf:60:4b:c4:c9:4b: b7:09:80:7c:ae:ed:ab:24:fa:41:3c:c0:bc:d2:43: b0:a2:1c:7a:16:25:6a:d7:77:de:5c:c3:0e:38:1a: 5f:0d:c4:ef:b9:0a:fe:78:53:96:38:be:c9:bc:4a: 92:20:2c:6c:99:ea:df:be:46:d3:de:bc:19:4a:61: 90:d3:3c:8d:21:6e:33:ff:3f:0b:ed:da:24:ef:34: 12:72:95:4a:99:9c:94:2b:20:ca:0e:23:c1:51:77: 3c:02:d1:74:50:07:c1:74:a5:31:fa:51:1b:5d:76: 37:d9:28:db:eb:04:0e:6a:53:5d:fc:81:f0:e2:2e: 57:53:64:4e:a1:36:bb:67:29:22:b2:37:d3:a2:a2: 86:1b:6f:b9:f6:b9:84:d5:8c:a9:16:14:78:6e:ec: 39:37:65:dd:df:46:5f:29:8b:13:82:3e:c5:de:72: c8:06:e5:b3:76:0e:65:eb:cb:0d:1b:e4:4c:61:cc: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FD:52:D4:03:D2:E8:7B:77:6F:CD:3C:26:72:10:47:FD:3A:B6:66 X509v3 Authority Key Identifier: keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ec:0d:c5:eb:a8:4d:fa:92:ec:44:7f:c7:fe:23:80:d2:05: 29:97:bd:f6:e7:ce:da:80:90:51:20:bf:31:e2:6f:7f:10:8c: 1e:76:00:d6:ee:b5:b0:e6:e1:5b:7c:5c:e8:02:b9:26:75:a7: 85:0b:22:d9:5d:d8:82:90:0e:f5:57:05:09:3d:10:2f:e5:a4: a7:62:b1:e4:a1:a5:18:dd:a5:7b:51:e0:02:7a:cb:dd:1a:bd: 9f:e7:6b:2a:04:b6:db:dc:9e:0f:f8:a5:f9:64:d2:88:98:cc: fc:f9:d4:8a:eb:02:f8:80:ca:53:17:4a:e7:a1:0f:de:d8:ff: 3d:b5:ba:8c:11:92:5a:a4:0c:87:c7:46:5c:6a:06:4e:df:76: 6d:d3:e4:36:17:91:53:36:da:8c:60:8f:96:bc:d6:41:d7:88: ef:d7:22:d8:75:83:a8:b8:14:b2:12:a7:8c:87:65:b2:91:4e: a4:a3:aa:97:ce:71:8a:bb:6c:86:30:07:d7:71:86:ff:85:42: 2b:9e:9d:8b:c2:dd:3d:58:db:b5:8a:a7:24:43:97:4a:e9:6b: 9a:a9:db:d6:84:03:45:1e:5b:05:2a:a9:cc:72:1e:ff:ae:a5: a6:ba:2a:61:05:e4:11:53:d0:4e:05:8f:19:1c:24:fd:f2:55: 1e:2d:36:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/KkLalRHbXLfYcwjXivo48lbfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0QkZF MDk4RUIwMTAeFw0yNjA2MTYxNzQwMzZaFw0yNjA2MTcxOTE0MzZaMDMxMTAvBgNV BAMTKEQ5RkQ1MkQ0MDNEMkU4N0I3NzZGQ0QzQzI2NzIxMDQ3RkQzQUI2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcSu/0/kM3y4aJvE35JR4x2VzZ twIdbPllU0yFP96Zh1rSmPMvrEsJVywHNQZ4tH04cKg6xfGreDSnRlFbp3JL5Bf8 hM9gS8TJS7cJgHyu7ask+kE8wLzSQ7CiHHoWJWrXd95cww44Gl8NxO+5Cv54U5Y4 vsm8SpIgLGyZ6t++RtPevBlKYZDTPI0hbjP/Pwvt2iTvNBJylUqZnJQrIMoOI8FR dzwC0XRQB8F0pTH6URtddjfZKNvrBA5qU138gfDiLldTZE6hNrtnKSKyN9OiooYb b7n2uYTVjKkWFHhu7Dk3Zd3fRl8pixOCPsXecsgG5bN2DmXryw0b5ExhzAVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2f1S1APS6Ht3b808JnIQR/06tmYwHwYDVR0j BBgwFoAUXDQrSTcUp3/eHi8eg3mkv+CY6wEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1N2Q1NDMtYmFmMC00MzQ4LTg4NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkz NzE0QTc3RkRFMUUyRjFFODM3OUE0QkZFMDk4RUIwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzM0MkI0OTM3MTRBNzdGREUxRTJGMUU4Mzc5QTRCRkUwOThF QjAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0 QkZFMDk4RUIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPsDcXrqE36kuxEf8f+I4DSBSmXvfbnztqA kFEgvzHib38QjB52ANbutbDm4Vt8XOgCuSZ1p4ULItld2IKQDvVXBQk9EC/lpKdi seShpRjdpXtR4AJ6y90avZ/nayoEttvcng/4pflk0oiYzPz51IrrAviAylMXSueh D97Y/z21uowRklqkDIfHRlxqBk7fdm3T5DYXkVM22oxgj5a81kHXiO/XIth1g6i4 FLISp4yHZbKRTqSjqpfOcYq7bIYwB9dxhv+FQiuenYvC3T1Y27WKpyRDl0rpa5qp 29aEA0UeWwUqqcxyHv+upaa6KmEF5BFT0E4FjxkcJP3yVR4tNo0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:47 2026 by rpki-client