$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft File: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft (raw, json) Hash identifier: 2AoRT/mfjQdQ+j+lq3vPh4HnpSPJE+bzv7mgPRnQIdc= Subject key identifier: D8:39:A3:78:CA:BA:32:66:92:6B:8C:2C:77:BB:EC:89:12:D6:CC:0D Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 Certificate issuer: /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Certificate serial: 30C094493D7F290CC2CCFBA5D41B288DF200308A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 16:41:59 +0000 Manifest this update: Tue 22 Sep 2026 16:36:59 +0000 Manifest next update: Wed 23 Sep 2026 16:42:59 +0000 Files and hashes: 1: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=) 2: 5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl (hash: LuWb4C+iWZuntKPHK4nVrZobpBR3oq+d+7SLHxvqCZM=) 3: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: WYzWECJswPuDdOJ6s8DgvpO0dlp9PAdq1CvX0vtmC3A=) 4: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: DJ1pTMncFJ6wx2kosKdl3HZzZxnaGs/l+vVMUm8/H+U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 16:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c0:94:49:3d:7f:29:0c:c2:cc:fb:a5:d4:1b:28:8d:f2:00:30:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01 Validity Not Before: Sep 22 16:36:59 2026 GMT Not After : Sep 23 16:42:59 2026 GMT Subject: CN=D839A378CABA3266926B8C2C77BBEC8912D6CC0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:a3:c4:a2:3e:41:59:51:49:e8:fe:55:5f: 52:d1:0f:07:b7:66:7f:73:1c:8d:3d:c5:b6:d8:49: b9:23:8c:53:b3:ab:35:b3:e0:94:0c:3f:96:d7:13: 93:7f:0b:3b:34:b8:1b:e8:a1:78:39:96:f8:dc:4f: 14:e2:0d:d1:e2:ad:b9:3d:79:c0:6f:8f:ce:cb:67: a9:3a:a0:fe:95:6c:59:5a:ee:32:09:28:15:b5:71: 4e:e2:65:b7:5e:7c:8a:81:87:7a:3f:87:f5:7b:eb: 1b:1b:8b:2e:28:23:3a:3d:51:27:35:41:5b:7b:e1: bc:10:53:a1:b0:24:5b:52:46:71:7f:a8:56:64:45: 04:c9:70:d9:73:aa:62:7a:b0:ee:32:3a:f8:36:65: 93:16:5b:55:94:91:de:cd:0a:20:69:3d:c8:e7:22: 05:a5:b3:37:71:29:5e:bc:06:49:d2:db:d9:f8:5b: 33:15:40:0f:72:b9:6d:ca:d9:1e:b3:5c:a5:70:d3: 7e:8f:8f:6d:d2:bd:0d:73:f5:06:14:aa:ed:da:82: 75:5c:57:25:0a:96:97:74:a6:f7:50:84:b6:33:3e: 13:28:b0:1c:8d:eb:43:b0:95:43:6b:20:d9:43:7b: d7:4f:a3:74:c9:44:8c:61:ed:65:05:81:4e:63:16: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:39:A3:78:CA:BA:32:66:92:6B:8C:2C:77:BB:EC:89:12:D6:CC:0D X509v3 Authority Key Identifier: keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:90:99:51:9d:b0:4e:e1:9d:ae:f3:5f:bc:98:96:b0:b8:aa: 16:f0:fb:8e:4f:7a:ac:c6:1c:16:d9:ae:45:e4:2b:57:e4:b3: ba:e5:7e:42:ad:d2:d3:06:7a:68:d7:ad:ad:fe:b9:6a:82:24: d8:b1:14:b6:3e:76:66:dd:cb:31:be:47:06:59:ae:39:96:ac: 30:3b:d4:bb:64:22:73:c3:4a:f6:67:5f:60:b6:40:47:90:b7: 23:e1:0c:96:08:be:b7:c8:55:68:07:b1:6c:30:ec:76:b2:3d: 1f:da:ee:dd:ef:3a:cf:b5:ac:b8:ee:0f:af:42:4c:69:10:c7: 15:cf:6b:94:1f:fa:ac:b4:62:0a:8d:4a:77:30:44:93:ce:a8: 5f:94:39:86:59:0e:5f:53:a4:c2:d3:32:da:8a:75:f1:65:3f: 8a:88:8d:22:60:fe:52:9a:0d:7c:ae:21:f8:ad:8d:59:b9:de: 3d:20:29:80:24:19:44:a7:da:e7:62:81:68:ff:95:66:22:3e: 15:48:3c:ad:6c:97:bd:8e:e2:66:a1:63:5c:ac:46:ac:8f:b7: 16:90:44:9c:61:30:04:05:2a:fb:a9:96:45:67:1e:67:22:11: 28:68:52:2d:f4:91:13:5d:d0:12:c3:c1:47:1c:db:61:64:f7: dd:e1:08:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMCUST1/KQzCzPul1BsojfIAMIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0QkZF MDk4RUIwMTAeFw0yNjA5MjIxNjM2NTlaFw0yNjA5MjMxNjQyNTlaMDMxMTAvBgNV BAMTKEQ4MzlBMzc4Q0FCQTMyNjY5MjZCOEMyQzc3QkJFQzg5MTJENkNDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaKPEoj5BWVFJ6P5VX1LRDwe3 Zn9zHI09xbbYSbkjjFOzqzWz4JQMP5bXE5N/Czs0uBvooXg5lvjcTxTiDdHirbk9 ecBvj87LZ6k6oP6VbFla7jIJKBW1cU7iZbdefIqBh3o/h/V76xsbiy4oIzo9USc1 QVt74bwQU6GwJFtSRnF/qFZkRQTJcNlzqmJ6sO4yOvg2ZZMWW1WUkd7NCiBpPcjn IgWlszdxKV68BknS29n4WzMVQA9yuW3K2R6zXKVw036Pj23SvQ1z9QYUqu3agnVc VyUKlpd0pvdQhLYzPhMosByN60OwlUNrINlDe9dPo3TJRIxh7WUFgU5jFmjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2DmjeMq6MmaSa4wsd7vsiRLWzA0wHwYDVR0j BBgwFoAUXDQrSTcUp3/eHi8eg3mkv+CY6wEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1N2Q1NDMtYmFmMC00MzQ4LTg4NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkz NzE0QTc3RkRFMUUyRjFFODM3OUE0QkZFMDk4RUIwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzM0MkI0OTM3MTRBNzdGREUxRTJGMUU4Mzc5QTRCRkUwOThF QjAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvNUMzNDJCNDkzNzE0QTc3RkRFMUUyRjFFODM3OUE0 QkZFMDk4RUIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGQmVGdsE7hna7zX7yYlrC4qhbw+45PeqzG HBbZrkXkK1fks7rlfkKt0tMGemjXra3+uWqCJNixFLY+dmbdyzG+RwZZrjmWrDA7 1LtkInPDSvZnX2C2QEeQtyPhDJYIvrfIVWgHsWww7HayPR/a7t3vOs+1rLjuD69C TGkQxxXPa5Qf+qy0YgqNSncwRJPOqF+UOYZZDl9TpMLTMtqKdfFlP4qIjSJg/lKa DXyuIfitjVm53j0gKYAkGUSn2udigWj/lWYiPhVIPK1sl72O4mahY1ysRqyPtxaQ RJxhMAQFKvuplkVnHmciEShoUi30kRNd0BLDwUcc22Fk993hCDQ= -----END CERTIFICATE-----Generated at Tue Sep 22 22:37:19 2026 by rpki-client