$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: qhVxEsy8qimQP6UrBasPDcIjf3HFubm1hS1TIihJ7sc= Subject key identifier: 00:13:2C:CF:ED:37:C0:1E:75:BE:C6:81:BC:10:13:C4:B5:E1:CF:A6 Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 7ED160D2719E75D23FB699C4FE731FFCA2E3FC09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: BC Signing time: Sun 20 Sep 2026 09:28:54 +0000 Manifest this update: Sun 20 Sep 2026 09:23:54 +0000 Manifest next update: Mon 21 Sep 2026 12:13:54 +0000 Files and hashes: 1: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) 2: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) 3: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) 4: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: Mj4P55Bet4WkH8ICO+5nO/hqwPzIdY5ec5OxbvckRo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d1:60:d2:71:9e:75:d2:3f:b6:99:c4:fe:73:1f:fc:a2:e3:fc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: Sep 20 09:23:54 2026 GMT Not After : Sep 21 12:13:54 2026 GMT Subject: CN=00132CCFED37C01E75BEC681BC1013C4B5E1CFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:76:b0:fb:89:4b:3f:2a:6f:bc:9d:c8:63: 30:60:d9:73:a0:44:0a:5e:1d:b0:2d:0e:ef:9b:32: a4:f6:67:0a:9e:c9:05:6c:73:cf:91:b4:07:ec:0c: fa:87:cc:10:24:b7:3c:52:3c:d5:73:95:5a:b5:6c: f1:28:c6:76:97:8c:d7:3d:ae:c8:55:64:81:ef:c6: 02:86:f4:ea:cf:fe:12:71:30:74:88:92:80:5f:bc: 0e:80:90:46:f5:70:11:b7:44:2e:94:16:bf:63:d9: 41:54:85:99:1a:09:60:28:ea:78:ab:33:d7:60:4a: 02:94:98:64:0f:ea:14:35:32:77:30:03:40:6d:b5: f6:c0:70:d6:c9:dd:09:99:e7:16:ad:88:9e:f3:2a: ad:6e:8c:3e:cc:21:f6:d8:a3:00:e8:66:df:8b:58: db:d7:23:b9:b8:c9:3a:2d:e0:2d:78:9a:99:29:1b: 75:52:5d:13:3a:4d:51:d7:11:cc:55:c1:4a:e2:4d: 68:7c:34:da:76:e1:8f:7e:b9:28:3d:bf:ea:41:1c: ea:c9:14:af:77:84:9b:84:b0:d0:36:0d:ff:e3:7b: 5d:cc:88:c4:a3:79:3d:6c:9b:03:cc:53:62:4e:b7: 28:64:d9:69:ff:e1:10:19:98:a5:30:ea:33:f8:52: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:13:2C:CF:ED:37:C0:1E:75:BE:C6:81:BC:10:13:C4:B5:E1:CF:A6 X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ff:af:04:94:b2:41:2e:4f:cc:05:ab:b1:9e:64:a7:04:05: 01:6b:3c:08:84:93:85:43:aa:0d:61:8d:d6:9d:b2:ca:0f:a9: 95:74:6d:1f:07:76:ed:33:1f:11:72:bb:ee:3c:bb:b6:46:52: b3:9a:fc:99:8f:d1:5d:b3:a0:09:3c:70:4a:60:ad:2f:74:77: db:98:64:09:a4:c1:91:e3:84:18:64:9d:d0:ac:2e:18:56:d8: 44:cf:b1:bf:d1:08:bf:6b:19:b2:e7:b6:39:be:c4:0a:d8:76: d4:97:30:08:28:cb:1f:d3:3e:f2:16:7d:85:ac:aa:c9:78:58: 5c:78:ff:13:c5:46:a4:cb:a3:1f:b0:9a:ba:f4:5d:87:5d:f0: 1e:0a:bd:e8:af:06:2e:d1:ca:8e:dd:73:45:f2:c2:6a:7c:8f: 33:af:ea:20:a7:4d:0a:41:29:6b:5b:b0:72:42:04:b6:d5:36: 6e:f9:24:7e:ac:b3:a3:89:96:6b:99:50:0e:77:29:37:7d:01: 90:40:79:28:32:98:3b:56:7d:b9:97:92:4d:ea:70:03:09:ff: 2b:32:9a:35:45:26:12:e3:eb:13:1b:c9:41:dc:7b:cf:55:d1: 5b:34:ea:c3:b0:cb:74:e2:37:cc:81:c4:2f:88:24:e2:72:ea: 6c:f6:0c:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftFg0nGeddI/tpnE/nMf/KLj/AkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA5MjAwOTIzNTRaFw0yNjA5MjExMjEzNTRaMDMxMTAvBgNV BAMTKDAwMTMyQ0NGRUQzN0MwMUU3NUJFQzY4MUJDMTAxM0M0QjVFMUNGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOonaw+4lLPypvvJ3IYzBg2XOg RApeHbAtDu+bMqT2ZwqeyQVsc8+RtAfsDPqHzBAktzxSPNVzlVq1bPEoxnaXjNc9 rshVZIHvxgKG9OrP/hJxMHSIkoBfvA6AkEb1cBG3RC6UFr9j2UFUhZkaCWAo6nir M9dgSgKUmGQP6hQ1MncwA0BttfbAcNbJ3QmZ5xatiJ7zKq1ujD7MIfbYowDoZt+L WNvXI7m4yTot4C14mpkpG3VSXRM6TVHXEcxVwUriTWh8NNp24Y9+uSg9v+pBHOrJ FK93hJuEsNA2Df/je13MiMSjeT1smwPMU2JOtyhk2Wn/4RAZmKUw6jP4Uv6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABMsz+03wB51vsaBvBATxLXhz6YwHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3/rwSUskEuT8wFq7GeZKcEBQFrPAiEk4VD qg1hjdadssoPqZV0bR8Hdu0zHxFyu+48u7ZGUrOa/JmP0V2zoAk8cEpgrS90d9uY ZAmkwZHjhBhkndCsLhhW2ETPsb/RCL9rGbLntjm+xArYdtSXMAgoyx/TPvIWfYWs qsl4WFx4/xPFRqTLox+wmrr0XYdd8B4KveivBi7Ryo7dc0Xywmp8jzOv6iCnTQpB KWtbsHJCBLbVNm75JH6ss6OJlmuZUA53KTd9AZBAeSgymDtWfbmXkk3qcAMJ/ysy mjVFJhLj6xMbyUHce89V0Vs06sOwy3TiN8yBxC+IJOJy6mz2DIo= -----END CERTIFICATE-----Generated at Mon Sep 21 03:25:48 2026 by rpki-client