$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft File: CA342D64E10FDED8935633F782F970DA5D9B064C.mft (raw, json) Hash identifier: WwoiW4A8ZL7U7kDHlNElsAO35oFRdr3tuZwCiLoeQGQ= Subject key identifier: BE:BC:43:53:C8:EF:D7:DE:90:E1:E7:C3:2B:26:90:BA:EC:4B:4C:9D Authority key identifier: CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C Certificate issuer: /CN=CA342D64E10FDED8935633F782F970DA5D9B064C Certificate serial: 7147209BFB9021EF5F0248C19B04425485323EB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:51:55 +0000 Manifest this update: Tue 16 Jun 2026 18:46:55 +0000 Manifest next update: Wed 17 Jun 2026 21:36:55 +0000 Files and hashes: 1: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: TJUBR5g23/Ha5LOhGDSn0vJC/lz9ZEDX1zyT3IQkV1w=) 2: CA342D64E10FDED8935633F782F970DA5D9B064C.crl (hash: KYMsSPU+X0RRkuJsj1bXNjqEzO/34pzj7aa6CLn9ws0=) 3: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: vvSuvDOTbwgabu1p62sLlTY9X75KrHQScc7XDf9sZcM=) 4: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: cAOT4AjnHt7EFIcLC/LKlDN+b5yxtCGbGKhkfMCNBoA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:47:20:9b:fb:90:21:ef:5f:02:48:c1:9b:04:42:54:85:32:3e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA342D64E10FDED8935633F782F970DA5D9B064C Validity Not Before: Jun 16 18:46:55 2026 GMT Not After : Jun 17 21:36:55 2026 GMT Subject: CN=BEBC4353C8EFD7DE90E1E7C32B2690BAEC4B4C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3d:3d:6c:be:b4:cb:db:c6:7d:d9:e8:9e:a1: 27:72:65:78:fa:4b:54:f6:3b:4b:4c:4a:4f:ed:7c: f0:15:77:29:eb:87:32:d4:ed:bd:c1:a1:b6:c0:e9: 71:7d:d7:79:d8:74:81:a9:c2:a6:ae:be:69:5d:23: 58:5c:c8:f3:48:cb:e9:32:5b:47:e0:98:2d:a6:b6: 82:d5:eb:29:97:9c:9a:ac:e3:c1:c6:a9:f1:cb:47: 8e:5b:ec:7c:db:31:a6:b0:e4:1a:03:96:e0:66:28: 66:fd:0b:af:71:6d:a2:00:55:c7:5c:6a:3a:96:5d: 96:e7:25:0f:92:06:31:7e:d5:32:c6:fe:dc:81:66: ef:e9:46:0e:4e:d0:95:9e:c9:8b:f0:5a:e4:10:0b: 31:a6:0e:3b:a0:54:b4:8a:ac:2a:e7:74:fd:29:f8: da:11:81:8e:be:ce:5c:31:e9:fc:d1:68:67:0e:5c: db:69:6f:d8:d8:c2:bc:18:4d:b1:28:4f:8f:ed:73: 89:8e:aa:4b:d0:c7:76:a9:1b:62:0d:d7:3a:c4:d8: 55:9e:fc:96:1a:40:0f:b6:40:5d:cf:e4:6e:b3:11: d1:f9:b2:bf:93:81:49:31:9e:3f:cf:87:17:c0:b0: 32:f3:f1:3e:6c:5a:21:95:2a:11:b8:3c:dd:21:ad: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:43:53:C8:EF:D7:DE:90:E1:E7:C3:2B:26:90:BA:EC:4B:4C:9D X509v3 Authority Key Identifier: keyid:CA:34:2D:64:E1:0F:DE:D8:93:56:33:F7:82:F9:70:DA:5D:9B:06:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA342D64E10FDED8935633F782F970DA5D9B064C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/CA342D64E10FDED8935633F782F970DA5D9B064C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6b:0b:bc:76:68:e4:bd:1e:95:d8:e4:6d:42:6e:4c:6d:68: b3:d8:cf:04:36:5a:28:4e:50:80:76:2c:ed:eb:81:b2:db:18: 1c:e8:2e:d1:3f:5b:f5:cd:ca:dc:0e:18:4e:d2:55:29:13:a3: 8a:57:80:7a:c4:a2:fe:e2:f7:f8:d7:5c:8c:ce:8a:8d:08:6b: f4:10:fc:18:f3:50:2c:53:68:30:5c:a6:1d:e4:27:cb:72:f8: 86:b8:b8:ae:87:79:14:9b:32:c6:92:b8:23:02:17:e6:af:e1: 85:14:c6:0f:93:53:db:74:60:d8:34:bf:8c:4a:5b:9f:ed:34: d1:fe:93:4c:6b:3e:f2:d6:66:b9:d7:d9:46:07:48:eb:97:35: 34:21:9d:ea:56:8d:bc:cb:5c:b2:01:a5:f3:7a:cd:1b:a9:10: e6:f0:ad:ee:b6:74:96:f8:78:6a:76:7c:fa:27:9e:a7:b0:aa: ea:83:9a:7d:8a:4b:95:be:50:3d:8b:df:92:89:a7:da:52:f8: d5:f2:b1:10:86:6f:e8:3e:33:b2:3e:79:3e:20:0e:da:e8:bd: 74:8a:d2:73:60:c6:a7:2e:92:8b:68:ba:34:0b:c1:d4:d2:1e: 19:d2:d7:0b:f3:00:ed:e8:86:8b:b4:b2:3e:b5:80:31:15:4a: d2:f9:f2:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUcgm/uQIe9fAkjBmwRCVIUyPrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcwREE1 RDlCMDY0QzAeFw0yNjA2MTYxODQ2NTVaFw0yNjA2MTcyMTM2NTVaMDMxMTAvBgNV BAMTKEJFQkM0MzUzQzhFRkQ3REU5MEUxRTdDMzJCMjY5MEJBRUM0QjRDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1PT1svrTL28Z92eieoSdyZXj6 S1T2O0tMSk/tfPAVdynrhzLU7b3BobbA6XF913nYdIGpwqauvmldI1hcyPNIy+ky W0fgmC2mtoLV6ymXnJqs48HGqfHLR45b7HzbMaaw5BoDluBmKGb9C69xbaIAVcdc ajqWXZbnJQ+SBjF+1TLG/tyBZu/pRg5O0JWeyYvwWuQQCzGmDjugVLSKrCrndP0p +NoRgY6+zlwx6fzRaGcOXNtpb9jYwrwYTbEoT4/tc4mOqkvQx3apG2IN1zrE2FWe /JYaQA+2QF3P5G6zEdH5sr+TgUkxnj/PhxfAsDLz8T5sWiGVKhG4PN0hrf5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvrxDU8jv196Q4efDKyaQuuxLTJ0wHwYDVR0j BBgwFoAUyjQtZOEP3tiTVjP3gvlw2l2bBkwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2ZjVjZTctYjM2Yi00NzNkLWE1YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRF MTBGREVEODkzNTYzM0Y3ODJGOTcwREE1RDlCMDY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTM0MkQ2NEUxMEZERUQ4OTM1NjMzRjc4MkY5NzBEQTVEOUIw NjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvQ0EzNDJENjRFMTBGREVEODkzNTYzM0Y3ODJGOTcw REE1RDlCMDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZrC7x2aOS9HpXY5G1CbkxtaLPYzwQ2WihO UIB2LO3rgbLbGBzoLtE/W/XNytwOGE7SVSkTo4pXgHrEov7i9/jXXIzOio0Ia/QQ /BjzUCxTaDBcph3kJ8ty+Ia4uK6HeRSbMsaSuCMCF+av4YUUxg+TU9t0YNg0v4xK W5/tNNH+k0xrPvLWZrnX2UYHSOuXNTQhnepWjbzLXLIBpfN6zRupEObwre62dJb4 eGp2fPonnqewquqDmn2KS5W+UD2L35KJp9pS+NXysRCGb+g+M7I+eT4gDtrovXSK 0nNgxqcukotoujQLwdTSHhnS1wvzAO3ohou0sj61gDEVStL58v0= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:55 2026 by rpki-client