$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: JbJQny6hBH+/7Ruv3pV1Z/augHo7kj4l+wqOBoFZ/FY= Subject key identifier: 19:DF:5B:97:F8:BD:3C:24:FF:BD:32:62:FE:DD:B7:1A:38:1C:1D:6B Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 5CF6F771C40906FC43559D9CC73EAF8055392FF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 16:18:57 +0000 Manifest this update: Wed 04 Nov 2026 16:13:57 +0000 Manifest next update: Thu 05 Nov 2026 18:50:57 +0000 Files and hashes: 1: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) 2: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) 3: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: +QUWuXHIgTKbsbqJpDILT+wYulIseXb22xZ3z4qJSSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f6:f7:71:c4:09:06:fc:43:55:9d:9c:c7:3e:af:80:55:39:2f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: Nov 4 16:13:57 2026 GMT Not After : Nov 5 18:50:57 2026 GMT Subject: CN=19DF5B97F8BD3C24FFBD3262FEDDB71A381C1D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:af:35:be:da:a7:89:9b:61:5d:89:8b:de: cd:58:8d:4e:4a:63:5d:8f:c0:da:23:85:d9:4a:d1: 47:1a:7e:80:34:f9:c4:2d:3a:4c:ff:94:c3:4d:48: d9:4b:3b:9a:1f:63:ec:44:53:a6:9d:89:80:ec:bb: 99:8b:94:2b:41:97:d3:96:39:2c:2d:40:56:7a:da: e8:96:92:b9:10:b0:88:04:ed:46:4d:85:6a:de:f1: 4a:1d:de:fb:bd:4b:b9:b2:52:65:80:ae:62:12:00: 00:9a:3c:1e:c2:6f:09:3d:d4:1e:a0:ff:f9:a3:e9: 96:46:05:ad:de:81:90:ed:6d:6a:f9:ea:cc:51:e9: 87:9c:0e:d5:e9:ce:f4:6c:15:68:69:9a:cf:2f:dd: b5:73:d5:7d:6e:1a:0e:95:f6:cd:e6:26:22:01:84: be:6d:3c:08:d8:c3:05:71:02:87:0e:b5:83:93:0c: f7:6b:8e:15:7f:00:88:55:72:e1:d1:16:17:07:c2: 18:90:b5:22:a6:57:34:8a:51:e2:b3:b1:03:f4:39: f6:8e:db:a2:19:38:42:69:bd:02:32:46:77:d5:f5: 2f:48:2c:e0:cd:5f:f3:2a:81:fe:64:1b:25:ce:b5: 7b:14:48:f4:ad:52:c4:53:f1:eb:d2:88:70:0a:96: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DF:5B:97:F8:BD:3C:24:FF:BD:32:62:FE:DD:B7:1A:38:1C:1D:6B X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:78:2d:a2:c9:0f:0d:0b:87:5e:f3:af:42:1f:27:b1:d3:1b: 95:02:22:8d:2c:05:7f:fd:7c:30:0d:15:34:6d:4b:81:e2:ad: 22:2b:24:95:ed:8c:56:73:b3:32:b5:f6:03:bc:e2:29:64:dc: 8b:38:1e:74:f6:e2:bc:a5:55:ef:30:a7:93:29:f0:f3:3a:16: 59:68:ee:1b:d8:2f:b6:6a:dd:2a:2f:ea:f6:85:b2:22:8b:de: 85:69:6d:b7:a7:36:35:29:f3:ce:e9:2a:90:b3:62:1c:35:7b: 59:31:e7:86:2a:da:ff:8f:68:ac:a4:8b:b5:4d:7c:1c:f2:a7: 88:42:62:b6:d1:67:0f:a5:d6:99:b8:d4:15:27:e5:36:db:d1: eb:63:6f:e0:6c:20:55:70:1b:b1:5a:5a:56:8b:90:5e:b2:67: 1b:7d:8c:69:f9:69:d6:a5:b0:ea:41:5d:d8:64:71:c2:03:d4: 00:e6:12:a2:35:3b:97:e7:56:f8:ef:83:df:4f:ed:e4:70:3a: e0:52:4a:7f:96:38:e0:56:ed:ea:2f:1f:22:14:a2:db:3f:75: 14:66:76:aa:84:14:df:88:b3:0b:61:3f:d1:b9:0f:f2:fa:75: 43:7a:aa:d9:bd:f2:02:ed:e5:80:29:9a:4b:ed:2c:35:9e:bb: 13:d1:95:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPb3ccQJBvxDVZ2cxz6vgFU5L/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjExMDQxNjEzNTdaFw0yNjExMDUxODUwNTdaMDMxMTAvBgNV BAMTKDE5REY1Qjk3RjhCRDNDMjRGRkJEMzI2MkZFRERCNzFBMzgxQzFENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPq81vtqniZthXYmL3s1YjU5K Y12PwNojhdlK0UcafoA0+cQtOkz/lMNNSNlLO5ofY+xEU6adiYDsu5mLlCtBl9OW OSwtQFZ62uiWkrkQsIgE7UZNhWre8Uod3vu9S7myUmWArmISAACaPB7Cbwk91B6g //mj6ZZGBa3egZDtbWr56sxR6YecDtXpzvRsFWhpms8v3bVz1X1uGg6V9s3mJiIB hL5tPAjYwwVxAocOtYOTDPdrjhV/AIhVcuHRFhcHwhiQtSKmVzSKUeKzsQP0OfaO 26IZOEJpvQIyRnfV9S9ILODNX/Mqgf5kGyXOtXsUSPStUsRT8evSiHAKlhozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGd9bl/i9PCT/vTJi/t23GjgcHWswHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAV4LaLJDw0Lh17zr0IfJ7HTG5UCIo0sBX/9 fDANFTRtS4HirSIrJJXtjFZzszK19gO84ilk3Is4HnT24rylVe8wp5Mp8PM6Fllo 7hvYL7Zq3Sov6vaFsiKL3oVpbbenNjUp887pKpCzYhw1e1kx54Yq2v+PaKyki7VN fBzyp4hCYrbRZw+l1pm41BUn5Tbb0etjb+BsIFVwG7FaWlaLkF6yZxt9jGn5adal sOpBXdhkccID1ADmEqI1O5fnVvjvg99P7eRwOuBSSn+WOOBW7eovHyIUots/dRRm dqqEFN+IswthP9G5D/L6dUN6qtm98gLt5YApmkvtLDWeuxPRlak= -----END CERTIFICATE-----Generated at Wed Nov 4 20:34:38 2026 by rpki-client