$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: K/KYS1M/O0l5KfXOAGrgUFBSTlGdsnsFoAkmSGIS5BY= Subject key identifier: DF:71:79:DD:CB:E7:2C:80:9D:4D:82:8D:E5:31:BB:73:43:98:F7:6C Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 13BD0EA8B9C54C854F8EA6D5F280451D31C512C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:06:07 +0000 Manifest this update: Wed 03 Jun 2026 01:01:07 +0000 Manifest next update: Thu 04 Jun 2026 03:55:07 +0000 Files and hashes: 1: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: TPfa+K6A7q103VRQdHkZuUtIoC3QTuRjuMBaVGvJ0fA=) 2: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) 3: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bd:0e:a8:b9:c5:4c:85:4f:8e:a6:d5:f2:80:45:1d:31:c5:12:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: Jun 3 01:01:07 2026 GMT Not After : Jun 4 03:55:07 2026 GMT Subject: CN=DF7179DDCBE72C809D4D828DE531BB734398F76C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:18:f3:58:01:cb:a4:74:14:d2:0d:84:e7:e2: 8e:da:d0:77:e1:af:26:50:b3:20:f2:7e:46:77:7b: e7:af:d1:61:c9:e0:54:f7:2d:39:99:8c:c6:4c:47: bf:66:23:82:cb:9b:cc:84:db:4e:55:da:f3:49:fd: dd:d1:dd:a4:01:3f:c9:9c:9f:7b:31:13:6e:15:ae: 15:68:0f:0e:b7:6a:bd:d9:2d:39:a6:e8:3d:ca:fe: cb:a5:6c:fe:dc:a5:fe:95:6b:65:97:c6:ea:5d:cb: 3a:cf:e2:e7:08:e0:95:45:0d:c1:85:d1:20:ba:b0: 7a:9e:91:b2:41:ff:b3:db:ea:2c:7c:ba:5d:3b:22: fc:db:99:b6:99:df:eb:b0:0e:0e:c8:1c:21:4a:ad: 7f:0b:cb:98:f3:e8:4d:a9:ce:18:41:8c:6f:98:de: da:30:09:42:23:71:ff:74:f6:50:25:dc:30:d8:13: cd:23:c7:a5:e3:0d:9c:21:50:14:17:c1:09:3b:dd: ce:37:54:b6:e3:9c:fd:34:08:c2:6a:55:7a:1f:0b: a9:aa:e9:e3:91:26:77:ab:3a:80:20:80:00:21:dc: da:4d:66:11:71:82:da:4f:c9:06:94:67:5e:d2:9b: 6d:48:9b:bf:3d:0b:5f:33:1f:7d:77:91:8f:56:4a: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:71:79:DD:CB:E7:2C:80:9D:4D:82:8D:E5:31:BB:73:43:98:F7:6C X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8a:61:6d:28:da:43:6b:38:ff:23:e4:62:ef:a4:70:10:af: d7:46:65:52:02:74:3d:db:3e:2d:2a:76:03:e9:1e:cb:8b:1f: 6a:b5:42:58:b6:2d:49:d0:e8:fc:5d:9c:3c:83:47:82:ea:44: 72:71:71:b7:23:6f:24:18:9e:76:5e:47:b7:8b:bb:ae:03:e8: 09:1d:4c:c9:de:3d:da:c7:f5:73:3d:b3:41:39:cf:94:b7:35: ca:5c:63:fb:37:1c:a4:00:91:44:b9:21:ba:70:16:78:d6:fa: 6f:bb:c3:58:b2:fe:d0:23:87:54:5e:3a:e4:d0:40:41:11:49: 57:c0:cc:6c:21:f3:b1:dd:fd:7c:0c:4c:2f:47:66:cf:73:d4: cd:86:39:54:6a:a4:3c:a3:a2:67:e5:a6:ee:9f:3a:b3:4e:57: 3a:1a:bc:ee:8b:67:66:a4:4a:88:18:bd:e9:f4:e7:51:b1:7a: 76:c3:5d:c5:74:dd:63:b1:a8:8f:4f:a2:94:fd:30:48:4f:45: fd:d8:0f:86:1b:d8:e4:12:e0:c9:16:a6:a4:91:92:9d:89:9a: 8a:89:40:06:70:ef:cf:5a:44:3b:cc:8c:bb:a5:f6:8b:36:dc: a7:b5:9a:98:49:41:2b:17:3d:15:7c:0c:3d:6e:9a:3d:56:fc: 11:28:e1:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE70OqLnFTIVPjqbV8oBFHTHFEsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjA2MDMwMTAxMDdaFw0yNjA2MDQwMzU1MDdaMDMxMTAvBgNV BAMTKERGNzE3OUREQ0JFNzJDODA5RDREODI4REU1MzFCQjczNDM5OEY3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGPNYAcukdBTSDYTn4o7a0Hfh ryZQsyDyfkZ3e+ev0WHJ4FT3LTmZjMZMR79mI4LLm8yE205V2vNJ/d3R3aQBP8mc n3sxE24VrhVoDw63ar3ZLTmm6D3K/sulbP7cpf6Va2WXxupdyzrP4ucI4JVFDcGF 0SC6sHqekbJB/7Pb6ix8ul07IvzbmbaZ3+uwDg7IHCFKrX8Ly5jz6E2pzhhBjG+Y 3towCUIjcf909lAl3DDYE80jx6XjDZwhUBQXwQk73c43VLbjnP00CMJqVXofC6mq 6eORJnerOoAggAAh3NpNZhFxgtpPyQaUZ17Sm21Im789C18zH313kY9WSjXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU33F53cvnLICdTYKN5TG7c0OY92wwHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+KYW0o2kNrOP8j5GLvpHAQr9dGZVICdD3b Pi0qdgPpHsuLH2q1Qli2LUnQ6PxdnDyDR4LqRHJxcbcjbyQYnnZeR7eLu64D6Akd TMnePdrH9XM9s0E5z5S3NcpcY/s3HKQAkUS5IbpwFnjW+m+7w1iy/tAjh1ReOuTQ QEERSVfAzGwh87Hd/XwMTC9HZs9z1M2GOVRqpDyjomflpu6fOrNOVzoavO6LZ2ak SogYven051GxenbDXcV03WOxqI9PopT9MEhPRf3YD4Yb2OQS4MkWpqSRkp2JmoqJ QAZw789aRDvMjLul9os23Ke1mphJQSsXPRV8DD1umj1W/BEo4bw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:17 2026 by rpki-client