$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: ZFEuZBM0CJp//dAD+c7NrfELoO3Vsz/+1BXYcabUi1w= Subject key identifier: AA:67:06:FC:16:21:7A:7C:05:4D:B3:78:59:C8:8E:4F:73:9F:56:67 Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 40F040A6C921B7309E214207F93A961BCBA52044 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:12:17 +0000 Manifest this update: Tue 21 Jul 2026 01:07:17 +0000 Manifest next update: Wed 22 Jul 2026 01:30:17 +0000 Files and hashes: 1: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) 2: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: C5DI0nAmqc91UW8oyL3WV0mO1pkrmNna90VQa438rug=) 3: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f0:40:a6:c9:21:b7:30:9e:21:42:07:f9:3a:96:1b:cb:a5:20:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: Jul 21 01:07:17 2026 GMT Not After : Jul 22 01:30:17 2026 GMT Subject: CN=AA6706FC16217A7C054DB37859C88E4F739F5667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6e:80:ec:db:37:5c:bb:fe:34:93:f1:c8:5b: aa:bb:7f:70:e3:cc:89:72:4c:31:d8:61:1a:dd:18: 4e:5b:24:00:23:eb:0f:39:a6:29:32:26:89:65:c5: bd:8d:ea:0e:78:bd:14:e7:10:f2:04:17:20:b8:f9: 61:29:fa:18:01:0c:36:88:da:5b:fa:89:aa:c0:76: 1e:a0:64:86:eb:bd:06:1d:45:50:52:8a:0c:64:69: ee:ee:86:75:0a:03:ea:7a:48:06:31:5f:d3:01:b9: 92:c6:44:7c:8c:0e:d1:03:a9:d3:f0:e9:af:3f:9b: 46:6a:cf:26:62:25:44:50:ba:ef:65:1e:7a:0f:91: 3e:f1:ba:f6:af:63:c5:df:15:c9:6e:44:af:da:83: 20:b4:be:61:8d:da:3d:04:f9:60:84:cf:16:34:50: 77:80:67:1d:1d:7b:c1:f3:47:92:69:3c:ec:a2:0d: ec:08:87:56:32:c4:c5:3b:0b:74:33:30:ec:c6:95: d1:49:f8:17:ba:cd:7f:26:fb:5a:3b:dd:41:33:1b: 22:59:00:1a:45:ca:1e:c7:26:9c:d5:7d:19:e5:3d: d5:ca:37:24:22:7e:48:fc:56:d8:36:d3:5d:e4:08: a3:42:69:4f:58:17:9c:60:67:2b:f8:8d:b9:8b:ad: 38:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:67:06:FC:16:21:7A:7C:05:4D:B3:78:59:C8:8E:4F:73:9F:56:67 X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d5:01:30:ba:6d:97:d5:16:ec:0c:9c:74:fa:30:a8:4f:49: 84:5d:33:9d:e6:f4:dc:f7:f5:5a:af:57:cc:48:25:79:7e:3c: bc:04:ae:29:6b:d3:0d:a0:15:8f:9a:20:a1:8b:45:e5:16:7a: 9c:87:f7:41:ea:08:c1:3b:43:91:92:77:73:76:0c:59:67:18: d4:bf:8a:6b:66:53:5c:a3:a0:3f:31:23:13:0e:4d:a8:cc:ee: 19:50:d6:9e:16:19:01:7f:6a:73:4c:fe:8c:d3:d0:d2:8a:85: 06:ca:26:0b:9f:f2:8a:35:21:31:ae:ab:c4:8d:dc:bb:72:b8: 2a:23:42:66:e5:67:bc:39:2c:2e:0c:6e:a6:6f:10:89:80:d0: 3a:c6:37:3c:0d:19:d3:87:df:3b:4a:b2:28:c9:a0:f5:2b:65: 57:a3:1d:8a:ec:05:39:5b:4e:4c:b2:e8:99:6b:36:26:ed:04: f3:d8:32:72:9e:d0:c4:da:47:7c:5d:3b:0b:70:09:58:b9:c1: a2:60:39:63:f4:41:49:63:9a:c8:0d:95:c4:db:93:71:f8:ae: d3:f2:5b:34:2d:8e:94:5f:a6:4e:22:92:15:90:01:63:de:d2: c3:e4:e6:08:a1:7c:74:d8:c1:71:24:5b:6a:50:07:82:3f:31: 3e:54:d1:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPBApskhtzCeIUIH+TqWG8ulIEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjA3MjEwMTA3MTdaFw0yNjA3MjIwMTMwMTdaMDMxMTAvBgNV BAMTKEFBNjcwNkZDMTYyMTdBN0MwNTREQjM3ODU5Qzg4RTRGNzM5RjU2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIboDs2zdcu/40k/HIW6q7f3Dj zIlyTDHYYRrdGE5bJAAj6w85pikyJollxb2N6g54vRTnEPIEFyC4+WEp+hgBDDaI 2lv6iarAdh6gZIbrvQYdRVBSigxkae7uhnUKA+p6SAYxX9MBuZLGRHyMDtEDqdPw 6a8/m0ZqzyZiJURQuu9lHnoPkT7xuvavY8XfFcluRK/agyC0vmGN2j0E+WCEzxY0 UHeAZx0de8HzR5JpPOyiDewIh1YyxMU7C3QzMOzGldFJ+Be6zX8m+1o73UEzGyJZ ABpFyh7HJpzVfRnlPdXKNyQifkj8Vtg2013kCKNCaU9YF5xgZyv4jbmLrTiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqmcG/BYhenwFTbN4WciOT3OfVmcwHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfVATC6bZfVFuwMnHT6MKhPSYRdM53m9Nz3 9VqvV8xIJXl+PLwErilr0w2gFY+aIKGLReUWepyH90HqCME7Q5GSd3N2DFlnGNS/ imtmU1yjoD8xIxMOTajM7hlQ1p4WGQF/anNM/ozT0NKKhQbKJguf8oo1ITGuq8SN 3LtyuCojQmblZ7w5LC4MbqZvEImA0DrGNzwNGdOH3ztKsijJoPUrZVejHYrsBTlb Tkyy6JlrNibtBPPYMnKe0MTaR3xdOwtwCVi5waJgOWP0QUljmsgNlcTbk3H4rtPy WzQtjpRfpk4ikhWQAWPe0sPk5gihfHTYwXEkW2pQB4I/MT5U0Wo= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:16 2026 by rpki-client