$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft File: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft (raw, json) Hash identifier: iFpNe8M9zAnpdR8mU8EHYHwsyAILfVnfHwhViGNjc2w= Subject key identifier: 73:CA:A8:38:5F:20:56:95:87:0B:F1:48:81:93:4E:B4:78:D4:0B:C2 Authority key identifier: 34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A Certificate issuer: /CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A Certificate serial: 53B0705B11E792E7643C1F1558DB9DF03A0B6F26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:50:54 +0000 Manifest this update: Tue 02 Jun 2026 08:45:54 +0000 Manifest next update: Wed 03 Jun 2026 12:33:54 +0000 Files and hashes: 1: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl (hash: j7EfHbT1REkIsjseej0ba43yOxCUkiouu/FbrZLJcB0=) 2: 3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (hash: RH7qzceSrisGTT+gbHQrqNwFlHJNMn8OuKHPRRq6v88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b0:70:5b:11:e7:92:e7:64:3c:1f:15:58:db:9d:f0:3a:0b:6f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A Validity Not Before: Jun 2 08:45:54 2026 GMT Not After : Jun 3 12:33:54 2026 GMT Subject: CN=73CAA8385F205695870BF14881934EB478D40BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:cc:76:63:66:2e:3d:f4:d8:af:cb:00:a5: f7:f6:f6:30:11:f0:93:2b:a1:b6:14:15:07:14:84: 79:d0:bb:95:69:83:b6:f9:b4:01:b9:2e:b3:67:e3: 1d:e6:1d:2a:7e:4a:e2:81:29:36:34:41:ed:6c:61: c6:28:8b:c8:e8:a1:e1:2d:61:6e:65:9f:c0:3f:25: 1c:e6:ff:65:99:4e:16:eb:ed:99:f7:0e:4d:e5:61: 4c:97:9b:6a:5f:c7:a0:0c:1c:cd:65:03:47:a9:f9: 7e:98:1b:de:f4:ee:8d:7a:5d:72:7b:d5:53:7d:40: c5:0d:1b:30:73:2b:99:b3:b4:93:2d:d9:9e:ad:49: 07:d0:da:2f:b1:71:83:da:15:4c:61:3c:34:8b:31: 4d:5f:21:f4:54:a5:63:d6:57:68:c8:88:19:db:fa: db:cb:31:f6:b3:3a:50:fb:74:3b:29:f5:dc:c1:66: 94:8c:a8:94:2c:0f:c0:e3:47:3e:cf:72:a8:a5:ed: 75:52:93:9a:5a:0a:38:63:ea:a6:f4:a4:09:29:a6: 62:a0:9d:42:04:79:df:41:11:1e:e6:f3:bd:b3:26: 62:c3:56:46:40:b4:f4:00:c0:99:a3:54:9e:57:95: 3b:48:bf:5a:ce:ca:06:9f:9c:d4:ff:39:3a:25:ef: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CA:A8:38:5F:20:56:95:87:0B:F1:48:81:93:4E:B4:78:D4:0B:C2 X509v3 Authority Key Identifier: keyid:34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f6:aa:29:65:c5:10:f1:a4:35:a1:d1:74:55:c9:bb:4b:74: 81:68:d8:4f:35:37:99:df:d9:95:39:94:92:86:6e:e9:fc:92: 54:f4:73:3c:50:6c:11:1a:09:12:72:cb:29:e0:3f:2a:21:a5: 8a:9b:a8:08:17:b7:1f:f6:c2:78:ed:98:88:95:c8:73:b0:58: fd:50:4f:73:d6:39:06:79:b4:22:2a:cd:a5:2d:44:aa:6c:bc: 96:d8:97:26:0c:3a:5f:d6:1e:97:fe:9f:6d:fd:35:ad:12:85: 6d:8c:11:74:d0:db:a6:a6:29:2d:8d:ec:64:d0:43:ab:e2:49: 8b:28:b9:7d:ce:5b:55:85:e8:29:10:ab:b7:c7:9b:cc:3c:87: 4e:3e:a9:19:2a:cb:b4:4e:76:3b:1d:66:04:9f:87:cb:15:a3: 47:40:18:1c:41:b6:28:75:84:9a:61:f9:46:ad:d7:ca:db:a9: c6:e3:2a:a0:60:c6:c1:03:fb:8f:04:f3:20:c8:03:5d:cf:0e: aa:00:62:4f:7b:26:8e:85:83:88:f9:9a:d4:e4:1d:d1:9c:5f: 0f:76:9b:1b:26:0f:02:7d:09:29:62:94:ed:0c:c0:c0:ad:42: 5a:73:fc:2d:b4:ed:ab:04:b0:56:d5:35:8f:9c:57:fc:a6:af: 83:f3:a1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7BwWxHnkudkPB8VWNud8DoLbyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBOUI5RENBRUVCNkRBN0JEMUY3OTk2Q0ZCQUVFRDFF MTM0RjQ3QTAeFw0yNjA2MDIwODQ1NTRaFw0yNjA2MDMxMjMzNTRaMDMxMTAvBgNV BAMTKDczQ0FBODM4NUYyMDU2OTU4NzBCRjE0ODgxOTM0RUI0NzhENDBCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOMx2Y2YuPfTYr8sApff29jAR 8JMrobYUFQcUhHnQu5Vpg7b5tAG5LrNn4x3mHSp+SuKBKTY0Qe1sYcYoi8jooeEt YW5ln8A/JRzm/2WZThbr7Zn3Dk3lYUyXm2pfx6AMHM1lA0ep+X6YG9707o16XXJ7 1VN9QMUNGzBzK5mztJMt2Z6tSQfQ2i+xcYPaFUxhPDSLMU1fIfRUpWPWV2jIiBnb +tvLMfazOlD7dDsp9dzBZpSMqJQsD8DjRz7Pcqil7XVSk5paCjhj6qb0pAkppmKg nUIEed9BER7m872zJmLDVkZAtPQAwJmjVJ5XlTtIv1rOygafnNT/OTol7zmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc8qoOF8gVpWHC/FIgZNOtHjUC8IwHwYDVR0j BBgwFoAUNKm53K7rbae9H3mWz7ru0eE09HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyMTkyNTktZWQxYS00ZDE4LWJkOTItOTRiNjA2NzJlNmExLzAvMzRBOUI5RENB RUVCNkRBN0JEMUY3OTk2Q0ZCQUVFRDFFMTM0RjQ3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE5QjlEQ0FFRUI2REE3QkQxRjc5OTZDRkJBRUVEMUUxMzRG NDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyMTkyNTktZWQxYS00ZDE4LWJk OTItOTRiNjA2NzJlNmExLzAvMzRBOUI5RENBRUVCNkRBN0JEMUY3OTk2Q0ZCQUVF RDFFMTM0RjQ3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB72qillxRDxpDWh0XRVybtLdIFo2E81N5nf 2ZU5lJKGbun8klT0czxQbBEaCRJyyyngPyohpYqbqAgXtx/2wnjtmIiVyHOwWP1Q T3PWOQZ5tCIqzaUtRKpsvJbYlyYMOl/WHpf+n239Na0ShW2MEXTQ26amKS2N7GTQ Q6viSYsouX3OW1WF6CkQq7fHm8w8h04+qRkqy7ROdjsdZgSfh8sVo0dAGBxBtih1 hJph+Uat18rbqcbjKqBgxsED+48E8yDIA13PDqoAYk97Jo6Fg4j5mtTkHdGcXw92 mxsmDwJ9CSlilO0MwMCtQlpz/C207asEsFbVNY+cV/ymr4PzoSg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:56 2026 by rpki-client