
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft
File: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft (raw, json)
Hash identifier: qJhAK525dw12XNZISl4E2EvK4sNvP2HXUZRGKqjj2Ys=
Subject key identifier: 79:57:63:00:E9:FF:FA:B6:DE:5B:C5:6B:69:45:16:2A:50:94:9F:4B
Authority key identifier: 34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A
Certificate issuer: /CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A
Certificate serial: 2865BC7C39EE85AEC7672A18FFE4E6EEF5366DB2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:30:11 +0000
Manifest this update: Tue 21 Jul 2026 03:25:11 +0000
Manifest next update: Wed 22 Jul 2026 04:20:11 +0000
Files and hashes: 1: 3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (hash: RH7qzceSrisGTT+gbHQrqNwFlHJNMn8OuKHPRRq6v88=)
2: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl (hash: 0SkQJT1M4/4x3z1sEVDxS8LUAu8kzCOhGMaMWR3XtBA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl
rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:65:bc:7c:39:ee:85:ae:c7:67:2a:18:ff:e4:e6:ee:f5:36:6d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A
Validity
Not Before: Jul 21 03:25:11 2026 GMT
Not After : Jul 22 04:20:11 2026 GMT
Subject: CN=79576300E9FFFAB6DE5BC56B6945162A50949F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:12:0f:09:b8:d5:59:8a:f6:80:26:1a:fd:
3f:02:98:39:40:82:e8:bc:ed:8e:12:41:87:e5:36:
bb:36:0f:61:b6:ac:5d:d6:4f:a2:7e:12:0c:94:79:
ae:2f:49:7b:af:cf:46:ad:43:bd:c4:ad:df:f7:08:
bb:db:65:a7:37:a2:a8:11:98:4d:31:f5:21:4c:c3:
c7:5d:1c:86:19:6d:39:11:ea:da:de:13:e4:e2:4d:
09:e0:1c:c4:be:ef:73:0e:80:98:4e:c7:a1:f3:f3:
a0:e7:fc:b8:ba:e2:ca:a1:bb:69:f4:e9:08:a9:cf:
e3:da:ae:92:65:90:f4:60:17:01:b1:80:2d:50:5a:
45:4c:70:66:73:20:33:37:0a:36:a9:f9:1d:6d:9a:
c0:75:d0:a7:a1:cf:94:1c:43:37:e5:09:08:2a:f6:
f0:74:44:a1:7d:21:bf:d4:2b:cf:44:e8:4c:db:71:
a2:91:a6:6d:d8:ec:2c:e9:22:c5:47:2c:e2:41:99:
9e:3d:2f:1e:a6:35:8c:85:c1:39:43:e7:9f:13:84:
d9:1e:b7:c0:6d:46:d6:4e:5a:58:e8:ec:41:44:7a:
1b:c2:42:93:73:25:c4:65:57:5e:f4:4c:fb:65:9d:
3c:59:0d:0f:a8:c1:b0:c7:af:3b:ae:91:97:f9:50:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:63:00:E9:FF:FA:B6:DE:5B:C5:6B:69:45:16:2A:50:94:9F:4B
X509v3 Authority Key Identifier:
keyid:34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:61:bf:4c:c2:65:af:03:2c:90:90:e6:f5:55:08:a3:c6:3c:
98:ad:44:77:a3:aa:78:2e:1b:73:12:da:80:1a:5f:ca:c9:ec:
6c:fb:27:a8:86:b0:06:23:78:c1:3e:c8:3f:a5:77:7d:9c:85:
6d:2e:a4:e8:06:b1:6e:08:e6:4c:65:1d:6c:35:fe:1b:78:28:
08:ff:36:28:dd:7a:4b:16:a8:e7:16:fd:8b:00:36:bd:8a:6e:
0c:7e:5e:49:e9:d1:5b:a6:b9:88:02:e8:41:fa:fc:98:3b:8c:
77:d7:e3:c7:b9:2e:7c:07:06:f3:a9:34:92:80:91:a2:d0:e4:
f8:77:64:fd:ca:f8:28:bc:5e:5c:15:1b:93:7b:f9:a9:67:c2:
c2:95:64:6a:57:ce:87:00:e4:7b:82:94:32:14:28:32:77:20:
05:dc:82:4c:22:e7:7f:cc:ca:ab:d7:94:c6:5d:37:f4:98:f4:
c6:71:a2:24:ab:9a:91:61:7c:76:53:b7:a7:e1:80:d7:02:4e:
21:9d:00:c7:43:4e:cc:b5:db:1e:bb:96:a0:0d:ca:8a:a8:c8:
dc:c6:14:e6:f9:46:a2:43:3d:b3:86:20:56:cf:ca:c7:f4:eb:
74:07:7a:db:50:5c:30:6f:0b:f6:82:1f:ae:c5:13:63:e4:1e:
43:ca:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:48:38 2026 by rpki-client