$ rpki-client -vvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft File: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft (raw, json) Hash identifier: kcEDGMypXqDrEgzjZu2+9jfHW+uKUQfKi2WnukAmR34= Subject key identifier: 03:14:A1:C1:0A:83:9B:27:73:DA:54:39:89:16:FB:F2:6E:00:B8:E2 Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Certificate serial: 32F8862C580142D6C2356B7BF95A5A8FECB7C940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 03:35:17 +0000 Manifest this update: Tue 21 Jul 2026 03:30:17 +0000 Manifest next update: Wed 22 Jul 2026 04:18:17 +0000 Files and hashes: 1: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=) 2: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=) 3: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl (hash: HU8dSeQxAaEp3u458Ie194kJ/NaPPg8w4hRXWLmesYA=) 4: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: DPoB0J81kARhSGUqtcPhC6vugUonXM9RgVO7Yrk5SrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f8:86:2c:58:01:42:d6:c2:35:6b:7b:f9:5a:5a:8f:ec:b7:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Validity Not Before: Jul 21 03:30:17 2026 GMT Not After : Jul 22 04:18:17 2026 GMT Subject: CN=0314A1C10A839B2773DA54398916FBF26E00B8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:8d:88:0c:96:fb:1a:75:92:23:10:07:26: 22:6e:47:3d:cb:63:14:e7:64:89:d5:89:0f:02:6a: 2e:f0:d1:68:73:65:52:0f:09:fe:0f:01:5e:54:b6: e7:72:47:29:93:23:02:93:8a:ce:e0:dd:80:b3:f4: bc:c5:d1:9a:f4:a9:54:a2:ed:b1:37:e8:7a:5d:2d: a4:1a:b1:23:c7:ae:5c:0f:72:db:75:cc:4f:94:76: 33:08:46:33:12:88:03:e2:9c:9e:3b:b3:da:20:19: 92:0d:9c:ca:0d:17:ad:de:53:41:9f:0c:28:46:96: 30:6c:35:d2:1d:65:52:69:b5:7b:c1:6e:c9:79:c2: 1a:d8:e6:4a:0a:6e:03:33:c5:a4:8c:18:03:53:3d: 8b:1e:b7:ff:ac:9f:8d:a6:09:58:68:1e:93:72:3e: 53:84:5c:d2:d6:2d:67:81:62:5c:0b:91:27:1c:eb: d2:54:af:11:4b:b1:00:86:e1:41:65:a0:08:17:b0: a1:de:bd:6c:d9:13:56:0c:c8:dc:0b:08:ba:1e:ab: b1:d6:cb:50:df:76:41:d9:fc:f9:1f:5c:68:2a:81: 83:d7:99:2a:6d:93:39:01:6d:7a:e5:73:ce:47:85: 67:7d:a4:6f:43:6f:34:c6:04:7e:50:ef:ab:6b:d7: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:14:A1:C1:0A:83:9B:27:73:DA:54:39:89:16:FB:F2:6E:00:B8:E2 X509v3 Authority Key Identifier: keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a4:49:1a:95:a8:d6:93:dd:3e:24:9f:04:14:17:88:a0:8c: 4f:f1:19:37:ce:ab:ad:96:b5:8c:99:de:8b:55:66:0b:8d:73: 31:0c:06:7d:cd:48:37:75:0f:aa:9d:fb:65:9f:9e:ff:5b:c5: 1e:ed:c1:5e:9e:ac:94:f0:fd:1a:95:00:15:1d:c7:c9:cf:0b: 18:f2:25:3c:e6:82:a3:c2:52:18:c8:5d:63:ff:70:f3:c1:07: a0:af:5c:68:76:b9:29:4b:00:75:33:b6:20:b5:be:f2:59:00: 69:06:a9:d9:4c:b1:9c:76:ef:b4:25:0e:61:fd:17:ff:96:0f: d7:ee:11:e7:b7:06:fb:3a:3b:c7:7d:9d:37:69:fa:09:3f:73: 1f:31:9e:f1:e4:af:f7:fa:1f:a8:49:11:f5:60:cf:7f:57:de: b2:5d:20:13:66:13:d6:eb:9b:d0:6e:32:d2:0e:6b:5d:00:92: c0:22:96:30:92:32:dd:aa:d6:e0:b6:ff:ce:f5:f4:bf:12:c9: 1a:62:c9:68:69:da:85:94:c8:a7:47:96:3a:da:b5:74:dc:be: c8:c0:bc:3e:3b:c2:2c:a8:66:3c:67:2c:92:d3:b9:cf:03:4f: 7c:41:3c:e7:56:08:39:ac:93:5c:bc:8f:cc:a0:4e:f3:7c:3e: 42:eb:86:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMviGLFgBQtbCNWt7+Vpaj+y3yUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC RDI4Mjk1MTAeFw0yNjA3MjEwMzMwMTdaFw0yNjA3MjIwNDE4MTdaMDMxMTAvBgNV BAMTKDAzMTRBMUMxMEE4MzlCMjc3M0RBNTQzOTg5MTZGQkYyNkUwMEI4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bo2IDJb7GnWSIxAHJiJuRz3L YxTnZInViQ8Cai7w0WhzZVIPCf4PAV5UtudyRymTIwKTis7g3YCz9LzF0Zr0qVSi 7bE36HpdLaQasSPHrlwPctt1zE+UdjMIRjMSiAPinJ47s9ogGZINnMoNF63eU0Gf DChGljBsNdIdZVJptXvBbsl5whrY5koKbgMzxaSMGANTPYset/+sn42mCVhoHpNy PlOEXNLWLWeBYlwLkScc69JUrxFLsQCG4UFloAgXsKHevWzZE1YMyNwLCLoeq7HW y1DfdkHZ/PkfXGgqgYPXmSptkzkBbXrlc85HhWd9pG9DbzTGBH5Q76tr14vBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAxShwQqDmydz2lQ5iRb78m4AuOIwHwYDVR0j BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1 QzlCRDI4Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIekSRqVqNaT3T4knwQUF4igjE/xGTfOq62W tYyZ3otVZguNczEMBn3NSDd1D6qd+2Wfnv9bxR7twV6erJTw/RqVABUdx8nPCxjy JTzmgqPCUhjIXWP/cPPBB6CvXGh2uSlLAHUztiC1vvJZAGkGqdlMsZx277QlDmH9 F/+WD9fuEee3Bvs6O8d9nTdp+gk/cx8xnvHkr/f6H6hJEfVgz39X3rJdIBNmE9br m9BuMtIOa10AksAiljCSMt2q1uC2/8719L8SyRpiyWhp2oWUyKdHljratXTcvsjA vD47wiyoZjxnLJLTuc8DT3xBPOdWCDmsk1y8j8ygTvN8PkLrhvw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:01:56 2026 by rpki-client