$ rpki-client -vvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft File: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft (raw, json) Hash identifier: jc6KkYK657/phFw1xCVxqoQzY2/iSgWY/+JkMICExbo= Subject key identifier: DE:7C:48:1A:80:98:2D:B0:49:A1:DE:26:5A:0F:F9:F9:D1:9F:C8:BF Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Certificate serial: 582F4E23FF559EB4B01A2D8D67E0CE06D24A6BA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 15:08:23 +0000 Manifest this update: Tue 02 Jun 2026 15:03:23 +0000 Manifest next update: Wed 03 Jun 2026 16:59:23 +0000 Files and hashes: 1: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=) 2: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=) 3: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl (hash: Wu0GX3kQ0TwZhP5Hx1F3/JNFQ2tvKaqF8RgpI037Psk=) 4: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: DPoB0J81kARhSGUqtcPhC6vugUonXM9RgVO7Yrk5SrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2f:4e:23:ff:55:9e:b4:b0:1a:2d:8d:67:e0:ce:06:d2:4a:6b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Validity Not Before: Jun 2 15:03:23 2026 GMT Not After : Jun 3 16:59:23 2026 GMT Subject: CN=DE7C481A80982DB049A1DE265A0FF9F9D19FC8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:e2:03:60:34:07:1b:cb:b8:89:0b:88:5e: de:90:9e:29:70:cd:98:63:49:1a:a3:43:9f:4c:5d: d5:dd:ac:36:13:ba:81:e0:0f:ce:8a:ad:3d:59:ee: 71:23:1b:f8:09:9f:1b:2a:72:76:ee:0d:c1:64:d6: c8:a7:61:d5:49:50:b5:b9:18:b0:21:bc:d0:f8:6e: 8c:a5:04:ed:e2:14:54:39:44:ab:9d:97:79:9e:96: 08:c4:15:41:f2:e4:93:55:68:d6:b0:e7:f7:47:f5: ef:68:9e:09:59:de:38:7b:ec:b5:40:a6:5a:cd:e3: 40:52:1b:d8:64:7c:8c:14:41:c8:00:a4:2e:14:ba: 6a:03:67:aa:e2:69:5f:dd:59:b8:68:56:28:f9:3f: fb:21:7f:53:1f:43:b5:88:59:74:a2:c3:7f:ce:a3: 74:4e:4b:90:fe:a5:23:93:ed:0f:3f:97:7d:71:70: ae:8a:aa:5f:04:1c:d4:6d:7c:39:5a:a6:ed:cb:75: 01:e8:5e:8b:99:13:9c:30:c5:0b:cf:97:d5:79:b6: 56:35:f7:fd:fa:ee:16:74:cc:d4:17:9f:8f:05:ec: 8d:22:d5:db:1d:33:dd:56:3b:4a:93:cd:36:05:d5: ab:d1:77:99:3f:be:13:48:52:e4:27:0e:43:b7:37: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7C:48:1A:80:98:2D:B0:49:A1:DE:26:5A:0F:F9:F9:D1:9F:C8:BF X509v3 Authority Key Identifier: keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a0:6e:b2:58:49:40:b2:ac:ac:90:43:18:3d:a8:8c:b7:ed: c0:c7:62:d4:5f:81:ba:04:9e:76:17:05:7a:f2:7f:5f:07:bb: 50:65:58:34:f7:e0:97:b9:b8:97:30:ab:10:44:78:b1:e4:f6: ab:6f:c0:f0:0c:66:8e:c2:f9:21:42:70:47:51:7c:cb:de:7f: 41:cb:eb:ff:85:2f:0b:3c:78:42:04:30:00:7f:3e:08:b5:ec: 7b:e8:11:1d:04:8e:43:5f:d8:14:91:f6:65:b1:9e:29:b1:24: 19:de:26:d2:45:2e:70:48:ee:eb:2a:27:2e:e6:56:12:91:13: e3:c3:66:72:a0:24:51:93:b7:14:df:eb:0f:ef:7c:52:67:5e: 93:44:57:9d:26:a5:59:23:14:7f:b7:0a:8e:96:e2:67:a0:ca: 2a:f1:84:f7:ad:49:c7:31:d4:a7:02:90:f7:ad:11:7a:b3:52: 99:31:60:1c:d1:eb:5c:76:8c:bb:dc:59:4b:f2:f1:a7:75:46: 3a:e4:41:7e:e7:cc:33:ce:d5:3e:07:54:17:07:07:5e:a3:66: 42:71:71:37:eb:05:84:0f:fc:61:98:66:08:d1:28:5f:d1:69: ce:77:3f:60:c9:13:b6:26:50:df:86:b0:3b:bc:37:79:62:b5: 98:92:22:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWC9OI/9VnrSwGi2NZ+DOBtJKa6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC RDI4Mjk1MTAeFw0yNjA2MDIxNTAzMjNaFw0yNjA2MDMxNjU5MjNaMDMxMTAvBgNV BAMTKERFN0M0ODFBODA5ODJEQjA0OUExREUyNjVBMEZGOUY5RDE5RkM4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSeIDYDQHG8u4iQuIXt6Qnilw zZhjSRqjQ59MXdXdrDYTuoHgD86KrT1Z7nEjG/gJnxsqcnbuDcFk1sinYdVJULW5 GLAhvND4boylBO3iFFQ5RKudl3melgjEFUHy5JNVaNaw5/dH9e9onglZ3jh77LVA plrN40BSG9hkfIwUQcgApC4UumoDZ6riaV/dWbhoVij5P/shf1MfQ7WIWXSiw3/O o3ROS5D+pSOT7Q8/l31xcK6Kql8EHNRtfDlapu3LdQHoXouZE5wwxQvPl9V5tlY1 9/367hZ0zNQXn48F7I0i1dsdM91WO0qTzTYF1avRd5k/vhNIUuQnDkO3N8iPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3nxIGoCYLbBJod4mWg/5+dGfyL8wHwYDVR0j BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1 QzlCRDI4Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCgbrJYSUCyrKyQQxg9qIy37cDHYtRfgboE nnYXBXryf18Hu1BlWDT34Je5uJcwqxBEeLHk9qtvwPAMZo7C+SFCcEdRfMvef0HL 6/+FLws8eEIEMAB/Pgi17HvoER0EjkNf2BSR9mWxnimxJBneJtJFLnBI7usqJy7m VhKRE+PDZnKgJFGTtxTf6w/vfFJnXpNEV50mpVkjFH+3Co6W4megyirxhPetSccx 1KcCkPetEXqzUpkxYBzR61x2jLvcWUvy8ad1RjrkQX7nzDPO1T4HVBcHB16jZkJx cTfrBYQP/GGYZgjRKF/Rac53P2DJE7YmUN+GsDu8N3litZiSIno= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:33 2026 by rpki-client