
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
File: 34B29E7722E2B5DD7C273585E39574B57B896900.mft (raw, json)
Hash identifier: A6gk0EvnjhDO2DEeXFU7h2yfRsmEXJnbatRokANs7qE=
Subject key identifier: DE:C2:6D:EF:D2:D3:D2:91:E9:B1:8B:DB:71:FF:D3:74:5F:05:16:3E
Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00
Certificate issuer: /CN=34B29E7722E2B5DD7C273585E39574B57B896900
Certificate serial: 264F7B8FF6A0F4C39E6B1EAECA85F5C63CA68A3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 11:25:31 +0000
Manifest this update: Mon 20 Jul 2026 11:20:31 +0000
Manifest next update: Tue 21 Jul 2026 15:16:31 +0000
Files and hashes: 1: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: G90KEOKf6BnudPfrgNF9Y+RD3ZrjM9VxjF1gA2ddTwk=)
2: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: 0CcVKvK2RnP3R+MD8e/l3+iqcZgJW/8isjroKXFrB6k=)
3: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: mau8c52MjBB5eUtMaWvjg55FAtNn6V2VkjPj1AYcMKU=)
4: 34B29E7722E2B5DD7C273585E39574B57B896900.crl (hash: 5UwGSLOfhnihLRZ8Tg+dd2euD+2357+b1BO8hUkpGT8=)
5: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 49rc320q+QyoI3Wo5yzjwV1JHfD3ARGCwSOWR1AVGd4=)
6: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: I1bsWI7DvPSBQ9/yo42Yu8NJ60GXC0aRajit4q85Uec=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl
rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 15:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4f:7b:8f:f6:a0:f4:c3:9e:6b:1e:ae:ca:85:f5:c6:3c:a6:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900
Validity
Not Before: Jul 20 11:20:31 2026 GMT
Not After : Jul 21 15:16:31 2026 GMT
Subject: CN=DEC26DEFD2D3D291E9B18BDB71FFD3745F05163E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:de:be:13:58:48:a8:cb:b8:68:4e:d8:c4:
9f:57:99:7d:f6:28:5a:a4:1b:5d:a1:0f:a7:dd:f7:
26:50:2a:56:46:ac:4c:2c:43:5b:c1:14:45:b8:e4:
48:99:c7:f9:26:fb:8d:95:f1:7a:1c:69:36:eb:41:
8f:18:fa:8c:cb:19:b7:4f:2c:ce:57:ab:ff:d0:3e:
55:e4:60:4e:28:e3:23:68:d1:82:ed:d9:a7:f0:92:
b4:74:8d:49:c2:be:19:05:db:00:1e:dc:5d:5e:49:
90:6b:75:6b:cd:eb:1e:07:25:87:54:ee:86:6c:84:
2f:77:75:3e:cc:3d:84:0e:83:3c:cd:85:3d:37:39:
d7:94:64:de:a8:e4:9d:5b:eb:93:11:32:dc:41:0b:
b7:37:7f:0f:ce:d8:17:56:a4:e1:08:81:1c:1d:bf:
8c:58:c3:5a:f4:a2:f3:7e:9f:95:2c:14:04:0e:93:
d9:cc:ed:51:c7:ca:27:72:c1:11:b6:28:40:48:11:
33:91:68:25:5d:91:64:62:3e:0c:2a:7d:eb:96:be:
71:34:8e:fb:4c:92:94:b9:d5:2f:90:ec:04:fb:c8:
6a:7f:09:d7:41:41:62:69:79:0d:63:7a:f3:87:82:
1e:84:10:13:53:61:5c:81:66:51:72:c5:12:ee:33:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C2:6D:EF:D2:D3:D2:91:E9:B1:8B:DB:71:FF:D3:74:5F:05:16:3E
X509v3 Authority Key Identifier:
keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:60:53:00:2b:9a:3d:82:de:95:81:b5:76:da:75:6d:bd:ff:
8a:cc:90:22:b5:09:62:b5:1c:48:ac:c2:f5:92:90:11:29:cc:
f5:39:73:b4:b6:5d:ff:6a:60:9e:0d:db:30:9e:d7:ae:5d:ec:
68:c8:30:e1:57:a3:09:64:94:da:8a:d7:f3:65:e4:95:a9:74:
bc:34:ad:c5:43:a6:63:ef:1c:3c:36:71:88:58:44:fa:b0:7e:
bf:ea:6e:f6:6b:97:c9:b9:d9:49:cd:2e:98:19:5e:0e:ee:36:
d9:25:05:ee:90:94:d6:6a:26:b8:54:9b:9c:38:86:9a:0f:ad:
92:e7:47:33:76:10:17:e6:b4:bd:75:c5:04:53:1a:49:04:26:
f8:aa:7c:ab:48:73:7e:85:c8:84:44:f4:a9:dc:6c:bf:68:5a:
68:47:b9:24:7a:f9:a2:9c:b2:90:c1:8d:3b:3b:11:37:e6:0e:
a9:2b:bb:2e:ab:ac:a6:d6:b8:f3:a0:db:69:12:06:8c:3d:1b:
ff:c8:98:27:02:84:8c:0e:10:ad:c0:57:b1:74:5a:2d:cf:f9:
f0:6f:3f:37:a6:8f:fb:ea:3c:fe:3a:87:32:c9:b3:d3:13:58:
85:b6:77:a5:72:76:bb:db:67:78:4e:40:4a:97:fa:37:e2:a0:
61:e9:a0:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJk97j/ag9MOeax6uyoX1xjymijowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0QjU3
Qjg5NjkwMDAeFw0yNjA3MjAxMTIwMzFaFw0yNjA3MjExNTE2MzFaMDMxMTAvBgNV
BAMTKERFQzI2REVGRDJEM0QyOTFFOUIxOEJEQjcxRkZEMzc0NUYwNTE2M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH+96+E1hIqMu4aE7YxJ9XmX32
KFqkG12hD6fd9yZQKlZGrEwsQ1vBFEW45EiZx/km+42V8XocaTbrQY8Y+ozLGbdP
LM5Xq//QPlXkYE4o4yNo0YLt2afwkrR0jUnCvhkF2wAe3F1eSZBrdWvN6x4HJYdU
7oZshC93dT7MPYQOgzzNhT03OdeUZN6o5J1b65MRMtxBC7c3fw/O2BdWpOEIgRwd
v4xYw1r0ovN+n5UsFAQOk9nM7VHHyidywRG2KEBIETORaCVdkWRiPgwqfeuWvnE0
jvtMkpS51S+Q7AT7yGp/CddBQWJpeQ1jevOHgh6EEBNTYVyBZlFyxRLuM4ddAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3sJt79LT0pHpsYvbcf/TdF8FFj4wHwYDVR0j
BBgwFoAUNLKedyLitd18JzWF45V0tXuJaQAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2JkYmJjMDgtNGU4ZS00NGJhLWE0Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcy
MkUyQjVERDdDMjczNTg1RTM5NTc0QjU3Qjg5NjkwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNEIyOUU3NzIyRTJCNUREN0MyNzM1ODVFMzk1NzRCNTdCODk2
OTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0
Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0
QjU3Qjg5NjkwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK5gUwArmj2C3pWBtXbadW29/4rMkCK1CWK1
HEiswvWSkBEpzPU5c7S2Xf9qYJ4N2zCe165d7GjIMOFXowlklNqK1/Nl5JWpdLw0
rcVDpmPvHDw2cYhYRPqwfr/qbvZrl8m52UnNLpgZXg7uNtklBe6QlNZqJrhUm5w4
hpoPrZLnRzN2EBfmtL11xQRTGkkEJviqfKtIc36FyIRE9KncbL9oWmhHuSR6+aKc
spDBjTs7ETfmDqkruy6rrKbWuPOg22kSBow9G//ImCcChIwOEK3AV7F0Wi3P+fBv
Pzemj/vqPP46hzLJs9MTWIW2d6VydrvbZ3hOQEqX+jfioGHpoK0=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:52 2026 by rpki-client