$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft File: 34B29E7722E2B5DD7C273585E39574B57B896900.mft (raw, json) Hash identifier: lNwJZ0NmHmnsLbPYtuHRlDrmIPx4ty0itkT59fbXBvY= Subject key identifier: C9:6D:E1:70:A0:22:4B:EF:46:29:24:A0:F7:32:5A:59:0C:70:EC:9A Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 Certificate issuer: /CN=34B29E7722E2B5DD7C273585E39574B57B896900 Certificate serial: 31D151FA73C52F8AA075B861A68FD6EB647ED53C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:51:26 +0000 Manifest this update: Tue 02 Jun 2026 17:46:26 +0000 Manifest next update: Wed 03 Jun 2026 19:04:26 +0000 Files and hashes: 1: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: 0CcVKvK2RnP3R+MD8e/l3+iqcZgJW/8isjroKXFrB6k=) 2: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: mau8c52MjBB5eUtMaWvjg55FAtNn6V2VkjPj1AYcMKU=) 3: 34B29E7722E2B5DD7C273585E39574B57B896900.crl (hash: OzygAuZTcYQWgeca+Z1KC9WH7NQWOsher4SPlqZPIWI=) 4: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 49rc320q+QyoI3Wo5yzjwV1JHfD3ARGCwSOWR1AVGd4=) 5: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: G90KEOKf6BnudPfrgNF9Y+RD3ZrjM9VxjF1gA2ddTwk=) 6: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: I1bsWI7DvPSBQ9/yo42Yu8NJ60GXC0aRajit4q85Uec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d1:51:fa:73:c5:2f:8a:a0:75:b8:61:a6:8f:d6:eb:64:7e:d5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900 Validity Not Before: Jun 2 17:46:26 2026 GMT Not After : Jun 3 19:04:26 2026 GMT Subject: CN=C96DE170A0224BEF462924A0F7325A590C70EC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:20:3e:b7:14:c0:c5:94:22:c8:43:3f:a7:cf: 8e:bf:3a:3b:d8:15:80:37:ba:df:5f:68:35:89:6e: 8b:1d:f6:95:75:f8:78:da:09:c5:67:83:c6:d2:91: 68:c1:0c:1f:a3:b2:c6:4d:7a:f2:1a:89:c7:9a:c9: 73:4b:ab:52:73:92:78:cb:ef:9b:9c:d3:e5:bd:25: ff:5f:a7:c1:0d:3f:3d:c8:85:e2:ec:63:70:ee:3d: 83:99:ac:7b:15:51:b1:16:20:d8:b6:35:ed:c2:c3: 85:4d:91:db:b5:6d:eb:7c:e4:3c:7a:e7:a8:93:e5: d2:6d:54:6c:d5:af:03:10:2b:25:55:5f:1d:1f:ae: e6:75:1f:df:78:01:08:44:86:b3:88:4e:e9:28:23: c9:b7:6c:f8:a2:08:34:b6:42:63:39:64:f8:3a:46: d9:ea:c2:36:98:89:60:c3:83:f4:29:c5:6a:51:56: c9:83:aa:b3:3a:9d:c5:42:55:1e:fd:e3:ac:24:43: 1c:9e:d2:8b:8e:38:02:b2:5b:fe:ea:0a:d9:94:ab: a4:c5:57:e1:c4:71:6d:fe:bb:8d:e9:93:b1:11:55: d5:c2:3d:7b:79:11:14:4c:28:7d:9b:98:a9:f5:4a: 55:40:3c:ba:58:49:ca:70:5b:01:62:8d:55:fa:4d: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6D:E1:70:A0:22:4B:EF:46:29:24:A0:F7:32:5A:59:0C:70:EC:9A X509v3 Authority Key Identifier: keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3c:8c:5d:d7:ce:02:d2:ff:18:08:44:f3:e1:48:74:0e:a0: a5:35:28:a2:e3:e2:cb:de:81:ac:29:a6:35:0e:29:8f:d7:57: 9d:fd:86:01:e7:b3:55:4d:8f:51:b0:51:e8:23:0b:70:61:c5: 1a:6d:fd:fe:7f:25:3d:9f:2c:7c:d5:3e:e8:87:51:30:a8:19: 1b:0d:35:aa:45:d3:06:89:5b:57:90:d6:e8:20:51:d6:8e:ef: 2e:a7:2e:dc:ef:86:ae:e1:b1:41:7b:f5:23:86:82:b9:10:1a: 21:17:e3:c4:fd:ee:32:22:09:6f:27:5a:ff:54:f2:f8:71:a9: f9:ed:8e:b6:24:1a:ef:b4:1a:f5:cd:8f:cb:31:8e:76:28:b9: 73:0a:b7:bb:59:25:0b:b4:82:64:79:4e:bf:04:94:56:27:4a: 39:9e:df:ab:7f:4e:f2:fd:66:56:ea:8e:e9:79:1c:f2:5d:b2: 5b:39:00:3b:f2:d1:96:90:82:8a:93:26:13:13:98:d0:7d:95: de:c5:41:84:2d:1e:a9:a2:7e:d4:e3:4a:9d:a3:28:d8:b9:cd: 0c:1e:35:12:69:bd:76:a5:6d:40:c6:f4:50:b0:4d:06:31:5a: 67:8e:20:a6:7e:d0:6e:ce:88:f5:a5:2a:db:e4:e6:31:30:94: d8:3d:89:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdFR+nPFL4qgdbhhpo/W62R+1TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0QjU3 Qjg5NjkwMDAeFw0yNjA2MDIxNzQ2MjZaFw0yNjA2MDMxOTA0MjZaMDMxMTAvBgNV BAMTKEM5NkRFMTcwQTAyMjRCRUY0NjI5MjRBMEY3MzI1QTU5MEM3MEVDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvID63FMDFlCLIQz+nz46/OjvY FYA3ut9faDWJbosd9pV1+HjaCcVng8bSkWjBDB+jssZNevIaiceayXNLq1JzknjL 75uc0+W9Jf9fp8ENPz3IheLsY3DuPYOZrHsVUbEWINi2Ne3Cw4VNkdu1bet85Dx6 56iT5dJtVGzVrwMQKyVVXx0fruZ1H994AQhEhrOITukoI8m3bPiiCDS2QmM5ZPg6 RtnqwjaYiWDDg/QpxWpRVsmDqrM6ncVCVR7946wkQxye0ouOOAKyW/7qCtmUq6TF V+HEcW3+u43pk7ERVdXCPXt5ERRMKH2bmKn1SlVAPLpYScpwWwFijVX6TcMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyW3hcKAiS+9GKSSg9zJaWQxw7JowHwYDVR0j BBgwFoAUNLKedyLitd18JzWF45V0tXuJaQAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JkYmJjMDgtNGU4ZS00NGJhLWE0Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcy MkUyQjVERDdDMjczNTg1RTM5NTc0QjU3Qjg5NjkwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEIyOUU3NzIyRTJCNUREN0MyNzM1ODVFMzk1NzRCNTdCODk2 OTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0 QjU3Qjg5NjkwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHI8jF3XzgLS/xgIRPPhSHQOoKU1KKLj4sve gawppjUOKY/XV539hgHns1VNj1GwUegjC3BhxRpt/f5/JT2fLHzVPuiHUTCoGRsN NapF0waJW1eQ1uggUdaO7y6nLtzvhq7hsUF79SOGgrkQGiEX48T97jIiCW8nWv9U 8vhxqfntjrYkGu+0GvXNj8sxjnYouXMKt7tZJQu0gmR5Tr8ElFYnSjme36t/TvL9 Zlbqjul5HPJdsls5ADvy0ZaQgoqTJhMTmNB9ld7FQYQtHqmiftTjSp2jKNi5zQwe NRJpvXalbUDG9FCwTQYxWmeOIKZ+0G7OiPWlKtvk5jEwlNg9iWU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:33 2026 by rpki-client