$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft File: 34A5DE28FDBC6F27C998277F953439F66D10A75E.mft (raw, json) Hash identifier: TIfHSr1l9v46rWxDadU6bZ35oYcaMRvDG/yCPtlkLTk= Subject key identifier: 18:68:C5:74:FA:2F:13:BB:35:C6:47:DE:04:C2:F8:AF:AF:92:A6:86 Authority key identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E Certificate issuer: /CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Certificate serial: 534DABA6C408F5188CCB98BA34EAFE0D275F2D6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 21:07:29 +0000 Manifest this update: Fri 04 Sep 2026 21:02:29 +0000 Manifest next update: Sat 05 Sep 2026 23:20:29 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: 9xIqyd7FqC7E5vM/2yM7xmyBSmnXPGROKdDFsYB3t7A=) 2: 34A5DE28FDBC6F27C998277F953439F66D10A75E.crl (hash: YUbsyC+utgtsEa7Yai+y5Si4gvjOXot6Zda0h2ibJco=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 23:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4d:ab:a6:c4:08:f5:18:8c:cb:98:ba:34:ea:fe:0d:27:5f:2d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Validity Not Before: Sep 4 21:02:29 2026 GMT Not After : Sep 5 23:20:29 2026 GMT Subject: CN=1868C574FA2F13BB35C647DE04C2F8AFAF92A686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:ef:90:cf:eb:fa:d0:22:1d:ef:b7:ef:17: 99:ba:c2:c7:a0:81:84:d6:f4:5f:3f:c3:d1:33:0f: 8e:28:1c:5a:17:22:6a:da:be:fa:be:80:07:4b:be: 35:e1:2d:96:00:50:1d:b6:f5:00:e0:d5:e1:49:af: c2:04:fa:00:71:1a:c2:b5:9b:ab:84:9c:d3:34:84: 03:49:65:bf:c8:84:fd:ea:94:c1:c1:40:d9:08:67: 6e:a1:98:79:f0:51:ae:c4:af:a3:20:f3:74:95:08: 52:d7:57:bc:9c:26:14:ce:13:92:96:94:c9:c6:48: 83:89:df:b4:02:a2:fa:11:1b:94:31:dc:ce:68:47: ee:2a:43:06:dd:bc:8b:4a:25:8d:10:35:8c:4e:6d: b6:81:10:24:c9:33:e6:1c:0b:67:6e:5a:17:f7:e0: fd:70:ef:a7:d0:7f:0a:e0:87:12:da:ce:c5:d4:0e: ea:d7:26:06:4a:33:70:c8:23:df:07:35:a6:0b:60: a6:30:a9:a5:2e:77:e3:23:33:45:48:3c:b5:cb:71: 00:c4:b3:5f:3c:24:5c:bd:6f:56:6a:34:1f:d1:63: 47:6a:36:3e:a0:54:4f:5d:4d:e5:10:fd:8d:06:c9: a3:b9:73:ee:ba:a7:7e:44:a6:7b:34:f2:50:44:f3: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:68:C5:74:FA:2F:13:BB:35:C6:47:DE:04:C2:F8:AF:AF:92:A6:86 X509v3 Authority Key Identifier: keyid:34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:07:af:6b:41:ad:02:55:51:8a:21:5b:9b:44:82:95:85:89: 11:b1:b5:f8:c9:49:c4:52:f0:3e:d4:d2:8c:7c:b1:6f:da:39: f4:50:2f:4f:1f:18:a9:15:5e:18:1c:b5:18:2c:86:57:2b:dc: 40:74:72:77:c5:de:58:f8:6a:62:fa:c0:72:2f:3d:99:cc:21: 4b:a5:51:19:f4:be:42:48:d1:d7:fe:fc:ee:91:02:c6:1b:68: 4f:bc:77:44:1b:72:9b:f1:65:f1:39:7e:b9:b5:4b:c8:5b:9c: 26:ac:07:fe:8d:e7:10:ad:b5:81:92:8f:ed:74:bc:61:aa:ef: f2:2a:e9:0d:8c:9a:be:11:77:1d:bc:a8:5c:9a:2b:66:1d:5f: 1d:4a:f3:36:37:55:b4:a5:71:08:dc:42:90:8c:81:80:ef:9a: 04:9f:31:6c:26:27:58:d2:64:f1:24:ef:2e:01:70:6d:1b:b1: 1b:0a:9f:a9:51:89:18:a8:e3:8f:38:ce:97:48:9f:6b:5f:bc: 25:9b:7d:e1:b7:5f:76:ea:57:55:dc:f0:8a:7e:bd:5b:16:4e: 75:89:64:22:dd:32:76:a8:04:f8:05:a9:76:7f:62:41:d2:21: 75:ca:56:93:de:d6:b8:4d:0c:fd:fd:ba:51:3d:a0:07:9d:b7: cb:c4:5b:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU02rpsQI9RiMy5i6NOr+DSdfLW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2 RDEwQTc1RTAeFw0yNjA5MDQyMTAyMjlaFw0yNjA5MDUyMzIwMjlaMDMxMTAvBgNV BAMTKDE4NjhDNTc0RkEyRjEzQkIzNUM2NDdERTA0QzJGOEFGQUY5MkE2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUu+Qz+v60CId77fvF5m6wseg gYTW9F8/w9EzD44oHFoXImravvq+gAdLvjXhLZYAUB229QDg1eFJr8IE+gBxGsK1 m6uEnNM0hANJZb/IhP3qlMHBQNkIZ26hmHnwUa7Er6Mg83SVCFLXV7ycJhTOE5KW lMnGSIOJ37QCovoRG5Qx3M5oR+4qQwbdvItKJY0QNYxObbaBECTJM+YcC2duWhf3 4P1w76fQfwrghxLazsXUDurXJgZKM3DII98HNaYLYKYwqaUud+MjM0VIPLXLcQDE s188JFy9b1ZqNB/RY0dqNj6gVE9dTeUQ/Y0GyaO5c+66p35Epns08lBE842tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGGjFdPovE7s1xkfeBML4r6+SpoYwHwYDVR0j BBgwFoAUNKXeKP28byfJmCd/lTQ59m0Qp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU5MjE5MTctMTNhZi00NDAzLTk3YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhG REJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2RDEwQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE1REUyOEZEQkM2RjI3Qzk5ODI3N0Y5NTM0MzlGNjZEMTBB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5 RjY2RDEwQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAHr2tBrQJVUYohW5tEgpWFiRGxtfjJScRS 8D7U0ox8sW/aOfRQL08fGKkVXhgctRgshlcr3EB0cnfF3lj4amL6wHIvPZnMIUul URn0vkJI0df+/O6RAsYbaE+8d0QbcpvxZfE5frm1S8hbnCasB/6N5xCttYGSj+10 vGGq7/Iq6Q2Mmr4Rdx28qFyaK2YdXx1K8zY3VbSlcQjcQpCMgYDvmgSfMWwmJ1jS ZPEk7y4BcG0bsRsKn6lRiRio4484zpdIn2tfvCWbfeG3X3bqV1Xc8Ip+vVsWTnWJ ZCLdMnaoBPgFqXZ/YkHSIXXKVpPe1rhNDP39ulE9oAedt8vEWyE= -----END CERTIFICATE-----Generated at Sat Sep 5 05:07:56 2026 by rpki-client