$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: tvYOjl1teLp3SaJdLb+0+dFYKgGBptI3NAeBMy4nGHQ= Subject key identifier: D5:C0:0D:20:86:65:38:19:60:D8:C5:C8:9C:9F:ED:D0:D9:A3:D8:DE Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 6C1EF41ECF71521575F8C0FC185C08DB27D4E7A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 12:44:29 +0000 Manifest this update: Thu 17 Sep 2026 12:39:29 +0000 Manifest next update: Fri 18 Sep 2026 13:56:29 +0000 Files and hashes: 1: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: ew2rQoP29jaacSHh82rI8RMAVuvnaQSAONFb6A++Fdc=) 2: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) 3: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1e:f4:1e:cf:71:52:15:75:f8:c0:fc:18:5c:08:db:27:d4:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: Sep 17 12:39:29 2026 GMT Not After : Sep 18 13:56:29 2026 GMT Subject: CN=D5C00D208665381960D8C5C89C9FEDD0D9A3D8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:92:ad:22:aa:8f:78:cb:1e:af:97:e4:93: f3:af:27:8f:45:bf:fe:4f:1e:16:45:c6:04:3b:e5: 89:5f:b7:5a:01:08:e0:81:42:44:e7:7d:19:12:eb: 9f:f5:7e:44:d5:f6:dc:1f:d0:d4:53:a2:e8:fc:01: e0:99:83:f6:cc:70:d1:bb:56:80:12:b0:33:5e:cf: 76:63:b7:ea:92:a9:a0:bb:30:70:ee:0f:2d:3a:db: 7d:7e:e0:62:ed:3a:20:fe:87:2d:2a:67:de:73:39: 54:d0:30:db:cb:1d:4a:50:be:e9:0f:41:38:02:fe: 62:57:8d:3a:0b:1a:36:81:28:12:ca:ae:fa:18:a7: 10:b2:62:39:70:ca:21:c0:b0:2d:8f:84:b3:ed:33: 01:66:77:f5:90:48:8d:67:d0:c3:e3:61:a0:f5:17: 5c:16:74:0a:ea:5c:08:09:57:5d:0c:4d:ab:79:88: 08:f4:63:a2:f7:11:c8:8c:08:a1:41:9b:4b:e9:b3: ae:f4:35:68:19:ad:c0:df:c4:6c:47:a5:90:2a:8c: 66:24:81:df:4b:58:20:4c:af:aa:6f:e4:8b:b4:2b: 47:03:20:35:04:8b:13:c1:a7:c8:2a:ab:51:dc:ac: 46:42:94:63:7d:ac:0d:50:53:77:b4:a6:02:0d:7a: e9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:0D:20:86:65:38:19:60:D8:C5:C8:9C:9F:ED:D0:D9:A3:D8:DE X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9b:8c:d5:42:00:7e:87:3b:1d:c1:75:47:ed:2d:4e:6e:59: a8:9d:28:36:f7:73:ce:1d:c9:63:fb:7a:4d:35:86:73:b3:b0: ef:b1:df:2c:c5:dc:59:06:f4:a1:08:62:5c:4b:7f:28:7c:02: eb:5c:2e:24:38:59:06:d5:59:03:23:91:ae:ad:c1:d5:40:ee: 2f:74:ac:35:d6:5b:18:3f:8f:67:b5:22:ce:0b:4c:ac:e0:da: cf:eb:31:c8:80:76:76:53:99:32:8d:f0:f3:e5:b7:d8:fb:ed: b7:12:60:39:5b:f1:e8:07:b6:7b:ff:64:a5:f6:8e:66:ec:45: c9:19:6a:27:84:58:50:67:05:7d:1e:58:f3:08:b3:02:e4:d9: b5:f4:f0:40:49:7d:99:5a:fb:b2:bd:54:7d:30:c6:1c:2d:9e: d4:c2:46:84:d8:04:cf:03:e1:fe:0b:59:a0:31:20:bb:48:e6: c3:3d:4f:7f:d7:64:71:b0:d1:ff:71:69:68:38:75:72:22:40: 22:32:43:23:80:b6:fc:42:fe:33:7d:74:38:5e:89:10:0c:c7: be:81:ed:ec:ef:67:f4:13:b3:b1:ff:66:ec:98:94:14:79:4c: f6:a3:9c:bc:37:1a:e5:18:54:5e:0b:1b:2b:0b:ae:77:c9:87: 26:7b:54:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbB70Hs9xUhV1+MD8GFwI2yfU56AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjA5MTcxMjM5MjlaFw0yNjA5MTgxMzU2MjlaMDMxMTAvBgNV BAMTKEQ1QzAwRDIwODY2NTM4MTk2MEQ4QzVDODlDOUZFREQwRDlBM0Q4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcypKtIqqPeMser5fkk/OvJ49F v/5PHhZFxgQ75Ylft1oBCOCBQkTnfRkS65/1fkTV9twf0NRTouj8AeCZg/bMcNG7 VoASsDNez3Zjt+qSqaC7MHDuDy06231+4GLtOiD+hy0qZ95zOVTQMNvLHUpQvukP QTgC/mJXjToLGjaBKBLKrvoYpxCyYjlwyiHAsC2PhLPtMwFmd/WQSI1n0MPjYaD1 F1wWdArqXAgJV10MTat5iAj0Y6L3EciMCKFBm0vps670NWgZrcDfxGxHpZAqjGYk gd9LWCBMr6pv5Iu0K0cDIDUEixPBp8gqq1HcrEZClGN9rA1QU3e0pgINeukDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1cANIIZlOBlg2MXInJ/t0Nmj2N4wHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGbjNVCAH6HOx3BdUftLU5uWaidKDb3c84d yWP7ek01hnOzsO+x3yzF3FkG9KEIYlxLfyh8AutcLiQ4WQbVWQMjka6twdVA7i90 rDXWWxg/j2e1Is4LTKzg2s/rMciAdnZTmTKN8PPlt9j77bcSYDlb8egHtnv/ZKX2 jmbsRckZaieEWFBnBX0eWPMIswLk2bX08EBJfZla+7K9VH0wxhwtntTCRoTYBM8D 4f4LWaAxILtI5sM9T3/XZHGw0f9xaWg4dXIiQCIyQyOAtvxC/jN9dDheiRAMx76B 7ezvZ/QTs7H/ZuyYlBR5TPajnLw3GuUYVF4LGysLrnfJhyZ7VHI= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:43 2026 by rpki-client