$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft File: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft (raw, json) Hash identifier: TTwocBQ0K4tV3yplFTxy+qMIDHcyEyiBtsPXPPrWaY8= Subject key identifier: B1:22:51:A2:27:4C:84:25:3C:51:95:61:7B:D6:43:8E:20:CC:AD:C3 Authority key identifier: 34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A Certificate issuer: /CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A Certificate serial: 453EF1B08A6A8CF6DB304259333325C4C5E39D17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:17:30 +0000 Manifest this update: Thu 17 Sep 2026 07:12:30 +0000 Manifest next update: Fri 18 Sep 2026 10:32:30 +0000 Files and hashes: 1: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl (hash: OJ4UcGRePO2u8xurNZ3i/lv48WpgwjWKWdQALEulvuM=) 2: 3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (hash: RH7qzceSrisGTT+gbHQrqNwFlHJNMn8OuKHPRRq6v88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3e:f1:b0:8a:6a:8c:f6:db:30:42:59:33:33:25:c4:c5:e3:9d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A Validity Not Before: Sep 17 07:12:30 2026 GMT Not After : Sep 18 10:32:30 2026 GMT Subject: CN=B12251A2274C84253C5195617BD6438E20CCADC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d0:16:91:69:04:7f:e5:b7:c9:67:3b:68:35: 7f:a3:e6:98:b8:2d:53:0c:f5:b5:1f:58:ba:a9:19: bd:65:c5:92:63:85:45:15:7d:34:ca:65:f0:2e:61: 9a:d7:1c:b4:c5:b8:47:92:61:d2:0e:74:8f:3e:f2: 08:ad:98:92:ec:90:d7:41:b3:91:70:99:2f:05:23: 84:5a:bb:c5:77:17:81:5d:8c:c6:6d:fa:01:43:df: 22:5e:99:a8:35:93:2a:f5:3c:6c:0c:a7:26:8f:b1: d4:5f:fe:5b:66:1e:dd:07:33:93:0e:b7:90:ca:92: bf:9f:3c:d4:ef:38:e1:50:e0:a6:fa:4f:f6:68:de: e8:e9:b6:60:14:ab:8f:e5:e0:70:f9:e4:e9:a2:45: 86:c4:6a:ae:82:e6:68:b1:52:ad:c5:41:2a:13:1a: 59:91:b7:2b:27:ea:19:53:4f:1d:d6:b1:20:95:5e: e3:72:c7:40:37:0e:fb:de:bf:b3:b5:52:c2:2a:91: 70:40:fc:4a:b2:6c:4b:68:ff:b8:3d:ae:d2:f7:48: eb:98:26:31:91:9b:f3:a9:e9:f1:2e:0e:66:ed:14: 3e:09:4f:5c:c1:4c:f8:fb:12:12:e9:79:c3:8e:52: 5b:d7:68:25:31:55:77:8a:41:10:40:e1:2a:6f:d1: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:22:51:A2:27:4C:84:25:3C:51:95:61:7B:D6:43:8E:20:CC:AD:C3 X509v3 Authority Key Identifier: keyid:34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e3:da:e1:09:50:ae:96:40:c6:2b:74:38:9a:94:e4:e8:ec: 1d:a8:48:3c:3d:16:05:99:29:f8:9f:12:2d:0a:7d:73:b1:7a: a7:12:f0:85:d3:8c:e4:14:5a:ec:db:5b:4d:ee:ae:09:33:56: 8b:86:77:7d:1b:0b:bc:99:1a:5f:18:2c:ed:93:a8:64:1b:8b: d2:5f:fe:67:e0:40:73:b1:74:f9:83:d6:fb:54:3b:5d:29:48: dc:b1:71:22:6e:ff:81:20:2a:57:fd:02:98:27:18:1f:d5:9d: 49:2b:42:a3:aa:60:95:9d:94:af:8f:1b:d0:16:68:19:06:1b: 9c:c4:5c:96:b3:2c:21:93:c2:27:dd:63:06:10:1c:93:64:40: f2:3f:0f:65:4b:c1:1c:65:07:8d:b2:35:d9:03:08:c1:dc:bb: ce:a7:c4:0b:ea:59:02:b0:a8:2a:e7:00:7d:63:44:bd:65:a5: 0b:41:07:16:3d:d4:96:28:9e:36:ab:bb:9a:95:fc:28:eb:f3: 76:1d:48:34:60:c6:a1:e2:90:7b:2f:9e:b2:b0:cc:77:6a:df: 93:b4:9f:4d:54:a0:83:72:98:39:57:1f:05:c8:3d:cb:d5:50: 1d:73:b5:cd:3f:39:a7:bc:df:36:de:f4:c3:dc:ec:2a:75:b3: 21:64:ab:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURT7xsIpqjPbbMEJZMzMlxMXjnRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBOUI5RENBRUVCNkRBN0JEMUY3OTk2Q0ZCQUVFRDFF MTM0RjQ3QTAeFw0yNjA5MTcwNzEyMzBaFw0yNjA5MTgxMDMyMzBaMDMxMTAvBgNV BAMTKEIxMjI1MUEyMjc0Qzg0MjUzQzUxOTU2MTdCRDY0MzhFMjBDQ0FEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD50BaRaQR/5bfJZztoNX+j5pi4 LVMM9bUfWLqpGb1lxZJjhUUVfTTKZfAuYZrXHLTFuEeSYdIOdI8+8gitmJLskNdB s5FwmS8FI4Rau8V3F4FdjMZt+gFD3yJemag1kyr1PGwMpyaPsdRf/ltmHt0HM5MO t5DKkr+fPNTvOOFQ4Kb6T/Zo3ujptmAUq4/l4HD55OmiRYbEaq6C5mixUq3FQSoT GlmRtysn6hlTTx3WsSCVXuNyx0A3Dvvev7O1UsIqkXBA/EqybEto/7g9rtL3SOuY JjGRm/Op6fEuDmbtFD4JT1zBTPj7EhLpecOOUlvXaCUxVXeKQRBA4Spv0ezJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsSJRoidMhCU8UZVhe9ZDjiDMrcMwHwYDVR0j BBgwFoAUNKm53K7rbae9H3mWz7ru0eE09HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyMTkyNTktZWQxYS00ZDE4LWJkOTItOTRiNjA2NzJlNmExLzAvMzRBOUI5RENB RUVCNkRBN0JEMUY3OTk2Q0ZCQUVFRDFFMTM0RjQ3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE5QjlEQ0FFRUI2REE3QkQxRjc5OTZDRkJBRUVEMUUxMzRG NDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyMTkyNTktZWQxYS00ZDE4LWJk OTItOTRiNjA2NzJlNmExLzAvMzRBOUI5RENBRUVCNkRBN0JEMUY3OTk2Q0ZCQUVF RDFFMTM0RjQ3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfj2uEJUK6WQMYrdDialOTo7B2oSDw9FgWZ KfifEi0KfXOxeqcS8IXTjOQUWuzbW03urgkzVouGd30bC7yZGl8YLO2TqGQbi9Jf /mfgQHOxdPmD1vtUO10pSNyxcSJu/4EgKlf9ApgnGB/VnUkrQqOqYJWdlK+PG9AW aBkGG5zEXJazLCGTwifdYwYQHJNkQPI/D2VLwRxlB42yNdkDCMHcu86nxAvqWQKw qCrnAH1jRL1lpQtBBxY91JYonjaru5qV/Cjr83YdSDRgxqHikHsvnrKwzHdq35O0 n01UoINymDlXHwXIPcvVUB1ztc0/Oae83zbe9MPc7Cp1syFkqyA= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:40 2026 by rpki-client