$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft File: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft (raw, json) Hash identifier: 7pg11Bz/Dhm2t7z4cIOPRT6cGYrQEnn37tUSmUIgF6s= Subject key identifier: D4:B5:6D:8F:1C:67:89:31:E1:AC:AB:0C:06:A6:F9:09:D8:C9:68:04 Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Certificate serial: 4622302E24C9A085F060AD45CEE3C363811585BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:54:36 +0000 Manifest this update: Thu 17 Sep 2026 08:49:36 +0000 Manifest next update: Fri 18 Sep 2026 10:08:36 +0000 Files and hashes: 1: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=) 2: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: DPoB0J81kARhSGUqtcPhC6vugUonXM9RgVO7Yrk5SrU=) 3: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=) 4: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl (hash: 71ta2CQpPT+BMSXSY5CB9H93hitU192mW2PBXihTJuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:22:30:2e:24:c9:a0:85:f0:60:ad:45:ce:e3:c3:63:81:15:85:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Validity Not Before: Sep 17 08:49:36 2026 GMT Not After : Sep 18 10:08:36 2026 GMT Subject: CN=D4B56D8F1C678931E1ACAB0C06A6F909D8C96804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:56:5d:9d:f9:1a:9a:3d:51:5c:ee:50:4a: f5:22:2d:76:a5:11:f5:20:c6:b9:38:f0:b9:9d:32: 40:72:14:1d:a7:05:2b:03:54:67:63:63:cb:5e:f2: 22:5a:3a:d5:0d:cf:df:ee:22:7c:20:1f:7a:f9:89: ae:fb:5c:ef:c5:3b:2d:de:48:86:d9:e2:3a:29:65: 2c:99:bd:99:8c:f2:40:22:bf:1e:c7:1f:2f:65:75: 69:a1:90:b5:03:77:2b:00:75:0a:13:dc:f6:54:60: 12:aa:24:e8:e0:58:e4:88:18:11:4e:d8:10:9c:74: 5e:5c:b7:70:78:aa:87:8a:c9:f4:b7:06:19:d1:fb: c4:d4:ce:63:59:7e:ec:0a:c2:30:ff:8e:1f:4a:9a: 75:4f:c6:96:dc:81:2a:7f:09:8c:6b:8d:02:97:b0: f7:ca:3e:9b:4b:81:47:0f:65:7a:6c:f0:dd:43:ff: 1f:bc:29:77:6b:76:d2:60:f1:4f:b1:a1:66:59:f8: 68:43:76:07:3f:92:35:d4:e3:3e:14:44:13:c0:ec: b0:c1:21:88:b7:7f:04:03:1f:d7:79:d6:01:2c:53: 1d:f1:2e:61:6b:38:09:a4:98:e4:d6:5f:c4:e9:ee: 65:d3:b6:f6:3a:f4:81:fc:b3:ad:41:3c:05:e0:96: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B5:6D:8F:1C:67:89:31:E1:AC:AB:0C:06:A6:F9:09:D8:C9:68:04 X509v3 Authority Key Identifier: keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ce:83:97:bb:8e:5f:8e:7b:69:61:60:5c:14:cb:47:8d:55: c8:4d:1f:7e:e0:ca:9e:96:5c:c6:d9:ae:ad:d6:b8:3a:9f:15: 7c:02:c1:b8:5b:ea:16:d7:45:87:38:93:35:10:ad:68:5f:b0: b8:a8:50:f2:7e:fd:d1:22:ff:2a:1b:54:81:06:43:60:30:e4: 49:5e:1c:9d:fe:51:bb:94:30:6d:c6:42:98:0a:91:a2:14:f3: cd:da:c7:b7:3d:4d:06:59:82:49:19:16:f1:1a:97:ed:f0:ec: a4:77:45:e6:6d:49:2f:9b:1f:45:e7:2d:9b:c0:4a:5d:da:2b: 8a:57:9a:31:1b:c9:4d:0f:7d:b8:71:7c:50:1f:91:de:4c:65: a9:47:14:1e:e6:24:bc:77:45:3c:5e:3f:ac:b4:ad:0f:b4:14: 87:c6:61:22:02:12:ec:77:6e:d8:7c:0d:25:ae:09:74:15:d9: 9b:45:b0:5a:7f:c3:81:f4:49:7c:ea:d0:2c:e3:65:5f:71:36: 2b:22:a8:b0:b1:05:1e:a9:8f:be:da:d0:bd:9c:af:05:07:c0: 60:ff:93:66:53:51:55:b4:3e:1d:ac:ce:ca:32:3e:58:52:37: 2d:d6:73:f1:50:53:fb:42:cf:88:34:9a:3c:5d:77:8e:6f:d5: dc:1b:08:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiIwLiTJoIXwYK1FzuPDY4EVhbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC RDI4Mjk1MTAeFw0yNjA5MTcwODQ5MzZaFw0yNjA5MTgxMDA4MzZaMDMxMTAvBgNV BAMTKEQ0QjU2RDhGMUM2Nzg5MzFFMUFDQUIwQzA2QTZGOTA5RDhDOTY4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtFZdnfkamj1RXO5QSvUiLXal EfUgxrk48LmdMkByFB2nBSsDVGdjY8te8iJaOtUNz9/uInwgH3r5ia77XO/FOy3e SIbZ4jopZSyZvZmM8kAivx7HHy9ldWmhkLUDdysAdQoT3PZUYBKqJOjgWOSIGBFO 2BCcdF5ct3B4qoeKyfS3BhnR+8TUzmNZfuwKwjD/jh9KmnVPxpbcgSp/CYxrjQKX sPfKPptLgUcPZXps8N1D/x+8KXdrdtJg8U+xoWZZ+GhDdgc/kjXU4z4URBPA7LDB IYi3fwQDH9d51gEsUx3xLmFrOAmkmOTWX8Tp7mXTtvY69IH8s61BPAXglvP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1LVtjxxniTHhrKsMBqb5CdjJaAQwHwYDVR0j BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1 QzlCRDI4Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzOg5e7jl+Oe2lhYFwUy0eNVchNH37gyp6W XMbZrq3WuDqfFXwCwbhb6hbXRYc4kzUQrWhfsLioUPJ+/dEi/yobVIEGQ2Aw5Ele HJ3+UbuUMG3GQpgKkaIU883ax7c9TQZZgkkZFvEal+3w7KR3ReZtSS+bH0XnLZvA Sl3aK4pXmjEbyU0PfbhxfFAfkd5MZalHFB7mJLx3RTxeP6y0rQ+0FIfGYSICEux3 bth8DSWuCXQV2ZtFsFp/w4H0SXzq0CzjZV9xNisiqLCxBR6pj77a0L2crwUHwGD/ k2ZTUVW0Ph2szsoyPlhSNy3Wc/FQU/tCz4g0mjxdd45v1dwbCDc= -----END CERTIFICATE-----Generated at Thu Sep 17 16:26:59 2026 by rpki-client