
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
File: 34B29E7722E2B5DD7C273585E39574B57B896900.mft (raw, json)
Hash identifier: Pvj0Tqn6hv7zmvZVijxnr24SQjdgOoxH8LxTxw9pGdI=
Subject key identifier: 7F:CF:2C:9D:09:63:4A:72:CD:E0:EA:A4:09:8C:66:A0:94:C9:D0:FB
Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00
Certificate issuer: /CN=34B29E7722E2B5DD7C273585E39574B57B896900
Certificate serial: 6D992C1A46B2255A66B4A6AD6A0BAA3E45163077
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 05:30:10 +0000
Manifest this update: Thu 17 Sep 2026 05:25:10 +0000
Manifest next update: Fri 18 Sep 2026 07:01:10 +0000
Files and hashes: 1: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: G90KEOKf6BnudPfrgNF9Y+RD3ZrjM9VxjF1gA2ddTwk=)
2: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: mau8c52MjBB5eUtMaWvjg55FAtNn6V2VkjPj1AYcMKU=)
3: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: 0CcVKvK2RnP3R+MD8e/l3+iqcZgJW/8isjroKXFrB6k=)
4: 34B29E7722E2B5DD7C273585E39574B57B896900.crl (hash: Ji1Mv74uUfWhydBajmzgm2HsjtsnkEng9XV1OUEg8k8=)
5: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 49rc320q+QyoI3Wo5yzjwV1JHfD3ARGCwSOWR1AVGd4=)
6: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: I1bsWI7DvPSBQ9/yo42Yu8NJ60GXC0aRajit4q85Uec=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl
rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:99:2c:1a:46:b2:25:5a:66:b4:a6:ad:6a:0b:aa:3e:45:16:30:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900
Validity
Not Before: Sep 17 05:25:10 2026 GMT
Not After : Sep 18 07:01:10 2026 GMT
Subject: CN=7FCF2C9D09634A72CDE0EAA4098C66A094C9D0FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:f1:b9:0d:a4:4e:10:b2:72:b6:26:bb:ec:
5b:92:bf:d0:5a:95:3e:96:f3:39:fc:ce:5d:f2:8b:
7e:ed:a4:7f:9f:c2:25:49:28:01:6b:17:d5:e6:bf:
a7:05:55:29:6a:24:1b:a1:6e:e5:4a:ac:e1:74:6f:
be:39:be:da:01:14:97:10:16:12:a9:9b:19:36:b4:
a5:cf:a1:4b:93:c7:0b:76:2b:0b:97:0a:1f:36:fb:
db:45:20:44:4e:b4:b4:61:e8:cb:87:16:08:88:8d:
f3:4e:6a:a1:53:90:30:86:71:17:f8:f2:21:3d:f8:
3d:80:1f:0a:f7:5e:3f:04:4a:30:09:3e:f9:08:7c:
f5:7b:88:40:2f:b4:a0:6f:83:44:ed:2d:01:f1:4a:
f9:7f:b8:49:d4:8c:31:d3:a7:4d:15:d9:17:5c:86:
4b:ab:b2:a6:1f:ca:89:33:59:1d:db:50:6b:4a:51:
90:e1:59:c3:27:67:25:e3:d2:d4:ea:4b:2e:b3:e8:
72:16:a4:67:b7:1c:93:c4:0d:c4:7b:0b:7d:57:f1:
81:59:b5:78:43:a5:50:84:60:a4:50:d1:41:7e:cb:
28:c9:12:42:a7:97:01:9b:e4:3e:fb:65:98:5c:b7:
0a:c8:32:48:93:0f:06:d3:9a:a4:c8:e5:ea:c1:57:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:2C:9D:09:63:4A:72:CD:E0:EA:A4:09:8C:66:A0:94:C9:D0:FB
X509v3 Authority Key Identifier:
keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:52:a4:a7:c0:3f:fd:7f:70:7d:09:c2:43:a0:73:b3:a5:1d:
e7:b1:48:26:fc:3c:31:db:47:52:f2:4a:95:90:de:d1:ca:8a:
6e:83:07:2c:f7:94:4a:37:24:fa:9f:d9:71:ee:e1:dd:8b:cb:
8b:95:71:9f:f6:47:1f:5f:e8:68:39:b5:9d:ee:66:95:30:fb:
3f:47:73:38:4a:25:96:5f:14:b5:e8:b2:fd:12:59:2c:07:f1:
1b:c1:a8:3f:3a:f3:7a:97:45:34:50:89:8f:91:35:f9:41:58:
2a:82:1f:f0:94:e1:61:36:d7:e3:82:7d:34:d6:b4:53:f7:30:
c0:80:61:0a:bb:49:30:ed:b9:f9:9f:60:4f:ee:6b:d2:89:80:
54:00:0e:aa:af:46:4f:b1:d0:85:cc:32:be:ad:80:ff:8a:f5:
fb:bb:f6:f8:ae:00:60:24:f9:a9:33:62:a9:34:09:fc:15:65:
e2:67:6f:cf:85:f4:22:ca:a2:7e:a8:47:fa:85:1b:f8:4e:7e:
42:78:d6:0b:15:0b:8f:1c:de:c7:1e:29:e8:ee:e9:23:67:a4:
f8:3d:27:b9:08:8c:48:98:e8:a0:11:e5:0b:ae:08:a8:77:54:
2e:f1:22:d8:43:f7:63:ca:d0:a8:35:21:f1:dc:73:7c:aa:2c:
93:85:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:20 2026 by rpki-client