
$ rpki-client -vvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
File: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft (raw, json)
Hash identifier: djZDU/+1yDHBYSxbiqovhudn0Ri4GhYiYuFxDc7MHCo=
Subject key identifier: E4:C6:CF:1D:A8:15:10:36:02:31:B6:B2:C2:47:CB:E4:17:1E:D9:00
Authority key identifier: 34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F
Certificate issuer: /CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
Certificate serial: 757B9E7303FD51605BCF069A3F9A858207FAE2FF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 04:42:38 +0000
Manifest this update: Thu 18 Jun 2026 04:37:38 +0000
Manifest next update: Fri 19 Jun 2026 07:02:38 +0000
Files and hashes: 1: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl (hash: JXyO+WwAf0B36Pb5tm7pWbZf/XUUnQt02FrfL/3rQMg=)
2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: QuJkYaezAKdTxcWr+l4aySjRA4vLncuY75qiXrBgtBM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl
rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7b:9e:73:03:fd:51:60:5b:cf:06:9a:3f:9a:85:82:07:fa:e2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
Validity
Not Before: Jun 18 04:37:38 2026 GMT
Not After : Jun 19 07:02:38 2026 GMT
Subject: CN=E4C6CF1DA81510360231B6B2C247CBE4171ED900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:ff:50:65:12:3c:49:c1:1f:af:5c:c8:f1:
59:51:f9:b9:bb:e0:4e:ac:14:9e:39:a7:86:c1:a6:
0d:fe:a7:7e:d4:fe:95:d6:57:f1:54:ec:da:56:cb:
61:73:ff:6b:c7:e2:a7:9f:1f:52:f4:ce:c5:8d:66:
b4:d0:ae:04:8d:eb:f9:4d:ca:47:7f:65:51:ca:88:
f1:24:b2:5f:c7:73:4f:30:2d:49:8f:09:f9:98:7f:
25:e0:0e:6f:cb:03:2d:44:08:d9:20:20:3a:0b:42:
6a:12:d6:9d:dd:36:84:a5:38:89:1d:9a:c2:ca:e4:
aa:f5:c3:62:90:7a:fb:88:4f:e3:48:6a:71:9c:3c:
0c:b3:57:9c:44:2e:93:49:51:2e:f1:19:b4:38:3d:
11:af:92:41:e0:5a:e5:8f:ac:69:7e:d2:ae:18:7b:
ef:f2:71:65:84:e4:10:f4:19:02:f4:53:27:5a:3b:
03:5e:5f:09:63:65:11:eb:8b:bb:27:f2:d3:be:be:
b3:4c:9b:f5:67:f0:d4:10:56:61:9c:97:15:67:40:
e8:8c:01:2a:f7:10:15:3c:a8:2c:f4:e7:f1:7a:6b:
c0:62:56:c4:a9:72:59:fe:9f:20:23:b0:d8:b0:a0:
ee:71:7d:df:2e:f9:12:92:4f:49:9b:30:0f:d1:8c:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C6:CF:1D:A8:15:10:36:02:31:B6:B2:C2:47:CB:E4:17:1E:D9:00
X509v3 Authority Key Identifier:
keyid:34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:10:ab:08:40:60:c7:94:c7:56:7d:4e:93:a8:e2:66:02:10:
99:12:85:37:ca:ea:a6:a6:f5:24:5f:b1:16:af:eb:55:cc:bc:
df:71:86:ed:a5:94:74:ae:73:bc:7c:c9:ab:a3:8c:31:bc:34:
1a:a6:e8:25:07:5c:fd:bc:99:3d:95:0f:7f:ed:de:3f:81:41:
90:68:37:19:6a:e8:3c:24:77:b6:21:16:c3:8b:5c:06:78:b5:
14:f8:96:46:69:f2:7a:9c:a1:c0:5e:9f:c4:d5:e1:9e:64:0f:
3b:65:14:23:d2:46:0f:96:c9:9f:cd:1a:e7:c7:23:6e:b3:75:
e0:e5:58:56:12:34:46:4c:5b:6f:10:db:5a:b5:9e:82:52:fc:
53:55:f3:26:55:e7:7c:b7:b6:10:df:77:40:e7:67:fe:00:dc:
29:16:a3:0e:7c:d5:14:5b:44:53:6c:ed:69:58:18:31:48:28:
11:9e:49:65:1f:79:e1:a1:b0:7e:62:f3:10:f0:a3:4d:23:21:
95:49:0c:fa:4e:bf:b5:e2:35:cf:38:eb:de:23:37:5b:3d:92:
39:da:05:e1:99:bb:c1:a3:0c:f0:40:4c:ce:e1:3a:93:ae:b4:
57:9e:bf:df:26:07:4c:df:5c:b1:3f:07:3e:37:4d:8f:5f:aa:
3e:d3:8b:91
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdXuecwP9UWBbzwaaP5qFggf64v8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwQTlENTc3Qjg2OEY5RDg1M0U1NEJGOUZFQTc5RTY2
RTMyQzQ5RjAeFw0yNjA2MTgwNDM3MzhaFw0yNjA2MTkwNzAyMzhaMDMxMTAvBgNV
BAMTKEU0QzZDRjFEQTgxNTEwMzYwMjMxQjZCMkMyNDdDQkU0MTcxRUQ5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigv9QZRI8ScEfr1zI8VlR+bm7
4E6sFJ45p4bBpg3+p37U/pXWV/FU7NpWy2Fz/2vH4qefH1L0zsWNZrTQrgSN6/lN
ykd/ZVHKiPEksl/Hc08wLUmPCfmYfyXgDm/LAy1ECNkgIDoLQmoS1p3dNoSlOIkd
msLK5Kr1w2KQevuIT+NIanGcPAyzV5xELpNJUS7xGbQ4PRGvkkHgWuWPrGl+0q4Y
e+/ycWWE5BD0GQL0UydaOwNeXwljZRHri7sn8tO+vrNMm/Vn8NQQVmGclxVnQOiM
ASr3EBU8qCz05/F6a8BiVsSpcln+nyAjsNiwoO5xfd8u+RKST0mbMA/RjIJfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5MbPHagVEDYCMbaywkfL5Bce2QAwHwYDVR0j
BBgwFoAUNAqdV3uGj52FPlS/n+p55m4yxJ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzEvMzQwQTlENTc3
Qjg2OEY5RDg1M0U1NEJGOUZFQTc5RTY2RTMyQzQ5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNDBBOUQ1NzdCODY4RjlEODUzRTU0QkY5RkVBNzlFNjZFMzJD
NDlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli
ZDktZmQ4NGFjMmNhZTg2LzEvMzQwQTlENTc3Qjg2OEY5RDg1M0U1NEJGOUZFQTc5
RTY2RTMyQzQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKgQqwhAYMeUx1Z9TpOo4mYCEJkShTfK6qam
9SRfsRav61XMvN9xhu2llHSuc7x8yaujjDG8NBqm6CUHXP28mT2VD3/t3j+BQZBo
Nxlq6Dwkd7YhFsOLXAZ4tRT4lkZp8nqcocBen8TV4Z5kDztlFCPSRg+WyZ/NGufH
I26zdeDlWFYSNEZMW28Q21q1noJS/FNV8yZV53y3thDfd0DnZ/4A3CkWow581RRb
RFNs7WlYGDFIKBGeSWUfeeGhsH5i8xDwo00jIZVJDPpOv7XiNc84694jN1s9kjna
BeGZu8GjDPBATM7hOpOutFeev98mB0zfXLE/Bz43TY9fqj7Ti5E=
-----END CERTIFICATE-----
Generated at Thu Jun 18 21:12:06 2026 by rpki-client