$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft File: 34A5DE28FDBC6F27C998277F953439F66D10A75E.mft (raw, json) Hash identifier: RpvnXzhuiUzZ/ZgAmUXYkC6UIKa+AvYUsNJXROYvJj4= Subject key identifier: 30:0D:DA:74:F6:75:85:FB:14:3C:71:7A:EE:91:A0:D2:1D:3E:CF:4F Authority key identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E Certificate issuer: /CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Certificate serial: 3E04480BCACF77482B70BB2A06AB63AD930572A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 15:13:07 +0000 Manifest this update: Sat 24 Oct 2026 15:08:07 +0000 Manifest next update: Sun 25 Oct 2026 15:41:07 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: 9xIqyd7FqC7E5vM/2yM7xmyBSmnXPGROKdDFsYB3t7A=) 2: 34A5DE28FDBC6F27C998277F953439F66D10A75E.crl (hash: Gsg5AEdq0LogxGfcVdlhrsOjogfTA/G4XZB4UsQHVg0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:04:48:0b:ca:cf:77:48:2b:70:bb:2a:06:ab:63:ad:93:05:72:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Validity Not Before: Oct 24 15:08:07 2026 GMT Not After : Oct 25 15:41:07 2026 GMT Subject: CN=300DDA74F67585FB143C717AEE91A0D21D3ECF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:20:12:26:a7:1e:e2:02:71:33:57:02:9d: 63:6e:07:a2:d2:73:e2:ed:b6:ec:c2:4b:fa:46:a5: 94:ee:4a:74:34:1a:1d:df:40:c5:9b:43:f3:6f:34: bc:84:c9:60:7a:25:f6:5b:91:e7:c7:66:ff:7c:25: 53:ab:00:5e:13:03:48:1a:c6:e2:f9:ae:e5:b1:ef: 83:61:72:94:cd:68:b1:c8:de:fe:eb:b3:cb:aa:fa: 72:fb:cf:cd:b9:5a:bd:1f:26:db:48:95:9c:2f:c3: 1b:ca:d4:45:de:ba:ac:cb:80:d4:e7:9e:22:39:7c: ff:ea:39:22:4e:95:33:77:0b:1c:a0:b1:0c:16:89: e6:28:0e:e6:f0:65:e0:16:15:fc:d1:54:11:a0:95: 89:da:0e:5e:7c:1a:ca:44:89:db:81:c3:52:a9:96: b0:1a:70:a2:81:6a:6a:41:4b:41:4a:69:ef:d6:25: a9:75:e6:f7:2e:5a:99:4e:c2:43:6c:71:4d:06:20: f1:74:4a:6e:53:e0:cb:00:e7:2b:16:aa:a1:f9:64: 0d:fd:f5:6b:13:91:72:00:96:fc:21:e3:79:1f:fc: b3:60:6c:53:87:8c:ca:47:fb:d3:bf:eb:3c:7e:0b: ab:77:57:4f:e1:f7:a6:df:8a:0d:6a:f0:7a:ba:36: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0D:DA:74:F6:75:85:FB:14:3C:71:7A:EE:91:A0:D2:1D:3E:CF:4F X509v3 Authority Key Identifier: keyid:34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:83:26:03:fb:c5:49:e9:21:48:cf:89:a0:d5:eb:95:aa:d6: e6:62:b5:76:12:2f:b1:74:a2:4c:23:d5:89:ee:ac:b5:91:70: a5:69:71:c0:54:c4:a6:dd:a7:8f:df:e5:79:8d:17:f1:99:67: c7:c1:91:8f:a4:e2:1e:7f:10:5e:19:0b:81:3e:a0:73:67:fe: d8:c3:e5:f5:9c:94:84:2d:3e:fd:42:2c:8c:23:a8:e8:ed:b6: 60:23:3f:4f:ee:d4:eb:75:e7:91:c5:9d:ef:63:f5:80:c0:9f: 9a:76:fb:0e:e6:c2:af:95:0c:47:08:c9:ad:7a:ac:c6:73:b4: 8d:76:2c:cc:bf:ae:48:8e:07:a5:f1:24:a6:8f:5b:eb:06:61: bf:bb:8f:5e:1f:f0:aa:80:45:3d:c6:8c:60:3d:7e:1c:bf:93: 10:5e:99:89:41:42:2f:9f:15:70:56:88:28:08:b9:b4:47:b6: 9d:28:05:98:12:30:5d:ba:5b:df:09:e4:bc:ef:cb:4a:06:f3: 92:86:40:16:84:03:eb:a2:e8:4c:0e:89:23:bf:a7:d7:c6:5e: fe:ce:92:92:c4:c3:bb:8a:80:98:3c:f2:e2:74:48:67:54:3f: 5a:a5:88:47:f4:28:e7:e8:39:d8:6f:45:5f:d4:4d:91:a4:b1: 64:ef:8b:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgRIC8rPd0grcLsqBqtjrZMFcqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2 RDEwQTc1RTAeFw0yNjEwMjQxNTA4MDdaFw0yNjEwMjUxNTQxMDdaMDMxMTAvBgNV BAMTKDMwMEREQTc0RjY3NTg1RkIxNDNDNzE3QUVFOTFBMEQyMUQzRUNGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiCASJqce4gJxM1cCnWNuB6LS c+LttuzCS/pGpZTuSnQ0Gh3fQMWbQ/NvNLyEyWB6JfZbkefHZv98JVOrAF4TA0ga xuL5ruWx74NhcpTNaLHI3v7rs8uq+nL7z825Wr0fJttIlZwvwxvK1EXeuqzLgNTn niI5fP/qOSJOlTN3CxygsQwWieYoDubwZeAWFfzRVBGglYnaDl58GspEiduBw1Kp lrAacKKBampBS0FKae/WJal15vcuWplOwkNscU0GIPF0Sm5T4MsA5ysWqqH5ZA39 9WsTkXIAlvwh43kf/LNgbFOHjMpH+9O/6zx+C6t3V0/h96bfig1q8Hq6NtiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMA3adPZ1hfsUPHF67pGg0h0+z08wHwYDVR0j BBgwFoAUNKXeKP28byfJmCd/lTQ59m0Qp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU5MjE5MTctMTNhZi00NDAzLTk3YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhG REJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2RDEwQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE1REUyOEZEQkM2RjI3Qzk5ODI3N0Y5NTM0MzlGNjZEMTBB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5 RjY2RDEwQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOiDJgP7xUnpIUjPiaDV65Wq1uZitXYSL7F0 okwj1YnurLWRcKVpccBUxKbdp4/f5XmNF/GZZ8fBkY+k4h5/EF4ZC4E+oHNn/tjD 5fWclIQtPv1CLIwjqOjttmAjP0/u1Ot155HFne9j9YDAn5p2+w7mwq+VDEcIya16 rMZztI12LMy/rkiOB6XxJKaPW+sGYb+7j14f8KqART3GjGA9fhy/kxBemYlBQi+f FXBWiCgIubRHtp0oBZgSMF26W98J5Lzvy0oG85KGQBaEA+ui6EwOiSO/p9fGXv7O kpLEw7uKgJg88uJ0SGdUP1qliEf0KOfoOdhvRV/UTZGksWTvi94= -----END CERTIFICATE-----Generated at Sun Oct 25 03:15:35 2026 by rpki-client