$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: W7GeWpWA+PGzeA7L0pivoVO9AG8ELk/vMzDHqVhrLb4= Subject key identifier: 77:C5:76:4A:BF:F9:7D:F4:A4:D6:88:2D:4D:A0:52:0D:74:62:BB:A9 Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 4FC12F84B0B8292AD191DD94382872891640E408 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:09:59 +0000 Manifest this update: Wed 13 May 2026 01:04:59 +0000 Manifest next update: Thu 14 May 2026 02:32:59 +0000 Files and hashes: 1: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) 2: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: ZnXfJEBjWfYk5beYWPgCyzCtPHYGxoI6CZDnSPmIz2M=) 3: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c1:2f:84:b0:b8:29:2a:d1:91:dd:94:38:28:72:89:16:40:e4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: May 13 01:04:59 2026 GMT Not After : May 14 02:32:59 2026 GMT Subject: CN=77C5764ABFF97DF4A4D6882D4DA0520D7462BBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:38:e3:09:ad:d7:4c:25:06:a4:c3:7a:97: 1d:fc:d2:12:30:0c:2f:ae:2e:32:ce:8e:de:ec:dd: 37:de:74:12:5a:1d:25:ef:60:f3:2f:c1:81:95:03: d6:9d:7d:8e:1d:c8:5c:81:3a:6c:23:0e:1e:bd:d3: 95:02:44:a9:39:76:3a:fc:26:b0:4f:84:a2:63:ad: 29:d1:a6:0d:68:7b:f3:49:52:a5:75:c1:ed:e2:17: fe:7f:09:4e:7a:4d:79:93:4e:4d:bf:48:55:8b:97: 89:34:4b:a0:b9:9d:56:c2:13:ba:f4:d6:28:37:d2: 2d:d3:5a:2d:6b:0f:ad:14:19:69:30:91:50:9c:db: a9:52:55:bf:76:8c:c5:c1:9a:dd:b6:42:8a:25:db: c5:9d:b1:eb:19:d3:2f:2f:b0:1b:40:04:d2:d2:79: 63:57:c2:b0:b7:f5:d4:00:73:4b:4f:a9:81:e9:cf: ba:9a:a9:de:6e:e5:2b:e9:39:a8:8c:72:f5:a0:a3: 51:53:85:7a:df:24:45:35:0a:9f:6f:38:5d:c3:14: c8:48:22:00:e5:bd:2b:4f:84:34:8c:af:2f:a5:da: 97:5e:b1:33:24:ea:ee:1a:95:21:0d:5e:97:6a:be: 83:25:47:19:99:9f:97:9c:85:e7:47:73:13:f3:69: 51:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C5:76:4A:BF:F9:7D:F4:A4:D6:88:2D:4D:A0:52:0D:74:62:BB:A9 X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:84:39:17:1d:28:01:e0:2d:36:f3:71:29:68:ee:b4:66:97: 28:20:8f:56:0c:c0:7c:17:29:7f:84:bf:cc:04:21:b5:e7:08: 4c:da:8f:05:aa:79:f4:a0:79:1d:04:fa:ba:58:6c:42:ec:20: fc:53:45:26:00:4c:a1:3a:33:d2:01:4d:df:00:6a:a0:0f:46: 81:69:bc:85:fd:e7:dc:91:32:f0:68:c6:ce:da:6b:e4:df:d5: bf:29:d6:dd:2c:ee:6f:ca:38:8d:63:a5:8b:70:91:17:9e:fd: 0a:a2:fd:e4:c6:26:84:a3:92:82:e8:4e:0a:ca:42:51:d1:b3: e3:b2:6e:5c:d6:eb:fc:4a:85:c5:ed:d4:04:94:e8:57:11:83: 52:db:95:61:89:6f:a9:60:40:d0:ab:18:7a:cd:45:58:52:d9: 1c:50:5b:46:10:40:1a:4c:b0:79:63:22:20:d0:39:c1:b7:56: 6f:28:de:50:7e:77:19:c0:2e:06:f6:ca:67:49:c5:dd:a9:47: 4e:35:31:11:2d:51:32:ae:38:21:85:f5:78:48:6c:99:10:6c: 09:b0:3f:34:28:03:d3:04:5d:b2:b4:a8:a3:f6:88:da:37:cc: 1b:1c:c8:9d:7f:a3:12:9d:c3:3f:16:cd:3e:c9:39:7c:2c:0c: ad:ea:29:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8EvhLC4KSrRkd2UOChyiRZA5AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjA1MTMwMTA0NTlaFw0yNjA1MTQwMjMyNTlaMDMxMTAvBgNV BAMTKDc3QzU3NjRBQkZGOTdERjRBNEQ2ODgyRDREQTA1MjBENzQ2MkJCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOzjjCa3XTCUGpMN6lx380hIw DC+uLjLOjt7s3TfedBJaHSXvYPMvwYGVA9adfY4dyFyBOmwjDh6905UCRKk5djr8 JrBPhKJjrSnRpg1oe/NJUqV1we3iF/5/CU56TXmTTk2/SFWLl4k0S6C5nVbCE7r0 1ig30i3TWi1rD60UGWkwkVCc26lSVb92jMXBmt22Qool28WdsesZ0y8vsBtABNLS eWNXwrC39dQAc0tPqYHpz7qaqd5u5SvpOaiMcvWgo1FThXrfJEU1Cp9vOF3DFMhI IgDlvStPhDSMry+l2pdesTMk6u4alSENXpdqvoMlRxmZn5echedHcxPzaVFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd8V2Sr/5ffSk1ogtTaBSDXRiu6kwHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuEORcdKAHgLTbzcSlo7rRmlyggj1YMwHwX KX+Ev8wEIbXnCEzajwWqefSgeR0E+rpYbELsIPxTRSYATKE6M9IBTd8AaqAPRoFp vIX959yRMvBoxs7aa+Tf1b8p1t0s7m/KOI1jpYtwkRee/Qqi/eTGJoSjkoLoTgrK QlHRs+OyblzW6/xKhcXt1ASU6FcRg1LblWGJb6lgQNCrGHrNRVhS2RxQW0YQQBpM sHljIiDQOcG3Vm8o3lB+dxnALgb2ymdJxd2pR041MREtUTKuOCGF9XhIbJkQbAmw PzQoA9MEXbK0qKP2iNo3zBscyJ1/oxKdwz8WzT7JOXwsDK3qKeQ= -----END CERTIFICATE-----Generated at Wed May 13 04:53:32 2026 by rpki-client