$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: k9u1qqoYkWhf6hT1vJpTdU/44VTxj9Tj7n6zt2xbG1k= Subject key identifier: C2:7C:F8:86:07:8C:3A:00:72:82:E5:11:2A:00:5C:B8:09:11:C2:85 Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 36E3F00E3020BE7302FE6D62EB765DD47178CDB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:45:01 +0000 Manifest this update: Fri 24 Jul 2026 00:40:01 +0000 Manifest next update: Sat 25 Jul 2026 04:03:01 +0000 Files and hashes: 1: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: Ln2TJjjMGRuzFPbT+HSjhw1zh3ex1JXD0vEXYUk7Aw4=) 2: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) 3: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e3:f0:0e:30:20:be:73:02:fe:6d:62:eb:76:5d:d4:71:78:cd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: Jul 24 00:40:01 2026 GMT Not After : Jul 25 04:03:01 2026 GMT Subject: CN=C27CF886078C3A007282E5112A005CB80911C285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:de:57:c5:39:6f:be:b5:0c:db:6f:00:c0: 3a:90:07:3e:07:e2:f6:23:fd:e5:8e:71:ee:25:c2: af:ac:d0:86:e5:bb:ae:43:c6:c9:78:7c:21:f4:62: 1b:ce:f7:1b:62:1c:d3:58:c2:05:d3:65:c7:59:ca: 26:8d:71:63:3f:af:2f:c1:38:85:13:40:a9:14:76: 5e:3e:b6:87:e0:6c:95:e0:1d:8e:39:58:21:cf:64: 56:d4:bf:6f:0a:29:81:72:3c:ac:56:ff:03:c2:e5: 04:46:9a:ea:6b:a8:1b:af:24:d5:fb:bd:0d:6f:87: ac:56:af:70:33:06:24:a3:7e:cf:f0:20:4b:dc:53: d0:15:e6:c9:79:e3:15:51:52:d3:61:e2:bc:03:88: f9:98:20:b7:cd:1a:46:9f:06:74:bc:89:67:d2:ef: 74:73:9c:4a:f2:23:44:11:f3:10:cc:4e:fb:78:ca: 31:71:62:9f:07:94:a0:a7:0e:f0:6c:5c:e9:61:10: 82:fb:ba:80:ac:a7:f8:20:dd:b3:8f:b0:46:f7:96: c5:ee:8a:4c:ca:94:69:21:d9:54:52:3d:5d:a5:c4: a3:85:0f:6f:ed:ee:2d:1d:c5:13:a1:91:73:f5:66: 9b:a5:e2:48:d2:84:ff:a9:c4:d1:1e:8a:0b:c7:7c: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7C:F8:86:07:8C:3A:00:72:82:E5:11:2A:00:5C:B8:09:11:C2:85 X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d6:fa:56:6f:3d:98:ca:a7:e7:82:68:67:a8:06:fd:f3:c5: 64:c6:65:c0:b2:5d:9e:d4:61:0e:df:75:fc:42:0a:53:cd:00: 81:a7:2b:ca:16:28:5d:c3:b6:09:be:a4:06:a2:c9:60:e3:9f: a7:bb:58:e7:8f:52:13:f0:8e:f9:26:37:b1:a3:6b:c0:ce:83: 5f:50:27:54:cf:19:eb:b7:54:0e:30:00:6b:4c:00:6e:c8:dc: a7:c4:00:1b:42:7d:dc:c3:d1:0e:2c:47:3a:f0:5d:a0:3b:29: d1:c3:18:da:9b:4b:48:59:c9:ff:46:36:ca:35:7d:f9:94:69: c4:57:61:85:1a:27:06:5c:cc:d1:21:2e:d6:cb:bb:2a:f2:c6: 05:67:70:36:a0:a2:03:cc:ca:b5:55:09:ed:35:12:4c:03:bb: 0f:ca:56:86:86:cf:5c:cb:5f:f8:c8:30:12:a3:1b:ec:be:fb: 1e:c5:7c:14:c3:87:83:e8:a1:e6:61:a6:68:6e:41:a5:0a:bc: 98:72:2f:73:d0:70:c2:74:99:70:06:d0:88:9f:b4:2c:c2:0f: 27:e5:92:67:58:53:8a:64:36:61:d1:4b:ff:7c:f6:78:d7:02: 70:70:d1:77:81:9e:96:06:4f:eb:fe:b4:18:bb:bc:67:c7:77: ef:35:24:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuPwDjAgvnMC/m1i63Zd1HF4zbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjA3MjQwMDQwMDFaFw0yNjA3MjUwNDAzMDFaMDMxMTAvBgNV BAMTKEMyN0NGODg2MDc4QzNBMDA3MjgyRTUxMTJBMDA1Q0I4MDkxMUMyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AN5XxTlvvrUM228AwDqQBz4H 4vYj/eWOce4lwq+s0Iblu65Dxsl4fCH0YhvO9xtiHNNYwgXTZcdZyiaNcWM/ry/B OIUTQKkUdl4+tofgbJXgHY45WCHPZFbUv28KKYFyPKxW/wPC5QRGmuprqBuvJNX7 vQ1vh6xWr3AzBiSjfs/wIEvcU9AV5sl54xVRUtNh4rwDiPmYILfNGkafBnS8iWfS 73RznEryI0QR8xDMTvt4yjFxYp8HlKCnDvBsXOlhEIL7uoCsp/gg3bOPsEb3lsXu ikzKlGkh2VRSPV2lxKOFD2/t7i0dxROhkXP1Zpul4kjShP+pxNEeigvHfKuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwnz4hgeMOgByguURKgBcuAkRwoUwHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjW+lZvPZjKp+eCaGeoBv3zxWTGZcCyXZ7U YQ7fdfxCClPNAIGnK8oWKF3Dtgm+pAaiyWDjn6e7WOePUhPwjvkmN7Gja8DOg19Q J1TPGeu3VA4wAGtMAG7I3KfEABtCfdzD0Q4sRzrwXaA7KdHDGNqbS0hZyf9GNso1 ffmUacRXYYUaJwZczNEhLtbLuyryxgVncDagogPMyrVVCe01EkwDuw/KVoaGz1zL X/jIMBKjG+y++x7FfBTDh4PooeZhpmhuQaUKvJhyL3PQcMJ0mXAG0IiftCzCDyfl kmdYU4pkNmHRS/989njXAnBw0XeBnpYGT+v+tBi7vGfHd+81JC8= -----END CERTIFICATE-----Generated at Fri Jul 24 07:13:10 2026 by rpki-client