$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: XINqor1WOhlK3+DarJpNTXTQt07GFUCHoHL0Gm4IWAg= Subject key identifier: 85:A0:27:2A:04:4E:6A:0A:6D:A2:BC:F8:A7:C9:F5:1E:57:9D:DA:6F Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 323FCF6CF01E97AA5CCFC73BC7DB8978A65B921E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 03:59:12 +0000 Manifest this update: Sun 27 Sep 2026 03:54:12 +0000 Manifest next update: Mon 28 Sep 2026 05:34:12 +0000 Files and hashes: 1: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) 2: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) 3: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: zUjkdtEr77kuhyT8x1x0ZGWIKHPloHdoaL95ZBpXxYY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3f:cf:6c:f0:1e:97:aa:5c:cf:c7:3b:c7:db:89:78:a6:5b:92:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: Sep 27 03:54:12 2026 GMT Not After : Sep 28 05:34:12 2026 GMT Subject: CN=85A0272A044E6A0A6DA2BCF8A7C9F51E579DDA6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:a2:63:94:e4:68:68:0c:bc:b0:2e:27:2c: cb:69:9c:32:61:0a:6b:1e:6c:70:0a:a7:47:74:21: 63:5f:28:20:bc:4f:0d:14:d0:b7:66:03:47:dc:74: 25:3d:05:73:e6:98:4d:96:e1:f1:60:8f:26:fb:56: ca:3a:51:e6:96:42:a3:4b:22:3a:fa:92:65:06:b1: be:9a:39:b1:33:52:0c:6f:81:58:88:b5:e9:94:94: 64:95:06:8b:64:28:e2:0c:eb:4e:8b:b1:b6:cf:04: 7f:b4:b8:10:0a:5f:b8:a0:d1:97:33:97:01:68:48: 3b:bd:3d:65:37:4e:27:ff:19:1b:60:a0:f3:c2:da: 5f:19:94:33:1d:1d:3b:43:a3:77:84:b6:d0:ee:bc: 03:d3:59:5a:3c:46:0d:b8:a8:ed:61:2d:2e:7e:0a: dc:d5:a8:c3:ae:3e:df:cb:63:84:4c:d4:f7:04:2c: ff:3e:91:0c:01:3c:67:36:57:ba:6c:f4:b3:08:6e: 4b:6c:c4:79:e1:b0:cc:b7:ad:0e:0f:c3:17:13:5e: 80:aa:24:72:7c:f3:47:46:b5:df:3c:da:e1:51:ec: 1d:31:93:23:16:a3:a7:30:1a:39:49:20:f2:f0:f5: 63:55:a0:00:c1:59:71:d9:9c:54:ee:2e:da:e1:6b: 47:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:27:2A:04:4E:6A:0A:6D:A2:BC:F8:A7:C9:F5:1E:57:9D:DA:6F X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ed:64:72:d1:e0:29:6e:3e:ba:eb:56:8e:4e:f6:44:c9:2a: 72:23:79:ca:4c:fb:2a:28:05:fd:92:9c:9c:cd:44:88:c0:5c: d6:6e:32:7a:b0:c5:df:f2:da:8d:bd:bb:b0:7b:08:2b:00:c9: b8:17:63:48:fd:ea:91:89:4c:3e:d2:c3:31:66:08:cd:6b:92: 54:2b:ea:f1:80:15:a2:4e:67:c5:6e:af:44:e4:74:9d:e6:d4: df:bd:54:dd:b1:ad:a4:79:40:28:86:fa:a0:ad:88:db:4b:f5: f0:db:09:92:b1:07:38:df:e1:50:cf:cf:2a:ac:d3:4a:b7:be: 43:68:01:29:d4:db:c1:8e:c6:53:a7:c2:cc:c0:75:fc:0e:33: 50:46:3d:2b:31:90:7e:c9:49:7d:88:82:e7:e8:ea:d8:08:9a: b7:37:e8:68:5b:0f:75:03:12:b7:d1:67:47:97:50:0f:a9:45: d9:00:9c:a2:fc:84:fc:53:58:8d:52:ee:2d:1a:ef:9a:dd:aa: ac:3c:55:77:63:5c:0c:6a:e1:be:9f:50:0d:ce:62:9b:a3:da: b6:5b:3b:42:3a:c4:d1:86:9b:c9:80:10:66:65:d2:b4:ba:c6: bd:a4:47:d6:65:ae:cc:b8:cc:20:fc:1b:06:45:84:38:13:21: 4a:75:56:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMj/PbPAel6pcz8c7x9uJeKZbkh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjA5MjcwMzU0MTJaFw0yNjA5MjgwNTM0MTJaMDMxMTAvBgNV BAMTKDg1QTAyNzJBMDQ0RTZBMEE2REEyQkNGOEE3QzlGNTFFNTc5RERBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXlqJjlORoaAy8sC4nLMtpnDJh CmsebHAKp0d0IWNfKCC8Tw0U0LdmA0fcdCU9BXPmmE2W4fFgjyb7Vso6UeaWQqNL Ijr6kmUGsb6aObEzUgxvgViItemUlGSVBotkKOIM606LsbbPBH+0uBAKX7ig0Zcz lwFoSDu9PWU3Tif/GRtgoPPC2l8ZlDMdHTtDo3eEttDuvAPTWVo8Rg24qO1hLS5+ CtzVqMOuPt/LY4RM1PcELP8+kQwBPGc2V7ps9LMIbktsxHnhsMy3rQ4PwxcTXoCq JHJ880dGtd882uFR7B0xkyMWo6cwGjlJIPLw9WNVoADBWXHZnFTuLtrha0djAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhaAnKgROagptorz4p8n1Hled2m8wHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJztZHLR4CluPrrrVo5O9kTJKnIjecpM+yoo Bf2SnJzNRIjAXNZuMnqwxd/y2o29u7B7CCsAybgXY0j96pGJTD7SwzFmCM1rklQr 6vGAFaJOZ8Vur0TkdJ3m1N+9VN2xraR5QCiG+qCtiNtL9fDbCZKxBzjf4VDPzyqs 00q3vkNoASnU28GOxlOnwszAdfwOM1BGPSsxkH7JSX2Igufo6tgImrc36GhbD3UD ErfRZ0eXUA+pRdkAnKL8hPxTWI1S7i0a75rdqqw8VXdjXAxq4b6fUA3OYpuj2rZb O0I6xNGGm8mAEGZl0rS6xr2kR9Zlrsy4zCD8GwZFhDgTIUp1Vm4= -----END CERTIFICATE-----Generated at Sun Sep 27 08:09:37 2026 by rpki-client