$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft File: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft (raw, json) Hash identifier: IwZO5swC3PpmDOj/klatgbQVaxPI2JE1WIswrNQvuBo= Subject key identifier: 76:C8:F2:EE:CB:53:51:B4:1B:30:7C:A2:C7:BF:58:42:5B:7C:2A:3C Authority key identifier: 34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A Certificate issuer: /CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A Certificate serial: 4CD29BC55950F2B319823A341A97F83DC03DCF68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:03:02 +0000 Manifest this update: Fri 24 Jul 2026 02:58:02 +0000 Manifest next update: Sat 25 Jul 2026 06:28:02 +0000 Files and hashes: 1: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl (hash: zjuY6swQ9jceK6Kh5/Wze9XBzxVGRnpHnE23NO9gmW8=) 2: 3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (hash: RH7qzceSrisGTT+gbHQrqNwFlHJNMn8OuKHPRRq6v88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d2:9b:c5:59:50:f2:b3:19:82:3a:34:1a:97:f8:3d:c0:3d:cf:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A Validity Not Before: Jul 24 02:58:02 2026 GMT Not After : Jul 25 06:28:02 2026 GMT Subject: CN=76C8F2EECB5351B41B307CA2C7BF58425B7C2A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4f:19:90:7f:54:ce:84:f4:bd:12:fb:40:8f: 95:5f:49:7e:d2:eb:4a:c3:6f:1d:c3:1b:e9:c0:33: 13:17:71:e1:ec:bc:a6:5a:cd:5c:81:6b:ec:0f:52: eb:b5:ed:34:35:6a:9f:18:3c:4f:e7:06:24:32:c6: be:5e:5b:83:05:ee:e7:25:6f:48:18:85:88:1f:13: 9a:c4:88:a8:6b:d7:40:3a:c1:1a:60:ce:a8:a1:4a: 6f:14:e7:69:b9:0f:97:f2:97:f5:0d:65:64:c7:af: 5f:ea:36:5a:aa:67:ba:a8:ed:9f:22:64:74:50:46: 18:1f:a8:72:31:a0:a7:c3:51:3f:94:41:23:5a:52: 08:4c:a8:7e:0e:d4:6a:71:6c:17:58:ef:d9:12:6e: 60:09:82:0b:f8:bf:82:a7:00:f7:64:79:7d:99:ff: 58:83:ee:a9:1a:96:33:bd:8b:dc:50:ed:77:fc:18: 92:d2:65:58:a8:be:dd:37:84:18:3d:b9:78:ba:e3: ad:6f:45:e2:1e:03:89:06:1a:a8:cd:98:3e:6c:f7: a5:ed:2c:b0:64:01:ff:2f:84:65:88:b1:5d:67:cc: 9a:23:41:7c:9b:37:42:7b:cd:81:15:81:f3:d9:0f: 14:46:1c:b4:5e:26:d3:0b:d0:a9:72:67:02:4e:98: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C8:F2:EE:CB:53:51:B4:1B:30:7C:A2:C7:BF:58:42:5B:7C:2A:3C X509v3 Authority Key Identifier: keyid:34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:1e:8a:bb:ed:88:34:d3:2d:ac:f0:95:27:c6:6f:59:7b:a7: 31:da:a7:b4:b6:90:4d:a2:a3:05:32:b9:ed:85:c1:51:70:0a: f4:df:0e:2a:06:e6:54:e5:19:12:3f:9c:96:c7:34:7b:43:ee: a6:06:41:a6:ad:29:b6:21:0d:54:c2:98:4b:2b:62:2c:3e:22: a0:2b:8f:b5:73:80:cb:5c:f6:21:12:ea:0d:48:e8:19:21:9a: 4c:23:6a:8b:6a:a5:d9:43:7c:df:1d:66:aa:2c:bf:9d:bf:44: a1:14:19:b5:c0:2e:9d:44:5a:c5:8d:8d:5e:a5:c0:8b:c2:cb: a7:f7:8b:86:32:8b:b0:57:30:bd:1f:a5:a8:1b:45:e1:fd:87: 48:a9:04:e9:f1:9b:1b:d7:8e:48:b4:c2:da:f5:3f:0c:e0:6d: 16:07:b5:62:da:f4:15:cb:5f:38:5b:76:4a:5d:e6:3d:81:7a: 0d:41:a7:0a:c6:46:7b:d5:b1:23:dd:28:b0:25:bc:f7:60:a6: 2c:1a:e3:8e:5b:c7:a6:e5:25:f0:ee:86:a8:3c:d1:43:1c:d3: 27:6e:27:0e:ec:f3:c8:9a:e3:ff:ee:86:6f:3a:8d:17:6a:59: 8d:20:41:1b:80:6b:41:31:b6:f7:e8:06:38:9f:4e:d7:16:38: 76:22:c5:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNKbxVlQ8rMZgjo0Gpf4PcA9z2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBOUI5RENBRUVCNkRBN0JEMUY3OTk2Q0ZCQUVFRDFF MTM0RjQ3QTAeFw0yNjA3MjQwMjU4MDJaFw0yNjA3MjUwNjI4MDJaMDMxMTAvBgNV BAMTKDc2QzhGMkVFQ0I1MzUxQjQxQjMwN0NBMkM3QkY1ODQyNUI3QzJBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYTxmQf1TOhPS9EvtAj5VfSX7S 60rDbx3DG+nAMxMXceHsvKZazVyBa+wPUuu17TQ1ap8YPE/nBiQyxr5eW4MF7ucl b0gYhYgfE5rEiKhr10A6wRpgzqihSm8U52m5D5fyl/UNZWTHr1/qNlqqZ7qo7Z8i ZHRQRhgfqHIxoKfDUT+UQSNaUghMqH4O1GpxbBdY79kSbmAJggv4v4KnAPdkeX2Z /1iD7qkaljO9i9xQ7Xf8GJLSZViovt03hBg9uXi6461vReIeA4kGGqjNmD5s96Xt LLBkAf8vhGWIsV1nzJojQXybN0J7zYEVgfPZDxRGHLReJtML0KlyZwJOmDf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsjy7stTUbQbMHyix79YQlt8KjwwHwYDVR0j BBgwFoAUNKm53K7rbae9H3mWz7ru0eE09HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyMTkyNTktZWQxYS00ZDE4LWJkOTItOTRiNjA2NzJlNmExLzAvMzRBOUI5RENB RUVCNkRBN0JEMUY3OTk2Q0ZCQUVFRDFFMTM0RjQ3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE5QjlEQ0FFRUI2REE3QkQxRjc5OTZDRkJBRUVEMUUxMzRG NDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyMTkyNTktZWQxYS00ZDE4LWJk OTItOTRiNjA2NzJlNmExLzAvMzRBOUI5RENBRUVCNkRBN0JEMUY3OTk2Q0ZCQUVF RDFFMTM0RjQ3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkeirvtiDTTLazwlSfGb1l7pzHap7S2kE2i owUyue2FwVFwCvTfDioG5lTlGRI/nJbHNHtD7qYGQaatKbYhDVTCmEsrYiw+IqAr j7VzgMtc9iES6g1I6BkhmkwjaotqpdlDfN8dZqosv52/RKEUGbXALp1EWsWNjV6l wIvCy6f3i4Yyi7BXML0fpagbReH9h0ipBOnxmxvXjki0wtr1PwzgbRYHtWLa9BXL Xzhbdkpd5j2Beg1BpwrGRnvVsSPdKLAlvPdgpiwa445bx6blJfDuhqg80UMc0ydu Jw7s88ia4//uhm86jRdqWY0gQRuAa0ExtvfoBjifTtcWOHYixZs= -----END CERTIFICATE-----Generated at Fri Jul 24 08:54:16 2026 by rpki-client