$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft File: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft (raw, json) Hash identifier: vBRdHXQqG12N/PjVxo12iBzZoJ39uCWR0uIMJjCwKns= Subject key identifier: C0:B0:88:10:49:4C:A5:A2:1E:21:9B:8F:A0:28:0D:B2:F0:45:20:C8 Authority key identifier: 34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A Certificate issuer: /CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A Certificate serial: 4FABB969953A42A6A046EAA442EA081376E76B14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:52:59 +0000 Manifest this update: Tue 12 May 2026 06:47:59 +0000 Manifest next update: Wed 13 May 2026 07:15:59 +0000 Files and hashes: 1: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl (hash: 4SIbDvjQsezRIOe1GsC1sIoZZxnuiUq4qDrC6qlguuA=) 2: 3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (hash: RH7qzceSrisGTT+gbHQrqNwFlHJNMn8OuKHPRRq6v88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ab:b9:69:95:3a:42:a6:a0:46:ea:a4:42:ea:08:13:76:e7:6b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A Validity Not Before: May 12 06:47:59 2026 GMT Not After : May 13 07:15:59 2026 GMT Subject: CN=C0B08810494CA5A21E219B8FA0280DB2F04520C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:59:ac:bc:cf:1e:ab:df:f2:ba:3f:fa:22: 30:7e:00:d9:9f:b2:4b:15:53:1c:aa:2e:bf:77:60: 1d:5c:f3:60:ae:ae:3c:1c:fc:25:f8:09:5d:88:4f: 64:2f:8c:ff:05:09:34:e9:07:54:ad:b0:19:73:21: ac:c5:57:e7:4e:ab:5d:35:96:4d:0f:95:56:55:76: ca:15:1d:20:82:64:d7:0a:25:f1:34:de:a0:1b:d6: 51:b0:f7:70:6d:b5:d9:a7:ca:df:87:0a:aa:48:f1: a2:1e:a5:67:09:f4:23:7b:11:7c:98:7f:e2:ef:02: 43:c8:6e:3c:c6:fa:f3:02:92:cf:95:31:80:8a:47: 9a:4a:bf:2c:55:3f:95:99:bd:b3:27:3d:19:a8:e7: ef:9c:2d:2d:b4:0c:35:be:3d:0a:53:a8:17:79:8d: ee:35:2e:68:39:46:39:83:28:8a:46:7b:ce:61:d2: b0:92:3d:30:78:7e:36:62:61:47:2e:6f:40:49:38: f3:d5:a7:d8:19:fe:07:d1:7c:c0:d1:9f:72:56:ab: 6b:0b:8f:53:20:00:89:c3:77:5f:c6:42:48:e7:fd: 21:b6:f4:f8:73:a2:70:1f:34:5b:40:a9:d6:0b:78: 3e:16:c4:68:47:25:fe:f8:62:0a:b4:23:67:1d:a2: 20:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B0:88:10:49:4C:A5:A2:1E:21:9B:8F:A0:28:0D:B2:F0:45:20:C8 X509v3 Authority Key Identifier: keyid:34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:22:4b:72:10:21:26:9f:d8:47:c3:96:6d:a1:e5:90:21:11: 8a:6a:e1:ce:d2:20:13:06:fb:21:84:38:b2:0e:31:4b:46:23: 9b:3f:b7:02:13:88:fc:59:ac:bf:fe:2e:9f:d1:d0:10:af:7b: f3:7a:5e:00:9b:5b:77:72:6f:24:46:a9:b0:74:34:a1:55:28: e2:fe:bb:38:04:ae:3d:a8:52:3f:9e:ef:99:50:75:08:f8:4d: aa:2c:7a:c5:1f:c2:d6:d0:bd:d8:11:08:09:4f:27:2e:c3:96: 97:bb:84:a0:bd:ce:fb:16:02:92:b5:7c:0b:32:d6:05:9b:14: 52:3a:02:ec:20:2e:40:f6:fc:a7:1d:bd:3e:9d:d8:2d:fc:84: f4:cc:80:3c:98:5e:fe:a8:dc:74:10:f1:a2:e9:23:e9:ee:86: c2:8e:56:33:27:61:ce:d8:c8:4c:f8:74:fc:84:6d:b7:0e:b9: 49:83:77:77:29:ce:3c:1e:d6:d7:ec:40:2f:3a:f8:35:05:91: 7b:f1:82:dd:d7:4d:c4:6b:ad:0b:e5:23:41:53:c5:2c:a5:1c: 9a:c2:ee:b6:11:8b:ca:3a:9b:72:70:8e:2a:0f:45:22:72:91: d8:59:e7:c3:c9:35:6f:15:e4:fe:bd:ce:9f:89:6a:03:ab:5b: a8:6a:78:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6u5aZU6QqagRuqkQuoIE3bnaxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBOUI5RENBRUVCNkRBN0JEMUY3OTk2Q0ZCQUVFRDFF MTM0RjQ3QTAeFw0yNjA1MTIwNjQ3NTlaFw0yNjA1MTMwNzE1NTlaMDMxMTAvBgNV BAMTKEMwQjA4ODEwNDk0Q0E1QTIxRTIxOUI4RkEwMjgwREIyRjA0NTIwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZVmsvM8eq9/yuj/6IjB+ANmf sksVUxyqLr93YB1c82Curjwc/CX4CV2IT2QvjP8FCTTpB1StsBlzIazFV+dOq101 lk0PlVZVdsoVHSCCZNcKJfE03qAb1lGw93Bttdmnyt+HCqpI8aIepWcJ9CN7EXyY f+LvAkPIbjzG+vMCks+VMYCKR5pKvyxVP5WZvbMnPRmo5++cLS20DDW+PQpTqBd5 je41Lmg5RjmDKIpGe85h0rCSPTB4fjZiYUcub0BJOPPVp9gZ/gfRfMDRn3JWq2sL j1MgAInDd1/GQkjn/SG29PhzonAfNFtAqdYLeD4WxGhHJf74Ygq0I2cdoiC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwLCIEElMpaIeIZuPoCgNsvBFIMgwHwYDVR0j BBgwFoAUNKm53K7rbae9H3mWz7ru0eE09HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyMTkyNTktZWQxYS00ZDE4LWJkOTItOTRiNjA2NzJlNmExLzAvMzRBOUI5RENB RUVCNkRBN0JEMUY3OTk2Q0ZCQUVFRDFFMTM0RjQ3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE5QjlEQ0FFRUI2REE3QkQxRjc5OTZDRkJBRUVEMUUxMzRG NDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyMTkyNTktZWQxYS00ZDE4LWJk OTItOTRiNjA2NzJlNmExLzAvMzRBOUI5RENBRUVCNkRBN0JEMUY3OTk2Q0ZCQUVF RDFFMTM0RjQ3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4iS3IQISaf2EfDlm2h5ZAhEYpq4c7SIBMG +yGEOLIOMUtGI5s/twITiPxZrL/+Lp/R0BCve/N6XgCbW3dybyRGqbB0NKFVKOL+ uzgErj2oUj+e75lQdQj4TaosesUfwtbQvdgRCAlPJy7Dlpe7hKC9zvsWApK1fAsy 1gWbFFI6AuwgLkD2/KcdvT6d2C38hPTMgDyYXv6o3HQQ8aLpI+nuhsKOVjMnYc7Y yEz4dPyEbbcOuUmDd3cpzjwe1tfsQC86+DUFkXvxgt3XTcRrrQvlI0FTxSylHJrC 7rYRi8o6m3JwjioPRSJykdhZ58PJNW8V5P69zp+JagOrW6hqeBc= -----END CERTIFICATE-----Generated at Wed May 13 01:36:35 2026 by rpki-client