$ rpki-client -vvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft File: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft (raw, json) Hash identifier: Ux/bsE/UsdoMgxfNLxsR8mwxISAdJI2liLAPnMNVsnY= Subject key identifier: F9:3E:8C:8A:11:8F:4D:A5:FD:A4:DC:4E:35:81:BB:4D:FB:C3:D9:21 Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Certificate serial: 41238C00921EE50736B8D3FA83BBFCF787B711E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:20:37 +0000 Manifest this update: Tue 12 May 2026 22:15:37 +0000 Manifest next update: Thu 14 May 2026 01:44:37 +0000 Files and hashes: 1: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl (hash: aRiLFt3Nz/8jdDiSTKhl+7sBpOYqnPOIdLtMCd9YRKE=) 2: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: DPoB0J81kARhSGUqtcPhC6vugUonXM9RgVO7Yrk5SrU=) 4: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:23:8c:00:92:1e:e5:07:36:b8:d3:fa:83:bb:fc:f7:87:b7:11:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Validity Not Before: May 12 22:15:37 2026 GMT Not After : May 14 01:44:37 2026 GMT Subject: CN=F93E8C8A118F4DA5FDA4DC4E3581BB4DFBC3D921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:17:6b:5b:0f:1f:52:19:49:66:91:17:82: a4:ef:fb:04:7c:00:9c:6d:a3:18:7d:62:2d:d6:99: c5:e1:a9:d5:18:a6:1d:71:b4:c3:96:61:24:16:e4: be:39:48:1e:75:bb:ff:d3:95:27:13:f4:ab:dc:93: 73:ca:fe:99:c5:f4:e2:9f:c3:02:53:e7:d3:02:00: e5:1e:cf:be:2d:8a:b0:04:70:d1:7b:26:8b:51:d0: b2:1b:d0:c2:3b:c2:9d:9c:cd:f2:a8:0e:d8:0f:40: 57:fa:bd:90:b7:04:2d:00:a5:a9:4c:32:55:2d:35: 01:4d:6b:53:25:eb:92:a4:c1:b8:54:92:d4:d3:f9: 74:31:fd:40:b2:8e:13:3c:e9:73:27:d9:b4:cd:bb: 55:bf:3b:bc:6d:fe:3d:74:44:58:37:68:81:21:fb: 25:5c:74:e5:a0:03:ab:1d:ec:49:d7:66:22:28:ca: 23:26:9d:54:44:81:b3:a3:30:eb:79:73:06:fc:50: a3:2c:53:7a:96:c5:61:cc:d4:bc:70:4d:fb:0b:54: c3:e0:43:1c:11:11:49:37:3e:ff:50:2b:01:ff:07: c3:86:e9:28:d2:fc:20:fd:f6:53:9b:62:8d:ec:ff: f1:23:71:d2:ef:9d:ee:de:36:67:83:a2:00:c8:02: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3E:8C:8A:11:8F:4D:A5:FD:A4:DC:4E:35:81:BB:4D:FB:C3:D9:21 X509v3 Authority Key Identifier: keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e1:eb:9d:3c:d4:45:e5:95:b8:e1:7f:a0:42:fc:3a:f9:7d: f8:c5:9d:04:92:e4:dd:22:fa:80:b8:65:57:f9:5e:41:04:fc: 00:b5:58:d1:c1:1d:dc:99:be:30:4f:b8:27:af:5b:8a:4d:8d: 91:d8:bb:2b:5c:c6:dc:1f:9d:6b:4f:fb:a1:bb:35:44:ef:3c: f0:8e:90:4e:ec:e7:b8:9d:01:90:24:b7:4c:8b:53:ca:ce:77: 76:6f:16:58:1f:06:af:06:11:a6:dc:05:ea:dc:67:51:4f:c9: 5f:03:d4:57:72:f8:6c:59:7c:ce:e3:9c:49:83:74:f6:14:59: 7e:fd:e6:00:34:ad:26:0c:a4:f3:9a:85:84:42:08:3e:9f:ca: 19:d0:06:9b:af:d7:f4:f7:ab:2a:c7:0d:f2:9e:64:8f:6a:78: ee:c3:8a:ea:07:18:78:26:3c:08:6b:62:66:a7:13:d4:5a:07: 24:c5:64:53:30:04:62:63:da:dc:a3:61:02:75:08:1f:d0:d1: 3c:d5:16:de:e6:70:34:72:7a:c6:04:29:86:e6:13:8d:11:1c: 61:e0:7c:c7:23:ac:b3:41:6e:b2:c7:18:52:58:74:e5:7c:ae: ad:ee:76:56:23:78:d1:c8:50:45:49:27:e9:f4:34:53:a7:12: 70:32:69:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSOMAJIe5Qc2uNP6g7v894e3EecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC RDI4Mjk1MTAeFw0yNjA1MTIyMjE1MzdaFw0yNjA1MTQwMTQ0MzdaMDMxMTAvBgNV BAMTKEY5M0U4QzhBMTE4RjREQTVGREE0REM0RTM1ODFCQjRERkJDM0Q5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYhdrWw8fUhlJZpEXgqTv+wR8 AJxtoxh9Yi3WmcXhqdUYph1xtMOWYSQW5L45SB51u//TlScT9Kvck3PK/pnF9OKf wwJT59MCAOUez74tirAEcNF7JotR0LIb0MI7wp2czfKoDtgPQFf6vZC3BC0ApalM MlUtNQFNa1Ml65KkwbhUktTT+XQx/UCyjhM86XMn2bTNu1W/O7xt/j10RFg3aIEh +yVcdOWgA6sd7EnXZiIoyiMmnVREgbOjMOt5cwb8UKMsU3qWxWHM1LxwTfsLVMPg QxwREUk3Pv9QKwH/B8OG6SjS/CD99lObYo3s//EjcdLvne7eNmeDogDIAkiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+T6MihGPTaX9pNxONYG7TfvD2SEwHwYDVR0j BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1 QzlCRDI4Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPh65081EXllbjhf6BC/Dr5ffjFnQSS5N0i +oC4ZVf5XkEE/AC1WNHBHdyZvjBPuCevW4pNjZHYuytcxtwfnWtP+6G7NUTvPPCO kE7s57idAZAkt0yLU8rOd3ZvFlgfBq8GEabcBercZ1FPyV8D1Fdy+GxZfM7jnEmD dPYUWX795gA0rSYMpPOahYRCCD6fyhnQBpuv1/T3qyrHDfKeZI9qeO7DiuoHGHgm PAhrYmanE9RaByTFZFMwBGJj2tyjYQJ1CB/Q0TzVFt7mcDRyesYEKYbmE40RHGHg fMcjrLNBbrLHGFJYdOV8rq3udlYjeNHIUEVJJ+n0NFOnEnAyaR0= -----END CERTIFICATE-----Generated at Wed May 13 02:11:52 2026 by rpki-client