
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft
File: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft (raw, json)
Hash identifier: raZV0P9Rt0CBzmAF+G7bMAo70IvcyoAIsfiMrUwZqIE=
Subject key identifier: 2E:80:19:F1:10:03:96:D5:2C:58:62:4E:FB:44:08:21:83:5F:B4:6F
Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51
Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951
Certificate serial: 37E7609962E007B902987B2BC8087644FBEC6D35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 03:03:01 +0000
Manifest this update: Fri 24 Jul 2026 02:58:01 +0000
Manifest next update: Sat 25 Jul 2026 04:25:01 +0000
Files and hashes: 1: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl (hash: sILYnh5mzGWFu9rEoa0dqt4G9c/gWg750f+KyCKPpZY=)
2: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: DPoB0J81kARhSGUqtcPhC6vugUonXM9RgVO7Yrk5SrU=)
3: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=)
4: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl
rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e7:60:99:62:e0:07:b9:02:98:7b:2b:c8:08:76:44:fb:ec:6d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951
Validity
Not Before: Jul 24 02:58:01 2026 GMT
Not After : Jul 25 04:25:01 2026 GMT
Subject: CN=2E8019F1100396D52C58624EFB440821835FB46F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:62:3b:86:3e:e6:d6:d5:59:c7:c9:c9:aa:
65:9f:6c:70:ab:c3:cd:0e:71:9e:60:1e:03:42:34:
7b:ef:cc:2a:9b:32:91:bd:5a:c7:11:80:16:85:e2:
ed:98:7f:40:31:78:21:e1:66:c1:7e:c0:2f:01:9b:
7d:7f:e9:96:61:c7:19:44:92:b3:52:b6:45:d5:7f:
21:00:8e:24:3f:e5:9e:5f:19:92:e7:60:e9:d5:8c:
03:6a:0c:13:c0:57:f7:95:89:d2:f5:69:93:f9:0f:
25:16:66:30:bb:2b:23:e1:50:fa:4c:c2:21:d7:3d:
04:c7:c1:45:da:22:42:9b:91:09:a5:23:90:29:9f:
50:c4:2f:15:9a:88:2a:17:b2:92:04:96:40:f6:da:
cb:1f:0e:d1:55:65:67:5a:58:67:4c:60:70:87:cb:
a9:14:04:8e:d5:29:fd:da:67:04:da:43:c0:5d:e3:
c1:be:98:99:86:ad:e7:a3:ab:c9:08:c5:38:3b:66:
15:8f:8b:79:32:1e:03:0f:10:4d:10:0a:c6:17:f1:
fa:af:ce:e6:53:09:44:21:fd:4b:3b:53:98:78:f1:
e9:23:48:67:67:05:70:2c:7c:29:8e:44:1e:57:b4:
8a:db:13:38:a3:a4:06:31:fc:64:58:a1:bd:50:2b:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:80:19:F1:10:03:96:D5:2C:58:62:4E:FB:44:08:21:83:5F:B4:6F
X509v3 Authority Key Identifier:
keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:90:39:28:49:9d:ae:aa:40:5f:fd:ed:2c:55:de:6a:2b:2d:
46:19:45:9f:4a:1f:0c:02:d9:35:5c:0e:9a:cb:6f:1c:51:39:
e6:c4:5d:53:48:35:30:35:81:dd:f7:51:f7:c5:0f:fc:ee:b1:
02:95:6a:00:82:48:46:db:37:83:72:fc:eb:57:dd:89:f8:f7:
79:01:a2:30:da:55:7c:b2:f3:5b:20:39:ac:13:b4:5f:88:c1:
19:4c:2e:48:b3:d8:0c:a5:8f:4f:62:43:30:db:2a:47:52:6a:
c0:cc:2c:f3:3d:b0:22:ea:ea:61:55:dd:cc:49:c9:d0:0c:89:
6d:ad:ca:eb:9a:ae:6f:a0:be:dc:7d:28:46:c3:35:e8:dc:a0:
b2:e2:bf:78:b7:db:37:53:7d:30:93:03:05:fc:4a:31:e0:38:
a7:2c:62:c2:81:e6:37:6a:a1:e4:26:b0:cf:39:26:f3:0a:0e:
21:41:73:1c:72:92:be:f3:1e:9a:f3:c1:42:ea:62:15:1f:18:
76:de:e1:1c:cc:c1:a5:e2:4a:71:80:00:ae:6e:f2:82:f0:16:
b9:1f:4e:6d:82:6d:b7:a7:70:ab:ac:d1:ce:88:4e:37:20:51:
10:e0:ac:92:da:ae:ea:07:74:32:5d:ff:7e:16:45:2c:fb:f7:
9a:6e:75:af
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN+dgmWLgB7kCmHsryAh2RPvsbTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC
RDI4Mjk1MTAeFw0yNjA3MjQwMjU4MDFaFw0yNjA3MjUwNDI1MDFaMDMxMTAvBgNV
BAMTKDJFODAxOUYxMTAwMzk2RDUyQzU4NjI0RUZCNDQwODIxODM1RkI0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXnGI7hj7m1tVZx8nJqmWfbHCr
w80OcZ5gHgNCNHvvzCqbMpG9WscRgBaF4u2Yf0AxeCHhZsF+wC8Bm31/6ZZhxxlE
krNStkXVfyEAjiQ/5Z5fGZLnYOnVjANqDBPAV/eVidL1aZP5DyUWZjC7KyPhUPpM
wiHXPQTHwUXaIkKbkQmlI5Apn1DELxWaiCoXspIElkD22ssfDtFVZWdaWGdMYHCH
y6kUBI7VKf3aZwTaQ8Bd48G+mJmGreejq8kIxTg7ZhWPi3kyHgMPEE0QCsYX8fqv
zuZTCUQh/Us7U5h48ekjSGdnBXAsfCmORB5XtIrbEzijpAYx/GRYob1QKxw5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULoAZ8RADltUsWGJO+0QIIYNftG8wHwYDVR0j
BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF
RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy
OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll
NzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1
QzlCRDI4Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJCQOShJna6qQF/97SxV3morLUYZRZ9KHwwC
2TVcDprLbxxROebEXVNINTA1gd33UffFD/zusQKVagCCSEbbN4Ny/OtX3Yn493kB
ojDaVXyy81sgOawTtF+IwRlMLkiz2Aylj09iQzDbKkdSasDMLPM9sCLq6mFV3cxJ
ydAMiW2tyuuarm+gvtx9KEbDNejcoLLiv3i32zdTfTCTAwX8SjHgOKcsYsKB5jdq
oeQmsM85JvMKDiFBcxxykr7zHprzwULqYhUfGHbe4RzMwaXiSnGAAK5u8oLwFrkf
Tm2CbbencKus0c6ITjcgURDgrJLaruoHdDJd/34WRSz795puda8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:36 2026 by rpki-client