$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft File: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft (raw, json) Hash identifier: 8rkv5wmfNA2uwoQtoq0e09T8XlZdOOAKDzxuslfdbyI= Subject key identifier: 4D:0A:32:A2:84:2E:92:4D:36:53:31:83:C3:73:13:1C:53:93:79:FA Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Certificate serial: 17466309FB3790C1A3156F23F477931D98BF1085 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 09:27:21 +0000 Manifest this update: Fri 25 Sep 2026 09:22:21 +0000 Manifest next update: Sat 26 Sep 2026 12:42:21 +0000 Files and hashes: 1: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=) 2: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=) 3: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl (hash: gzgWMCfqVRigQiKxfq71igmzIoZCh4SsKN6DnoX06uA=) 4: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: DPoB0J81kARhSGUqtcPhC6vugUonXM9RgVO7Yrk5SrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:46:63:09:fb:37:90:c1:a3:15:6f:23:f4:77:93:1d:98:bf:10:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Validity Not Before: Sep 25 09:22:21 2026 GMT Not After : Sep 26 12:42:21 2026 GMT Subject: CN=4D0A32A2842E924D36533183C373131C539379FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:a3:cb:53:76:9d:43:6a:04:08:ad:75:8c: c3:2e:36:45:37:e4:32:25:44:4d:8c:10:f8:4e:6d: b2:59:5c:88:eb:7c:7e:69:16:ec:5b:87:77:35:65: d8:d2:62:c7:93:ef:23:99:bd:e6:f7:e6:44:dd:48: 6d:f0:37:85:43:31:68:4b:56:78:27:09:15:ed:81: 0c:41:f9:c4:23:55:65:49:54:de:ff:13:45:25:10: ee:01:47:56:9a:6b:dd:8f:cb:b5:d1:a5:30:36:5e: 9b:5e:18:30:59:e7:24:25:b8:24:e0:e5:9b:49:0b: fe:38:98:d1:31:be:83:0e:ac:57:ce:fa:ef:76:59: ea:6d:02:dc:65:c0:3a:70:15:2f:0a:5a:23:0f:9b: fc:a9:32:96:37:f3:a4:86:da:23:65:92:f4:b4:90: 6c:09:b0:3f:26:47:27:7e:2b:9f:0b:08:86:fd:55: a8:f4:97:1e:78:aa:49:65:bc:9b:b2:da:6f:3d:97: 59:b0:81:5f:cb:a6:2f:fe:ad:80:ce:f0:57:d0:df: 54:50:8c:ce:b9:f7:6a:56:05:7c:c2:c0:3c:40:2a: 00:23:ec:f4:08:ef:cf:d5:e0:1e:d5:a5:5c:ce:02: 28:bf:c9:44:a6:20:77:52:47:1c:e4:3a:b2:26:bb: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0A:32:A2:84:2E:92:4D:36:53:31:83:C3:73:13:1C:53:93:79:FA X509v3 Authority Key Identifier: keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:28:40:ed:fc:3a:72:07:8c:42:f0:28:18:11:cc:62:97:05: 23:95:a5:2b:ed:4b:60:fe:7c:37:c9:47:33:5b:ae:52:52:a7: da:30:0e:82:ad:b3:c2:37:d3:a2:fe:2d:4d:b0:f2:eb:a3:e4: b4:2a:94:95:f4:fa:3c:70:ca:47:7d:0b:ad:a6:4d:0d:65:9d: 54:29:13:7e:b5:db:eb:70:db:09:12:21:ad:89:bd:ce:eb:3b: 77:20:2c:48:bb:06:af:d1:d9:aa:9c:5b:47:3c:d4:d9:93:05: ac:fc:61:b0:81:f1:de:e6:b7:ba:cc:fb:59:e7:9d:f0:3f:2e: 70:a8:95:e6:03:3e:24:03:ea:6d:bc:b7:15:48:eb:2f:b7:a9: e7:a0:9b:e8:4e:40:7f:38:b1:12:bf:68:bf:8b:eb:48:2b:d0: 8b:53:98:13:96:63:5c:1a:f6:6c:f8:f4:33:41:5f:ac:e6:62: 54:9f:c0:76:8f:89:e5:ed:5d:fb:9b:91:a9:b2:98:f9:c8:73: 57:12:66:50:f2:8b:0c:5b:14:4b:19:12:54:98:2e:d5:79:33: bb:0e:d9:12:c3:c6:56:d2:d2:6c:2a:2c:fa:9b:b3:6e:df:a1: a3:6c:c4:69:06:45:f6:4f:08:52:c3:9d:20:49:fb:41:ef:52: 09:87:14:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0ZjCfs3kMGjFW8j9HeTHZi/EIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC RDI4Mjk1MTAeFw0yNjA5MjUwOTIyMjFaFw0yNjA5MjYxMjQyMjFaMDMxMTAvBgNV BAMTKDREMEEzMkEyODQyRTkyNEQzNjUzMzE4M0MzNzMxMzFDNTM5Mzc5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvqPLU3adQ2oECK11jMMuNkU3 5DIlRE2MEPhObbJZXIjrfH5pFuxbh3c1ZdjSYseT7yOZveb35kTdSG3wN4VDMWhL VngnCRXtgQxB+cQjVWVJVN7/E0UlEO4BR1aaa92Py7XRpTA2XpteGDBZ5yQluCTg 5ZtJC/44mNExvoMOrFfO+u92WeptAtxlwDpwFS8KWiMPm/ypMpY386SG2iNlkvS0 kGwJsD8mRyd+K58LCIb9Vaj0lx54qkllvJuy2m89l1mwgV/Lpi/+rYDO8FfQ31RQ jM6592pWBXzCwDxAKgAj7PQI78/V4B7VpVzOAii/yUSmIHdSRxzkOrImu0qNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQoyooQukk02UzGDw3MTHFOTefowHwYDVR0j BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1 QzlCRDI4Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYoQO38OnIHjELwKBgRzGKXBSOVpSvtS2D+ fDfJRzNbrlJSp9owDoKts8I306L+LU2w8uuj5LQqlJX0+jxwykd9C62mTQ1lnVQp E3612+tw2wkSIa2Jvc7rO3cgLEi7Bq/R2aqcW0c81NmTBaz8YbCB8d7mt7rM+1nn nfA/LnColeYDPiQD6m28txVI6y+3qeegm+hOQH84sRK/aL+L60gr0ItTmBOWY1wa 9mz49DNBX6zmYlSfwHaPieXtXfubkamymPnIc1cSZlDyiwxbFEsZElSYLtV5M7sO 2RLDxlbS0mwqLPqbs27foaNsxGkGRfZPCFLDnSBJ+0HvUgmHFEg= -----END CERTIFICATE-----Generated at Sat Sep 26 02:12:47 2026 by rpki-client