$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft File: 34B29E7722E2B5DD7C273585E39574B57B896900.mft (raw, json) Hash identifier: IM8Eqj8RiftUc0pnZRd5uUGC7g6CPwGlW7VNUjLVmlM= Subject key identifier: E2:F3:1C:65:4C:8F:99:37:44:F5:D3:CA:B1:33:BC:85:29:DA:F8:98 Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 Certificate issuer: /CN=34B29E7722E2B5DD7C273585E39574B57B896900 Certificate serial: 0CBA51802E9EC23058166ADBC9589D8D8E3451FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:29:01 +0000 Manifest this update: Wed 23 Sep 2026 06:24:01 +0000 Manifest next update: Thu 24 Sep 2026 09:52:01 +0000 Files and hashes: 1: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: I1bsWI7DvPSBQ9/yo42Yu8NJ60GXC0aRajit4q85Uec=) 2: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: 0CcVKvK2RnP3R+MD8e/l3+iqcZgJW/8isjroKXFrB6k=) 3: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: mau8c52MjBB5eUtMaWvjg55FAtNn6V2VkjPj1AYcMKU=) 4: 34B29E7722E2B5DD7C273585E39574B57B896900.crl (hash: xbyWyA4Ua9idDtDMQHP+yhlvwKGTpaLavDOYzQ/jeNo=) 5: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: G90KEOKf6BnudPfrgNF9Y+RD3ZrjM9VxjF1gA2ddTwk=) 6: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 49rc320q+QyoI3Wo5yzjwV1JHfD3ARGCwSOWR1AVGd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ba:51:80:2e:9e:c2:30:58:16:6a:db:c9:58:9d:8d:8e:34:51:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900 Validity Not Before: Sep 23 06:24:01 2026 GMT Not After : Sep 24 09:52:01 2026 GMT Subject: CN=E2F31C654C8F993744F5D3CAB133BC8529DAF898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:f6:4a:46:e3:66:ec:15:30:ec:bd:d5:a4: c9:2a:a2:88:85:f0:d7:8c:72:50:94:13:12:9c:9a: 3e:4f:31:f2:11:b6:da:3d:1d:10:90:08:5e:39:45: 08:07:6e:07:cd:01:bb:8e:9e:3e:03:7b:f9:05:66: 03:9e:8c:35:6f:b0:e5:1a:ee:7f:c4:f4:cd:4a:b6: 33:bf:75:d7:d8:9e:4f:6e:13:40:59:61:f8:16:ac: 00:5f:98:d0:fd:3f:6b:b4:38:10:70:82:ef:79:e9: 52:cc:bd:e6:ed:ed:65:42:ad:47:b6:fd:5d:fc:0c: 97:da:da:0c:4e:10:74:06:c1:90:b5:a7:56:84:2d: 5d:0f:b8:23:ac:98:09:0a:91:ca:66:0e:c5:c4:e1: b1:f5:9f:71:d6:69:69:13:21:92:b2:0a:86:c0:3d: 46:cc:e3:bd:87:d3:0e:7e:48:19:c8:98:37:cb:34: 74:83:4a:46:45:f8:75:68:62:6b:9f:c4:d1:ce:39: fa:67:12:a2:f9:aa:36:e1:b3:c3:f1:df:9e:87:9f: 49:08:72:38:3a:e2:da:14:db:d0:0e:9b:87:70:27: 3d:07:e6:e3:fd:79:3a:08:37:7c:67:e1:f5:1f:27: 2c:5c:60:16:1e:49:fa:47:4a:5d:42:9a:51:5f:6a: 42:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F3:1C:65:4C:8F:99:37:44:F5:D3:CA:B1:33:BC:85:29:DA:F8:98 X509v3 Authority Key Identifier: keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:70:2e:94:1b:83:d5:6e:30:d0:06:1a:7c:c6:db:ad:ef:64: 06:6d:00:e0:43:75:13:84:1a:6c:cf:dd:d5:a2:ce:60:30:99: 18:51:53:f9:87:32:3f:18:54:e5:ea:5f:a7:c3:0e:34:fd:d3: 8a:32:6c:a7:e1:33:e6:16:26:d1:de:62:d3:49:76:8f:9c:ea: 29:a9:91:4c:1e:95:ac:bf:6c:c7:36:7d:85:71:d0:b8:e2:c1: 23:7b:a4:af:e8:92:4f:34:10:5c:bc:a1:7b:1b:6c:fd:21:69: b7:aa:65:68:39:97:c5:0a:cc:be:9b:4d:c3:d1:85:ef:47:4d: 9d:de:50:72:b8:f2:f0:8a:f4:6f:54:17:bc:59:ea:65:e2:96: b1:fd:ce:8f:ac:1a:ca:57:aa:a9:84:b6:ec:a8:88:6f:6f:ef: 43:26:88:ca:c5:c1:bc:b7:6c:cd:5c:de:c7:02:fb:46:83:04: b3:fd:b5:10:2b:9b:8d:ec:f7:8d:78:04:60:5b:b2:a9:9e:7b: c8:d6:6c:af:46:ee:2a:83:50:82:e6:4e:b4:24:9e:fc:c0:a7: c0:65:ce:d2:ea:81:39:95:23:0e:af:99:c8:07:d7:ce:5a:e7: 7a:9b:dc:37:77:a2:df:58:46:1e:18:26:41:c8:a2:b6:ec:0c: 43:ee:59:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLpRgC6ewjBYFmrbyVidjY40UfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0QjU3 Qjg5NjkwMDAeFw0yNjA5MjMwNjI0MDFaFw0yNjA5MjQwOTUyMDFaMDMxMTAvBgNV BAMTKEUyRjMxQzY1NEM4Rjk5Mzc0NEY1RDNDQUIxMzNCQzg1MjlEQUY4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73vZKRuNm7BUw7L3VpMkqooiF 8NeMclCUExKcmj5PMfIRtto9HRCQCF45RQgHbgfNAbuOnj4De/kFZgOejDVvsOUa 7n/E9M1KtjO/ddfYnk9uE0BZYfgWrABfmND9P2u0OBBwgu956VLMvebt7WVCrUe2 /V38DJfa2gxOEHQGwZC1p1aELV0PuCOsmAkKkcpmDsXE4bH1n3HWaWkTIZKyCobA PUbM472H0w5+SBnImDfLNHSDSkZF+HVoYmufxNHOOfpnEqL5qjbhs8Px356Hn0kI cjg64toU29AOm4dwJz0H5uP9eToIN3xn4fUfJyxcYBYeSfpHSl1CmlFfakLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4vMcZUyPmTdE9dPKsTO8hSna+JgwHwYDVR0j BBgwFoAUNLKedyLitd18JzWF45V0tXuJaQAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JkYmJjMDgtNGU4ZS00NGJhLWE0Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcy MkUyQjVERDdDMjczNTg1RTM5NTc0QjU3Qjg5NjkwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEIyOUU3NzIyRTJCNUREN0MyNzM1ODVFMzk1NzRCNTdCODk2 OTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0 QjU3Qjg5NjkwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNwLpQbg9VuMNAGGnzG263vZAZtAOBDdROE GmzP3dWizmAwmRhRU/mHMj8YVOXqX6fDDjT904oybKfhM+YWJtHeYtNJdo+c6imp kUwelay/bMc2fYVx0LjiwSN7pK/okk80EFy8oXsbbP0habeqZWg5l8UKzL6bTcPR he9HTZ3eUHK48vCK9G9UF7xZ6mXilrH9zo+sGspXqqmEtuyoiG9v70MmiMrFwby3 bM1c3scC+0aDBLP9tRArm43s9414BGBbsqmee8jWbK9G7iqDUILmTrQknvzAp8Bl ztLqgTmVIw6vmcgH185a53qb3Dd3ot9YRh4YJkHIorbsDEPuWaw= -----END CERTIFICATE-----Generated at Thu Sep 24 02:22:46 2026 by rpki-client