$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft File: 34B29E7722E2B5DD7C273585E39574B57B896900.mft (raw, json) Hash identifier: hdFpKOhDeV1/ThNbYxkHCg4d8eM0bYxL/JK3UpiJ19g= Subject key identifier: 43:A4:E5:76:C8:AD:3F:C3:3E:9A:DB:D9:DB:B8:86:49:67:BC:18:DD Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 Certificate issuer: /CN=34B29E7722E2B5DD7C273585E39574B57B896900 Certificate serial: 226000F3CDB5A66C74ABC99FA34BDEAC32287334 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:51:28 +0000 Manifest this update: Tue 12 May 2026 16:46:28 +0000 Manifest next update: Wed 13 May 2026 17:44:28 +0000 Files and hashes: 1: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: mau8c52MjBB5eUtMaWvjg55FAtNn6V2VkjPj1AYcMKU=) 2: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: G90KEOKf6BnudPfrgNF9Y+RD3ZrjM9VxjF1gA2ddTwk=) 3: 34B29E7722E2B5DD7C273585E39574B57B896900.crl (hash: ZwfQS0spRjkYsmE6q93WUM4lRS6SFPz8Wcn4Kn5bOt8=) 4: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: 0CcVKvK2RnP3R+MD8e/l3+iqcZgJW/8isjroKXFrB6k=) 5: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 49rc320q+QyoI3Wo5yzjwV1JHfD3ARGCwSOWR1AVGd4=) 6: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: I1bsWI7DvPSBQ9/yo42Yu8NJ60GXC0aRajit4q85Uec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:60:00:f3:cd:b5:a6:6c:74:ab:c9:9f:a3:4b:de:ac:32:28:73:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900 Validity Not Before: May 12 16:46:28 2026 GMT Not After : May 13 17:44:28 2026 GMT Subject: CN=43A4E576C8AD3FC33E9ADBD9DBB8864967BC18DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:de:a5:10:4f:d6:fc:af:1a:e2:b1:08:b3: ab:e4:b0:be:a1:4d:96:bf:8d:ab:53:f3:8d:3b:a0: fb:e1:41:e0:08:f5:50:e4:5e:23:3c:f5:a8:2d:d7: 39:5f:b2:aa:ca:97:cc:26:28:b1:48:ad:08:50:a6: f6:0f:42:2d:20:15:6c:96:dd:5b:f9:c3:16:c1:2b: dc:4c:d3:35:24:d4:80:08:43:90:d4:dc:73:7c:93: 51:d5:25:ae:36:38:88:f7:fb:e4:59:6b:33:8e:fe: f1:31:7d:ef:5d:f7:b9:a5:59:25:26:1f:6b:09:a4: 52:b7:f7:da:35:73:a0:cf:3b:8a:9f:bf:db:2e:12: a2:65:f1:72:18:9a:29:37:d0:5e:c1:ed:bf:0e:dd: ab:21:11:39:14:2c:21:5e:1a:32:d2:b7:97:e3:71: 73:a6:fb:a4:1c:e8:f5:41:83:d4:ae:de:ae:94:58: 39:b7:7c:5e:b5:89:93:a5:cc:40:61:a1:43:ff:f5: 8f:3c:37:41:61:2b:c1:f2:31:27:4c:b6:78:28:ce: c5:f5:a9:cd:24:76:61:bd:0b:56:f8:7a:d9:5a:24: e3:21:a5:d5:64:4d:bf:22:24:e0:27:ef:46:9c:83: e1:83:e4:f2:49:cf:d9:d3:d5:a6:59:31:68:8c:00: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A4:E5:76:C8:AD:3F:C3:3E:9A:DB:D9:DB:B8:86:49:67:BC:18:DD X509v3 Authority Key Identifier: keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ee:a5:43:22:3f:d1:1a:b0:a8:cf:f8:34:46:d3:ec:f1:d5: cc:d1:7f:5c:58:98:de:46:8b:fa:8f:ab:08:ce:5d:52:a5:2d: 77:cf:76:cd:e3:2c:06:00:4a:2b:b9:96:53:27:8f:a8:df:26: cf:49:c2:32:d3:67:a1:66:e6:cc:bf:a6:f9:62:85:5b:c6:18: 59:26:f1:34:c6:bf:8b:74:09:60:c3:52:58:01:e4:ca:28:5d: 7f:5c:9d:3b:99:e0:ce:68:74:98:81:79:00:93:40:01:05:69: ca:64:a0:c3:7d:b2:73:75:01:64:8b:a2:67:73:d8:ca:e4:9a: 2f:71:0d:49:d2:ab:1e:fa:8a:6d:d9:7e:a8:9c:42:49:45:42: ac:7b:7f:dc:b3:a0:2a:68:14:81:44:da:90:6e:9c:c2:58:8b: b4:76:a6:59:f3:dc:a2:8f:71:3d:73:66:69:a3:14:ef:ff:34: f0:f4:3e:48:a6:9b:a2:4c:05:d3:74:14:d1:02:72:b5:7e:8a: 11:52:ea:52:aa:5c:e5:fe:be:bc:8c:48:a2:e4:a5:7a:7e:41: 42:94:89:af:40:cf:94:44:45:20:d2:4a:a2:2b:37:41:e5:56: 7b:ac:d6:18:b5:ba:7f:3b:d5:76:aa:d3:50:e5:76:00:39:c3: 4f:ee:00:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImAA8821pmx0q8mfo0verDIoczQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0QjU3 Qjg5NjkwMDAeFw0yNjA1MTIxNjQ2MjhaFw0yNjA1MTMxNzQ0MjhaMDMxMTAvBgNV BAMTKDQzQTRFNTc2QzhBRDNGQzMzRTlBREJEOURCQjg4NjQ5NjdCQzE4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIt6lEE/W/K8a4rEIs6vksL6h TZa/jatT8407oPvhQeAI9VDkXiM89agt1zlfsqrKl8wmKLFIrQhQpvYPQi0gFWyW 3Vv5wxbBK9xM0zUk1IAIQ5DU3HN8k1HVJa42OIj3++RZazOO/vExfe9d97mlWSUm H2sJpFK399o1c6DPO4qfv9suEqJl8XIYmik30F7B7b8O3ashETkULCFeGjLSt5fj cXOm+6Qc6PVBg9Su3q6UWDm3fF61iZOlzEBhoUP/9Y88N0FhK8HyMSdMtngozsX1 qc0kdmG9C1b4etlaJOMhpdVkTb8iJOAn70acg+GD5PJJz9nT1aZZMWiMACXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ6TldsitP8M+mtvZ27iGSWe8GN0wHwYDVR0j BBgwFoAUNLKedyLitd18JzWF45V0tXuJaQAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JkYmJjMDgtNGU4ZS00NGJhLWE0Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcy MkUyQjVERDdDMjczNTg1RTM5NTc0QjU3Qjg5NjkwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEIyOUU3NzIyRTJCNUREN0MyNzM1ODVFMzk1NzRCNTdCODk2 OTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0 QjU3Qjg5NjkwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDupUMiP9EasKjP+DRG0+zx1czRf1xYmN5G i/qPqwjOXVKlLXfPds3jLAYASiu5llMnj6jfJs9JwjLTZ6Fm5sy/pvlihVvGGFkm 8TTGv4t0CWDDUlgB5MooXX9cnTuZ4M5odJiBeQCTQAEFacpkoMN9snN1AWSLomdz 2Mrkmi9xDUnSqx76im3ZfqicQklFQqx7f9yzoCpoFIFE2pBunMJYi7R2plnz3KKP cT1zZmmjFO//NPD0Pkimm6JMBdN0FNECcrV+ihFS6lKqXOX+vryMSKLkpXp+QUKU ia9Az5RERSDSSqIrN0HlVnus1hi1un871Xaq01DldgA5w0/uAIU= -----END CERTIFICATE-----Generated at Wed May 13 01:14:52 2026 by rpki-client