$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft File: 34B29E7722E2B5DD7C273585E39574B57B896900.mft (raw, json) Hash identifier: yOvFDEnXY/pqvc59azsPv2gY9qwLK1RMw1xSfadyFw8= Subject key identifier: B2:B9:C9:26:DF:4C:D5:7D:E2:50:09:05:A1:93:83:29:2A:17:56:45 Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 Certificate issuer: /CN=34B29E7722E2B5DD7C273585E39574B57B896900 Certificate serial: 5B243C4601E7FDB2C9B66C7380647421C98FB7D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:11:05 +0000 Manifest this update: Thu 23 Jul 2026 13:06:05 +0000 Manifest next update: Fri 24 Jul 2026 14:08:05 +0000 Files and hashes: 1: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: mau8c52MjBB5eUtMaWvjg55FAtNn6V2VkjPj1AYcMKU=) 2: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 49rc320q+QyoI3Wo5yzjwV1JHfD3ARGCwSOWR1AVGd4=) 3: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: I1bsWI7DvPSBQ9/yo42Yu8NJ60GXC0aRajit4q85Uec=) 4: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: G90KEOKf6BnudPfrgNF9Y+RD3ZrjM9VxjF1gA2ddTwk=) 5: 34B29E7722E2B5DD7C273585E39574B57B896900.crl (hash: 0sjFrHNoe6n5MfDFf7KKJSmXdyei6YE8FRJRBa8CTUA=) 6: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: 0CcVKvK2RnP3R+MD8e/l3+iqcZgJW/8isjroKXFrB6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:24:3c:46:01:e7:fd:b2:c9:b6:6c:73:80:64:74:21:c9:8f:b7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900 Validity Not Before: Jul 23 13:06:05 2026 GMT Not After : Jul 24 14:08:05 2026 GMT Subject: CN=B2B9C926DF4CD57DE2500905A19383292A175645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:74:48:b9:ba:95:a5:12:87:28:c8:b2:35: 40:11:d4:ba:c5:fb:08:a8:43:47:c5:9c:d0:f1:7e: bd:6b:ab:9b:fe:c6:c2:f8:ee:c4:32:6d:88:3d:20: 97:0d:50:62:12:e0:e4:85:86:2d:d0:85:0c:a2:9c: 0b:09:a1:e3:1d:ce:b8:ad:c3:c0:a4:0f:63:78:b5: 5e:25:b5:30:86:ec:04:15:e9:7b:f0:09:ce:11:05: 00:3a:fb:02:77:c0:a0:8e:bb:27:40:5e:58:71:7c: f5:7f:c9:be:ed:b1:e2:47:de:13:2f:c5:f3:d0:18: d2:51:cd:cd:54:5a:07:40:b8:88:33:8f:32:d5:07: 1a:0a:bd:ce:fe:e6:7b:55:07:8b:db:0f:c9:b5:37: 92:e7:8b:e4:82:26:33:3b:22:d1:c7:24:77:fb:20: 70:94:8e:89:d5:98:f6:10:d0:61:29:bb:d8:05:0a: 94:a5:09:73:64:4b:f0:a2:87:38:23:77:0e:48:0e: ea:63:8f:f1:58:5e:b6:70:5b:85:db:4f:2b:f7:86: 25:cb:df:65:e4:d5:ef:67:08:38:4f:19:12:0c:41: 08:27:39:9f:29:52:23:b9:f3:86:5e:a7:92:3c:74: b0:19:87:7a:68:15:27:42:c2:c1:ad:08:13:27:50: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B9:C9:26:DF:4C:D5:7D:E2:50:09:05:A1:93:83:29:2A:17:56:45 X509v3 Authority Key Identifier: keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:0e:09:d3:e8:2f:bc:9a:35:d4:d6:af:22:b2:cd:f3:22:6f: 8a:3c:30:94:b8:64:15:35:93:92:e6:5b:19:47:c8:c3:24:1e: 06:6a:c4:89:7d:2b:d8:18:01:d9:dd:ce:4e:01:fd:50:05:31: e7:86:ec:2c:44:e0:80:7a:e4:6c:e8:39:d5:ea:dc:20:28:3a: 04:3f:07:3d:cc:9e:88:94:e0:3b:ee:67:97:e3:d9:97:38:3c: c1:37:34:79:75:a1:ca:32:17:a7:81:a3:d2:b5:1a:3c:eb:3b: 7c:17:5c:e5:fe:42:20:82:25:c7:97:f2:7f:dd:f9:db:22:7c: 3f:6e:8f:6e:86:af:cc:73:91:fe:83:ea:92:82:22:d0:b8:e2: 44:5d:7c:8f:79:26:22:43:e3:22:a6:19:f8:f7:e0:49:e2:5f: 14:88:dd:01:3f:f5:c7:a7:61:49:98:38:19:ee:00:3a:1a:8c: f0:c4:62:1f:01:f7:e2:7d:6f:c5:a5:4e:2d:0f:d1:40:0d:98: e5:ac:98:01:51:19:8a:7c:d1:36:03:fe:9e:fc:55:d3:9d:33: b4:00:8c:74:1c:d8:c3:2f:87:6d:60:2e:fe:55:5f:1b:97:60: ac:7d:59:04:70:b7:d4:46:80:10:9a:a5:e9:ee:0b:11:33:6b: 71:06:5d:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyQ8RgHn/bLJtmxzgGR0IcmPt9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0QjU3 Qjg5NjkwMDAeFw0yNjA3MjMxMzA2MDVaFw0yNjA3MjQxNDA4MDVaMDMxMTAvBgNV BAMTKEIyQjlDOTI2REY0Q0Q1N0RFMjUwMDkwNUExOTM4MzI5MkExNzU2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOnRIubqVpRKHKMiyNUAR1LrF +wioQ0fFnNDxfr1rq5v+xsL47sQybYg9IJcNUGIS4OSFhi3QhQyinAsJoeMdzrit w8CkD2N4tV4ltTCG7AQV6XvwCc4RBQA6+wJ3wKCOuydAXlhxfPV/yb7tseJH3hMv xfPQGNJRzc1UWgdAuIgzjzLVBxoKvc7+5ntVB4vbD8m1N5Lni+SCJjM7ItHHJHf7 IHCUjonVmPYQ0GEpu9gFCpSlCXNkS/Cihzgjdw5IDupjj/FYXrZwW4XbTyv3hiXL 32Xk1e9nCDhPGRIMQQgnOZ8pUiO584Zep5I8dLAZh3poFSdCwsGtCBMnUGQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsrnJJt9M1X3iUAkFoZODKSoXVkUwHwYDVR0j BBgwFoAUNLKedyLitd18JzWF45V0tXuJaQAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JkYmJjMDgtNGU4ZS00NGJhLWE0Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcy MkUyQjVERDdDMjczNTg1RTM5NTc0QjU3Qjg5NjkwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEIyOUU3NzIyRTJCNUREN0MyNzM1ODVFMzk1NzRCNTdCODk2 OTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0 QjU3Qjg5NjkwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUOCdPoL7yaNdTWryKyzfMib4o8MJS4ZBU1 k5LmWxlHyMMkHgZqxIl9K9gYAdndzk4B/VAFMeeG7CxE4IB65GzoOdXq3CAoOgQ/ Bz3MnoiU4DvuZ5fj2Zc4PME3NHl1ocoyF6eBo9K1GjzrO3wXXOX+QiCCJceX8n/d +dsifD9uj26Gr8xzkf6D6pKCItC44kRdfI95JiJD4yKmGfj34EniXxSI3QE/9cen YUmYOBnuADoajPDEYh8B9+J9b8WlTi0P0UANmOWsmAFRGYp80TYD/p78VdOdM7QA jHQc2MMvh21gLv5VXxuXYKx9WQRwt9RGgBCapenuCxEza3EGXSI= -----END CERTIFICATE-----Generated at Fri Jul 24 04:13:48 2026 by rpki-client