$ rpki-client -vvvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft File: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft (raw, json) Hash identifier: D3p+qg/Zp+y1KOIwmsgVmg/O5Hz/dbFtuAFAvfFf0SA= Subject key identifier: 22:97:8B:9B:66:EB:B7:C6:91:39:03:DB:FE:DE:CE:AF:A2:13:84:40 Authority key identifier: 34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F Certificate issuer: /CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F Certificate serial: 7321356225D5C0A9ED38991082AA63561BD0E97F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:38:50 +0000 Manifest this update: Thu 24 Sep 2026 02:33:50 +0000 Manifest next update: Fri 25 Sep 2026 04:59:50 +0000 Files and hashes: 1: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl (hash: O/wcpnOEsnzeWgvk2xLJFsvfxgrgRHjBuJQ6L4ZP8zA=) 2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: QuJkYaezAKdTxcWr+l4aySjRA4vLncuY75qiXrBgtBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:21:35:62:25:d5:c0:a9:ed:38:99:10:82:aa:63:56:1b:d0:e9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F Validity Not Before: Sep 24 02:33:50 2026 GMT Not After : Sep 25 04:59:50 2026 GMT Subject: CN=22978B9B66EBB7C6913903DBFEDECEAFA2138440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d1:fc:f8:30:cc:c6:9f:fc:57:38:94:cd:08: 3a:15:79:d1:39:9e:ed:a0:d6:cb:78:ea:40:72:a2: 5d:29:9c:87:ba:7b:b8:54:43:57:0e:52:4f:18:dc: 81:76:a7:0e:b2:0c:30:9e:3f:d8:f7:d5:39:08:35: 79:b5:fb:3d:b0:3d:d9:9a:44:bc:f9:28:50:07:c5: a5:d4:55:16:8b:1f:c5:f1:86:c5:00:90:06:3c:8e: 02:54:85:f1:69:df:3d:51:07:40:97:58:ca:e3:e6: 38:77:73:cc:5b:cc:94:f7:b8:53:b0:8e:cf:e7:85: e7:56:9a:8d:c7:73:26:9e:9c:89:4f:c0:a3:3c:44: 8b:79:f6:c9:4e:68:65:4f:f0:b5:18:ee:47:dc:80: ae:28:75:78:a8:04:ca:d3:b1:59:a8:a5:a3:69:94: 15:ba:cb:14:92:34:7a:b3:3c:d5:f1:c9:ad:ae:fd: 95:b2:5e:c8:f1:9f:43:4d:7d:fb:44:4a:76:c8:2a: 37:e1:c1:45:39:f1:ca:81:5b:38:9d:9d:2e:d7:1b: 55:71:ca:4f:bb:b2:1c:d8:5b:dd:85:31:75:b3:ab: 6a:1b:35:aa:67:bb:c9:a3:7f:83:f3:d6:10:09:9d: 63:c0:04:59:78:50:8e:c2:f8:3b:8a:48:9a:36:13: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:97:8B:9B:66:EB:B7:C6:91:39:03:DB:FE:DE:CE:AF:A2:13:84:40 X509v3 Authority Key Identifier: keyid:34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c4:cb:22:83:38:be:c5:19:7e:57:3e:86:15:1f:cb:59:d7: 3b:e8:b3:cd:9f:b3:4d:fa:40:ea:1b:88:2a:a7:f5:25:5c:1c: 2b:1d:e9:df:3a:e9:85:a9:ec:97:34:5f:76:d4:38:34:c5:82: bc:c6:a8:9f:e5:05:80:e5:6f:8a:c6:ba:ee:08:24:61:ef:6f: 33:b6:92:2a:06:e5:8e:87:d3:f2:7a:ec:b9:8e:be:a9:bf:74: 7c:01:db:13:28:f6:25:a6:ab:9c:bc:8d:d5:4a:17:49:65:43: 95:21:4e:53:7c:02:7d:c9:91:43:4f:9a:33:cc:74:6f:70:91: 25:b9:00:10:11:94:ee:7d:13:1d:35:32:33:99:2e:32:e8:c9: 2e:85:0e:e7:d2:6d:fa:0a:76:66:be:d8:35:8b:c7:30:b1:58: e8:8e:95:5d:b5:12:28:4c:83:cf:a7:7b:a2:aa:e2:ba:b9:c6: fb:fc:58:c7:bc:09:32:04:1b:9e:93:79:a8:f5:62:42:47:6b: cd:4e:1a:3f:bd:59:eb:ef:23:b8:c1:46:de:2e:7c:bc:d2:b5: 5f:32:ea:45:8b:c4:06:12:d3:5c:76:e9:6a:5d:09:30:d8:c3: a9:72:54:7e:aa:98:79:03:4a:20:43:da:dc:b6:9e:53:7d:00: 9f:ab:dc:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyE1YiXVwKntOJkQgqpjVhvQ6X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTlENTc3Qjg2OEY5RDg1M0U1NEJGOUZFQTc5RTY2 RTMyQzQ5RjAeFw0yNjA5MjQwMjMzNTBaFw0yNjA5MjUwNDU5NTBaMDMxMTAvBgNV BAMTKDIyOTc4QjlCNjZFQkI3QzY5MTM5MDNEQkZFREVDRUFGQTIxMzg0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0fz4MMzGn/xXOJTNCDoVedE5 nu2g1st46kByol0pnIe6e7hUQ1cOUk8Y3IF2pw6yDDCeP9j31TkINXm1+z2wPdma RLz5KFAHxaXUVRaLH8XxhsUAkAY8jgJUhfFp3z1RB0CXWMrj5jh3c8xbzJT3uFOw js/nhedWmo3HcyaenIlPwKM8RIt59slOaGVP8LUY7kfcgK4odXioBMrTsVmopaNp lBW6yxSSNHqzPNXxya2u/ZWyXsjxn0NNfftESnbIKjfhwUU58cqBWzidnS7XG1Vx yk+7shzYW92FMXWzq2obNapnu8mjf4Pz1hAJnWPABFl4UI7C+DuKSJo2E8fJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIpeLm2brt8aROQPb/t7Or6IThEAwHwYDVR0j BBgwFoAUNAqdV3uGj52FPlS/n+p55m4yxJ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzEvMzQwQTlENTc3 Qjg2OEY5RDg1M0U1NEJGOUZFQTc5RTY2RTMyQzQ5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDBBOUQ1NzdCODY4RjlEODUzRTU0QkY5RkVBNzlFNjZFMzJD NDlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvMzQwQTlENTc3Qjg2OEY5RDg1M0U1NEJGOUZFQTc5 RTY2RTMyQzQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDEyyKDOL7FGX5XPoYVH8tZ1zvos82fs036 QOobiCqn9SVcHCsd6d866YWp7Jc0X3bUODTFgrzGqJ/lBYDlb4rGuu4IJGHvbzO2 kioG5Y6H0/J67LmOvqm/dHwB2xMo9iWmq5y8jdVKF0llQ5UhTlN8An3JkUNPmjPM dG9wkSW5ABARlO59Ex01MjOZLjLoyS6FDufSbfoKdma+2DWLxzCxWOiOlV21EihM g8+ne6Kq4rq5xvv8WMe8CTIEG56Teaj1YkJHa81OGj+9WevvI7jBRt4ufLzStV8y 6kWLxAYS01x26WpdCTDYw6lyVH6qmHkDSiBD2ty2nlN9AJ+r3B8= -----END CERTIFICATE-----Generated at Thu Sep 24 13:48:39 2026 by rpki-client