$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft File: 34A5DE28FDBC6F27C998277F953439F66D10A75E.mft (raw, json) Hash identifier: Hi9bqSdepUdTyG+X4Ok9FFpqCnxMJr5vC9wd3/xD2dY= Subject key identifier: 8D:18:C6:6C:92:CE:3D:3E:94:A7:0D:9A:80:DE:BE:D6:19:E2:09:E1 Authority key identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E Certificate issuer: /CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Certificate serial: 13B044248DE361C45FE783A8E0CBFA5A1810F680 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft Manifest number: 0F Signing time: Wed 13 May 2026 02:26:28 +0000 Manifest this update: Wed 13 May 2026 02:21:28 +0000 Manifest next update: Thu 14 May 2026 04:02:28 +0000 Files and hashes: 1: 34A5DE28FDBC6F27C998277F953439F66D10A75E.crl (hash: 0X/D6Fi6os6ju8ytmf/pBhphHzynST9tgweS6Xqoejw=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: 9xIqyd7FqC7E5vM/2yM7xmyBSmnXPGROKdDFsYB3t7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b0:44:24:8d:e3:61:c4:5f:e7:83:a8:e0:cb:fa:5a:18:10:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Validity Not Before: May 13 02:21:28 2026 GMT Not After : May 14 04:02:28 2026 GMT Subject: CN=8D18C66C92CE3D3E94A70D9A80DEBED619E209E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:30:68:fc:cc:08:b1:6c:53:10:4e:be:d2: 75:7f:e2:54:ca:bf:a7:6e:56:5c:aa:21:f0:86:42: 39:36:96:c4:54:9b:b4:66:45:86:bf:fc:82:e7:e8: de:57:40:a6:80:9e:f4:9c:bd:6b:bf:36:cf:dc:55: ed:ca:79:f4:88:20:aa:25:0f:e0:03:1b:99:80:4b: 3b:b8:5a:12:3c:67:3d:b5:23:40:c7:e4:25:59:f7: bc:ba:dc:ea:b0:3d:45:d8:8c:87:59:5a:54:d8:43: 70:ef:2b:dd:42:20:fa:bb:db:34:94:34:37:fb:c0: 9c:31:da:0d:ad:77:51:05:74:df:24:81:d7:2e:97: 85:ef:42:c5:0f:20:02:8e:47:5b:36:59:d2:f8:a0: 1d:7b:ff:12:22:a7:59:c9:f6:39:6c:39:9d:d5:06: 16:99:ea:80:7c:1c:7d:0d:75:9e:81:0d:67:60:ec: bd:02:b8:d7:7e:cb:83:ac:8d:d7:93:8c:27:db:98: 72:40:39:fc:00:4b:68:43:4a:d3:a8:b7:a3:ba:97: f4:c7:88:35:f0:6d:2e:de:d5:07:c6:d2:06:cf:46: 01:78:db:85:03:59:b2:1a:bf:27:e7:85:d2:7f:59: e3:d6:50:49:a2:55:08:a7:67:be:10:f4:eb:b0:61: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:18:C6:6C:92:CE:3D:3E:94:A7:0D:9A:80:DE:BE:D6:19:E2:09:E1 X509v3 Authority Key Identifier: keyid:34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ab:24:f1:ac:4e:4d:bb:a5:cc:46:88:e3:95:00:70:23:83: 31:86:8f:28:92:23:65:28:7a:49:18:8a:a2:1c:60:0a:3a:4e: 6e:b6:f6:35:ed:78:41:7c:a2:7d:98:7d:5e:1d:54:6a:2e:f4: 64:b3:e2:ff:1e:7f:47:6e:8d:89:03:da:8d:b1:e1:51:e7:65: 7a:ba:95:28:0d:92:fb:3a:80:69:57:39:3f:4c:6c:2b:3e:90: d1:fb:43:b7:38:b5:64:59:66:d2:56:8c:d0:20:fb:d1:ea:2d: 7c:50:0a:dd:a2:dc:0e:95:bd:7d:5f:5a:b0:7a:4f:94:3a:21: ad:73:bf:3a:b7:6c:91:d6:6c:85:57:cc:8e:4a:cc:15:ea:0c: 3b:11:54:08:bb:af:59:fb:0d:3e:f3:e7:7c:59:c2:b7:a3:1e: 5f:0f:9c:ef:1c:9d:9e:93:86:1b:83:d6:73:f9:ea:b2:52:23: 3b:92:bc:6e:f5:db:ac:1a:56:0c:15:eb:81:b2:9a:3a:29:0f: 45:81:29:d7:91:a4:98:12:50:14:06:c5:04:92:5b:b4:88:92: 30:7f:cb:6c:b4:e9:df:48:68:c8:09:7e:bd:65:05:b7:d3:72: aa:9d:2d:fe:14:15:60:71:24:4b:37:10:79:4f:ed:94:19:7b: a2:6c:9a:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7BEJI3jYcRf54Oo4Mv6WhgQ9oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2 RDEwQTc1RTAeFw0yNjA1MTMwMjIxMjhaFw0yNjA1MTQwNDAyMjhaMDMxMTAvBgNV BAMTKDhEMThDNjZDOTJDRTNEM0U5NEE3MEQ5QTgwREVCRUQ2MTlFMjA5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRzBo/MwIsWxTEE6+0nV/4lTK v6duVlyqIfCGQjk2lsRUm7RmRYa//ILn6N5XQKaAnvScvWu/Ns/cVe3KefSIIKol D+ADG5mASzu4WhI8Zz21I0DH5CVZ97y63OqwPUXYjIdZWlTYQ3DvK91CIPq72zSU NDf7wJwx2g2td1EFdN8kgdcul4XvQsUPIAKOR1s2WdL4oB17/xIip1nJ9jlsOZ3V BhaZ6oB8HH0NdZ6BDWdg7L0CuNd+y4OsjdeTjCfbmHJAOfwAS2hDStOot6O6l/TH iDXwbS7e1QfG0gbPRgF424UDWbIavyfnhdJ/WePWUEmiVQinZ74Q9OuwYTo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjRjGbJLOPT6Upw2agN6+1hniCeEwHwYDVR0j BBgwFoAUNKXeKP28byfJmCd/lTQ59m0Qp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU5MjE5MTctMTNhZi00NDAzLTk3YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhG REJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2RDEwQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE1REUyOEZEQkM2RjI3Qzk5ODI3N0Y5NTM0MzlGNjZEMTBB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5 RjY2RDEwQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6rJPGsTk27pcxGiOOVAHAjgzGGjyiSI2Uo ekkYiqIcYAo6Tm629jXteEF8on2YfV4dVGou9GSz4v8ef0dujYkD2o2x4VHnZXq6 lSgNkvs6gGlXOT9MbCs+kNH7Q7c4tWRZZtJWjNAg+9HqLXxQCt2i3A6VvX1fWrB6 T5Q6Ia1zvzq3bJHWbIVXzI5KzBXqDDsRVAi7r1n7DT7z53xZwrejHl8PnO8cnZ6T hhuD1nP56rJSIzuSvG7126waVgwV64GymjopD0WBKdeRpJgSUBQGxQSSW7SIkjB/ y2y06d9IaMgJfr1lBbfTcqqdLf4UFWBxJEs3EHlP7ZQZe6Jsmn4= -----END CERTIFICATE-----Generated at Wed May 13 14:08:04 2026 by rpki-client