$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft File: 34A5DE28FDBC6F27C998277F953439F66D10A75E.mft (raw, json) Hash identifier: FSy8h8zidcdY3Vv9OlPf7vdCk+lxSOb0a4P0EwBWlsc= Subject key identifier: E5:0C:85:CA:4D:A4:EE:E5:74:BF:7C:0E:70:24:67:DE:2E:1B:8A:1E Authority key identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E Certificate issuer: /CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Certificate serial: 5FD96CD0627751550DF06B204C0E5B6CAC33AB8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft Manifest number: C6 Signing time: Mon 28 Sep 2026 07:24:20 +0000 Manifest this update: Mon 28 Sep 2026 07:19:20 +0000 Manifest next update: Tue 29 Sep 2026 09:33:20 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: 9xIqyd7FqC7E5vM/2yM7xmyBSmnXPGROKdDFsYB3t7A=) 2: 34A5DE28FDBC6F27C998277F953439F66D10A75E.crl (hash: fzTvAbqfCJZkGf/zUlrwZSvfenKfIsrgd3Q7AliAJwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 09:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d9:6c:d0:62:77:51:55:0d:f0:6b:20:4c:0e:5b:6c:ac:33:ab:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Validity Not Before: Sep 28 07:19:20 2026 GMT Not After : Sep 29 09:33:20 2026 GMT Subject: CN=E50C85CA4DA4EEE574BF7C0E702467DE2E1B8A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9c:d5:50:49:e9:ea:be:ab:87:3e:d3:74:a7: 75:10:29:20:da:cd:17:e8:5a:20:a6:35:a4:52:09: 6d:7a:3b:dc:31:d7:91:8f:64:f4:d6:ab:df:a1:ba: ba:c9:68:21:14:96:c2:f5:62:cb:da:57:c2:df:25: 69:01:d3:47:ce:02:a6:83:34:e5:7a:6e:61:c3:ca: 17:91:1c:da:34:8e:b9:86:99:32:fe:64:be:90:a9: b2:b9:d8:3e:ab:74:63:a7:6a:16:43:a5:97:26:83: 63:2c:bb:85:2a:e1:a4:dd:56:55:e5:ce:b6:39:7c: 57:ed:d6:11:ce:d3:1a:a4:a7:e0:7a:69:d6:da:af: 51:92:b6:96:26:d1:93:21:c0:85:5a:4b:55:c2:56: 78:c9:0e:47:fc:85:e4:3a:f8:fc:db:20:16:48:44: 5a:85:72:c5:d0:fc:94:60:2d:5d:3d:43:4d:1f:98: 0b:cc:2f:58:94:15:ca:79:ff:b1:2b:0e:4d:53:9f: 31:30:1a:08:fd:30:e6:e1:15:ca:dc:a7:f8:1a:a4: 70:7e:42:25:37:d9:f0:c1:80:88:79:b7:d9:71:16: fd:6f:88:c7:a0:3f:5f:29:a6:23:9a:df:9e:e1:73: 9a:bc:bd:04:4b:ce:73:7a:23:4a:32:ad:9f:94:fd: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0C:85:CA:4D:A4:EE:E5:74:BF:7C:0E:70:24:67:DE:2E:1B:8A:1E X509v3 Authority Key Identifier: keyid:34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:cf:5e:0f:16:46:e1:aa:b2:92:c1:92:10:0c:94:a9:31:da: b6:16:4e:71:27:8b:c3:d1:77:35:18:10:cc:10:72:79:23:66: 5f:b9:4b:64:cb:c8:a5:39:59:5f:31:61:e2:57:57:09:dd:ad: ea:ff:87:b9:b9:ed:59:d7:d2:cf:4f:de:fe:1c:d7:da:04:1f: 9e:e8:6b:f6:02:0a:3d:b1:6b:38:c1:56:de:ab:a7:07:f8:8d: b0:a7:3f:db:74:f1:66:34:9a:3f:a0:50:f8:29:28:fd:f2:2f: bb:c3:a0:57:b1:34:e1:2a:7d:e6:a8:53:b3:c6:a3:07:01:f6: 2e:4f:59:c4:18:7f:d6:3d:fa:c9:73:19:ec:3c:d1:a7:fb:75: 67:88:7d:04:39:db:0f:86:ae:7e:b4:e1:ad:96:99:2b:8c:34: e3:1b:28:11:26:85:97:0e:98:28:59:b9:4d:d3:af:09:b4:1b: 9c:ac:56:44:cd:1a:b2:08:36:81:5b:d6:00:bd:db:b8:d8:5a: e8:92:b7:e6:ab:25:74:19:0d:2d:96:20:85:df:9f:16:ca:0d: 62:ab:4e:ed:5a:00:08:69:9e:63:30:45:c2:69:db:be:e5:7d: cc:fc:10:d8:68:2f:fe:16:51:62:52:32:6a:f2:c3:e6:88:53: 0c:ad:af:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9ls0GJ3UVUN8GsgTA5bbKwzq44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2 RDEwQTc1RTAeFw0yNjA5MjgwNzE5MjBaFw0yNjA5MjkwOTMzMjBaMDMxMTAvBgNV BAMTKEU1MEM4NUNBNERBNEVFRTU3NEJGN0MwRTcwMjQ2N0RFMkUxQjhBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtnNVQSenqvquHPtN0p3UQKSDa zRfoWiCmNaRSCW16O9wx15GPZPTWq9+hurrJaCEUlsL1YsvaV8LfJWkB00fOAqaD NOV6bmHDyheRHNo0jrmGmTL+ZL6QqbK52D6rdGOnahZDpZcmg2Msu4Uq4aTdVlXl zrY5fFft1hHO0xqkp+B6adbar1GStpYm0ZMhwIVaS1XCVnjJDkf8heQ6+PzbIBZI RFqFcsXQ/JRgLV09Q00fmAvML1iUFcp5/7ErDk1TnzEwGgj9MObhFcrcp/gapHB+ QiU32fDBgIh5t9lxFv1viMegP18ppiOa357hc5q8vQRLznN6I0oyrZ+U/bjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5QyFyk2k7uV0v3wOcCRn3i4bih4wHwYDVR0j BBgwFoAUNKXeKP28byfJmCd/lTQ59m0Qp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU5MjE5MTctMTNhZi00NDAzLTk3YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhG REJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2RDEwQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE1REUyOEZEQkM2RjI3Qzk5ODI3N0Y5NTM0MzlGNjZEMTBB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5 RjY2RDEwQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHPXg8WRuGqspLBkhAMlKkx2rYWTnEni8PR dzUYEMwQcnkjZl+5S2TLyKU5WV8xYeJXVwndrer/h7m57VnX0s9P3v4c19oEH57o a/YCCj2xazjBVt6rpwf4jbCnP9t08WY0mj+gUPgpKP3yL7vDoFexNOEqfeaoU7PG owcB9i5PWcQYf9Y9+slzGew80af7dWeIfQQ52w+Grn604a2WmSuMNOMbKBEmhZcO mChZuU3Trwm0G5ysVkTNGrIINoFb1gC927jYWuiSt+arJXQZDS2WIIXfnxbKDWKr Tu1aAAhpnmMwRcJp277lfcz8ENhoL/4WUWJSMmryw+aIUwytr0I= -----END CERTIFICATE-----Generated at Mon Sep 28 10:23:01 2026 by rpki-client