$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: V1z4GOhp0/XVsN3HqescV8cAdkKJJSyT1wz90Si3AmM= Subject key identifier: DC:7E:97:54:D5:F1:9F:95:15:CC:80:10:7A:74:E3:AC:86:0A:79:B1 Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 639C1D3415C5E4403DFFC3B71A62AB5700D64F3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:37:20 +0000 Manifest this update: Mon 21 Sep 2026 04:32:20 +0000 Manifest next update: Tue 22 Sep 2026 06:57:20 +0000 Files and hashes: 1: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) 2: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) 3: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: g768xObS2oHO26MuK5FHeM/WlOdKvcMfZaUnXDa6LuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9c:1d:34:15:c5:e4:40:3d:ff:c3:b7:1a:62:ab:57:00:d6:4f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: Sep 21 04:32:20 2026 GMT Not After : Sep 22 06:57:20 2026 GMT Subject: CN=DC7E9754D5F19F9515CC80107A74E3AC860A79B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:76:ae:ff:50:ca:63:53:56:7d:12:bf:d0: 0f:1e:3a:fe:26:cd:e4:cb:11:f6:57:cf:3c:db:ef: f4:29:7f:8f:b8:2c:61:43:0b:d4:8f:10:9d:ba:44: 49:9a:e3:7a:30:3a:4a:a0:0f:56:ad:56:d0:45:6d: 3e:cb:70:fc:3e:dc:f2:18:52:a1:df:65:09:36:af: 77:c5:5d:b8:e3:6b:a4:cd:aa:e6:87:1f:c8:82:0c: 3e:6f:58:50:a0:c8:08:b6:48:e9:8d:1b:9d:6d:0e: 3e:75:0c:9f:71:03:fd:37:79:ea:32:fb:1c:29:91: 02:1b:37:65:27:39:72:9a:62:bc:4a:0e:d3:36:63: 09:c1:1f:4e:cf:84:a9:07:8b:84:c2:2f:5f:57:a0: 4a:1f:26:e2:77:16:f1:aa:44:09:af:24:9c:5b:e2: 20:4f:3a:04:17:d4:ac:dc:a1:9e:f2:3d:4f:7d:c3: d8:43:32:4b:02:38:b6:bb:29:98:58:d6:06:62:8c: ba:c0:d8:40:10:52:d4:0a:82:8f:ef:b5:02:33:93: fc:38:7d:d2:97:e4:17:ff:6d:f4:0d:ea:b7:96:72: 07:23:3c:d6:ab:8f:46:f1:8d:b7:5d:a8:bb:3b:a3: a0:1a:18:1e:1b:47:6f:46:ca:17:4b:90:f8:e0:8d: 69:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7E:97:54:D5:F1:9F:95:15:CC:80:10:7A:74:E3:AC:86:0A:79:B1 X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:30:ef:c6:6b:cc:e9:0e:1d:45:23:0a:ba:3e:ea:05:67:02: 32:30:08:c1:40:1e:11:0c:8e:0c:c3:2e:6d:aa:75:b0:77:8d: 62:8d:08:f3:87:22:88:c1:6d:a8:6d:bf:34:bb:31:66:12:0f: 19:b9:ee:6b:bb:7a:52:7f:49:1b:35:40:94:69:c0:67:24:57: c8:cf:fb:83:5f:45:05:76:e9:bb:c6:04:60:9d:e6:85:bd:15: 16:66:ec:05:05:df:53:94:3e:a8:47:15:2b:22:b5:6b:b4:dc: cf:6e:a4:1d:b6:0a:52:7f:87:4f:ed:ac:41:3c:b4:7b:9c:39: a8:66:46:dd:5d:ab:8b:e1:09:91:29:86:27:26:ba:bc:4c:bd: 9c:1e:60:28:3e:64:06:3f:09:d3:7e:87:32:34:85:58:86:6d: 2a:47:00:35:71:fd:9e:5a:7a:03:e0:f8:cf:23:9f:aa:09:37: 3c:f7:11:50:c4:c9:ab:06:2a:c2:0b:9c:b2:3b:7e:4e:55:c9: e5:f5:c1:61:76:ca:ab:e5:ba:76:18:f4:ec:a0:81:b7:5e:fd: 0c:c5:67:86:cd:18:62:2c:4e:ab:5f:ad:08:6c:ff:6f:b7:a5: cf:1f:1c:b9:58:3a:cb:78:34:c1:4a:cb:ab:5f:37:04:07:57: 9d:35:61:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5wdNBXF5EA9/8O3GmKrVwDWTz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjA5MjEwNDMyMjBaFw0yNjA5MjIwNjU3MjBaMDMxMTAvBgNV BAMTKERDN0U5NzU0RDVGMTlGOTUxNUNDODAxMDdBNzRFM0FDODYwQTc5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg33au/1DKY1NWfRK/0A8eOv4m zeTLEfZXzzzb7/Qpf4+4LGFDC9SPEJ26REma43owOkqgD1atVtBFbT7LcPw+3PIY UqHfZQk2r3fFXbjja6TNquaHH8iCDD5vWFCgyAi2SOmNG51tDj51DJ9xA/03eeoy +xwpkQIbN2UnOXKaYrxKDtM2YwnBH07PhKkHi4TCL19XoEofJuJ3FvGqRAmvJJxb 4iBPOgQX1KzcoZ7yPU99w9hDMksCOLa7KZhY1gZijLrA2EAQUtQKgo/vtQIzk/w4 fdKX5Bf/bfQN6reWcgcjPNarj0bxjbddqLs7o6AaGB4bR29GyhdLkPjgjWlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3H6XVNXxn5UVzIAQenTjrIYKebEwHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQw78ZrzOkOHUUjCro+6gVnAjIwCMFAHhEM jgzDLm2qdbB3jWKNCPOHIojBbahtvzS7MWYSDxm57mu7elJ/SRs1QJRpwGckV8jP +4NfRQV26bvGBGCd5oW9FRZm7AUF31OUPqhHFSsitWu03M9upB22ClJ/h0/trEE8 tHucOahmRt1dq4vhCZEphicmurxMvZweYCg+ZAY/CdN+hzI0hViGbSpHADVx/Z5a egPg+M8jn6oJNzz3EVDEyasGKsILnLI7fk5VyeX1wWF2yqvlunYY9Oyggbde/QzF Z4bNGGIsTqtfrQhs/2+3pc8fHLlYOst4NMFKy6tfNwQHV501YWk= -----END CERTIFICATE-----Generated at Mon Sep 21 18:14:23 2026 by rpki-client