$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft File: 34617F5B566204A91A2C21380B5E25F66A437892.mft (raw, json) Hash identifier: KqLXzv3hEsFpNO/rzBaLvmlq633kM03smMbrPt7+VzU= Subject key identifier: 02:0D:A0:64:9B:B4:79:2A:5C:ED:E4:32:6B:39:43:08:2C:A2:E4:7C Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892 Certificate serial: 37CB2F720B028B628E3D34BED1C6A9BEF5792CB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:40:56 +0000 Manifest this update: Wed 17 Jun 2026 06:35:56 +0000 Manifest next update: Thu 18 Jun 2026 09:07:56 +0000 Files and hashes: 1: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=) 2: 34617F5B566204A91A2C21380B5E25F66A437892.crl (hash: mnFp93Bo8ipDKxCSuxykozhRYBba8AzVKAtP2zRRAO8=) 3: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: +RhRFdi85IS0AEDdqFSyPx04Rb7SIcL6RBSvchBHq2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cb:2f:72:0b:02:8b:62:8e:3d:34:be:d1:c6:a9:be:f5:79:2c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892 Validity Not Before: Jun 17 06:35:56 2026 GMT Not After : Jun 18 09:07:56 2026 GMT Subject: CN=020DA0649BB4792A5CEDE4326B3943082CA2E47C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:74:fa:20:d9:d8:14:d9:03:d9:9d:f2:79:6e: 81:f0:66:8e:6d:4d:28:a1:e3:d1:9d:95:c6:25:62: fb:c9:9c:5d:a9:7f:57:9a:69:53:18:6e:e1:0d:45: 21:73:df:fd:bc:97:18:a2:81:95:df:4e:47:e4:39: 6b:73:84:31:c4:86:7e:9a:94:6a:b8:4e:3d:ae:51: 61:53:fb:dd:af:e2:53:8e:09:fd:ca:3e:35:b8:f0: 63:f5:8e:bf:f5:a7:98:72:4b:eb:61:4f:58:da:9f: be:4a:80:8e:ff:ca:ba:ea:ea:77:53:99:92:c1:7f: 6a:ab:64:21:30:ee:02:6b:13:70:16:ff:0e:69:3d: b4:32:74:c0:d0:c3:3a:6d:79:eb:69:43:a1:dc:ba: e4:b5:8f:b2:20:3c:74:8a:89:f7:72:9a:c5:da:8c: ed:b8:f2:bd:5c:fb:95:33:d8:c3:76:b9:85:78:ff: bf:00:de:8a:88:78:67:e1:31:16:f9:e5:ed:d2:38: 29:a8:17:78:87:34:e6:8a:a0:5e:b0:26:35:a8:46: b0:7b:dd:e5:0b:89:e2:df:f2:e4:0f:46:51:b0:5a: c1:d7:1c:7a:62:52:85:1c:54:2f:d5:1c:7d:95:7c: f4:95:5b:ff:18:ea:b7:9b:1a:75:42:55:fb:05:ab: bd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0D:A0:64:9B:B4:79:2A:5C:ED:E4:32:6B:39:43:08:2C:A2:E4:7C X509v3 Authority Key Identifier: keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a4:5b:b5:1a:28:1a:41:85:a2:3e:81:45:56:af:21:68:8c: db:6c:ce:96:e7:db:a0:cf:80:ce:0e:9b:cb:39:13:33:df:f9: 8c:e3:10:4a:fe:90:5f:4d:63:3b:7e:0c:b9:c7:7a:4a:08:66: 08:e2:4d:3e:e6:36:64:b2:9f:ad:6b:6b:13:8f:27:f1:5b:19: 8c:ad:b7:7f:22:7c:c4:78:be:6e:64:e1:25:e4:7a:ba:22:60: bb:b9:4f:6f:b9:b6:38:59:83:c5:3b:78:8e:49:cc:1b:1c:b6: c6:e2:21:ed:f3:68:87:5b:e3:fb:e5:5f:c8:16:bd:f9:7d:cf: 97:a3:2a:7d:1d:c7:88:27:74:9d:6c:41:42:b9:74:86:e8:3b: c4:3e:b1:b7:14:dc:e8:68:40:97:76:7e:d4:53:a0:08:3d:12: d9:fc:95:86:81:f6:b5:5d:d9:4b:5d:c7:f1:12:6d:d6:eb:3e: e4:d0:05:61:ed:8f:3c:08:9c:64:a1:a8:6d:42:87:f7:7e:16: 0f:1f:b2:36:86:1e:3d:a2:87:4b:4b:cf:e7:d9:6f:2d:d3:cb: 4f:f9:57:a6:73:5c:36:b0:64:44:67:ab:35:44:33:84:ca:58: ef:f0:e2:d9:8c:5a:49:5c:11:94:21:8a:02:73:b3:2f:e8:15: f5:44:b4:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8svcgsCi2KOPTS+0capvvV5LLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2 QTQzNzg5MjAeFw0yNjA2MTcwNjM1NTZaFw0yNjA2MTgwOTA3NTZaMDMxMTAvBgNV BAMTKDAyMERBMDY0OUJCNDc5MkE1Q0VERTQzMjZCMzk0MzA4MkNBMkU0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndPog2dgU2QPZnfJ5boHwZo5t TSih49GdlcYlYvvJnF2pf1eaaVMYbuENRSFz3/28lxiigZXfTkfkOWtzhDHEhn6a lGq4Tj2uUWFT+92v4lOOCf3KPjW48GP1jr/1p5hyS+thT1jan75KgI7/yrrq6ndT mZLBf2qrZCEw7gJrE3AW/w5pPbQydMDQwzpteetpQ6HcuuS1j7IgPHSKifdymsXa jO248r1c+5Uz2MN2uYV4/78A3oqIeGfhMRb55e3SOCmoF3iHNOaKoF6wJjWoRrB7 3eULieLf8uQPRlGwWsHXHHpiUoUcVC/VHH2VfPSVW/8Y6rebGnVCVfsFq73ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAg2gZJu0eSpc7eQyazlDCCyi5HwwHwYDVR0j BBgwFoAUNGF/W1ZiBKkaLCE4C14l9mpDeJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI3ZTBiYzAtNzYxYi00ZWMzLThmNDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1 NjYyMDRBOTFBMkMyMTM4MEI1RTI1RjY2QTQzNzg5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDYxN0Y1QjU2NjIwNEE5MUEyQzIxMzgwQjVFMjVGNjZBNDM3 ODkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMzQ2MTdGNUI1NjYyMDRBOTFBMkMyMTM4MEI1RTI1 RjY2QTQzNzg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOkW7UaKBpBhaI+gUVWryFojNtszpbn26DP gM4Om8s5EzPf+YzjEEr+kF9NYzt+DLnHekoIZgjiTT7mNmSyn61raxOPJ/FbGYyt t38ifMR4vm5k4SXkeroiYLu5T2+5tjhZg8U7eI5JzBsctsbiIe3zaIdb4/vlX8gW vfl9z5ejKn0dx4gndJ1sQUK5dIboO8Q+sbcU3OhoQJd2ftRToAg9Etn8lYaB9rVd 2Utdx/ESbdbrPuTQBWHtjzwInGShqG1Ch/d+Fg8fsjaGHj2ih0tLz+fZby3Ty0/5 V6ZzXDawZERnqzVEM4TKWO/w4tmMWklcEZQhigJzsy/oFfVEtEs= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:54 2026 by rpki-client