$ rpki-client -vvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft File: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft (raw, json) Hash identifier: +QwZ4sujpbG7RL1VPlrP/IWXnxD6TmV07eNUBjb4+2k= Subject key identifier: EE:B6:09:01:D9:CE:5A:D0:26:DD:DA:3D:F7:CA:1C:BC:F3:DB:D0:D5 Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Certificate serial: 1993412013DC1EAC795FCEA2167C7132BF31E790 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 10:10:19 +0000 Manifest this update: Wed 17 Jun 2026 10:05:19 +0000 Manifest next update: Thu 18 Jun 2026 13:51:19 +0000 Files and hashes: 1: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: DPoB0J81kARhSGUqtcPhC6vugUonXM9RgVO7Yrk5SrU=) 2: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=) 3: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl (hash: 1G97/T4+yOpaCkQcR8aWPyovD3WUcQYDXFCxgVrNSRQ=) 4: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:93:41:20:13:dc:1e:ac:79:5f:ce:a2:16:7c:71:32:bf:31:e7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Validity Not Before: Jun 17 10:05:19 2026 GMT Not After : Jun 18 13:51:19 2026 GMT Subject: CN=EEB60901D9CE5AD026DDDA3DF7CA1CBCF3DBD0D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:54:a1:e6:16:9c:25:ed:50:a1:ea:ff:b0: a3:75:61:80:f5:8b:a4:cd:78:24:83:75:40:9b:9c: d9:37:bd:6d:74:b8:63:47:ec:6f:4f:30:c7:04:0d: c9:60:0b:60:7b:b5:19:31:28:3b:8b:ac:86:dc:d4: 42:aa:d7:a1:a7:85:42:f1:0f:8d:dc:39:b0:83:e9: 0e:5f:63:3a:b4:21:7d:d7:b5:f6:d7:69:91:d2:fe: 55:f4:f5:5b:10:33:4d:d1:42:b5:a7:f3:d2:ba:b1: b4:3f:19:e8:e5:2e:53:fe:47:c5:9b:eb:81:0a:96: 76:f5:6d:73:c2:81:8e:ef:cf:11:25:24:8d:67:50: 4c:db:c1:a0:0e:6e:89:83:c3:f7:ba:47:30:c5:30: 21:cd:c5:20:7c:2b:d8:fc:56:5b:17:d1:d2:63:a3: 21:a2:66:d8:36:fb:22:64:63:09:f3:9c:7e:ec:47: f0:e5:a1:c2:d3:d5:32:3a:04:2f:e1:f9:13:f3:7c: c2:34:3d:90:53:7a:5a:cd:18:b1:54:bb:9b:df:cf: 59:31:07:25:74:d7:d8:5f:a8:75:63:6a:62:98:f2: c8:b6:64:18:e6:d1:a3:57:ad:e7:17:b2:13:fe:68: 95:0d:1e:07:ad:e3:37:8d:ef:1c:ed:5e:8c:fa:cd: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B6:09:01:D9:CE:5A:D0:26:DD:DA:3D:F7:CA:1C:BC:F3:DB:D0:D5 X509v3 Authority Key Identifier: keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f6:dd:67:91:95:a5:b7:68:65:c8:5e:b5:26:ae:44:43:48: 4e:b4:fd:b3:48:76:ac:ff:45:cc:c6:e6:42:90:b0:22:f7:81: c5:c8:c5:9b:d0:fe:c6:cf:5d:d5:02:33:95:4b:af:49:d2:e1: 95:e1:3c:69:db:b7:1c:ef:f3:78:cc:6f:09:b2:32:b9:fb:0f: 71:3a:8e:ea:63:d4:81:a7:59:a9:26:26:72:c2:01:ff:df:e2: e0:dd:b8:6b:3a:65:cc:23:6e:3c:11:0e:9b:3a:99:f6:83:97: 26:a3:2a:d5:24:73:b2:51:2c:6c:14:6e:22:70:40:66:d3:1d: 8a:be:a9:99:6e:bb:1d:da:da:32:2e:13:6c:09:ab:fd:86:d7: f0:d9:67:7e:17:e1:93:37:c1:3d:4a:87:48:99:33:43:32:70: 55:5c:59:0c:18:fa:a8:eb:e0:33:22:16:7a:3e:b6:98:66:f4: c2:34:dc:41:3a:30:8d:f9:97:a0:83:54:ec:cc:0b:91:55:2d: 1b:b5:7b:fb:bc:d0:e6:a6:de:f9:d2:31:f8:9b:82:7c:69:8f: f7:89:ab:92:fc:85:1c:73:29:39:fb:3f:e0:30:c6:a2:ed:51: de:bf:a7:eb:4e:ec:61:73:ac:e5:eb:2c:04:8d:6a:fc:f0:44: 25:fd:f4:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZNBIBPcHqx5X86iFnxxMr8x55AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC RDI4Mjk1MTAeFw0yNjA2MTcxMDA1MTlaFw0yNjA2MTgxMzUxMTlaMDMxMTAvBgNV BAMTKEVFQjYwOTAxRDlDRTVBRDAyNkREREEzREY3Q0ExQ0JDRjNEQkQwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRElSh5hacJe1Qoer/sKN1YYD1 i6TNeCSDdUCbnNk3vW10uGNH7G9PMMcEDclgC2B7tRkxKDuLrIbc1EKq16GnhULx D43cObCD6Q5fYzq0IX3XtfbXaZHS/lX09VsQM03RQrWn89K6sbQ/GejlLlP+R8Wb 64EKlnb1bXPCgY7vzxElJI1nUEzbwaAObomDw/e6RzDFMCHNxSB8K9j8VlsX0dJj oyGiZtg2+yJkYwnznH7sR/DlocLT1TI6BC/h+RPzfMI0PZBTelrNGLFUu5vfz1kx ByV019hfqHVjamKY8si2ZBjm0aNXrecXshP+aJUNHget4zeN7xztXoz6zblzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7rYJAdnOWtAm3do998ocvPPb0NUwHwYDVR0j BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1 QzlCRDI4Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP23WeRlaW3aGXIXrUmrkRDSE60/bNIdqz/ RczG5kKQsCL3gcXIxZvQ/sbPXdUCM5VLr0nS4ZXhPGnbtxzv83jMbwmyMrn7D3E6 jupj1IGnWakmJnLCAf/f4uDduGs6ZcwjbjwRDps6mfaDlyajKtUkc7JRLGwUbiJw QGbTHYq+qZluux3a2jIuE2wJq/2G1/DZZ34X4ZM3wT1Kh0iZM0MycFVcWQwY+qjr 4DMiFno+tphm9MI03EE6MI35l6CDVOzMC5FVLRu1e/u80Oam3vnSMfibgnxpj/eJ q5L8hRxzKTn7P+AwxqLtUd6/p+tO7GFzrOXrLASNavzwRCX99MU= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:55 2026 by rpki-client