$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft File: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft (raw, json) Hash identifier: OoRl2MKkGRFjH8s234USM+k5jZNH8IQTHEnimTzlRoQ= Subject key identifier: F3:0E:E1:96:40:D7:9D:21:90:C9:14:A7:0E:4B:3D:AB:78:86:41:67 Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Certificate serial: 081FDA9B2B43F22923670913732B914316752AF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:10:21 +0000 Manifest this update: Mon 21 Sep 2026 15:05:21 +0000 Manifest next update: Tue 22 Sep 2026 17:01:21 +0000 Files and hashes: 1: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=) 2: 34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl (hash: IJV0YMMG0ydVBXeeh2fcmIFkeOTU9PslB9FMW8dsgw4=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: DPoB0J81kARhSGUqtcPhC6vugUonXM9RgVO7Yrk5SrU=) 4: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1f:da:9b:2b:43:f2:29:23:67:09:13:73:2b:91:43:16:75:2a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951 Validity Not Before: Sep 21 15:05:21 2026 GMT Not After : Sep 22 17:01:21 2026 GMT Subject: CN=F30EE19640D79D2190C914A70E4B3DAB78864167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:83:7d:ba:41:19:e8:cd:bb:43:72:bb:ff: 39:bc:ce:53:25:94:9f:1d:5e:1d:d2:53:69:7f:ec: 2c:16:db:6d:16:89:b7:72:f5:dd:14:0c:31:43:d2: 62:06:e5:c9:07:06:5d:7e:b0:be:0a:30:32:fa:67: e6:19:f5:39:fe:7b:65:d9:2b:32:3d:19:61:5d:63: d9:5f:56:05:cc:86:e5:00:1f:ac:19:44:12:ca:fe: 5d:eb:4a:56:45:66:c0:be:64:d8:2b:a8:38:ce:be: 6b:cd:fe:63:a6:72:c5:86:d6:e6:64:c6:66:bf:f8: 1f:26:6d:29:5e:db:97:b4:40:c9:d8:f4:48:a6:8f: af:5e:1d:6b:dd:57:90:34:dd:a9:89:72:f9:df:d8: 4f:40:83:54:83:8f:72:74:0e:08:85:30:07:ab:42: 03:0c:2e:29:c4:96:e0:de:f1:6a:4d:9b:ba:00:35: 69:7e:30:98:40:10:ce:4e:99:a8:d7:f8:28:4d:af: ec:94:09:c0:f1:0b:de:d3:ce:be:d3:df:a1:bb:7f: 62:b3:ed:ef:80:b8:a1:7f:6f:ff:93:cd:57:74:07: 08:fc:35:d5:e9:6e:c0:4d:16:cf:20:7b:8f:3e:35: 6e:10:d0:3a:b5:a2:92:c8:b9:7f:cc:e5:2e:51:d4: 35:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0E:E1:96:40:D7:9D:21:90:C9:14:A7:0E:4B:3D:AB:78:86:41:67 X509v3 Authority Key Identifier: keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7d:02:06:aa:83:7c:2c:66:2e:2c:6c:a8:a1:1b:5d:b5:33: 21:1c:7c:36:50:b2:d8:ea:4c:0a:4e:80:a4:1e:c0:5c:7e:18: da:b7:ec:94:49:2d:8d:d5:d0:5a:5f:d1:99:7d:77:2d:22:6d: 22:d1:56:00:4c:93:60:8a:c2:5c:33:e4:70:6c:e1:21:b2:b1: 98:e5:20:68:26:fe:b4:16:f7:57:02:fd:19:e1:ae:97:5d:06: 05:94:c4:c6:4b:17:45:8d:19:1a:ba:a9:1c:da:f9:44:7b:a9: 7d:da:5a:f0:84:77:c2:29:10:b1:aa:51:87:92:71:49:7e:e3: 60:57:6e:37:8c:a8:db:7c:dd:18:6b:f4:e8:78:12:d0:2a:b4: f1:4a:3e:14:b8:8e:8d:f3:02:c8:ee:6f:33:dd:28:11:ce:89: f8:10:0c:20:7c:43:e2:bc:e3:40:ce:8a:b6:26:33:02:27:2d: d2:a2:ef:7a:05:eb:cb:d5:a9:de:31:17:d4:0d:c0:d9:d0:67: b0:f9:82:20:bf:e4:fd:59:6e:a7:de:69:38:62:32:6b:30:48: 29:20:0f:2f:96:20:a2:69:6e:dc:96:86:46:36:79:8c:a0:36: 70:bc:aa:0b:97:35:d2:9e:18:77:3d:f0:d1:44:85:5e:bd:93: ed:28:1b:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCB/amytD8ikjZwkTcyuRQxZ1KvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC RDI4Mjk1MTAeFw0yNjA5MjExNTA1MjFaFw0yNjA5MjIxNzAxMjFaMDMxMTAvBgNV BAMTKEYzMEVFMTk2NDBENzlEMjE5MEM5MTRBNzBFNEIzREFCNzg4NjQxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX8IN9ukEZ6M27Q3K7/zm8zlMl lJ8dXh3SU2l/7CwW220Wibdy9d0UDDFD0mIG5ckHBl1+sL4KMDL6Z+YZ9Tn+e2XZ KzI9GWFdY9lfVgXMhuUAH6wZRBLK/l3rSlZFZsC+ZNgrqDjOvmvN/mOmcsWG1uZk xma/+B8mbSle25e0QMnY9Eimj69eHWvdV5A03amJcvnf2E9Ag1SDj3J0DgiFMAer QgMMLinEluDe8WpNm7oANWl+MJhAEM5OmajX+ChNr+yUCcDxC97Tzr7T36G7f2Kz 7e+AuKF/b/+TzVd0Bwj8NdXpbsBNFs8ge48+NW4Q0Dq1opLIuX/M5S5R1DUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8w7hlkDXnSGQyRSnDks9q3iGQWcwHwYDVR0j BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1 QzlCRDI4Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHl9Agaqg3wsZi4sbKihG121MyEcfDZQstjq TApOgKQewFx+GNq37JRJLY3V0Fpf0Zl9dy0ibSLRVgBMk2CKwlwz5HBs4SGysZjl IGgm/rQW91cC/RnhrpddBgWUxMZLF0WNGRq6qRza+UR7qX3aWvCEd8IpELGqUYeS cUl+42BXbjeMqNt83Rhr9Oh4EtAqtPFKPhS4jo3zAsjubzPdKBHOifgQDCB8Q+K8 40DOirYmMwInLdKi73oF68vVqd4xF9QNwNnQZ7D5giC/5P1ZbqfeaThiMmswSCkg Dy+WIKJpbtyWhkY2eYygNnC8qguXNdKeGHc98NFEhV69k+0oG8o= -----END CERTIFICATE-----Generated at Tue Sep 22 04:16:35 2026 by rpki-client