$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft File: 34B29E7722E2B5DD7C273585E39574B57B896900.mft (raw, json) Hash identifier: m9jmPJmsvAr+HJrL2kM4TSYWVXxPYgofJOViit8FYUw= Subject key identifier: 64:2D:22:2E:60:64:83:AC:83:44:0C:D6:C8:19:EF:FC:13:E1:E7:5B Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 Certificate issuer: /CN=34B29E7722E2B5DD7C273585E39574B57B896900 Certificate serial: 626CC7CA9A5803A9DF4BFC5DC403004EDE7FF001 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:14:13 +0000 Manifest this update: Mon 21 Sep 2026 02:09:13 +0000 Manifest next update: Tue 22 Sep 2026 03:39:13 +0000 Files and hashes: 1: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: 0CcVKvK2RnP3R+MD8e/l3+iqcZgJW/8isjroKXFrB6k=) 2: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: G90KEOKf6BnudPfrgNF9Y+RD3ZrjM9VxjF1gA2ddTwk=) 3: 34B29E7722E2B5DD7C273585E39574B57B896900.crl (hash: 4Tu7QBQA43u4hgiOLSztuwKKBIuB2BTari+DFPDGjoc=) 4: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: mau8c52MjBB5eUtMaWvjg55FAtNn6V2VkjPj1AYcMKU=) 5: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 49rc320q+QyoI3Wo5yzjwV1JHfD3ARGCwSOWR1AVGd4=) 6: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: I1bsWI7DvPSBQ9/yo42Yu8NJ60GXC0aRajit4q85Uec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6c:c7:ca:9a:58:03:a9:df:4b:fc:5d:c4:03:00:4e:de:7f:f0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900 Validity Not Before: Sep 21 02:09:13 2026 GMT Not After : Sep 22 03:39:13 2026 GMT Subject: CN=642D222E606483AC83440CD6C819EFFC13E1E75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:dd:65:44:72:05:13:75:1f:68:66:a0:f7: 29:85:39:8d:60:c0:b0:c4:ea:bf:22:ac:38:3f:be: af:5e:93:55:78:c5:94:3a:4c:95:58:eb:3c:08:5d: 76:6e:cc:3b:c8:87:32:9c:85:9c:de:e4:40:2f:17: 31:ef:40:6c:9a:67:7a:d2:62:53:04:d7:be:20:5d: 89:45:09:f3:b4:99:d5:fa:cf:35:77:7d:db:fb:7b: e3:86:da:69:3d:f8:df:86:3c:91:47:f2:e4:42:57: bf:8d:0e:a5:85:4d:0e:b8:d5:4a:2e:d7:16:c9:a1: b2:15:73:0f:4d:2f:d3:ce:19:25:a9:5c:76:e5:9f: 1b:12:5e:41:fe:6c:65:c1:3a:96:6d:00:0b:17:04: a9:ea:e0:12:37:87:1a:3d:34:9d:b7:cb:c3:ce:f9: 0a:42:32:c2:56:13:0f:2a:ea:b0:4d:e1:d3:32:31: e8:b6:57:63:52:c4:bc:74:c1:48:66:8f:2d:0d:a8: 49:50:ef:4f:6b:c7:c0:cf:02:5d:fd:3a:1c:af:4b: 01:6d:9c:6a:2b:02:e5:97:4f:25:ac:a5:da:66:f8: 68:f0:ae:59:b0:60:d7:57:86:1d:d5:90:f9:df:2b: bb:d1:a0:f0:a6:d2:52:f4:ae:67:0d:75:ed:21:b7: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2D:22:2E:60:64:83:AC:83:44:0C:D6:C8:19:EF:FC:13:E1:E7:5B X509v3 Authority Key Identifier: keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:57:cc:38:e9:f5:58:cb:1c:62:6d:b4:b3:c1:8e:ef:8b:65: 56:24:99:2a:71:15:09:f9:76:9b:27:f7:4b:5c:80:9b:46:ec: 40:d9:e2:6f:a6:72:a1:b5:f9:81:b0:92:b8:63:f6:af:08:00: 98:5f:85:8d:5a:e6:e4:b9:26:ff:a5:8d:a2:f6:2c:6f:85:82: b4:f8:14:6b:0c:83:01:b0:44:1f:c4:a8:fc:c3:4f:57:4d:b0: 93:88:82:aa:f7:08:ee:9f:d6:be:81:e6:9b:c9:99:1e:78:c5: 24:a9:4a:f9:78:10:4a:50:b2:db:2b:fb:5a:e3:56:8b:de:e6: 84:e9:cb:87:6e:11:51:c2:d9:77:91:4d:d9:49:b7:4a:54:8c: 9d:44:2b:b4:c3:9f:af:11:fb:5d:a6:2e:df:d0:c2:81:d4:26: 64:5b:11:00:09:b1:1a:35:7c:da:aa:5d:76:ff:b5:42:60:a6: af:8c:e2:10:1e:65:98:23:a4:93:ca:04:91:23:a5:d6:ee:a0: 79:f6:0e:0b:d9:29:dc:61:46:54:84:5f:92:cf:84:a5:89:e5: 6c:4d:74:45:6c:de:ff:84:b8:f0:78:28:f7:c0:ae:4e:ce:dd: cb:e4:5a:13:fd:fa:89:a3:26:b7:60:60:39:38:ab:77:f8:d2: 44:84:ca:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmzHyppYA6nfS/xdxAMATt5/8AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0QjU3 Qjg5NjkwMDAeFw0yNjA5MjEwMjA5MTNaFw0yNjA5MjIwMzM5MTNaMDMxMTAvBgNV BAMTKDY0MkQyMjJFNjA2NDgzQUM4MzQ0MENENkM4MTlFRkZDMTNFMUU3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm391lRHIFE3UfaGag9ymFOY1g wLDE6r8irDg/vq9ek1V4xZQ6TJVY6zwIXXZuzDvIhzKchZze5EAvFzHvQGyaZ3rS YlME174gXYlFCfO0mdX6zzV3fdv7e+OG2mk9+N+GPJFH8uRCV7+NDqWFTQ641Uou 1xbJobIVcw9NL9POGSWpXHblnxsSXkH+bGXBOpZtAAsXBKnq4BI3hxo9NJ23y8PO +QpCMsJWEw8q6rBN4dMyMei2V2NSxLx0wUhmjy0NqElQ709rx8DPAl39OhyvSwFt nGorAuWXTyWspdpm+GjwrlmwYNdXhh3VkPnfK7vRoPCm0lL0rmcNde0ht7thAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZC0iLmBkg6yDRAzWyBnv/BPh51swHwYDVR0j BBgwFoAUNLKedyLitd18JzWF45V0tXuJaQAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JkYmJjMDgtNGU4ZS00NGJhLWE0Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcy MkUyQjVERDdDMjczNTg1RTM5NTc0QjU3Qjg5NjkwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEIyOUU3NzIyRTJCNUREN0MyNzM1ODVFMzk1NzRCNTdCODk2 OTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvMzRCMjlFNzcyMkUyQjVERDdDMjczNTg1RTM5NTc0 QjU3Qjg5NjkwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtXzDjp9VjLHGJttLPBju+LZVYkmSpxFQn5 dpsn90tcgJtG7EDZ4m+mcqG1+YGwkrhj9q8IAJhfhY1a5uS5Jv+ljaL2LG+FgrT4 FGsMgwGwRB/EqPzDT1dNsJOIgqr3CO6f1r6B5pvJmR54xSSpSvl4EEpQstsr+1rj Vove5oTpy4duEVHC2XeRTdlJt0pUjJ1EK7TDn68R+12mLt/QwoHUJmRbEQAJsRo1 fNqqXXb/tUJgpq+M4hAeZZgjpJPKBJEjpdbuoHn2DgvZKdxhRlSEX5LPhKWJ5WxN dEVs3v+EuPB4KPfArk7O3cvkWhP9+omjJrdgYDk4q3f40kSEykI= -----END CERTIFICATE-----Generated at Mon Sep 21 21:21:58 2026 by rpki-client