$ rpki-client -vvvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft File: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft (raw, json) Hash identifier: qvYBEoQVH499Pvfij9l5l1oeVU/UjVbVHN2bxodiOfQ= Subject key identifier: 9A:FC:21:54:B2:22:D5:08:34:EF:88:66:8B:41:DB:7A:F7:A9:EF:F4 Authority key identifier: 34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F Certificate issuer: /CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F Certificate serial: 0B4D98A503E483CCB88DF041E7A2B23E0BE0106E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:01:27 +0000 Manifest this update: Thu 24 Sep 2026 20:56:27 +0000 Manifest next update: Sat 26 Sep 2026 00:38:27 +0000 Files and hashes: 1: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl (hash: wDfg5VH7exxt0L0wj/L/yMmoSTEe8hHO4BzszY30fxA=) 2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: QuJkYaezAKdTxcWr+l4aySjRA4vLncuY75qiXrBgtBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4d:98:a5:03:e4:83:cc:b8:8d:f0:41:e7:a2:b2:3e:0b:e0:10:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F Validity Not Before: Sep 24 20:56:27 2026 GMT Not After : Sep 26 00:38:27 2026 GMT Subject: CN=9AFC2154B222D50834EF88668B41DB7AF7A9EFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:a2:20:ca:c8:a2:d7:75:2a:1a:97:de:20: a2:b8:cc:e8:3d:a6:03:78:5b:e0:9d:20:f9:05:ea: dc:28:a7:c9:da:f0:28:73:be:71:d3:f6:bb:d9:a6: 18:8f:76:3b:35:a6:7e:55:ab:ae:bc:0d:f5:a4:de: 03:76:68:31:dc:16:aa:c9:4a:39:e2:a1:ac:10:03: 73:0f:2a:df:d5:f4:80:79:86:0c:1b:d4:0b:fa:85: 78:ee:11:78:f1:a0:9c:95:1f:2e:52:02:d6:0b:79: f0:22:9a:ea:e7:dd:7f:17:89:bc:cd:a9:89:30:2f: f4:08:0b:10:e0:65:45:11:e4:16:e6:82:6f:2f:ed: fe:57:ff:45:1e:82:a4:fe:06:e5:7c:6d:9b:32:11: f4:02:20:33:b3:09:c8:b4:ad:74:eb:d4:0e:97:41: e8:5f:0b:db:65:aa:af:06:68:ed:6f:1e:f6:ea:25: 75:3b:84:a1:1c:98:12:18:a5:24:fc:b2:c7:e8:ff: ed:13:12:e1:77:8e:c3:55:15:3c:ce:11:33:2f:04: fa:c7:cd:d0:67:29:c1:a4:32:cb:89:ac:aa:6d:4f: 7b:33:96:6b:1d:c1:2a:b9:73:11:69:7a:2e:b0:9c: c5:fd:a8:1b:44:36:e5:93:90:7f:4b:29:79:80:b1: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FC:21:54:B2:22:D5:08:34:EF:88:66:8B:41:DB:7A:F7:A9:EF:F4 X509v3 Authority Key Identifier: keyid:34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f6:f0:9e:b1:aa:c0:e6:4e:1b:b8:ed:5a:c2:1a:9d:bf:61: 01:23:2f:26:60:f6:d2:11:71:1e:d1:2a:32:e9:9a:e5:0d:ea: ac:da:49:0b:4b:48:20:d2:1f:97:75:98:3c:49:21:98:3a:fb: 57:c4:d4:c2:ad:38:8c:39:24:f8:74:c1:fd:c3:a7:09:9c:62: a9:48:51:ee:5d:d8:c2:53:bc:c8:61:e9:22:00:81:43:96:ee: a7:25:1e:77:39:13:5e:a0:40:9c:94:0c:87:da:8c:e9:78:18: ab:c2:15:1f:fe:d1:98:f6:a8:5a:79:1f:e8:fe:df:5a:d8:62: 4a:12:66:2b:d3:55:ee:5c:a8:cc:5c:b7:80:94:a1:d2:ad:6c: 9b:ba:50:11:45:db:b0:17:8d:f3:24:c7:66:5f:ba:55:05:b9: d8:d7:c6:d4:44:94:80:9d:25:19:b9:3d:2f:d6:dc:29:a4:c5: f9:85:20:6c:bb:f1:0e:01:59:90:4a:b6:cb:f5:26:4b:c3:99: f2:7d:5d:63:0a:62:00:3e:05:da:1e:6e:df:37:ab:b9:10:13: fe:d5:84:56:16:16:3c:17:a9:4f:81:c1:bb:25:8f:d9:2c:59: d9:3f:34:a2:e4:41:de:a1:d2:db:d6:0a:90:2d:4e:90:71:b1: e1:40:97:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC02YpQPkg8y4jfBB56KyPgvgEG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTlENTc3Qjg2OEY5RDg1M0U1NEJGOUZFQTc5RTY2 RTMyQzQ5RjAeFw0yNjA5MjQyMDU2MjdaFw0yNjA5MjYwMDM4MjdaMDMxMTAvBgNV BAMTKDlBRkMyMTU0QjIyMkQ1MDgzNEVGODg2NjhCNDFEQjdBRjdBOUVGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhqIgysii13UqGpfeIKK4zOg9 pgN4W+CdIPkF6twop8na8ChzvnHT9rvZphiPdjs1pn5Vq668DfWk3gN2aDHcFqrJ SjnioawQA3MPKt/V9IB5hgwb1Av6hXjuEXjxoJyVHy5SAtYLefAimurn3X8XibzN qYkwL/QICxDgZUUR5Bbmgm8v7f5X/0UegqT+BuV8bZsyEfQCIDOzCci0rXTr1A6X QehfC9tlqq8GaO1vHvbqJXU7hKEcmBIYpST8ssfo/+0TEuF3jsNVFTzOETMvBPrH zdBnKcGkMsuJrKptT3szlmsdwSq5cxFpei6wnMX9qBtENuWTkH9LKXmAsdsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmvwhVLIi1Qg074hmi0Hbevep7/QwHwYDVR0j BBgwFoAUNAqdV3uGj52FPlS/n+p55m4yxJ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzEvMzQwQTlENTc3 Qjg2OEY5RDg1M0U1NEJGOUZFQTc5RTY2RTMyQzQ5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDBBOUQ1NzdCODY4RjlEODUzRTU0QkY5RkVBNzlFNjZFMzJD NDlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvMzQwQTlENTc3Qjg2OEY5RDg1M0U1NEJGOUZFQTc5 RTY2RTMyQzQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ328J6xqsDmThu47VrCGp2/YQEjLyZg9tIR cR7RKjLpmuUN6qzaSQtLSCDSH5d1mDxJIZg6+1fE1MKtOIw5JPh0wf3DpwmcYqlI Ue5d2MJTvMhh6SIAgUOW7qclHnc5E16gQJyUDIfajOl4GKvCFR/+0Zj2qFp5H+j+ 31rYYkoSZivTVe5cqMxct4CUodKtbJu6UBFF27AXjfMkx2ZfulUFudjXxtRElICd JRm5PS/W3CmkxfmFIGy78Q4BWZBKtsv1JkvDmfJ9XWMKYgA+Bdoebt83q7kQE/7V hFYWFjwXqU+Bwbslj9ksWdk/NKLkQd6h0tvWCpAtTpBxseFAl1M= -----END CERTIFICATE-----Generated at Thu Sep 24 23:06:49 2026 by rpki-client