$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft File: 34A5DE28FDBC6F27C998277F953439F66D10A75E.mft (raw, json) Hash identifier: 5Gun/MzUyzn/yBj7kJrh9nI+Y/SVh88NDdDpPW5sCm4= Subject key identifier: FA:A2:02:E2:F7:04:49:32:7D:91:F2:C3:B9:E9:63:50:FE:03:79:CD Authority key identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E Certificate issuer: /CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Certificate serial: 6D339162593F57E1A236BC69B05745CB6DD1A024 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft Manifest number: DA Signing time: Tue 13 Oct 2026 09:17:10 +0000 Manifest this update: Tue 13 Oct 2026 09:12:10 +0000 Manifest next update: Wed 14 Oct 2026 11:40:10 +0000 Files and hashes: 1: 34A5DE28FDBC6F27C998277F953439F66D10A75E.crl (hash: +nLjdRbMsuvLbeuHBVW2HbgMrVUKKeTAIXGqnlDT+1E=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: 9xIqyd7FqC7E5vM/2yM7xmyBSmnXPGROKdDFsYB3t7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 11:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:33:91:62:59:3f:57:e1:a2:36:bc:69:b0:57:45:cb:6d:d1:a0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A5DE28FDBC6F27C998277F953439F66D10A75E Validity Not Before: Oct 13 09:12:10 2026 GMT Not After : Oct 14 11:40:10 2026 GMT Subject: CN=FAA202E2F70449327D91F2C3B9E96350FE0379CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:63:0d:e2:6d:fe:30:c3:02:f0:ad:9d:16: 91:52:8f:0d:3f:67:81:a2:e2:80:b7:6f:0f:02:a0: bb:79:14:18:e0:b2:2c:74:88:09:8b:33:0d:fb:4c: bb:97:61:4b:40:44:1e:72:c8:32:e7:df:8f:19:c7: 72:ea:3a:53:74:29:80:f6:2d:f2:c3:e6:92:1e:7d: 4b:b8:0a:ed:c2:63:2d:59:28:5a:20:18:97:0b:be: 25:08:e0:2a:cb:55:14:0d:78:f0:3b:22:c3:9b:3a: f9:ec:84:55:c3:23:aa:06:2b:1f:7d:ea:24:cc:8b: 27:46:25:8f:f8:73:ac:7c:21:52:1d:8a:62:4c:b3: a0:d1:fb:f8:12:83:7e:e4:d3:40:ec:39:c9:11:ce: 32:a4:75:57:a7:6b:8a:80:2c:15:90:58:91:7b:c6: 34:28:c8:a2:05:62:22:ee:06:6c:f8:13:e2:ee:21: 5f:5e:9f:3e:fd:f0:65:55:f1:8a:d2:4a:a5:86:17: 82:41:12:71:2c:04:a4:0b:69:53:f2:4d:cc:b8:2f: 7b:20:47:14:16:43:ac:8f:af:53:fc:6c:ae:b7:68: 13:0d:13:df:9d:29:0a:8c:9c:bc:f6:bd:60:c0:7c: 0a:4c:b9:61:d4:fe:dc:5d:67:d2:3a:aa:e5:21:eb: 0c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A2:02:E2:F7:04:49:32:7D:91:F2:C3:B9:E9:63:50:FE:03:79:CD X509v3 Authority Key Identifier: keyid:34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:09:c4:fd:89:34:69:ca:cb:fa:15:79:51:fc:50:e2:4a:0c: 3b:21:58:8a:de:96:61:e7:d9:59:f5:16:88:0e:12:86:26:87: a1:23:7a:ab:5d:c8:bd:65:2e:00:76:90:6c:62:55:f2:b2:dd: f6:d0:6e:5b:ce:6a:f6:ad:24:60:8f:22:aa:be:bf:64:9f:80: c3:b5:19:e4:f4:68:e5:83:25:70:ba:c1:2f:8b:92:7a:02:13: 1d:40:8e:e7:ef:59:0e:ca:5e:5d:76:9b:84:c6:06:1c:45:3c: 30:1c:81:55:15:27:fd:7b:50:c2:57:6f:dd:0d:34:14:4d:f5: a8:fc:15:cf:fa:49:1f:9c:cc:da:4c:2d:57:80:4d:63:85:9c: 3c:4f:65:b1:20:5d:bf:1b:9e:ed:7b:90:a8:f4:49:ab:71:cd: fd:95:14:77:54:66:7c:36:a2:fa:ba:67:87:08:5c:de:44:f5: 20:9f:80:03:23:19:2e:5c:d3:de:d9:2b:a7:d5:66:58:fa:74: 71:31:36:cd:8c:79:13:23:ed:52:86:d1:23:2a:89:60:a7:5f: 23:dd:7d:b3:52:a4:e2:02:b7:30:3d:59:83:20:fc:9b:54:e9: e5:5c:76:1b:79:a9:db:89:f4:19:3e:c6:43:27:5b:6d:47:1b: 11:64:5a:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTORYlk/V+GiNrxpsFdFy23RoCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2 RDEwQTc1RTAeFw0yNjEwMTMwOTEyMTBaFw0yNjEwMTQxMTQwMTBaMDMxMTAvBgNV BAMTKEZBQTIwMkUyRjcwNDQ5MzI3RDkxRjJDM0I5RTk2MzUwRkUwMzc5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTw2MN4m3+MMMC8K2dFpFSjw0/ Z4Gi4oC3bw8CoLt5FBjgsix0iAmLMw37TLuXYUtARB5yyDLn348Zx3LqOlN0KYD2 LfLD5pIefUu4Cu3CYy1ZKFogGJcLviUI4CrLVRQNePA7IsObOvnshFXDI6oGKx99 6iTMiydGJY/4c6x8IVIdimJMs6DR+/gSg37k00DsOckRzjKkdVena4qALBWQWJF7 xjQoyKIFYiLuBmz4E+LuIV9enz798GVV8YrSSqWGF4JBEnEsBKQLaVPyTcy4L3sg RxQWQ6yPr1P8bK63aBMNE9+dKQqMnLz2vWDAfApMuWHU/txdZ9I6quUh6ww7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+qIC4vcESTJ9kfLDueljUP4Dec0wHwYDVR0j BBgwFoAUNKXeKP28byfJmCd/lTQ59m0Qp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU5MjE5MTctMTNhZi00NDAzLTk3YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhG REJDNkYyN0M5OTgyNzdGOTUzNDM5RjY2RDEwQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNEE1REUyOEZEQkM2RjI3Qzk5ODI3N0Y5NTM0MzlGNjZEMTBB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvMzRBNURFMjhGREJDNkYyN0M5OTgyNzdGOTUzNDM5 RjY2RDEwQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoJxP2JNGnKy/oVeVH8UOJKDDshWIrelmHn 2Vn1FogOEoYmh6EjeqtdyL1lLgB2kGxiVfKy3fbQblvOavatJGCPIqq+v2SfgMO1 GeT0aOWDJXC6wS+LknoCEx1AjufvWQ7KXl12m4TGBhxFPDAcgVUVJ/17UMJXb90N NBRN9aj8Fc/6SR+czNpMLVeATWOFnDxPZbEgXb8bnu17kKj0Satxzf2VFHdUZnw2 ovq6Z4cIXN5E9SCfgAMjGS5c097ZK6fVZlj6dHExNs2MeRMj7VKG0SMqiWCnXyPd fbNSpOICtzA9WYMg/JtU6eVcdht5qduJ9Bk+xkMnW21HGxFkWvY= -----END CERTIFICATE-----Generated at Tue Oct 13 17:24:42 2026 by rpki-client