$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: NQleXD708UhtdS1rBQty0AJvjmzhyNrrCSuL1JJGMVU= Subject key identifier: 00:06:D0:58:3D:4A:FF:A3:12:D9:DB:01:39:AA:04:D3:06:AA:66:10 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 63ED4C89B8AEB1C649C8A50A2077B0F05C1DD920 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 0131 Signing time: Tue 24 Mar 2026 12:42:37 +0000 Manifest this update: Tue 24 Mar 2026 12:37:36 +0000 Manifest next update: Fri 27 Mar 2026 23:39:36 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: 7NYSyWUPjZmPG2IkyafBWMsrGGuEbHyF2EVtsiNZ+ao=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: ig7u0oXbmw3mWHfeaI0Vkdwale6pLP8hu8sPEDhR1CM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ed:4c:89:b8:ae:b1:c6:49:c8:a5:0a:20:77:b0:f0:5c:1d:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Mar 24 12:37:36 2026 GMT Not After : Mar 27 23:39:36 2026 GMT Subject: CN=0006D0583D4AFFA312D9DB0139AA04D306AA6610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:e9:72:69:ff:b3:65:03:12:ed:22:70:e8: 3f:42:fd:70:a3:ca:28:f6:c3:58:8e:18:fb:30:1c: 61:5f:af:b5:0a:66:5d:bd:a0:e4:2a:02:47:be:71: a8:f7:68:c2:35:7b:b9:a1:84:cc:6a:51:fe:c7:aa: 03:37:0e:47:a6:c9:b5:af:9e:d0:af:a6:45:55:c1: 81:b9:75:71:04:cc:68:a9:c3:ce:42:b1:f5:61:aa: 97:ea:0a:2b:c3:58:04:98:7e:fb:2c:82:55:4b:21: a3:b7:69:b2:f2:85:66:3f:a3:09:ef:57:46:a7:22: fb:38:ab:15:a0:bf:5e:88:85:60:01:13:99:d4:e9: 6b:98:9f:19:06:7f:3b:ee:e2:6c:df:d7:64:f5:9a: a9:cc:7e:01:6e:6f:49:ad:de:f0:b5:c0:27:ab:38: fb:9b:09:d4:35:fc:a8:61:6d:15:a3:b0:30:7c:1f: 70:a2:ca:d9:8e:05:8c:d9:80:5e:e2:34:3f:35:c7: 8a:76:1a:dc:24:dd:e5:3a:f0:60:e6:e3:7e:0e:9b: ac:67:18:a9:54:cd:ce:37:bb:20:25:81:15:be:1e: 8f:ec:8d:8c:5d:ab:81:ab:36:54:c9:cb:f1:c2:49: ac:38:99:f1:5f:7a:90:1b:7a:f3:0e:23:e8:32:fb: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:06:D0:58:3D:4A:FF:A3:12:D9:DB:01:39:AA:04:D3:06:AA:66:10 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7e:1a:1b:31:44:41:48:0c:8a:1e:5d:01:d7:44:c8:3f:be: a3:4f:01:3e:a3:ed:b3:2e:6f:fc:7f:3c:e8:3a:ce:0d:d2:eb: 79:63:db:88:7c:05:d4:7f:22:8c:8a:97:a8:94:46:c2:c6:7f: 4b:11:27:19:16:73:3f:96:fb:2a:26:28:1b:19:ee:77:30:31: 7e:d2:d2:c3:c8:02:40:97:c6:a7:6c:50:de:b5:f7:03:62:6d: f2:ce:d3:60:3c:52:1c:e9:ff:27:36:a2:f9:c5:a8:8a:6c:f2: f6:0c:d3:e8:0d:52:1f:2a:40:74:10:3c:e0:09:e7:b3:b4:ec: be:40:17:d7:46:47:7a:e7:d2:8e:ff:13:91:30:80:64:4c:8a: 95:59:a8:81:11:db:7f:ad:7e:2c:67:73:9a:14:c2:ec:f3:cb: 41:f9:a1:24:6b:66:2d:3f:a1:6f:ad:4f:77:7f:91:2d:53:12: b4:40:a7:eb:7a:af:ac:5e:e3:15:da:f1:52:5d:d7:3e:e3:80: a0:3f:23:e0:f4:0c:87:ef:32:c2:c5:24:bd:e4:8e:4a:56:4f: dc:b3:2a:69:e9:08:6b:7a:79:ea:03:87:79:7a:21:1c:97:10: c1:09:43:11:46:fc:9d:0c:41:d7:df:70:fe:12:25:7a:3f:64: cc:20:64:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+1MibiuscZJyKUKIHew8Fwd2SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNjAzMjQxMjM3MzZaFw0yNjAzMjcyMzM5MzZaMDMxMTAvBgNV BAMTKDAwMDZEMDU4M0Q0QUZGQTMxMkQ5REIwMTM5QUEwNEQzMDZBQTY2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVG+lyaf+zZQMS7SJw6D9C/XCj yij2w1iOGPswHGFfr7UKZl29oOQqAke+caj3aMI1e7mhhMxqUf7HqgM3DkemybWv ntCvpkVVwYG5dXEEzGipw85CsfVhqpfqCivDWASYfvssglVLIaO3abLyhWY/ownv V0anIvs4qxWgv16IhWABE5nU6WuYnxkGfzvu4mzf12T1mqnMfgFub0mt3vC1wCer OPubCdQ1/KhhbRWjsDB8H3CiytmOBYzZgF7iND81x4p2Gtwk3eU68GDm434Om6xn GKlUzc43uyAlgRW+Ho/sjYxdq4GrNlTJy/HCSaw4mfFfepAbevMOI+gy+z7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAAbQWD1K/6MS2dsBOaoE0waqZhAwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd+GhsxREFIDIoeXQHXRMg/vqNPAT6j7bMu b/x/POg6zg3S63lj24h8BdR/IoyKl6iURsLGf0sRJxkWcz+W+yomKBsZ7ncwMX7S 0sPIAkCXxqdsUN619wNibfLO02A8Uhzp/yc2ovnFqIps8vYM0+gNUh8qQHQQPOAJ 57O07L5AF9dGR3rn0o7/E5EwgGRMipVZqIER23+tfixnc5oUwuzzy0H5oSRrZi0/ oW+tT3d/kS1TErRAp+t6r6xe4xXa8VJd1z7jgKA/I+D0DIfvMsLFJL3kjkpWT9yz KmnpCGt6eeoDh3l6IRyXEMEJQxFG/J0MQdffcP4SJXo/ZMwgZII= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:03 2026 by rpki-client