$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: o5DwoATiZPlC5zo58HzxfrNPXtXpf9EB6go1DenBa98= Subject key identifier: 90:E6:0F:63:0C:89:D9:CC:2E:F2:75:EE:70:CE:6A:7C:A7:31:99:D0 Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 76C475CEF166C1E3AFB68B6AF55CB02F84CDD01D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: 0135 Signing time: Tue 24 Mar 2026 19:40:52 +0000 Manifest this update: Tue 24 Mar 2026 19:35:52 +0000 Manifest next update: Sat 28 Mar 2026 06:13:52 +0000 Files and hashes: 1: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: 47v3x8qWAu+O2FAsuFIQCZf3OoRojTUIleUjqa1I2qQ=) 2: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: dKh9sdtQ/yvQ7BxDxof7l0iHZZ9i1Xhkr36k5+LOKm0=) 3: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: Yl7eAdHU7Khq4n62jp66bnB7sPgBOKQb/qT7F8A5A38=) 4: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: HtSy/5HUrfmuURhjLye2h6FMfd+aaA8JtS3m07xJtIU=) 5: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: 0SXjK6zvaQBJ8uDXunSiVTxj6f6ONI0BqvKnrWkpNbo=) 6: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: ac+pTouEjojvRH9x31YqC69WCvHAHpMyIgDD/FHq+TY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c4:75:ce:f1:66:c1:e3:af:b6:8b:6a:f5:5c:b0:2f:84:cd:d0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Mar 24 19:35:52 2026 GMT Not After : Mar 28 06:13:52 2026 GMT Subject: CN=90E60F630C89D9CC2EF275EE70CE6A7CA73199D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:40:86:bd:67:16:6d:22:33:e6:73:ef:9f: 1b:b0:97:8b:8c:19:6b:ee:1f:27:a8:9b:b4:90:5e: 15:1b:98:71:6c:7a:57:cb:ad:3d:f4:7b:17:88:c3: 72:e0:3b:4d:f1:26:1b:fe:6c:56:0d:57:77:35:ae: fd:4d:90:80:c4:5c:72:9a:99:f0:ca:01:9a:05:f4: 5f:38:33:70:d3:f4:9a:4f:36:82:4b:8f:b2:77:6a: 6a:72:61:66:42:24:3c:b1:69:05:1b:a0:d5:25:7f: b3:cc:98:d5:cf:bb:5a:d7:17:96:34:d3:e0:08:cf: 1f:c9:a6:e0:57:ab:1e:44:a3:56:a7:39:08:32:21: 59:07:36:21:f0:36:6c:98:a2:2d:e5:c3:95:8a:6c: 28:80:69:ce:6b:6c:91:d5:07:24:52:10:54:5e:37: 84:8c:d4:6c:42:69:bf:0a:dd:68:ef:75:9f:04:4c: 5c:eb:17:78:e2:05:17:c7:15:54:eb:da:00:f9:83: c1:d9:86:8e:68:ad:73:6e:6b:9c:91:5e:03:40:e1: 22:1c:ce:28:44:99:76:0d:43:57:a4:04:86:17:83: 40:cc:eb:6b:f6:d6:00:ec:4f:f5:04:87:87:a2:e4: cc:f7:a2:fe:61:3c:44:04:fe:58:28:c8:19:fd:4a: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E6:0F:63:0C:89:D9:CC:2E:F2:75:EE:70:CE:6A:7C:A7:31:99:D0 X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:db:4a:7e:62:08:25:ca:d3:9a:20:c0:be:05:49:cf:28:64: 6c:09:ec:bd:38:18:6b:72:7d:e7:37:6f:8a:73:54:f8:56:e0: 11:35:08:c0:ad:fd:da:01:17:67:f5:fb:f8:68:e0:f1:ac:f4: 1f:01:e1:89:53:73:2b:c1:16:6b:e9:db:fa:9e:f4:c2:8b:fc: c2:5c:ca:b3:39:a8:2b:55:6d:8b:18:fe:f5:49:1a:3a:3b:41: 1f:f8:16:4f:fd:1f:9d:54:d5:20:1f:08:3f:e8:09:c4:ff:d7: c3:03:42:6a:93:b9:45:e4:25:a0:de:e4:88:ed:8e:04:32:6a: 1c:af:d6:5b:92:b5:7b:5f:49:5c:58:59:ed:1a:00:a2:7b:c1: 8e:12:08:b0:38:9c:d0:26:6a:ee:93:85:96:05:2f:7d:34:3b: b7:b3:a9:43:8c:21:c9:d8:8a:7f:de:1c:ff:6d:c7:f1:3d:8e: e2:10:c5:8d:6f:24:71:2b:63:ea:13:d5:c3:05:0e:51:21:8c: 83:e9:4b:ca:d6:71:f0:81:50:5f:22:7a:3c:0b:6d:6d:a0:9c: 9b:50:cc:72:70:46:b9:0d:43:7c:ce:51:6a:2b:2e:22:df:c9: a0:01:2f:5e:c9:15:07:6a:95:ef:d2:2e:7d:aa:df:1b:98:ec: 35:d0:19:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdsR1zvFmweOvtotq9VywL4TN0B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNjAzMjQxOTM1NTJaFw0yNjAzMjgwNjEzNTJaMDMxMTAvBgNV BAMTKDkwRTYwRjYzMEM4OUQ5Q0MyRUYyNzVFRTcwQ0U2QTdDQTczMTk5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RkCGvWcWbSIz5nPvnxuwl4uM GWvuHyeom7SQXhUbmHFselfLrT30exeIw3LgO03xJhv+bFYNV3c1rv1NkIDEXHKa mfDKAZoF9F84M3DT9JpPNoJLj7J3ampyYWZCJDyxaQUboNUlf7PMmNXPu1rXF5Y0 0+AIzx/JpuBXqx5Eo1anOQgyIVkHNiHwNmyYoi3lw5WKbCiAac5rbJHVByRSEFRe N4SM1GxCab8K3WjvdZ8ETFzrF3jiBRfHFVTr2gD5g8HZho5orXNua5yRXgNA4SIc zihEmXYNQ1ekBIYXg0DM62v21gDsT/UEh4ei5Mz3ov5hPEQE/lgoyBn9SijrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkOYPYwyJ2cwu8nXucM5qfKcxmdAwHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHbSn5iCCXK05ogwL4FSc8oZGwJ7L04GGty fec3b4pzVPhW4BE1CMCt/doBF2f1+/ho4PGs9B8B4YlTcyvBFmvp2/qe9MKL/MJc yrM5qCtVbYsY/vVJGjo7QR/4Fk/9H51U1SAfCD/oCcT/18MDQmqTuUXkJaDe5Ijt jgQyahyv1luStXtfSVxYWe0aAKJ7wY4SCLA4nNAmau6ThZYFL300O7ezqUOMIcnY in/eHP9tx/E9juIQxY1vJHErY+oT1cMFDlEhjIPpS8rWcfCBUF8iejwLbW2gnJtQ zHJwRrkNQ3zOUWorLiLfyaABL17JFQdqle/SLn2q3xuY7DXQGU8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:41 2026 by rpki-client