$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: TeGg94kFE8ph0RLjHKJKmto611lZlH7TKDulikRQgAk= Subject key identifier: B6:81:06:10:59:6E:F0:3F:9D:A9:3C:08:DA:34:FE:E6:3C:DA:B8:B5 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 1E57F3AA45F13F5B6238F88EC5189791FA6D1990 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 02CC Signing time: Tue 24 Mar 2026 10:42:08 +0000 Manifest this update: Tue 24 Mar 2026 10:37:08 +0000 Manifest next update: Fri 27 Mar 2026 18:37:08 +0000 Files and hashes: 1: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: MEONMuL54EAbEAUoaiSgV585kNAslwniyqpv61OptMo=) 2: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: Q8jTBQ5vnAeip2PKVQsfWnw4yTdN/UXZ+nN7pGpnG4g=) 3: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: CA6BkOUxy6RzqVUPo5k4/nE9lMWi4FuR3B6V59PMkHY=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:57:f3:aa:45:f1:3f:5b:62:38:f8:8e:c5:18:97:91:fa:6d:19:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Mar 24 10:37:08 2026 GMT Not After : Mar 27 18:37:08 2026 GMT Subject: CN=B6810610596EF03F9DA93C08DA34FEE63CDAB8B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:c5:27:30:f4:49:3a:fd:50:5a:d9:4d:65: eb:25:1c:d6:2f:41:67:45:b5:b6:28:bc:37:15:95: 33:8a:77:c8:a5:24:f4:4e:64:04:fa:d9:3c:a8:54: 25:0c:4b:9e:ab:d1:2c:3f:5e:f1:46:1b:65:d4:ea: 56:53:04:a4:e9:90:9d:5e:74:13:dc:8b:d9:7c:3c: a2:51:4a:e1:dc:da:7c:6b:bd:2f:0a:15:80:ac:96: e8:ad:9d:a7:9d:20:81:58:00:81:a1:4e:c0:eb:f6: 58:76:b3:c9:80:92:2c:d1:69:fe:b7:c9:fd:4f:dd: a7:ed:04:b7:10:98:9e:f9:89:e4:30:c7:bf:f5:ad: de:76:2e:2e:81:cf:2a:11:33:99:c8:97:bb:a2:b1: 01:4d:d9:91:d8:e9:ea:f1:38:5a:86:52:63:22:6b: ff:25:71:47:2e:8c:ee:ec:48:05:6d:5d:7c:9c:eb: 09:ff:78:4d:73:b7:34:ba:84:56:92:d2:74:41:90: c4:0d:c4:a3:c1:f8:fa:ed:be:db:fc:07:82:71:7b: 67:66:be:37:db:ae:ae:26:da:a5:62:da:b6:8e:52: 79:10:c3:1a:a1:cf:b4:85:c1:65:69:d4:98:ea:06: 76:d8:b3:d5:62:64:41:56:f8:bf:76:2d:79:fc:12: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:81:06:10:59:6E:F0:3F:9D:A9:3C:08:DA:34:FE:E6:3C:DA:B8:B5 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2c:59:a1:a2:20:f8:45:73:bc:c9:5c:27:23:1f:90:f3:2b: f5:eb:ad:ab:e1:17:44:eb:d6:6b:b8:7e:67:86:0d:8f:cc:e3: ee:9e:ff:ad:86:91:d9:d3:c9:da:e5:bc:0e:72:c8:ee:2e:ed: eb:8b:a4:d5:42:af:cd:c5:0d:ac:0a:c5:c4:ba:11:99:29:14: 08:8b:cb:d0:43:82:47:41:50:20:80:d3:f0:76:8c:3a:a5:a3: d9:a9:8e:88:bc:17:bb:5a:69:54:d1:67:da:d2:d8:69:47:48: f2:25:7d:46:dd:3f:4d:01:62:c1:a3:3c:6d:83:cd:40:d6:26: b5:14:6a:21:06:29:86:da:f7:6f:62:f3:c8:55:e8:a2:c0:be: a4:42:ef:34:0e:f6:db:2d:04:38:8d:3f:e1:b6:45:a1:14:8b: 4e:bb:be:a2:d4:06:a0:39:8d:6e:1b:20:12:d8:dc:98:fa:bd: ab:87:50:39:b7:1d:53:59:ee:26:66:16:46:65:6b:8f:87:4d: bd:12:68:3a:41:21:d0:2b:46:c4:ae:2d:ea:42:78:a6:56:b8: 0c:86:f0:aa:05:b5:83:57:fb:60:b4:31:c2:32:46:ff:d1:7d: 7d:28:b3:7d:e8:9a:7a:97:2b:3b:e8:ba:82:8b:bd:a0:49:f9: 87:ce:27:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlfzqkXxP1tiOPiOxRiXkfptGZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNjAzMjQxMDM3MDhaFw0yNjAzMjcxODM3MDhaMDMxMTAvBgNV BAMTKEI2ODEwNjEwNTk2RUYwM0Y5REE5M0MwOERBMzRGRUU2M0NEQUI4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCge8UnMPRJOv1QWtlNZeslHNYv QWdFtbYovDcVlTOKd8ilJPROZAT62TyoVCUMS56r0Sw/XvFGG2XU6lZTBKTpkJ1e dBPci9l8PKJRSuHc2nxrvS8KFYCsluitnaedIIFYAIGhTsDr9lh2s8mAkizRaf63 yf1P3aftBLcQmJ75ieQwx7/1rd52Li6BzyoRM5nIl7uisQFN2ZHY6erxOFqGUmMi a/8lcUcujO7sSAVtXXyc6wn/eE1ztzS6hFaS0nRBkMQNxKPB+Prtvtv8B4Jxe2dm vjfbrq4m2qVi2raOUnkQwxqhz7SFwWVp1JjqBnbYs9ViZEFW+L92LXn8Eq0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtoEGEFlu8D+dqTwI2jT+5jzauLUwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABosWaGiIPhFc7zJXCcjH5DzK/XrravhF0Tr 1mu4fmeGDY/M4+6e/62GkdnTydrlvA5yyO4u7euLpNVCr83FDawKxcS6EZkpFAiL y9BDgkdBUCCA0/B2jDqlo9mpjoi8F7taaVTRZ9rS2GlHSPIlfUbdP00BYsGjPG2D zUDWJrUUaiEGKYba929i88hV6KLAvqRC7zQO9tstBDiNP+G2RaEUi067vqLUBqA5 jW4bIBLY3Jj6vauHUDm3HVNZ7iZmFkZla4+HTb0SaDpBIdArRsSuLepCeKZWuAyG 8KoFtYNX+2C0McIyRv/RfX0os33omnqXKzvouoKLvaBJ+YfOJ6U= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:39 2026 by rpki-client