
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json)
Hash identifier: i0ecHMXv9lLLXotPf7+jNA7VyMUxuWcwxfH1/7BlT04=
Subject key identifier: 8A:D4:31:A3:47:1E:6F:79:36:82:A5:2B:66:B9:43:A0:EF:F2:5C:79
Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86
Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86
Certificate serial: 64C7E1E448F1F98D4BC74E9075443E6979D3FDB0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
Manifest number: 055E
Signing time: Thu 26 Mar 2026 05:41:57 +0000
Manifest this update: Thu 26 Mar 2026 05:36:57 +0000
Manifest next update: Sun 29 Mar 2026 16:37:57 +0000
Files and hashes: 1: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: 4P+krHnL/u49SxwJ6ICYpKSbZaSb5xpFtovKLn0unmc=)
2: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=)
3: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl
rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 16:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c7:e1:e4:48:f1:f9:8d:4b:c7:4e:90:75:44:3e:69:79:d3:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86
Validity
Not Before: Mar 26 05:36:57 2026 GMT
Not After : Mar 29 16:37:57 2026 GMT
Subject: CN=8AD431A3471E6F793682A52B66B943A0EFF25C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:5d:95:b2:9d:a7:85:43:4b:12:7b:28:55:
3f:bc:6c:c0:ff:92:5d:b2:0a:b7:a6:ae:8b:bf:3d:
8b:18:1b:d5:b3:4e:44:59:1c:f4:ab:8d:6a:1a:fb:
7f:3f:b4:70:ff:24:d0:5d:89:31:c2:41:87:0e:75:
3a:0e:92:be:32:e4:4b:bd:56:55:76:d2:50:55:db:
a9:9f:25:c5:bf:a4:00:1a:40:8e:f6:7e:d6:5a:7b:
9f:1e:da:48:a5:f0:e1:d1:f4:e6:3b:ea:58:15:8f:
00:dc:ff:79:44:56:9b:ba:6d:3f:84:ae:bf:4a:ce:
44:b0:b7:af:b4:86:d7:f8:bd:14:5d:b0:a3:7d:f8:
f0:ec:ce:aa:91:c6:8c:a0:85:fc:d5:fd:d9:05:67:
f9:b1:6f:1c:c4:27:5d:e1:c1:3b:dc:15:e9:9c:23:
fd:64:04:19:2c:b1:3a:97:00:8c:28:96:1d:c8:d0:
01:2b:26:61:77:8d:58:4a:2e:6d:cb:24:bb:96:64:
a4:85:44:d5:43:5b:90:bf:49:e9:b3:35:11:2e:83:
88:29:62:a6:ac:6c:9c:f3:df:0e:96:d4:1c:43:a6:
8f:94:15:14:cf:51:5b:0b:68:0a:29:5a:a9:44:3f:
2f:3b:28:5a:c7:3e:f6:43:5c:a8:6a:a1:71:44:66:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:31:A3:47:1E:6F:79:36:82:A5:2B:66:B9:43:A0:EF:F2:5C:79
X509v3 Authority Key Identifier:
keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e3:80:d6:09:87:61:a7:a1:5d:dc:88:63:dd:c0:eb:99:8b:
f4:57:50:c1:47:92:fa:56:e1:d5:55:4c:76:69:ce:06:f2:f9:
ee:7c:ab:ea:9a:61:b3:a2:03:b3:88:53:f7:f7:61:09:31:dd:
16:80:1b:6e:ac:9e:cf:4d:a8:9d:20:a9:a9:84:bb:9e:86:10:
f4:7c:72:d2:f3:6c:51:ac:21:1e:da:76:93:10:88:d6:35:e0:
66:91:af:da:23:ce:85:7d:1c:69:4d:49:92:47:bd:92:5b:31:
a8:83:96:53:97:ba:58:d1:e9:eb:64:53:32:58:6e:86:2a:fe:
d6:ec:41:34:ce:8a:45:c3:cd:0d:26:75:c4:dc:d1:64:9d:21:
f9:e3:4f:2d:46:30:f0:a3:24:53:57:0f:84:18:cd:54:6f:94:
57:4f:69:2e:42:cd:b6:e7:ce:2b:16:12:cb:68:83:81:39:b6:
be:87:4e:8d:da:f7:0f:40:6b:ef:9b:ac:bc:24:b9:e8:ee:c2:
c0:44:05:b5:d2:b9:73:4b:ed:fd:ee:a1:56:89:67:db:64:5e:
78:fb:40:cb:f9:d3:04:16:51:19:85:84:f5:ca:ce:9f:85:46:
3d:de:73:46:20:0c:b7:83:db:c4:11:fb:a8:a3:fd:19:d5:a4:
bc:88:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:49 2026 by rpki-client