$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: 5qH00z7W142+6A1QK1Ils2s+PthhRxFWzWAD7le93WU= Subject key identifier: 2A:0C:0F:9C:45:99:26:9D:3C:73:DF:8F:19:BF:78:29:C2:56:CC:85 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 16EB0E071F4D892D06AD23F11F384B6CEFE6478F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 03CC Signing time: Wed 25 Mar 2026 09:51:32 +0000 Manifest this update: Wed 25 Mar 2026 09:46:32 +0000 Manifest next update: Sat 28 Mar 2026 17:39:32 +0000 Files and hashes: 1: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 4gi3J8FjPJTNq/5daFRZnZCK3lpxCNHJRNdMzqPgZFU=) 2: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: nwKkjrgpfIU525YCmlvdZ2e8zPDDUbOgT2gs9QVrQZg=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: vNwtnFQ+aCKry6vlUtetOnAmZSYtPPn32DJ/ZyBu6uM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:eb:0e:07:1f:4d:89:2d:06:ad:23:f1:1f:38:4b:6c:ef:e6:47:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Mar 25 09:46:32 2026 GMT Not After : Mar 28 17:39:32 2026 GMT Subject: CN=2A0C0F9C4599269D3C73DF8F19BF7829C256CC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:28:cb:b7:c6:0f:71:f8:34:af:60:1e:9d: 27:58:2f:3c:84:f0:96:28:3c:c3:6b:74:4e:44:2b: 9f:34:2d:f9:53:92:cd:83:67:59:81:9d:9c:5a:4b: 49:3a:5e:6d:c8:e8:98:62:67:ed:c0:a9:5c:58:e4: e5:b4:5b:b0:da:40:db:9c:fd:a8:70:9f:ca:3b:cb: 7a:9d:08:e0:fc:29:bd:72:39:55:36:e1:08:51:3a: c4:44:2c:d2:6a:bf:09:53:52:0f:6f:ff:99:6f:d8: 0c:52:78:f5:8a:9b:57:99:79:e9:03:92:9f:f1:0b: ce:7f:5f:5e:64:64:b7:4d:2d:f1:08:88:61:52:50: 2f:fd:aa:97:ed:66:20:08:cc:b1:be:14:13:44:15: dd:99:e1:88:9e:ef:86:f2:8b:fe:c2:c4:0b:6b:80: 61:d1:04:12:ca:bf:14:da:76:a2:5f:88:32:3c:65: d0:3b:bc:b7:41:e1:8c:0e:fb:28:e7:bf:25:59:e6: 55:fc:37:d0:c4:c6:63:19:05:f4:72:04:6c:91:24: 92:bd:d4:c5:86:4a:4f:72:fe:32:bf:eb:59:2c:27: 71:95:a6:13:c0:e2:48:dc:4f:de:f8:01:c3:e9:21: 33:36:8d:b6:5f:7b:37:46:40:cb:45:5b:1a:31:f6: 37:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0C:0F:9C:45:99:26:9D:3C:73:DF:8F:19:BF:78:29:C2:56:CC:85 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8d:09:5a:cf:b4:42:ee:77:58:72:c8:e7:0f:28:ee:7e:10: f4:95:44:c6:b4:48:8e:5d:89:09:b9:b3:9f:d8:57:2d:03:3b: c9:5f:0d:83:4c:2e:72:6c:72:eb:e1:44:ce:48:fb:15:78:45: d6:93:83:30:8d:e6:50:17:f0:9d:3b:f1:b6:61:eb:57:03:6d: f2:ee:19:4d:c4:ba:fc:66:b3:05:5e:f4:2f:41:a7:05:bc:d1: 08:55:19:7f:43:62:08:3b:e7:16:3b:78:25:66:9b:5a:8e:c0: 90:fd:21:6f:0b:a9:8d:92:35:ac:a0:9b:4f:12:0c:2c:44:03: 41:a4:38:9a:d0:28:a3:ee:1b:a6:c1:f2:0a:ae:59:6f:20:62: 2e:5e:a6:6c:f3:99:21:59:01:6a:a5:5e:f2:d6:10:db:6d:78: a3:80:4c:b8:a4:a1:57:cd:9a:24:f5:6b:96:c0:56:08:3d:1b: 64:17:f4:ee:44:37:27:12:31:26:90:92:6f:a0:5b:de:29:df: 12:63:46:6b:a2:a2:a4:0e:1b:cb:47:ce:e4:9e:c5:3e:8e:78: 71:77:e5:a1:f5:23:e5:0e:f2:cd:09:8b:e7:63:aa:c2:e1:56: 80:3b:d6:70:77:c3:02:73:69:39:d0:1c:a9:52:27:5d:d6:2e: 88:d6:93:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFusOBx9NiS0GrSPxHzhLbO/mR48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNjAzMjUwOTQ2MzJaFw0yNjAzMjgxNzM5MzJaMDMxMTAvBgNV BAMTKDJBMEMwRjlDNDU5OTI2OUQzQzczREY4RjE5QkY3ODI5QzI1NkNDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCSjLt8YPcfg0r2AenSdYLzyE 8JYoPMNrdE5EK580LflTks2DZ1mBnZxaS0k6Xm3I6JhiZ+3AqVxY5OW0W7DaQNuc /ahwn8o7y3qdCOD8Kb1yOVU24QhROsRELNJqvwlTUg9v/5lv2AxSePWKm1eZeekD kp/xC85/X15kZLdNLfEIiGFSUC/9qpftZiAIzLG+FBNEFd2Z4Yie74byi/7CxAtr gGHRBBLKvxTadqJfiDI8ZdA7vLdB4YwO+yjnvyVZ5lX8N9DExmMZBfRyBGyRJJK9 1MWGSk9y/jK/61ksJ3GVphPA4kjcT974AcPpITM2jbZfezdGQMtFWxox9jcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgwPnEWZJp08c9+PGb94KcJWzIUwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiNCVrPtELud1hyyOcPKO5+EPSVRMa0SI5d iQm5s5/YVy0DO8lfDYNMLnJscuvhRM5I+xV4RdaTgzCN5lAX8J078bZh61cDbfLu GU3EuvxmswVe9C9BpwW80QhVGX9DYgg75xY7eCVmm1qOwJD9IW8LqY2SNaygm08S DCxEA0GkOJrQKKPuG6bB8gquWW8gYi5epmzzmSFZAWqlXvLWENtteKOATLikoVfN miT1a5bAVgg9G2QX9O5ENycSMSaQkm+gW94p3xJjRmuioqQOG8tHzuSexT6OeHF3 5aH1I+UO8s0Ji+djqsLhVoA71nB3wwJzaTnQHKlSJ13WLojWk+c= -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:49 2026 by rpki-client