$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: Md+g0fm1EzmHJJwh3zUAxxaFeXmCervBGGVldvUKUTQ= Subject key identifier: 25:89:4C:07:0A:D4:F3:BC:DB:1B:36:46:A8:40:CA:F0:E0:03:6B:48 Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 4AE9E3427E4AD43437B11C347035B13C8B774035 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 038C Signing time: Thu 26 Mar 2026 02:21:55 +0000 Manifest this update: Thu 26 Mar 2026 02:16:55 +0000 Manifest next update: Sun 29 Mar 2026 02:45:55 +0000 Files and hashes: 1: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) 2: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (hash: a3kFS1oWoqOKQ9pWCt27hqM+zPQA7qWPWdNpInoEdZg=) 3: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) 4: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: EklH0PwYuDpXxADcA3MXsD2+pC4adMgTQJ6rGxJ0HIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e9:e3:42:7e:4a:d4:34:37:b1:1c:34:70:35:b1:3c:8b:77:40:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Mar 26 02:16:55 2026 GMT Not After : Mar 29 02:45:55 2026 GMT Subject: CN=25894C070AD4F3BCDB1B3646A840CAF0E0036B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4d:7d:8d:19:b5:04:89:5b:4f:fa:77:61:b8: 25:c3:ca:43:2f:80:84:7b:a4:80:4c:d6:2c:7b:51: f1:d1:39:0b:b5:af:50:76:bd:ea:1c:d2:65:d6:05: ae:7f:b2:9c:96:d1:03:26:18:ea:ec:eb:74:41:fa: a8:c8:fa:b1:f2:27:4e:d0:76:ae:84:77:68:ff:cb: ea:cd:98:28:bb:25:8f:00:f5:af:7c:cd:f3:bd:8a: fd:01:f3:2b:19:dd:da:6e:c6:eb:ce:1f:4d:e6:d3: 02:8c:4f:36:6d:98:ed:8e:10:10:c4:9d:27:31:29: 62:77:08:2a:17:c8:d9:f8:41:aa:b7:86:7a:ff:a4: af:3d:f1:3f:e5:bf:c7:f2:a1:e2:02:df:3e:bd:cb: 04:e6:b5:77:9b:5f:ce:73:e7:8b:91:19:18:60:e0: 1b:65:72:15:17:6a:45:1e:a7:33:56:b3:cc:4e:ca: f4:3b:d7:ac:d5:6c:49:0a:55:b5:ae:81:d7:67:b7: 98:f7:04:78:e1:85:92:42:36:ec:e8:a6:cd:91:5c: 9b:a6:01:67:c1:91:45:2f:55:87:a1:de:8f:c3:2f: 70:1b:58:4b:57:1b:06:74:a5:5e:b1:26:18:51:98: f0:32:77:9a:c6:84:d4:03:09:d8:53:69:6e:36:2f: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:89:4C:07:0A:D4:F3:BC:DB:1B:36:46:A8:40:CA:F0:E0:03:6B:48 X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:62:a0:0c:ac:86:5d:58:a8:4c:3b:24:cb:16:8b:d8:42:5e: 49:86:50:be:cf:66:11:66:87:a8:0b:f7:d7:1a:39:e9:f0:e4: 58:ae:6f:73:5b:49:60:bb:a1:b2:a9:a9:af:88:0e:fe:46:8b: f2:b3:31:50:74:f2:47:40:b4:36:a0:c6:21:74:97:c2:5d:f3: a1:02:5c:37:20:0e:7d:1b:42:e6:8e:65:e1:c7:71:2c:e2:16: 38:9d:9e:aa:c5:bc:d6:89:c2:d8:b4:9f:fe:db:6e:58:b2:17: b5:50:82:a4:20:f7:df:29:5b:07:46:62:fb:18:71:c2:a5:ea: 7c:23:08:fd:35:5a:ea:83:43:d0:a3:8f:e8:aa:c8:4f:06:92: 21:ab:c3:8d:46:38:f3:e9:6c:ca:75:54:74:37:b3:f4:92:44: c3:d6:4d:2c:f6:0a:94:1e:f2:2c:4f:d4:93:34:24:c1:60:67: c7:cb:00:c7:da:d4:78:1c:3c:15:7b:50:88:9f:0a:66:98:bd: 6a:00:ef:dc:de:d6:e0:1d:de:bc:99:10:4c:21:18:91:e6:d2: 55:de:f0:c5:1c:fc:79:03:8a:1b:9d:f6:ed:e3:9c:25:a9:bc: 59:d4:14:08:db:fe:33:2f:9d:6e:fc:0b:b3:17:83:72:8a:58: ba:94:d0:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSunjQn5K1DQ3sRw0cDWxPIt3QDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNjAzMjYwMjE2NTVaFw0yNjAzMjkwMjQ1NTVaMDMxMTAvBgNV BAMTKDI1ODk0QzA3MEFENEYzQkNEQjFCMzY0NkE4NDBDQUYwRTAwMzZCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnTX2NGbUEiVtP+ndhuCXDykMv gIR7pIBM1ix7UfHROQu1r1B2veoc0mXWBa5/spyW0QMmGOrs63RB+qjI+rHyJ07Q dq6Ed2j/y+rNmCi7JY8A9a98zfO9iv0B8ysZ3dpuxuvOH03m0wKMTzZtmO2OEBDE nScxKWJ3CCoXyNn4Qaq3hnr/pK898T/lv8fyoeIC3z69ywTmtXebX85z54uRGRhg 4BtlchUXakUepzNWs8xOyvQ716zVbEkKVbWugddnt5j3BHjhhZJCNuzops2RXJum AWfBkUUvVYeh3o/DL3AbWEtXGwZ0pV6xJhhRmPAyd5rGhNQDCdhTaW42L3vjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYlMBwrU87zbGzZGqEDK8OADa0gwHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJioAyshl1YqEw7JMsWi9hCXkmGUL7PZhFm h6gL99caOenw5Fiub3NbSWC7obKpqa+IDv5Gi/KzMVB08kdAtDagxiF0l8Jd86EC XDcgDn0bQuaOZeHHcSziFjidnqrFvNaJwti0n/7bbliyF7VQgqQg998pWwdGYvsY ccKl6nwjCP01WuqDQ9Cjj+iqyE8GkiGrw41GOPPpbMp1VHQ3s/SSRMPWTSz2CpQe 8ixP1JM0JMFgZ8fLAMfa1HgcPBV7UIifCmaYvWoA79ze1uAd3ryZEEwhGJHm0lXe 8MUc/HkDihud9u3jnCWpvFnUFAjb/jMvnW78C7MXg3KKWLqU0BE= -----END CERTIFICATE-----Generated at Thu Mar 26 05:36:00 2026 by rpki-client