$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: kKTAXPx5mIKwXcDRg8bX3WAOVSB87bNjZoqZsQR4ing= Subject key identifier: E4:EA:1E:5F:60:66:DE:34:4C:A5:C7:C9:97:5B:1A:FC:A0:54:64:14 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 1311CAD92303A2F9D4A3F9639B4851A2565E392F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 013B Signing time: Thu 16 Apr 2026 13:42:39 +0000 Manifest this update: Thu 16 Apr 2026 13:37:39 +0000 Manifest next update: Sun 19 Apr 2026 17:08:39 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: m52/gfN1ZQHpMvz4VWyyc2AsmsFqadziJ6STiTVyokY=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: ig7u0oXbmw3mWHfeaI0Vkdwale6pLP8hu8sPEDhR1CM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:11:ca:d9:23:03:a2:f9:d4:a3:f9:63:9b:48:51:a2:56:5e:39:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Apr 16 13:37:39 2026 GMT Not After : Apr 19 17:08:39 2026 GMT Subject: CN=E4EA1E5F6066DE344CA5C7C9975B1AFCA0546414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:2d:66:0b:13:87:5a:f6:45:69:b8:9b:b9: e9:11:f4:7e:1a:a4:7e:4c:e8:ed:d8:ce:d5:b4:04: af:84:48:5e:c4:1f:8b:e4:09:b0:73:94:70:5e:bf: 17:ba:ba:70:6c:9c:d7:22:89:31:a3:85:0f:60:c6: e2:65:8d:3c:0c:17:3b:64:1a:71:f0:ee:ba:10:90: 51:70:4f:e8:bb:ba:ba:91:63:37:69:86:6e:9b:bc: f6:3e:86:78:97:c3:7c:f0:30:a0:25:6a:fb:19:6b: b5:2b:f0:19:7a:6e:2d:b1:05:3a:48:ef:fb:d4:db: d2:16:ca:83:0b:7f:b1:5a:60:b4:05:1b:e7:81:0d: c5:8f:df:d6:48:1f:78:ee:30:f3:e1:ac:57:04:62: 12:8e:78:b8:40:6f:12:0e:a8:dd:c8:7d:0d:71:38: c1:8e:25:45:ee:ba:84:de:b7:bd:be:08:3a:7d:f3: 6c:50:c6:70:51:9b:fc:27:47:06:d6:0a:ab:fd:96: 6e:e5:97:dd:6a:f3:17:b5:80:10:d7:12:a0:c4:7c: cb:f2:5c:4d:b7:c6:0c:38:20:f9:5c:57:60:d2:a4: 89:b4:a6:fc:e3:4a:b3:15:c4:31:11:7b:42:75:28: ce:d8:07:76:2e:0a:63:40:ab:e6:3e:9c:1d:d9:fe: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EA:1E:5F:60:66:DE:34:4C:A5:C7:C9:97:5B:1A:FC:A0:54:64:14 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:18:bf:92:bc:cb:82:c6:8c:89:6a:04:e4:a6:8e:e7:2e:ff: ed:37:23:f9:de:39:be:4e:c7:50:97:40:f5:26:24:f5:52:f0: 70:d9:d6:51:9a:bf:c7:c9:08:ee:5d:da:ec:62:3d:62:79:63: fa:a9:34:53:46:c4:18:af:ac:f3:51:2a:a2:41:5e:19:c5:8f: 2a:7f:d1:95:ac:58:e8:13:76:cb:34:e9:88:91:74:81:61:4e: 7d:ef:a1:c1:50:e3:9b:e4:c1:9d:41:ff:66:da:d5:5e:bb:db: be:d2:6e:21:b6:54:c6:28:d7:65:73:e8:ec:57:03:53:ec:ea: a0:ef:4d:d7:95:da:01:3d:46:87:66:11:6b:da:6d:69:c2:77: de:6b:2f:1b:e9:d7:c0:3c:6c:35:a9:e3:4a:b9:87:5f:25:1c: a9:ee:80:6a:fa:53:02:3c:a2:07:02:c1:1f:48:d8:ac:1d:85: e3:9c:8f:1b:cf:cc:04:57:d6:75:b3:8c:48:dc:bc:96:9c:18: ca:ad:a3:bd:8c:e1:5b:e1:c1:ed:48:7c:59:55:16:7e:88:05: d6:7f:63:e7:02:c4:d4:7f:5d:92:a8:e9:28:31:70:8f:05:33: 95:9b:35:2e:65:19:54:07:b7:75:7b:c4:c6:ce:c6:d2:39:3b: 1a:a7:9b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExHK2SMDovnUo/ljm0hRolZeOS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNjA0MTYxMzM3MzlaFw0yNjA0MTkxNzA4MzlaMDMxMTAvBgNV BAMTKEU0RUExRTVGNjA2NkRFMzQ0Q0E1QzdDOTk3NUIxQUZDQTA1NDY0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKWy1mCxOHWvZFabibuekR9H4a pH5M6O3YztW0BK+ESF7EH4vkCbBzlHBevxe6unBsnNciiTGjhQ9gxuJljTwMFztk GnHw7roQkFFwT+i7urqRYzdphm6bvPY+hniXw3zwMKAlavsZa7Ur8Bl6bi2xBTpI 7/vU29IWyoMLf7FaYLQFG+eBDcWP39ZIH3juMPPhrFcEYhKOeLhAbxIOqN3IfQ1x OMGOJUXuuoTet72+CDp982xQxnBRm/wnRwbWCqv9lm7ll91q8xe1gBDXEqDEfMvy XE23xgw4IPlcV2DSpIm0pvzjSrMVxDERe0J1KM7YB3YuCmNAq+Y+nB3Z/k7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5OoeX2Bm3jRMpcfJl1sa/KBUZBQwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUYv5K8y4LGjIlqBOSmjucu/+03I/neOb5O x1CXQPUmJPVS8HDZ1lGav8fJCO5d2uxiPWJ5Y/qpNFNGxBivrPNRKqJBXhnFjyp/ 0ZWsWOgTdss06YiRdIFhTn3vocFQ45vkwZ1B/2ba1V67277SbiG2VMYo12Vz6OxX A1Ps6qDvTdeV2gE9RodmEWvabWnCd95rLxvp18A8bDWp40q5h18lHKnugGr6UwI8 ogcCwR9I2KwdheOcjxvPzARX1nWzjEjcvJacGMqto72M4Vvhwe1IfFlVFn6IBdZ/ Y+cCxNR/XZKo6SgxcI8FM5WbNS5lGVQHt3V7xMbOxtI5Oxqnm14= -----END CERTIFICATE-----Generated at Fri Apr 17 14:49:42 2026 by rpki-client