$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: yrVxxuMSMXwiR0w5jXxdJLq3iNR6bQjinKHRj2zwAoY= Subject key identifier: 49:7F:96:13:C5:27:57:DE:D7:08:11:A9:B3:06:B2:A6:40:89:98:C3 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 10B2457EF192CAE316607E8C9816F2FEA5C7DF8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 0126 Signing time: Sat 28 Feb 2026 21:42:34 +0000 Manifest this update: Sat 28 Feb 2026 21:37:34 +0000 Manifest next update: Tue 03 Mar 2026 23:44:34 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: Q/oi46XFi1u2qTM5ZxexuaOvPofeB5wCwRSzLDBY9B0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b2:45:7e:f1:92:ca:e3:16:60:7e:8c:98:16:f2:fe:a5:c7:df:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Feb 28 21:37:34 2026 GMT Not After : Mar 3 23:44:34 2026 GMT Subject: CN=497F9613C52757DED70811A9B306B2A6408998C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:e7:a1:fd:62:c5:46:5a:6c:69:33:c1:41: f7:68:6f:72:08:74:47:c7:7e:73:f7:2f:13:c6:ec: 57:6a:1c:c4:1a:7c:aa:fd:29:ab:47:03:99:b0:82: b6:8a:5e:33:d0:ee:71:ff:b9:c3:39:88:b6:31:5c: e6:42:a2:4d:eb:21:aa:c8:b3:ba:6e:52:7b:e2:36: d7:da:bd:b8:ae:2f:d2:65:79:f2:e8:b7:8e:34:6e: db:ed:aa:e3:3f:37:78:d8:4a:58:24:f2:13:c1:ea: ca:e1:db:f2:93:75:07:52:6f:20:d4:43:b5:ed:c4: 07:69:87:01:95:23:dd:49:0b:0d:6b:54:6f:19:c5: b2:42:e2:f4:e6:d9:08:f9:40:10:ef:df:94:6a:86: e0:5d:7a:21:32:4a:cd:82:82:b6:63:63:7d:31:fe: 6b:d9:8a:92:a0:1d:e1:01:5c:92:c8:b0:cb:58:7d: 89:fa:f9:dc:ce:34:8a:7a:b6:19:eb:b0:2f:f5:af: 7d:b3:35:4d:c8:82:e6:bb:8c:57:fe:39:da:b3:5c: e8:cf:dc:5c:30:9c:09:85:c0:04:1e:d9:d3:74:70: e6:1e:46:48:de:e9:f8:17:c5:58:7e:76:45:c3:7a: 39:de:e1:3d:c0:46:b3:43:0d:19:7e:40:e0:ab:20: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7F:96:13:C5:27:57:DE:D7:08:11:A9:B3:06:B2:A6:40:89:98:C3 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bf:38:90:20:6d:66:8c:0a:0f:1b:11:b7:10:5f:27:75:70: e4:0e:37:f3:31:c1:ae:68:e3:70:3d:dc:ed:19:80:40:43:f0: 21:6f:1f:9f:e1:a8:63:d0:31:db:91:33:ab:93:6e:56:6f:b3: 2a:d0:1e:87:8d:1c:dd:7c:dc:98:37:be:c9:96:35:e6:83:63: a9:fd:6e:04:0f:9d:8a:bc:c7:a1:ef:75:19:dc:74:10:dc:71: cd:6d:f7:57:3d:8c:49:14:b9:d8:37:1f:a3:bf:64:39:c5:41: 74:2e:5b:c2:99:06:9c:b9:f7:43:3a:68:6a:58:21:5e:3e:92: 4c:8a:28:7e:cc:d6:a4:bb:e6:66:20:61:12:1e:b7:81:fa:6a: bd:0c:9d:88:ad:34:91:4e:3b:e8:8f:28:b8:24:ce:55:cb:02: 38:46:57:99:d0:ef:63:41:ab:56:c2:04:8e:ce:3b:00:d0:3a: d1:6d:0e:1d:36:eb:38:cc:6b:f1:9d:39:ab:20:db:6a:3b:97: a8:de:79:d4:6f:cf:cd:d7:30:7a:87:2c:93:3d:c4:41:18:ce: 1c:5b:5f:80:3e:8c:db:7f:6d:3c:94:3f:66:7f:76:55:63:54: 37:bd:19:e4:61:dc:d0:00:80:82:b6:5e:d1:59:1b:99:2b:37: dd:5e:ff:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELJFfvGSyuMWYH6MmBby/qXH340wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNjAyMjgyMTM3MzRaFw0yNjAzMDMyMzQ0MzRaMDMxMTAvBgNV BAMTKDQ5N0Y5NjEzQzUyNzU3REVENzA4MTFBOUIzMDZCMkE2NDA4OTk4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNeeh/WLFRlpsaTPBQfdob3II dEfHfnP3LxPG7FdqHMQafKr9KatHA5mwgraKXjPQ7nH/ucM5iLYxXOZCok3rIarI s7puUnviNtfavbiuL9JlefLot440btvtquM/N3jYSlgk8hPB6srh2/KTdQdSbyDU Q7XtxAdphwGVI91JCw1rVG8ZxbJC4vTm2Qj5QBDv35RqhuBdeiEySs2CgrZjY30x /mvZipKgHeEBXJLIsMtYfYn6+dzONIp6thnrsC/1r32zNU3Igua7jFf+OdqzXOjP 3FwwnAmFwAQe2dN0cOYeRkje6fgXxVh+dkXDejne4T3ARrNDDRl+QOCrILNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSX+WE8UnV97XCBGpswaypkCJmMMwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG/OJAgbWaMCg8bEbcQXyd1cOQON/Mxwa5o 43A93O0ZgEBD8CFvH5/hqGPQMduRM6uTblZvsyrQHoeNHN183Jg3vsmWNeaDY6n9 bgQPnYq8x6HvdRncdBDccc1t91c9jEkUudg3H6O/ZDnFQXQuW8KZBpy590M6aGpY IV4+kkyKKH7M1qS75mYgYRIet4H6ar0MnYitNJFOO+iPKLgkzlXLAjhGV5nQ72NB q1bCBI7OOwDQOtFtDh026zjMa/GdOasg22o7l6jeedRvz83XMHqHLJM9xEEYzhxb X4A+jNt/bTyUP2Z/dlVjVDe9GeRh3NAAgIK2XtFZG5krN91e/9Y= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:15 2026 by rpki-client