$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: +LNeKEYn1/NTYDf5jt339rVfneeRgTzU/puaHOQvE4A= Subject key identifier: 75:DF:91:06:D0:6B:86:1B:90:8B:F3:08:B0:C5:A3:91:89:CC:FE:37 Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 393F33CDC7989145B277963A53B1E0457864989D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 0568 Signing time: Thu 16 Apr 2026 21:02:26 +0000 Manifest this update: Thu 16 Apr 2026 20:57:26 +0000 Manifest next update: Mon 20 Apr 2026 04:32:26 +0000 Files and hashes: 1: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: YT+3Osj7gKNOxmKxyFCAjAdrMcJB3WO1eCN3A8nzpjA=) 2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3f:33:cd:c7:98:91:45:b2:77:96:3a:53:b1:e0:45:78:64:98:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Apr 16 20:57:26 2026 GMT Not After : Apr 20 04:32:26 2026 GMT Subject: CN=75DF9106D06B861B908BF308B0C5A39189CCFE37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:bb:8f:78:4b:3e:a6:44:57:8a:3f:2a:31: b3:6f:c7:ef:6d:9f:c9:96:0e:ea:11:c2:f5:64:97: 71:9c:3e:b5:bc:da:26:92:7b:52:51:56:7d:4a:5b: c4:98:28:45:93:fb:95:83:ce:7b:22:e4:83:be:0e: a6:4a:55:e1:8a:62:43:e3:d3:49:2b:93:94:c2:1f: fb:89:0a:5a:f6:91:56:62:0a:15:f1:14:3b:60:c5: ef:ec:d5:43:75:c1:63:dd:75:d4:10:bd:49:5f:d7: ca:ca:50:7b:89:66:e4:b7:34:7d:71:b4:39:58:4b: 54:b4:b1:66:4b:99:b8:51:bd:46:39:ac:26:41:d9: 81:c1:de:27:6b:3c:fb:e4:ae:4a:08:5e:a6:b8:f9: 56:9d:f7:ce:66:b3:54:20:d2:f8:2e:44:30:b9:12: ee:a7:2f:42:50:aa:d8:5e:f8:87:16:9e:4d:18:d6: 9e:e0:64:57:e8:1f:22:56:a3:92:96:36:83:59:1c: 62:a8:b6:35:f7:04:5e:19:a5:7d:74:87:c9:be:45: a1:29:ff:5c:36:19:5a:78:01:d8:e8:18:7e:68:5f: 16:6e:d3:7a:0f:25:f8:49:2c:6d:24:6b:1c:cd:4c: 93:fc:a0:db:42:57:98:01:21:71:24:59:3f:bb:33: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DF:91:06:D0:6B:86:1B:90:8B:F3:08:B0:C5:A3:91:89:CC:FE:37 X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:35:a7:57:e2:ba:31:7a:0b:91:c9:46:43:b6:fa:a9:48:a7: db:99:d2:89:8e:49:28:ee:8a:b9:8b:67:ea:38:7e:5a:46:37: 15:b9:0e:10:42:ce:1c:e5:77:e3:42:44:74:8d:32:f0:b6:cf: b8:bd:06:ea:f0:1f:46:89:51:0b:1d:e6:3c:73:1d:9a:f2:f7: d2:47:4c:7d:3d:bd:f5:99:fe:8f:17:c2:77:7e:c6:b8:6b:9b: 70:1d:56:1b:7d:80:b7:8b:bb:09:23:51:90:04:bc:13:24:13: ab:0f:be:9e:50:21:8f:b9:b5:ea:62:89:3b:e1:c0:05:1c:7a: 2b:e9:32:ce:82:ba:60:ad:6e:68:55:ad:87:90:f1:bd:c1:fd: 92:10:d0:10:92:b9:6a:5b:d1:d7:59:ac:84:8e:ef:73:78:c0: 72:e9:bf:d4:78:fb:50:24:3a:9f:13:5a:fe:af:31:aa:1d:d2: 09:17:d0:8e:bf:5e:bd:9c:07:23:f0:ca:8e:d3:10:81:ce:3b: 17:8a:0a:31:f9:0f:94:ac:b9:2f:5b:6d:70:cc:bc:25:3c:d7: 7b:a9:43:a3:a4:53:26:0d:a3:fd:35:9f:cf:cf:de:97:49:a4: ca:6e:d4:4e:22:34:27:cb:bf:99:37:0b:56:1f:60:22:eb:1c: 51:68:b7:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOT8zzceYkUWyd5Y6U7HgRXhkmJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNjA0MTYyMDU3MjZaFw0yNjA0MjAwNDMyMjZaMDMxMTAvBgNV BAMTKDc1REY5MTA2RDA2Qjg2MUI5MDhCRjMwOEIwQzVBMzkxODlDQ0ZFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpILuPeEs+pkRXij8qMbNvx+9t n8mWDuoRwvVkl3GcPrW82iaSe1JRVn1KW8SYKEWT+5WDznsi5IO+DqZKVeGKYkPj 00krk5TCH/uJClr2kVZiChXxFDtgxe/s1UN1wWPdddQQvUlf18rKUHuJZuS3NH1x tDlYS1S0sWZLmbhRvUY5rCZB2YHB3idrPPvkrkoIXqa4+Vad985ms1Qg0vguRDC5 Eu6nL0JQqthe+IcWnk0Y1p7gZFfoHyJWo5KWNoNZHGKotjX3BF4ZpX10h8m+RaEp /1w2GVp4AdjoGH5oXxZu03oPJfhJLG0kaxzNTJP8oNtCV5gBIXEkWT+7M+h5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdd+RBtBrhhuQi/MIsMWjkYnM/jcwHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGE1p1fiujF6C5HJRkO2+qlIp9uZ0omOSSju irmLZ+o4flpGNxW5DhBCzhzld+NCRHSNMvC2z7i9BurwH0aJUQsd5jxzHZry99JH TH09vfWZ/o8Xwnd+xrhrm3AdVht9gLeLuwkjUZAEvBMkE6sPvp5QIY+5tepiiTvh wAUceivpMs6CumCtbmhVrYeQ8b3B/ZIQ0BCSuWpb0ddZrISO73N4wHLpv9R4+1Ak Op8TWv6vMaod0gkX0I6/Xr2cByPwyo7TEIHOOxeKCjH5D5SsuS9bbXDMvCU813up Q6OkUyYNo/01n8/P3pdJpMpu1E4iNCfLv5k3C1YfYCLrHFFot5Q= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:06 2026 by rpki-client