$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: m1SMDOYp4QOVplVocSK0IHUBwQE1AewZV7QNPa4Q++w= Subject key identifier: 5A:A1:19:74:09:EA:C7:5D:59:C6:0A:AF:3F:51:C7:B1:20:55:11:F7 Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 61EBBC976E2277BEE6C54F72E66BC02841C841AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: 013F Signing time: Fri 17 Apr 2026 12:41:01 +0000 Manifest this update: Fri 17 Apr 2026 12:36:01 +0000 Manifest next update: Mon 20 Apr 2026 18:59:01 +0000 Files and hashes: 1: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: HtSy/5HUrfmuURhjLye2h6FMfd+aaA8JtS3m07xJtIU=) 2: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: dKh9sdtQ/yvQ7BxDxof7l0iHZZ9i1Xhkr36k5+LOKm0=) 3: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: ac+pTouEjojvRH9x31YqC69WCvHAHpMyIgDD/FHq+TY=) 4: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: 0SXjK6zvaQBJ8uDXunSiVTxj6f6ONI0BqvKnrWkpNbo=) 5: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: Yl7eAdHU7Khq4n62jp66bnB7sPgBOKQb/qT7F8A5A38=) 6: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: HogJqzOrGyoog+gxCY3n8NCDol6SBO6HqDo+GEDXkQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:eb:bc:97:6e:22:77:be:e6:c5:4f:72:e6:6b:c0:28:41:c8:41:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Apr 17 12:36:01 2026 GMT Not After : Apr 20 18:59:01 2026 GMT Subject: CN=5AA1197409EAC75D59C60AAF3F51C7B1205511F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:6e:b0:b0:ca:c4:7a:fe:08:c3:ed:a5:b6: e9:5d:ed:fb:eb:fc:e1:1e:c9:56:12:e5:93:e9:7b: 3d:ba:3b:b0:b2:6b:e7:4e:bd:46:e8:de:86:4e:2a: a3:cc:b1:f3:e1:3d:38:8a:aa:89:da:8d:da:9b:44: ec:77:29:de:46:89:ac:74:e1:7e:cb:d8:3a:6d:b7: 98:88:47:43:1e:ec:02:19:85:15:6c:bc:d3:b8:64: 31:96:1d:3f:7b:df:21:10:90:f4:2c:c0:27:c7:26: 5f:8f:9a:aa:be:9b:7c:64:c0:88:dd:14:ad:79:f2: 00:79:c9:18:9b:ac:1d:f9:1b:a4:36:37:11:95:13: 57:e4:c6:8f:63:27:8e:ea:e2:7f:c5:5e:a4:fe:86: e6:73:a9:9e:ae:fd:28:29:73:6f:cd:73:8f:e9:e2: fd:64:89:2c:5e:90:88:bc:30:82:8e:f9:b2:46:19: ad:68:90:be:7f:bc:0d:e7:cf:dd:bf:b3:fc:c3:e7: 6d:db:92:ee:09:e8:e5:f8:4c:06:db:08:db:5f:be: cf:48:7f:35:2d:b1:3e:08:d7:d8:00:87:13:be:7c: 8a:10:72:14:33:4e:9d:8b:46:c5:4b:da:ea:bd:6f: d0:53:9d:10:db:d7:3f:29:ee:6f:b5:07:f3:8b:ae: 64:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:19:74:09:EA:C7:5D:59:C6:0A:AF:3F:51:C7:B1:20:55:11:F7 X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c1:de:73:ef:be:f5:14:70:2e:66:02:52:1f:5a:bc:ec:90: ff:70:72:4a:98:1c:81:0e:1e:b8:b9:91:73:84:ed:3e:d3:bf: 88:68:3f:e5:14:2e:5c:ce:ac:89:01:47:02:32:26:b2:88:a8: e0:d2:4a:01:ff:81:c0:7f:df:98:d9:13:0a:a1:02:74:d7:d1: 52:44:fc:29:90:9f:41:ce:fe:2e:f6:60:71:86:8e:c7:ad:1e: 47:94:f3:7c:21:fa:d5:cc:e5:cb:c0:ea:04:0e:08:f8:e6:ec: b2:9d:75:36:0a:43:89:64:33:a4:13:3e:3e:67:f4:7f:61:ac: 7b:39:7d:ab:4e:00:47:77:89:96:de:8d:d7:20:8f:f4:06:34: ef:ea:57:85:f4:9f:b8:cb:2a:44:59:c4:a5:26:c4:ac:dd:84: e8:ac:a6:d5:89:d0:fa:8d:82:ec:0a:d1:e6:6f:ac:2b:65:9c: a4:31:43:b9:d5:0b:23:6c:ed:c2:8a:b3:56:3b:26:36:30:e9: 0a:99:de:a0:8d:df:10:c6:22:94:78:c6:ac:24:55:db:63:dd: af:9a:53:4a:0e:f7:06:42:fc:6b:ed:5a:89:c0:19:2e:cd:52: 48:cc:41:c5:0c:ce:79:a9:54:2f:06:13:e3:b2:b6:fb:27:a2: f1:2a:ac:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYeu8l24id77mxU9y5mvAKEHIQa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNjA0MTcxMjM2MDFaFw0yNjA0MjAxODU5MDFaMDMxMTAvBgNV BAMTKDVBQTExOTc0MDlFQUM3NUQ1OUM2MEFBRjNGNTFDN0IxMjA1NTExRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYW26wsMrEev4Iw+2ltuld7fvr /OEeyVYS5ZPpez26O7Cya+dOvUbo3oZOKqPMsfPhPTiKqonajdqbROx3Kd5Giax0 4X7L2Dptt5iIR0Me7AIZhRVsvNO4ZDGWHT973yEQkPQswCfHJl+Pmqq+m3xkwIjd FK158gB5yRibrB35G6Q2NxGVE1fkxo9jJ47q4n/FXqT+huZzqZ6u/Sgpc2/Nc4/p 4v1kiSxekIi8MIKO+bJGGa1okL5/vA3nz92/s/zD523bku4J6OX4TAbbCNtfvs9I fzUtsT4I19gAhxO+fIoQchQzTp2LRsVL2uq9b9BTnRDb1z8p7m+1B/OLrmQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqEZdAnqx11ZxgqvP1HHsSBVEfcwHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnB3nPvvvUUcC5mAlIfWrzskP9wckqYHIEO Hri5kXOE7T7Tv4hoP+UULlzOrIkBRwIyJrKIqODSSgH/gcB/35jZEwqhAnTX0VJE /CmQn0HO/i72YHGGjsetHkeU83wh+tXM5cvA6gQOCPjm7LKddTYKQ4lkM6QTPj5n 9H9hrHs5fatOAEd3iZbejdcgj/QGNO/qV4X0n7jLKkRZxKUmxKzdhOisptWJ0PqN guwK0eZvrCtlnKQxQ7nVCyNs7cKKs1Y7JjYw6QqZ3qCN3xDGIpR4xqwkVdtj3a+a U0oO9wZC/GvtWonAGS7NUkjMQcUMznmpVC8GE+OytvsnovEqrEA= -----END CERTIFICATE-----Generated at Sun Apr 19 15:47:32 2026 by rpki-client