$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: Api/iLBBbHzBwUsuGa4Ipdd+qzfA9hnY79MBPsDKG0s= Subject key identifier: 60:C9:F6:06:CB:21:C6:2A:5C:ED:35:33:5E:32:9C:35:86:46:53:8E Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 0B7A70106ED3F8985DE9BEEF8D14E9737773B151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 02C2 Signing time: Sun 01 Mar 2026 19:52:02 +0000 Manifest this update: Sun 01 Mar 2026 19:47:02 +0000 Manifest next update: Thu 05 Mar 2026 06:44:02 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: CA6BkOUxy6RzqVUPo5k4/nE9lMWi4FuR3B6V59PMkHY=) 2: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: MEONMuL54EAbEAUoaiSgV585kNAslwniyqpv61OptMo=) 3: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: KbR+9+I+dnPj9Qe6G2kY548myYBmk6ylajn4gxJDuOA=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7a:70:10:6e:d3:f8:98:5d:e9:be:ef:8d:14:e9:73:77:73:b1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Mar 1 19:47:02 2026 GMT Not After : Mar 5 06:44:02 2026 GMT Subject: CN=60C9F606CB21C62A5CED35335E329C358646538E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:53:e2:62:4b:92:73:e3:05:6c:be:2a:eb: 7c:24:8b:84:af:12:72:b2:93:2e:f8:b0:b4:7b:62: 3f:da:82:8d:80:38:48:e1:1b:c5:2b:0a:b0:43:16: 2f:54:67:cf:97:eb:16:31:54:99:97:3b:d5:15:26: cb:29:e5:70:3f:bb:bd:75:e4:e0:d9:b3:60:7b:b6: 28:fc:00:5d:f4:83:f5:c3:e6:d7:22:88:91:ad:db: 0a:1d:49:5f:e3:f4:f7:38:12:be:13:45:99:80:a8: eb:04:b8:6d:98:41:a0:cb:d1:fb:30:b9:6b:97:04: e0:23:23:2a:11:b5:1f:46:f1:93:11:17:49:e6:3c: ca:16:2c:1f:18:13:2d:7c:8c:64:07:15:53:90:d5: 07:04:d1:da:bf:95:b0:64:9d:ce:d7:af:fa:f2:9c: 77:52:1b:58:2d:f1:e0:e7:b6:2f:0b:62:4c:8e:f7: 19:76:44:4c:2e:bc:b0:e8:e2:cf:d6:84:74:20:13: 33:7d:70:27:10:82:55:4f:2a:93:e5:39:09:d3:2d: d8:f7:4d:f0:5f:37:fb:79:dc:22:db:3c:85:a4:d4: 38:4f:72:56:2e:09:c3:4a:d5:85:31:01:39:a0:db: 7c:5f:4a:b3:cb:5d:e0:66:eb:07:44:6e:6c:5d:88: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C9:F6:06:CB:21:C6:2A:5C:ED:35:33:5E:32:9C:35:86:46:53:8E X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e4:e8:27:e7:9c:d0:b0:16:32:7e:e1:5d:e1:74:3a:8c:c1: bd:4e:53:95:38:5e:e2:62:90:f8:88:10:10:14:f3:f1:b2:36: f4:d5:1c:a7:d1:06:2f:31:37:44:9e:00:6f:fb:cd:3d:a4:c1: ab:9e:cf:07:9a:2b:ce:6e:be:7b:a3:ce:37:b5:4e:cd:30:ca: aa:b5:80:39:7f:07:21:e2:78:75:b9:a0:4b:a7:9a:c1:ee:59: 39:fc:4c:6b:03:5c:5f:8d:64:08:40:1c:70:7e:1e:81:7d:45: ff:ad:b3:ca:33:7f:0c:f2:07:af:88:d4:20:90:17:8b:b7:7a: 5e:25:5c:f6:5f:2a:da:54:1d:a2:3f:d8:7c:bb:38:80:bc:2a: 23:af:15:87:80:59:87:15:04:f3:6d:d1:f1:8b:b5:47:6a:e6: ec:21:3f:8d:77:0c:57:c6:7c:4d:0d:31:65:b7:73:e0:91:95: 1c:e5:35:e6:4c:8f:38:d1:b0:ee:e5:ce:37:6e:d6:76:5b:58: 16:99:a6:41:1f:ea:09:4a:cd:d9:3d:d3:04:e3:00:fb:46:72: 19:c9:7f:a7:a2:64:a7:4a:f5:ff:22:61:6a:f4:42:2a:e1:d8: 11:8e:da:1e:5a:6c:69:be:41:f6:ba:f8:64:ee:93:95:58:60: d4:97:ca:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3pwEG7T+Jhd6b7vjRTpc3dzsVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNjAzMDExOTQ3MDJaFw0yNjAzMDUwNjQ0MDJaMDMxMTAvBgNV BAMTKDYwQzlGNjA2Q0IyMUM2MkE1Q0VEMzUzMzVFMzI5QzM1ODY0NjUzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgVPiYkuSc+MFbL4q63wki4Sv EnKyky74sLR7Yj/ago2AOEjhG8UrCrBDFi9UZ8+X6xYxVJmXO9UVJssp5XA/u711 5ODZs2B7tij8AF30g/XD5tciiJGt2wodSV/j9Pc4Er4TRZmAqOsEuG2YQaDL0fsw uWuXBOAjIyoRtR9G8ZMRF0nmPMoWLB8YEy18jGQHFVOQ1QcE0dq/lbBknc7Xr/ry nHdSG1gt8eDnti8LYkyO9xl2REwuvLDo4s/WhHQgEzN9cCcQglVPKpPlOQnTLdj3 TfBfN/t53CLbPIWk1DhPclYuCcNK1YUxATmg23xfSrPLXeBm6wdEbmxdiCn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYMn2Bsshxipc7TUzXjKcNYZGU44wHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbk6CfnnNCwFjJ+4V3hdDqMwb1OU5U4XuJi kPiIEBAU8/GyNvTVHKfRBi8xN0SeAG/7zT2kwauezweaK85uvnujzje1Ts0wyqq1 gDl/ByHieHW5oEunmsHuWTn8TGsDXF+NZAhAHHB+HoF9Rf+ts8ozfwzyB6+I1CCQ F4u3el4lXPZfKtpUHaI/2Hy7OIC8KiOvFYeAWYcVBPNt0fGLtUdq5uwhP413DFfG fE0NMWW3c+CRlRzlNeZMjzjRsO7lzjdu1nZbWBaZpkEf6glKzdk90wTjAPtGchnJ f6eiZKdK9f8iYWr0Qirh2BGO2h5abGm+Qfa6+GTuk5VYYNSXysM= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:37 2026 by rpki-client