$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: PGkY6tUccbpaKFe/Yi8AjEFzF+iDAA+FHWMJ1pmA8mk= Subject key identifier: 93:F9:E6:D9:0C:02:D4:D5:B5:24:69:A7:22:61:25:7C:2C:F2:F9:99 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 500AB05236BAA3C634E281F4A88DD699EE48D52D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 0567 Signing time: Thu 16 Apr 2026 04:22:00 +0000 Manifest this update: Thu 16 Apr 2026 04:17:00 +0000 Manifest next update: Sun 19 Apr 2026 13:10:00 +0000 Files and hashes: 1: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: H1V12nkQlHnUJ5UKoeLsblNtmSVo76nFUO5DegqXwsE=) 2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) 3: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0a:b0:52:36:ba:a3:c6:34:e2:81:f4:a8:8d:d6:99:ee:48:d5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Apr 16 04:17:00 2026 GMT Not After : Apr 19 13:10:00 2026 GMT Subject: CN=93F9E6D90C02D4D5B52469A72261257C2CF2F999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:65:39:b6:df:e1:23:5c:4c:da:07:9a:ca:51: 00:83:12:ff:7d:54:63:5d:6b:1f:4b:6d:e2:9a:45: ef:5a:d8:37:f4:87:80:68:a7:1f:0a:c5:f2:6f:b5: 0f:58:40:42:07:a7:f7:f9:d4:e3:3e:9f:fe:a7:c7: cf:1a:47:4c:30:15:73:16:ed:56:d2:8f:bc:58:dc: 75:07:2f:7a:4c:89:9f:85:ce:4d:b4:42:59:ec:a0: 97:c2:a1:ad:b7:cf:a8:59:54:30:99:e8:d3:15:62: 4e:f9:f4:6a:68:91:72:a5:ae:2a:2d:c5:7a:45:9f: e2:f7:03:dc:17:aa:79:f4:82:a1:54:06:dc:f1:df: bf:a2:fa:be:ee:d9:e8:61:79:ed:fc:3b:99:28:3b: 21:7c:50:fb:99:4c:76:cc:ad:85:df:25:e0:68:ee: b1:45:b8:40:b0:ee:bd:c5:83:32:98:24:71:8c:bf: 7f:1f:5e:1e:54:bd:f6:6f:05:ae:41:73:a4:eb:24: a5:89:2b:3a:a9:39:e4:af:9f:ec:b9:c5:d4:57:6f: b5:0c:dd:e2:2f:69:ee:d7:02:23:08:77:d7:2e:0e: 99:f9:95:f6:c1:be:a1:a3:6f:a3:f9:16:3a:83:b2: e3:9d:93:88:17:13:ec:3f:97:3e:7f:42:50:ad:4d: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F9:E6:D9:0C:02:D4:D5:B5:24:69:A7:22:61:25:7C:2C:F2:F9:99 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:15:6c:c3:f8:34:64:14:e3:a6:40:6f:82:b8:d5:c2:78:24: e1:d1:d5:41:bb:8b:2f:cb:ac:db:88:04:d6:30:47:79:c8:e2: 80:1d:73:c3:b3:0e:04:e6:12:c7:77:30:a8:5e:b3:00:61:b9: 70:46:2a:17:68:fc:7a:07:ae:4d:04:21:72:fd:fc:1b:cd:96: 43:74:c1:ea:9c:a7:d4:63:f3:4b:1a:d9:e7:5d:b3:f4:55:dd: 2c:44:46:be:65:e0:8e:27:94:63:20:98:80:14:a8:cb:29:d8: aa:ee:08:28:b4:6c:37:ff:d4:ac:74:70:b4:6d:be:56:4c:96: 2f:59:5e:07:b0:b9:51:5d:d6:3e:84:db:4c:5a:6f:ca:65:91: 80:2e:c7:c9:58:95:ca:b7:e9:31:0d:44:71:89:86:f6:f3:df: 51:22:c2:b4:1a:98:77:d5:77:04:ef:9f:6c:36:e5:69:89:fd: 9c:83:de:cb:eb:ed:e8:8a:e3:1e:cb:f1:40:57:0b:9f:ca:db: 3b:73:99:fc:3a:53:0b:62:c7:5a:1e:60:34:bd:aa:4f:e2:31: 59:5f:39:b8:48:b0:76:9e:40:e2:e5:3a:06:4c:98:34:56:36: ec:73:67:1a:b3:9b:54:48:fd:75:f6:f9:c4:a2:f9:ec:45:6a: 83:3a:12:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUAqwUja6o8Y04oH0qI3Wme5I1S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNjA0MTYwNDE3MDBaFw0yNjA0MTkxMzEwMDBaMDMxMTAvBgNV BAMTKDkzRjlFNkQ5MEMwMkQ0RDVCNTI0NjlBNzIyNjEyNTdDMkNGMkY5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsZTm23+EjXEzaB5rKUQCDEv99 VGNdax9LbeKaRe9a2Df0h4Bopx8KxfJvtQ9YQEIHp/f51OM+n/6nx88aR0wwFXMW 7VbSj7xY3HUHL3pMiZ+Fzk20QlnsoJfCoa23z6hZVDCZ6NMVYk759GpokXKlriot xXpFn+L3A9wXqnn0gqFUBtzx37+i+r7u2ehhee38O5koOyF8UPuZTHbMrYXfJeBo 7rFFuECw7r3FgzKYJHGMv38fXh5UvfZvBa5Bc6TrJKWJKzqpOeSvn+y5xdRXb7UM 3eIvae7XAiMId9cuDpn5lfbBvqGjb6P5FjqDsuOdk4gXE+w/lz5/QlCtTT5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/nm2QwC1NW1JGmnImElfCzy+ZkwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN8VbMP4NGQU46ZAb4K41cJ4JOHR1UG7iy/L rNuIBNYwR3nI4oAdc8OzDgTmEsd3MKheswBhuXBGKhdo/HoHrk0EIXL9/BvNlkN0 weqcp9Rj80sa2edds/RV3SxERr5l4I4nlGMgmIAUqMsp2KruCCi0bDf/1Kx0cLRt vlZMli9ZXgewuVFd1j6E20xab8plkYAux8lYlcq36TENRHGJhvbz31EiwrQamHfV dwTvn2w25WmJ/ZyD3svr7eiK4x7L8UBXC5/K2ztzmfw6Uwtix1oeYDS9qk/iMVlf ObhIsHaeQOLlOgZMmDRWNuxzZxqzm1RI/XX2+cSi+exFaoM6EvQ= -----END CERTIFICATE-----Generated at Sat Apr 18 04:59:56 2026 by rpki-client