$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: HyybN5YscdORKjVSoIM9SjZepdhmrpMsmjctfjHaymk= Subject key identifier: 6E:B7:D2:3F:90:A8:7C:85:27:0A:AC:57:CE:1A:0E:78:AD:87:3B:38 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 1043429CCE2A4EFFDC374CE5C1A20F913152CAFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 03C1 Signing time: Sun 01 Mar 2026 21:31:28 +0000 Manifest this update: Sun 01 Mar 2026 21:26:28 +0000 Manifest next update: Thu 05 Mar 2026 07:53:28 +0000 Files and hashes: 1: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: 0BYySlaDRi1BwHtkR/DXwiNSXtSJSObortTv9Gc1dfk=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 07:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:43:42:9c:ce:2a:4e:ff:dc:37:4c:e5:c1:a2:0f:91:31:52:ca:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Mar 1 21:26:28 2026 GMT Not After : Mar 5 07:53:28 2026 GMT Subject: CN=6EB7D23F90A87C85270AAC57CE1A0E78AD873B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:e1:8c:77:ea:59:c2:5e:58:02:ff:7d:da:09: 6f:32:bb:c2:4d:f7:ad:27:40:ff:f9:8a:39:f9:c0: 27:d7:4c:5f:06:23:f5:38:44:54:ca:e1:73:46:ff: af:60:2c:72:23:90:18:e6:2c:32:ed:19:6b:9d:c5: 89:d9:4c:cb:11:35:74:47:5c:e9:5f:67:5a:e0:8c: 26:79:bc:b0:9f:da:05:0f:f4:ec:db:af:04:8f:bd: 69:38:d0:3a:cc:f7:6b:1b:68:88:7f:4b:f4:e0:38: ec:4c:93:21:b3:08:a0:3f:1a:c2:44:59:47:e2:01: b8:53:59:cd:e5:4c:83:db:3f:7c:df:06:89:e0:41: 57:5f:b6:c2:de:47:f7:9f:df:99:30:9a:6d:dd:b4: 05:c6:28:94:85:47:aa:ea:6e:a7:80:f7:0a:c5:bd: 32:09:e3:09:75:f0:3c:03:d1:76:17:71:14:19:4a: a0:58:d2:9e:dd:e8:89:56:95:9a:72:9e:3a:97:0e: 3e:e3:47:2e:09:06:27:65:2e:d1:ca:ac:bb:a0:13: ff:f6:70:9d:38:df:c8:69:ad:32:27:87:ed:4b:92: 4e:75:8b:7b:12:2e:2e:9d:7c:79:2e:c0:7e:28:f4: 92:ab:17:75:ab:77:04:64:57:41:d1:4a:b2:97:73: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:D2:3F:90:A8:7C:85:27:0A:AC:57:CE:1A:0E:78:AD:87:3B:38 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:16:91:1b:00:57:be:c4:62:ad:9c:74:00:a7:40:20:81:f8: 2d:ba:a1:27:9f:84:17:4f:bf:08:0a:8d:d4:df:25:f0:00:52: 82:63:8b:ab:1b:45:15:8b:be:ce:13:d0:3f:85:07:e7:cc:77: e5:10:62:c3:cb:80:70:3c:37:77:1f:ad:55:e0:07:ac:60:07: 14:46:fe:c7:8d:46:b3:32:6c:11:de:c7:af:91:3c:51:44:b1: 56:12:ea:f8:fa:0b:e1:99:4f:e1:6e:17:39:ba:d5:47:64:44: f9:25:5d:22:f6:74:f5:80:ab:9e:6e:ac:df:71:3c:97:29:88: 00:41:a5:24:76:5b:ce:d3:4e:90:b8:30:f7:f4:ac:bf:ce:09: 1f:7c:16:33:7f:d3:75:df:4b:06:de:87:d0:86:12:69:c4:f5: d9:03:1d:28:9c:6e:f6:e7:39:84:7d:2d:29:84:d6:95:1b:c3: 6c:29:ae:a1:c9:41:9b:d5:87:5e:4c:25:41:99:f9:53:cd:d5: 88:6f:27:ef:44:d8:7e:f7:6f:99:46:41:a5:2b:48:8d:6b:7f: f4:16:9c:53:23:37:e5:20:6c:49:3b:46:69:69:42:f2:57:14: 79:bb:78:a8:8f:e4:85:f8:85:6d:b9:7c:f5:3b:0c:8a:09:5e: b2:83:eb:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEENCnM4qTv/cN0zlwaIPkTFSyv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNjAzMDEyMTI2MjhaFw0yNjAzMDUwNzUzMjhaMDMxMTAvBgNV BAMTKDZFQjdEMjNGOTBBODdDODUyNzBBQUM1N0NFMUEwRTc4QUQ4NzNCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD84Yx36lnCXlgC/33aCW8yu8JN 960nQP/5ijn5wCfXTF8GI/U4RFTK4XNG/69gLHIjkBjmLDLtGWudxYnZTMsRNXRH XOlfZ1rgjCZ5vLCf2gUP9OzbrwSPvWk40DrM92sbaIh/S/TgOOxMkyGzCKA/GsJE WUfiAbhTWc3lTIPbP3zfBongQVdftsLeR/ef35kwmm3dtAXGKJSFR6rqbqeA9wrF vTIJ4wl18DwD0XYXcRQZSqBY0p7d6IlWlZpynjqXDj7jRy4JBidlLtHKrLugE//2 cJ0438hprTInh+1Lkk51i3sSLi6dfHkuwH4o9JKrF3WrdwRkV0HRSrKXc7GjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbrfSP5CofIUnCqxXzhoOeK2HOzgwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMWkRsAV77EYq2cdACnQCCB+C26oSefhBdP vwgKjdTfJfAAUoJji6sbRRWLvs4T0D+FB+fMd+UQYsPLgHA8N3cfrVXgB6xgBxRG /seNRrMybBHex6+RPFFEsVYS6vj6C+GZT+FuFzm61UdkRPklXSL2dPWAq55urN9x PJcpiABBpSR2W87TTpC4MPf0rL/OCR98FjN/03XfSwbeh9CGEmnE9dkDHSicbvbn OYR9LSmE1pUbw2wprqHJQZvVh15MJUGZ+VPN1YhvJ+9E2H73b5lGQaUrSI1rf/QW nFMjN+UgbEk7RmlpQvJXFHm7eKiP5IX4hW25fPU7DIoJXrKD64c= -----END CERTIFICATE-----Generated at Tue Mar 3 03:50:09 2026 by rpki-client