$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: Z2mrqd/rWy2OP+ZnmEoZ/RFBG8WXnro/qSyuHRmJnaM= Subject key identifier: 76:1E:B4:72:22:BB:45:07:34:04:B3:05:A2:96:33:C5:CD:9C:56:61 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 3488727D230930CCC4690FABCEDDC8D586CE08CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 03D6 Signing time: Fri 17 Apr 2026 05:02:31 +0000 Manifest this update: Fri 17 Apr 2026 04:57:31 +0000 Manifest next update: Mon 20 Apr 2026 14:00:31 +0000 Files and hashes: 1: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: vNwtnFQ+aCKry6vlUtetOnAmZSYtPPn32DJ/ZyBu6uM=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 4gi3J8FjPJTNq/5daFRZnZCK3lpxCNHJRNdMzqPgZFU=) 3: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: 7GZYE5pBCG0H1p9HTsYVziIA3bggon60pIFYnM3ZVsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:88:72:7d:23:09:30:cc:c4:69:0f:ab:ce:dd:c8:d5:86:ce:08:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Apr 17 04:57:31 2026 GMT Not After : Apr 20 14:00:31 2026 GMT Subject: CN=761EB47222BB45073404B305A29633C5CD9C5661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4c:93:fa:23:5e:27:cf:2d:8a:b9:82:31:19: 4c:a3:8e:30:63:c4:73:08:bb:7d:9c:53:db:e6:a1: e1:ca:5d:1d:c0:70:6f:ff:9e:04:3a:23:de:a4:af: ec:2e:7a:2b:4d:bc:b5:a0:54:e2:fb:8e:03:ea:25: 40:97:29:af:30:20:d1:fd:11:2a:5f:94:60:18:02: e1:42:66:2f:dc:76:bb:55:91:37:8c:58:fc:c7:f3: 41:53:c0:79:ad:dd:69:24:ff:85:18:b3:36:47:11: 1b:4e:98:ed:66:46:57:8b:60:44:da:74:e1:84:20: 6d:d5:6c:47:00:c7:bb:de:0b:b0:0b:91:78:b8:f8: bb:44:a2:43:3d:61:27:5b:b3:9a:76:ae:1f:d0:16: 96:5d:e6:29:8a:2f:f6:7a:60:2b:f9:70:18:d8:e4: c2:e9:bc:66:08:cf:b4:9f:67:a2:5b:db:34:f7:08: fd:d0:53:64:b8:9b:be:40:0d:91:f4:bb:3a:ba:5b: c9:ca:ed:1a:d9:a2:d4:86:e1:55:b2:98:2f:3d:d1: a1:9a:ac:12:3e:3e:22:b5:02:52:fe:87:ef:0d:07: 6c:5c:8c:c7:38:88:aa:d7:d5:d9:2a:21:43:09:8f: 88:07:29:40:83:e9:5d:cc:8f:71:8e:d3:54:73:4a: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1E:B4:72:22:BB:45:07:34:04:B3:05:A2:96:33:C5:CD:9C:56:61 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:be:d0:2d:78:89:2d:85:c6:2d:d7:98:a2:1a:a7:d5:ce:0d: a9:64:23:85:1b:ef:aa:c6:10:56:e2:da:02:da:a7:3e:24:d9: 71:f2:ed:a3:96:fd:b6:b0:74:18:9d:b5:9d:f8:bc:72:d7:db: 62:cb:94:a7:d8:32:ec:63:d1:55:e4:89:9e:2b:6f:3d:0d:1d: c8:71:79:47:0f:f0:96:fa:6a:6c:6a:4c:f3:a5:19:9b:b4:06: 90:94:45:ef:dc:47:bc:b4:ab:12:56:2f:5b:bf:12:21:9b:4c: 4b:90:74:a6:42:9a:05:71:74:b2:b2:7e:50:f7:21:69:8d:12: e4:b4:70:e2:51:02:b5:20:5c:e8:8a:ce:47:78:95:ab:bd:8d: b3:45:5a:7b:f3:e1:bd:f9:1b:69:6a:99:2d:67:6e:84:a5:08: e8:71:d1:4a:86:3a:23:49:29:02:7d:3a:8b:e3:58:08:9b:b5: 28:d8:3e:9b:95:bd:2c:f1:ba:8c:01:38:c7:90:b8:3e:eb:f5: 4c:2f:a8:bf:fc:ef:d0:86:72:f2:0e:f6:f4:cb:fb:6a:88:e7: b4:6b:a9:ab:b8:4b:52:8c:b2:ac:d3:0a:4e:cf:d7:21:6a:77: f7:92:1b:80:cc:32:6e:f6:cb:bd:52:12:86:4b:cd:89:96:66: f7:ca:cd:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIhyfSMJMMzEaQ+rzt3I1YbOCMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNjA0MTcwNDU3MzFaFw0yNjA0MjAxNDAwMzFaMDMxMTAvBgNV BAMTKDc2MUVCNDcyMjJCQjQ1MDczNDA0QjMwNUEyOTYzM0M1Q0Q5QzU2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsTJP6I14nzy2KuYIxGUyjjjBj xHMIu32cU9vmoeHKXR3AcG//ngQ6I96kr+wueitNvLWgVOL7jgPqJUCXKa8wINH9 ESpflGAYAuFCZi/cdrtVkTeMWPzH80FTwHmt3Wkk/4UYszZHERtOmO1mRleLYETa dOGEIG3VbEcAx7veC7ALkXi4+LtEokM9YSdbs5p2rh/QFpZd5imKL/Z6YCv5cBjY 5MLpvGYIz7SfZ6Jb2zT3CP3QU2S4m75ADZH0uzq6W8nK7RrZotSG4VWymC890aGa rBI+PiK1AlL+h+8NB2xcjMc4iKrX1dkqIUMJj4gHKUCD6V3Mj3GO01RzSoWXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdh60ciK7RQc0BLMFopYzxc2cVmEwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2+0C14iS2Fxi3XmKIap9XODalkI4Ub76rG EFbi2gLapz4k2XHy7aOW/bawdBidtZ34vHLX22LLlKfYMuxj0VXkiZ4rbz0NHchx eUcP8Jb6amxqTPOlGZu0BpCURe/cR7y0qxJWL1u/EiGbTEuQdKZCmgVxdLKyflD3 IWmNEuS0cOJRArUgXOiKzkd4lau9jbNFWnvz4b35G2lqmS1nboSlCOhx0UqGOiNJ KQJ9OovjWAibtSjYPpuVvSzxuowBOMeQuD7r9UwvqL/879CGcvIO9vTL+2qI57Rr qau4S1KMsqzTCk7P1yFqd/eSG4DMMm72y71SEoZLzYmWZvfKzS8= -----END CERTIFICATE-----Generated at Sat Apr 18 00:30:03 2026 by rpki-client