
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft
File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json)
Hash identifier: j/ejZGvhPrMql6LEJO3JrEf74HsqVMGm68j5ZSsRlWk=
Subject key identifier: 76:89:8E:70:72:44:62:6B:78:3A:21:C1:F3:CD:17:E7:FE:40:42:C8
Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A
Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A
Certificate serial: 446613C4D49C4A1F857FC419F40D2E413E5575E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft
Manifest number: 0381
Signing time: Sun 01 Mar 2026 04:03:00 +0000
Manifest this update: Sun 01 Mar 2026 03:58:00 +0000
Manifest next update: Wed 04 Mar 2026 07:03:00 +0000
Files and hashes: 1: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=)
2: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (hash: a3kFS1oWoqOKQ9pWCt27hqM+zPQA7qWPWdNpInoEdZg=)
3: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: 2f4A4apqJIIv+1ipyvIcSK6OHDn57VEIqT4SB87ZlNw=)
4: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl
rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 07:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:66:13:c4:d4:9c:4a:1f:85:7f:c4:19:f4:0d:2e:41:3e:55:75:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A
Validity
Not Before: Mar 1 03:58:00 2026 GMT
Not After : Mar 4 07:03:00 2026 GMT
Subject: CN=76898E707244626B783A21C1F3CD17E7FE4042C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:da:17:21:1f:17:64:6d:fa:2c:70:75:97:
9d:8c:62:36:a7:a1:33:e0:9d:39:13:6a:15:37:06:
a5:16:e1:92:35:b1:dd:a2:d4:07:0d:a6:de:8b:50:
87:d8:61:76:fd:65:fb:be:79:bc:b7:a1:6b:f4:48:
78:ee:76:a7:69:4b:56:92:a8:a7:ab:6d:8b:f7:04:
47:24:90:40:e9:7b:d8:6b:8d:91:3f:60:63:6f:59:
7e:ee:e5:d3:38:13:a9:08:bd:cf:bd:14:d8:10:31:
87:61:58:b0:54:f4:1f:74:aa:65:22:82:71:83:6f:
fb:f9:37:f3:b0:4b:eb:42:9b:94:ff:7e:95:5f:59:
06:99:27:eb:5a:84:a0:d6:7b:da:59:88:4b:15:69:
b9:88:48:f0:7a:f1:6b:d8:2c:f9:4f:96:9a:6d:42:
50:a7:b0:05:70:bb:13:a5:9b:fe:77:8f:a2:c2:61:
79:82:f1:9f:c8:01:3a:69:05:5d:49:37:33:26:0e:
88:84:3a:c3:60:4d:1c:ee:e7:f9:61:ff:9d:53:58:
69:d1:55:23:10:46:59:40:be:8a:ad:30:c5:d0:d5:
c0:33:cf:8c:ab:df:85:95:e2:bf:bd:df:ae:43:c9:
3c:72:e9:0f:3a:aa:93:fc:d5:31:ad:b1:97:de:f2:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:8E:70:72:44:62:6B:78:3A:21:C1:F3:CD:17:E7:FE:40:42:C8
X509v3 Authority Key Identifier:
keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:42:bf:5b:c5:ea:30:4d:3b:35:d6:d6:e2:89:7a:cf:ff:72:
f3:c5:78:47:d7:8f:5a:36:98:23:41:88:83:a8:46:29:58:b8:
a4:ad:09:d8:b3:71:da:8d:34:eb:9e:d0:ff:ac:be:43:ee:15:
1b:80:f5:1f:a2:54:84:25:d9:c0:b1:38:ea:22:23:bd:08:98:
7f:de:d2:54:7a:61:bd:79:16:11:39:de:bd:1d:69:9c:5e:0f:
00:38:c3:d3:7b:a3:58:76:57:d3:70:7c:cf:04:74:d0:fb:be:
4b:d5:74:e8:51:c5:30:49:4b:18:18:ad:87:5f:d4:f6:86:6b:
0f:87:93:42:5b:bc:ec:d2:fe:7c:9c:48:17:ba:86:35:0c:a4:
a5:f6:1f:9b:47:bb:a8:0d:75:8a:5d:03:87:64:ee:86:11:b6:
fe:3d:2e:a4:5d:43:14:0c:84:8e:b0:28:fb:bd:f2:8d:ec:93:
56:f9:0f:e0:bb:b6:6e:09:be:06:08:ab:a0:3b:ef:c0:1a:06:
7f:57:3c:24:4d:dc:9d:66:56:5e:1a:db:7b:95:bf:16:a2:d5:
dd:70:e1:9b:03:c7:27:01:ce:88:33:60:8a:a3:b2:a5:8f:9e:
69:15:a6:26:c2:6d:e6:b8:02:e2:62:68:2e:6c:a0:05:5c:c1:
bc:da:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:29 2026 by rpki-client