$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: iGFul1zprAbifcRZrO45IxuzTcCnFbgS61zAAwxSnc8= Subject key identifier: 93:B6:D1:E0:E6:B5:0D:8A:52:29:F8:5D:5B:BE:C1:4D:7C:A2:4E:4A Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 4E9BC76854E547A88883803E64D32BC47167799E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 013D Signing time: Tue 21 Apr 2026 02:12:39 +0000 Manifest this update: Tue 21 Apr 2026 02:07:39 +0000 Manifest next update: Fri 24 Apr 2026 04:17:39 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: ig7u0oXbmw3mWHfeaI0Vkdwale6pLP8hu8sPEDhR1CM=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: 5cZDgGbX7lyq8QyzaLTB1Rgl3ihR20XJS563MCs+nZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9b:c7:68:54:e5:47:a8:88:83:80:3e:64:d3:2b:c4:71:67:79:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Apr 21 02:07:39 2026 GMT Not After : Apr 24 04:17:39 2026 GMT Subject: CN=93B6D1E0E6B50D8A5229F85D5BBEC14D7CA24E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:48:61:6b:6f:74:bb:bd:e6:bf:00:ad:82: 28:d4:cf:0c:21:5b:5f:86:e7:5d:f6:2f:91:b5:c3: 28:80:13:d8:e8:5d:93:52:41:3f:b6:80:9a:6f:ea: f5:87:07:d6:84:fa:94:7e:af:cc:0e:97:9d:af:d3: 6d:cc:ea:96:51:0c:4b:83:64:c1:9f:9d:fc:89:c8: 95:52:39:48:38:db:7a:58:2e:22:9a:b7:fe:5f:fc: 4f:4e:da:cb:b0:81:46:2c:2f:59:9c:00:3a:10:09: cf:61:83:43:3b:36:07:a6:92:dc:e9:ec:70:64:ad: 7f:45:99:42:79:c4:f3:a6:02:33:e4:a3:30:af:89: 93:50:61:d4:49:16:f1:72:71:6f:07:9c:46:6b:5a: 16:c6:a0:c2:b3:0b:b8:50:6c:26:f2:65:d6:b8:b4: 29:ba:df:29:5b:d4:bc:0f:14:cc:f3:86:66:ce:85: a5:83:13:99:f5:16:dd:2f:8d:a6:13:48:d9:11:08: 22:ea:f9:f5:1f:a6:72:e0:ae:8e:5c:e8:db:a9:43: 23:dc:91:3a:9c:ee:16:8b:12:6d:54:bc:78:38:61: 21:a9:e1:15:1e:a1:3f:32:82:17:31:4a:3f:4f:72: c6:39:a5:84:bd:58:fa:70:f0:ca:57:47:19:da:43: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:D1:E0:E6:B5:0D:8A:52:29:F8:5D:5B:BE:C1:4D:7C:A2:4E:4A X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c5:c0:6b:9a:92:30:af:12:07:54:71:af:30:f4:e7:2b:91: 05:c1:07:a9:19:e2:03:8c:fe:99:c3:e6:cb:fa:68:14:9d:09: 6e:c7:3a:e4:37:a7:da:1e:3c:7f:a3:4c:4b:84:b6:27:a3:ae: ba:76:2f:50:7e:97:14:87:1f:7a:39:39:e5:0b:a2:a3:ad:77: 38:05:37:4f:b3:ac:f2:10:47:06:82:47:93:4f:ca:58:66:fa: c3:18:a1:d2:ac:54:80:60:d3:4d:39:94:23:dd:f3:ad:33:e9: 71:db:51:aa:df:02:85:19:68:01:05:54:e3:84:5b:58:b2:e8: 1f:62:1e:2f:0d:5b:ba:6d:4d:79:11:d9:95:9f:a1:2d:f6:aa: c1:50:ee:d3:42:e3:1c:f7:b8:0b:c3:b2:69:34:cd:45:7d:e8: 8b:01:08:0a:dc:56:da:a0:42:7b:f3:3b:33:9a:c1:fb:02:39: 2e:c8:55:12:42:e0:bd:b3:c3:de:54:e9:9b:40:70:9d:ed:ef: 1e:e9:08:43:e5:a0:7f:4d:66:34:29:84:55:10:b4:68:34:ce: 8e:92:71:e0:7f:72:a6:6d:0c:35:bc:45:19:7c:a9:b3:01:61: 53:c6:44:f0:e0:f2:a6:1a:d0:3a:fb:ec:e4:ad:d5:1c:cf:fc: a5:07:3e:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpvHaFTlR6iIg4A+ZNMrxHFneZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNjA0MjEwMjA3MzlaFw0yNjA0MjQwNDE3MzlaMDMxMTAvBgNV BAMTKDkzQjZEMUUwRTZCNTBEOEE1MjI5Rjg1RDVCQkVDMTREN0NBMjRFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BUhha290u73mvwCtgijUzwwh W1+G5132L5G1wyiAE9joXZNSQT+2gJpv6vWHB9aE+pR+r8wOl52v023M6pZRDEuD ZMGfnfyJyJVSOUg423pYLiKat/5f/E9O2suwgUYsL1mcADoQCc9hg0M7Ngemktzp 7HBkrX9FmUJ5xPOmAjPkozCviZNQYdRJFvFycW8HnEZrWhbGoMKzC7hQbCbyZda4 tCm63ylb1LwPFMzzhmbOhaWDE5n1Ft0vjaYTSNkRCCLq+fUfpnLgro5c6NupQyPc kTqc7haLEm1UvHg4YSGp4RUeoT8yghcxSj9PcsY5pYS9WPpw8MpXRxnaQxj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk7bR4Oa1DYpSKfhdW77BTXyiTkowHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILFwGuakjCvEgdUca8w9OcrkQXBB6kZ4gOM /pnD5sv6aBSdCW7HOuQ3p9oePH+jTEuEtiejrrp2L1B+lxSHH3o5OeULoqOtdzgF N0+zrPIQRwaCR5NPylhm+sMYodKsVIBg0005lCPd860z6XHbUarfAoUZaAEFVOOE W1iy6B9iHi8NW7ptTXkR2ZWfoS32qsFQ7tNC4xz3uAvDsmk0zUV96IsBCArcVtqg QnvzOzOawfsCOS7IVRJC4L2zw95U6ZtAcJ3t7x7pCEPloH9NZjQphFUQtGg0zo6S ceB/cqZtDDW8RRl8qbMBYVPGRPDg8qYa0Dr77OSt1RzP/KUHPrk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:32 2026 by rpki-client