$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: Xxwo+fdgMtvOVZriPJxE6xjEJXSLv4UA9O7mbA9zQEo= Subject key identifier: 0A:8B:79:B6:D1:D1:F9:98:81:97:2F:86:06:F1:BE:38:D6:09:A9:B4 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 1F6AC9775937528959515DEF9F3894464DCB41DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: B2 Signing time: Sat 14 Jun 2025 13:02:16 +0000 Manifest this update: Sat 14 Jun 2025 12:57:16 +0000 Manifest next update: Tue 17 Jun 2025 22:54:16 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: nR/+0vs07yd9eGZ9tv+MPzeBVDUpIVzsdv9Qu5eB50k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6a:c9:77:59:37:52:89:59:51:5d:ef:9f:38:94:46:4d:cb:41:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Jun 14 12:57:16 2025 GMT Not After : Jun 17 22:54:16 2025 GMT Subject: CN=0A8B79B6D1D1F99881972F8606F1BE38D609A9B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:58:5f:ca:5d:6a:b2:09:f8:eb:be:80:52: 71:db:53:8c:f5:6d:f4:5d:7d:e0:31:e5:6f:a1:f0: 81:a8:de:79:33:0a:71:bb:ce:70:91:b7:02:a5:72: b9:78:47:21:6a:3f:db:64:c7:39:19:ee:9b:38:3a: 4e:54:b0:06:6a:0c:f6:10:a7:8e:21:b1:02:2a:ac: 5c:fb:ef:b2:3e:3c:64:91:9d:1a:47:be:ef:61:56: 1f:d6:c9:52:74:8e:4f:a4:8c:a2:db:02:db:ca:2a: d2:9b:2f:1b:53:76:ba:3e:a0:ed:7b:ea:50:f0:d6: 56:a1:dc:92:25:b1:c1:77:73:8f:4a:0d:da:32:4e: ab:3e:ed:2a:62:33:04:3f:e6:5e:a9:1f:9a:d0:70: dc:c7:e1:91:61:37:a0:9f:39:39:8e:44:b4:18:d5: 85:8d:72:d6:97:24:3b:df:bf:c1:45:b8:24:41:29: 2d:cf:14:7f:66:f8:d9:26:28:b2:f7:41:78:01:69: 06:c0:7e:7b:b0:01:d8:27:64:1f:63:b6:3c:1e:5d: 10:af:66:1a:09:75:f0:01:c8:c7:65:e6:1a:30:ec: 07:4a:e0:bc:ff:78:2b:ac:c6:8c:8e:ad:b0:5f:99: 6a:d3:c8:9a:3a:9a:03:8f:09:a3:7a:3e:27:5a:79: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8B:79:B6:D1:D1:F9:98:81:97:2F:86:06:F1:BE:38:D6:09:A9:B4 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:bc:dc:41:f2:fa:99:26:64:6d:72:6f:e8:03:69:f9:2f:c8: 60:d8:f5:7d:32:a6:27:f0:45:1d:4a:0d:cc:30:6f:97:c3:fd: 1e:3c:dd:e0:f9:31:0f:e7:2f:a3:fe:be:d3:88:1a:61:5a:2d: a7:0b:b4:da:51:a6:6c:cc:13:27:56:95:0f:72:98:7b:7e:36: f5:ac:8a:07:03:03:8d:f3:fb:c2:b4:0d:87:6d:e6:cb:b9:a2: f2:cd:1e:0b:a5:c0:07:3d:ca:cb:29:51:06:f4:c6:61:0f:c2: d4:95:d0:99:d9:a3:ca:45:47:ea:d4:cc:9d:87:da:e2:20:7f: d9:e4:f8:f0:62:63:f9:ab:ad:84:e3:ae:de:5c:bb:0b:f1:c3: 9e:e1:df:1a:a3:19:8a:23:e5:77:a6:5f:3a:32:7b:df:30:90: cf:a0:c4:9b:cb:9b:c5:79:1d:f8:87:aa:cf:cf:bf:e9:f3:ce: d4:2d:1e:9a:71:5a:c7:4f:63:f5:40:65:d5:c7:0c:80:f5:27: 17:1d:d8:e8:9b:4f:3a:b5:77:fb:56:9b:aa:6a:ce:05:e0:a3: 63:a4:43:6f:4f:04:02:fb:c8:6a:85:81:39:1a:c2:be:c8:60: 70:d6:70:95:58:79:80:4a:13:1d:98:2e:1d:9c:91:d5:f8:39: e4:db:2a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2rJd1k3UolZUV3vnziURk3LQdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTA2MTQxMjU3MTZaFw0yNTA2MTcyMjU0MTZaMDMxMTAvBgNV BAMTKDBBOEI3OUI2RDFEMUY5OTg4MTk3MkY4NjA2RjFCRTM4RDYwOUE5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUX1hfyl1qsgn4676AUnHbU4z1 bfRdfeAx5W+h8IGo3nkzCnG7znCRtwKlcrl4RyFqP9tkxzkZ7ps4Ok5UsAZqDPYQ p44hsQIqrFz777I+PGSRnRpHvu9hVh/WyVJ0jk+kjKLbAtvKKtKbLxtTdro+oO17 6lDw1lah3JIlscF3c49KDdoyTqs+7SpiMwQ/5l6pH5rQcNzH4ZFhN6CfOTmORLQY 1YWNctaXJDvfv8FFuCRBKS3PFH9m+NkmKLL3QXgBaQbAfnuwAdgnZB9jtjweXRCv ZhoJdfAByMdl5how7AdK4Lz/eCusxoyOrbBfmWrTyJo6mgOPCaN6PidaebzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCot5ttHR+ZiBly+GBvG+ONYJqbQwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG83EHy+pkmZG1yb+gDafkvyGDY9X0ypifw RR1KDcwwb5fD/R483eD5MQ/nL6P+vtOIGmFaLacLtNpRpmzMEydWlQ9ymHt+NvWs igcDA43z+8K0DYdt5su5ovLNHgulwAc9ysspUQb0xmEPwtSV0JnZo8pFR+rUzJ2H 2uIgf9nk+PBiY/mrrYTjrt5cuwvxw57h3xqjGYoj5XemXzoye98wkM+gxJvLm8V5 HfiHqs/Pv+nzztQtHppxWsdPY/VAZdXHDID1Jxcd2OibTzq1d/tWm6pqzgXgo2Ok Q29PBAL7yGqFgTkawr7IYHDWcJVYeYBKEx2YLh2ckdX4OeTbKnQ= -----END CERTIFICATE-----Generated at Sun Jun 15 16:57:47 2025 by rpki-client