$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: hGlPDAhxR3WpjRS2hKZhkWFNvHGk5JHZom6o9gy/J/o= Subject key identifier: 6C:20:40:35:CA:9A:8B:B2:F2:D8:F5:B8:BE:00:8C:AB:F4:10:2B:63 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 2F44484EEDAAA3247229F3CB82D15ACD1BF3D43B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: CA Signing time: Fri 08 Aug 2025 10:22:19 +0000 Manifest this update: Fri 08 Aug 2025 10:17:19 +0000 Manifest next update: Mon 11 Aug 2025 15:51:19 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: J2aVB9y7ijWC+v7lgqBH6mLRB/rLMCN7Zv8xoS2uqDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:44:48:4e:ed:aa:a3:24:72:29:f3:cb:82:d1:5a:cd:1b:f3:d4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Aug 8 10:17:19 2025 GMT Not After : Aug 11 15:51:19 2025 GMT Subject: CN=6C204035CA9A8BB2F2D8F5B8BE008CABF4102B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:38:c3:44:93:e4:db:6c:0b:35:2b:d3:79: b5:60:53:a5:fd:6e:a1:63:86:71:3e:3c:62:d9:b5: b6:c3:11:a1:50:03:57:09:2e:10:e7:b7:f8:f3:91: 4e:a8:2e:48:d6:81:4d:69:20:80:d0:25:02:f4:5c: 8a:6c:cd:0e:80:7d:fa:ae:1f:8f:a0:db:22:45:16: dd:c6:bd:d9:96:e9:79:9a:95:92:ad:01:6e:65:ae: 5f:8c:01:0d:e6:9d:81:fc:17:ff:c2:9d:da:0d:82: ad:00:ea:24:f8:2d:df:fc:76:ad:1c:46:26:79:30: 1c:20:6b:da:b9:f3:9e:3e:3f:96:70:00:48:45:34: 80:b5:53:98:e9:98:5a:46:89:f3:51:38:00:81:e6: 93:4c:3a:32:94:68:18:33:b5:87:0d:84:c3:2b:b0: 7a:dd:73:45:bf:5f:65:1e:ec:ad:c3:6e:f9:62:01: f9:f2:88:5a:8d:8c:9b:e4:14:99:b1:f1:d3:e0:1d: 61:69:b5:a7:49:50:35:78:50:e9:81:0e:f7:0c:04: 4a:ed:20:09:77:14:9d:a6:ff:da:9b:2e:62:45:f1: 5d:f9:fa:d8:58:51:d6:fa:3c:23:b4:35:f1:23:b2: 2a:7c:31:d2:29:4b:92:96:25:6f:69:89:cb:22:04: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:20:40:35:CA:9A:8B:B2:F2:D8:F5:B8:BE:00:8C:AB:F4:10:2B:63 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:59:fa:b8:4f:70:c6:d5:e3:45:0e:88:f9:ca:0d:d6:8a:5d: e6:c6:58:99:92:88:43:34:62:2b:22:e3:8a:32:9e:c7:95:de: b3:b0:7a:c8:3c:84:42:ce:52:88:50:ce:ba:ff:e5:8e:fd:7f: 3d:ef:ab:ed:7f:4e:2c:c9:7d:e2:82:e0:98:20:f2:47:4b:5c: 70:3c:74:85:06:21:df:26:a8:35:b7:3b:eb:12:ac:4d:d7:35: 20:4c:bf:3d:6a:bd:c1:63:88:29:06:78:c4:fa:f5:7b:04:5f: 08:0a:ee:e4:22:60:b5:63:a9:5a:0c:2e:68:ce:02:a2:44:e0: 57:e8:6d:69:a2:97:a1:9d:f2:a4:d2:56:a9:f2:15:c0:11:fc: 6c:6e:6a:4c:42:8a:be:d4:26:b1:fa:e6:83:4c:43:5f:4c:e7: 0b:e5:01:cc:19:85:6c:4e:5d:46:5e:e1:1f:e7:e6:7f:a6:1e: 07:be:6f:da:95:37:04:00:e6:33:18:15:d1:01:21:c2:4e:c1: 36:e7:f9:fc:ae:57:e3:aa:e0:50:00:ac:1a:29:eb:66:d0:b5: 27:d2:55:01:46:54:ee:f6:45:81:97:b2:54:b1:d6:87:b2:bd: 28:b8:c1:b6:ee:05:1c:79:1f:00:a4:c9:97:08:87:c4:06:7f: b2:c0:58:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0RITu2qoyRyKfPLgtFazRvz1DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTA4MDgxMDE3MTlaFw0yNTA4MTExNTUxMTlaMDMxMTAvBgNV BAMTKDZDMjA0MDM1Q0E5QThCQjJGMkQ4RjVCOEJFMDA4Q0FCRjQxMDJCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJTjDRJPk22wLNSvTebVgU6X9 bqFjhnE+PGLZtbbDEaFQA1cJLhDnt/jzkU6oLkjWgU1pIIDQJQL0XIpszQ6Affqu H4+g2yJFFt3GvdmW6XmalZKtAW5lrl+MAQ3mnYH8F//CndoNgq0A6iT4Ld/8dq0c RiZ5MBwga9q5854+P5ZwAEhFNIC1U5jpmFpGifNROACB5pNMOjKUaBgztYcNhMMr sHrdc0W/X2Ue7K3DbvliAfnyiFqNjJvkFJmx8dPgHWFptadJUDV4UOmBDvcMBErt IAl3FJ2m/9qbLmJF8V35+thYUdb6PCO0NfEjsip8MdIpS5KWJW9picsiBKdTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbCBANcqai7Ly2PW4vgCMq/QQK2MwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdZ+rhPcMbV40UOiPnKDdaKXebGWJmSiEM0 Yisi44oynseV3rOwesg8hELOUohQzrr/5Y79fz3vq+1/TizJfeKC4Jgg8kdLXHA8 dIUGId8mqDW3O+sSrE3XNSBMvz1qvcFjiCkGeMT69XsEXwgK7uQiYLVjqVoMLmjO AqJE4FfobWmil6Gd8qTSVqnyFcAR/GxuakxCir7UJrH65oNMQ19M5wvlAcwZhWxO XUZe4R/n5n+mHge+b9qVNwQA5jMYFdEBIcJOwTbn+fyuV+Oq4FAArBop62bQtSfS VQFGVO72RYGXslSx1oeyvSi4wbbuBRx5HwCkyZcIh8QGf7LAWI8= -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:08 2025 by rpki-client