$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: pz8Q9eeKkVnw2Wqsqb9wUwaOc5k1pB4KgojXgjnho9Y= Subject key identifier: 28:4E:FA:C6:0D:53:A2:C0:A6:5B:7A:FD:EF:2A:61:DF:04:ED:08:E7 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 387796E780CD88AC1E771D8E1591EF82F5DD9EF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: F1 Signing time: Mon 03 Nov 2025 10:32:18 +0000 Manifest this update: Mon 03 Nov 2025 10:27:18 +0000 Manifest next update: Thu 06 Nov 2025 12:35:18 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: NTJqgf1LED7xE5PFs7wmqSfseKUBf5qIAQhkweZKqgA=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:77:96:e7:80:cd:88:ac:1e:77:1d:8e:15:91:ef:82:f5:dd:9e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Nov 3 10:27:18 2025 GMT Not After : Nov 6 12:35:18 2025 GMT Subject: CN=284EFAC60D53A2C0A65B7AFDEF2A61DF04ED08E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:0d:f7:c4:83:5f:9c:5f:30:08:fe:3c:8b: aa:6e:03:01:4e:28:59:70:13:e7:74:60:23:dd:c2: ec:5a:56:51:e9:ac:93:6d:6b:9a:f6:cc:59:ea:c3: 10:3a:1d:80:74:60:5d:06:59:cd:40:28:ad:eb:ea: 24:e6:37:41:05:db:af:68:69:9e:17:85:89:1d:bf: 1c:00:2e:d1:42:6c:ff:9e:1c:ac:96:1a:de:9e:b1: 1f:ec:97:6e:69:9e:1e:c8:8b:fe:68:d0:be:b0:46: 31:97:46:ae:a0:c5:c0:1c:99:7a:3a:d4:fa:b6:70: c7:2e:03:60:8c:ab:8e:cb:10:53:90:d4:24:17:5b: 08:bc:51:33:1a:50:73:13:ec:ef:87:e4:3c:d7:86: ed:79:33:c3:67:07:02:ad:4a:68:ff:e1:34:c6:d3: 24:bb:35:c6:e5:88:db:4d:1d:da:37:7c:1b:2d:80: d7:b1:17:51:ab:77:bd:83:8e:f3:37:de:e6:17:32: 13:79:a7:54:c2:e8:43:e1:c5:c3:5f:34:a9:69:fd: 4b:ac:ae:31:43:f9:24:f0:95:e9:02:3b:aa:cd:35: 69:bf:fe:45:74:ad:9d:27:60:63:8e:b5:2b:21:2c: 5d:e0:6d:5a:e9:45:c1:4f:a2:f8:2c:02:ea:0d:b8: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:FA:C6:0D:53:A2:C0:A6:5B:7A:FD:EF:2A:61:DF:04:ED:08:E7 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:01:35:31:5e:4a:57:23:ce:59:76:e4:77:5a:eb:ae:35:82: 7a:95:9f:25:bb:6e:55:99:61:53:e2:ad:d8:f4:6b:d6:17:b8: d8:0b:89:8d:95:34:ba:87:dd:0f:2b:b4:49:a5:66:60:cb:32: a0:d7:29:8d:20:26:af:31:35:69:34:36:a8:06:b7:77:14:90: 94:19:8f:ff:b6:9b:38:a1:c6:e3:b0:50:bf:f6:3e:45:7c:51: c9:95:09:a2:10:40:4e:88:17:4d:5d:77:f5:80:4b:38:8e:39: 79:d2:d3:e0:6a:3e:3f:7d:74:ba:22:87:f5:e7:aa:b2:9b:77: b9:2e:33:5e:d8:55:67:f3:b7:28:2b:7b:9d:64:5d:9c:25:39: 80:4f:97:e8:6a:0b:4d:c8:f5:df:27:40:70:fb:bd:7d:2c:18: 98:a8:3c:1b:77:71:5d:52:8d:94:9d:e0:34:69:81:3d:0c:26: 92:6b:45:c1:e5:ea:8b:02:c0:18:80:e8:ee:de:19:32:46:ae: 72:8f:af:d9:50:87:a9:43:43:dd:44:b3:45:3a:e7:62:2d:f4: 7a:37:5c:3d:19:ab:b2:ee:21:a0:90:0d:93:59:cb:8c:a8:7a: 33:d2:e6:2e:b2:f7:2d:fc:09:0b:bf:b6:47:0f:f2:52:f0:4b: 68:c5:da:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHeW54DNiKwedx2OFZHvgvXdnvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTExMDMxMDI3MThaFw0yNTExMDYxMjM1MThaMDMxMTAvBgNV BAMTKDI4NEVGQUM2MEQ1M0EyQzBBNjVCN0FGREVGMkE2MURGMDRFRDA4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Aw33xINfnF8wCP48i6puAwFO KFlwE+d0YCPdwuxaVlHprJNta5r2zFnqwxA6HYB0YF0GWc1AKK3r6iTmN0EF269o aZ4XhYkdvxwALtFCbP+eHKyWGt6esR/sl25pnh7Ii/5o0L6wRjGXRq6gxcAcmXo6 1Pq2cMcuA2CMq47LEFOQ1CQXWwi8UTMaUHMT7O+H5DzXhu15M8NnBwKtSmj/4TTG 0yS7NcbliNtNHdo3fBstgNexF1Grd72DjvM33uYXMhN5p1TC6EPhxcNfNKlp/Uus rjFD+STwlekCO6rNNWm//kV0rZ0nYGOOtSshLF3gbVrpRcFPovgsAuoNuBVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKE76xg1TosCmW3r97yph3wTtCOcwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHABNTFeSlcjzll25Hda6641gnqVnyW7blWZ YVPirdj0a9YXuNgLiY2VNLqH3Q8rtEmlZmDLMqDXKY0gJq8xNWk0NqgGt3cUkJQZ j/+2mzihxuOwUL/2PkV8UcmVCaIQQE6IF01dd/WASziOOXnS0+BqPj99dLoih/Xn qrKbd7kuM17YVWfztygre51kXZwlOYBPl+hqC03I9d8nQHD7vX0sGJioPBt3cV1S jZSd4DRpgT0MJpJrRcHl6osCwBiA6O7eGTJGrnKPr9lQh6lDQ91Es0U652It9Ho3 XD0Zq7LuIaCQDZNZy4yoejPS5i6y9y38CQu/tkcP8lLwS2jF2uQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:08:53 2025 by rpki-client