$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: bfvXFNHatBP3doiZHe5x4yEk6LOsxju9UUWbPGIGPWE= Subject key identifier: 6B:F5:70:CC:32:C6:D1:2B:03:E3:FB:23:0E:4C:0E:72:18:A9:C5:B3 Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 7BFED87AC7C2F9DE8F282F706B31D85F1DB36A0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 04F7 Signing time: Thu 07 Aug 2025 10:02:13 +0000 Manifest this update: Thu 07 Aug 2025 09:57:13 +0000 Manifest next update: Sun 10 Aug 2025 15:40:13 +0000 Files and hashes: 1: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=) 2: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: bKTzBiWybZAmPFx/QF/OfN0hUCH24bxoaz/E4R/fNTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 15:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fe:d8:7a:c7:c2:f9:de:8f:28:2f:70:6b:31:d8:5f:1d:b3:6a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Aug 7 09:57:13 2025 GMT Not After : Aug 10 15:40:13 2025 GMT Subject: CN=6BF570CC32C6D12B03E3FB230E4C0E7218A9C5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:31:be:9b:30:29:c0:59:26:43:bc:03:90: e4:56:4f:10:a2:45:df:bc:59:d7:72:ea:35:e7:7f: 79:5a:a7:57:7f:5f:72:d2:6c:c0:b3:3e:08:31:cb: 57:d7:37:67:6d:ed:c3:24:b7:17:e6:77:fa:8e:70: 15:8f:d5:29:98:98:f5:8a:06:1a:f8:30:0e:33:18: 46:31:0f:10:c1:4e:76:33:de:05:9d:61:1e:d6:ac: e2:ee:89:85:19:fe:a6:11:26:3d:b7:87:b8:7f:cd: 85:eb:d3:e0:03:e7:6f:c3:14:81:2e:36:44:75:e9: c0:cd:69:6a:72:33:59:ac:7c:1e:7f:70:4c:08:cf: b3:36:48:5e:e7:53:ff:15:eb:ba:49:85:71:f0:6d: fd:9c:50:ec:ca:80:f4:e0:86:a8:f0:e6:da:9b:ea: 4e:d5:dc:d6:b4:d5:24:16:e2:df:b2:ad:b8:f0:19: b3:3f:fa:5a:f6:7f:34:26:9d:52:1f:67:1c:b6:84: de:f7:40:98:45:f8:5b:7a:2f:26:bb:f5:51:89:f0: 9f:fb:92:3e:55:83:89:41:65:fc:83:5f:c3:45:26: 5f:d6:0d:60:57:15:be:f6:69:9e:e3:a6:8f:a0:74: 6a:58:ce:6d:33:b4:68:43:21:0a:83:a7:54:cf:27: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F5:70:CC:32:C6:D1:2B:03:E3:FB:23:0E:4C:0E:72:18:A9:C5:B3 X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:26:93:33:10:de:c5:c9:c4:58:42:cc:a2:6e:0e:c7:f7:09: bf:18:6b:af:66:79:ba:34:93:44:bc:35:94:d7:72:9e:b3:a4: 0b:26:b3:82:3e:4e:50:0a:6f:58:4b:9f:67:cf:0b:8c:35:bd: f5:37:1c:42:e9:79:86:ee:c8:c7:cd:a3:35:1a:1f:6a:ed:06: 74:4e:76:52:b0:f0:29:0e:4c:5d:a3:99:09:98:98:35:fe:39: d3:04:c9:9f:18:09:08:8a:98:c0:06:e4:b6:d7:1f:8a:b6:f7: 05:fe:0c:e3:03:59:43:6b:03:68:6f:cf:2f:03:87:d7:a9:60: cd:b1:d8:81:a6:03:77:dc:eb:52:71:b9:60:d0:b2:55:fe:16: 31:b1:36:15:02:88:fd:68:61:46:f4:30:6e:f1:1b:50:d2:c6: 5b:31:da:67:7c:0f:67:fb:d6:3a:e1:f9:3a:b4:e4:b7:55:36: 91:7f:f8:e5:3f:5d:bb:32:5a:5a:28:1b:5e:37:33:22:ec:1a: 57:13:5e:e7:0e:ec:d0:0a:8a:1e:e2:90:40:cc:af:56:19:00: 77:a8:de:7a:d4:ad:97:76:3b:bc:e1:46:33:3f:d3:0f:36:d9: 79:17:17:0f:45:70:68:45:fd:46:10:53:44:eb:e1:c2:75:95: 67:24:76:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/7YesfC+d6PKC9wazHYXx2zag4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNTA4MDcwOTU3MTNaFw0yNTA4MTAxNTQwMTNaMDMxMTAvBgNV BAMTKDZCRjU3MENDMzJDNkQxMkIwM0UzRkIyMzBFNEMwRTcyMThBOUM1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/zG+mzApwFkmQ7wDkORWTxCi Rd+8Wddy6jXnf3lap1d/X3LSbMCzPggxy1fXN2dt7cMktxfmd/qOcBWP1SmYmPWK Bhr4MA4zGEYxDxDBTnYz3gWdYR7WrOLuiYUZ/qYRJj23h7h/zYXr0+AD52/DFIEu NkR16cDNaWpyM1msfB5/cEwIz7M2SF7nU/8V67pJhXHwbf2cUOzKgPTghqjw5tqb 6k7V3Na01SQW4t+yrbjwGbM/+lr2fzQmnVIfZxy2hN73QJhF+Ft6Lya79VGJ8J/7 kj5Vg4lBZfyDX8NFJl/WDWBXFb72aZ7jpo+gdGpYzm0ztGhDIQqDp1TPJ50fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa/VwzDLG0SsD4/sjDkwOchipxbMwHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwmkzMQ3sXJxFhCzKJuDsf3Cb8Ya69mebo0 k0S8NZTXcp6zpAsms4I+TlAKb1hLn2fPC4w1vfU3HELpeYbuyMfNozUaH2rtBnRO dlKw8CkOTF2jmQmYmDX+OdMEyZ8YCQiKmMAG5LbXH4q29wX+DOMDWUNrA2hvzy8D h9epYM2x2IGmA3fc61JxuWDQslX+FjGxNhUCiP1oYUb0MG7xG1DSxlsx2md8D2f7 1jrh+Tq05LdVNpF/+OU/XbsyWlooG143MyLsGlcTXucO7NAKih7ikEDMr1YZAHeo 3nrUrZd2O7zhRjM/0w822XkXFw9FcGhF/UYQU0Tr4cJ1lWckdvc= -----END CERTIFICATE-----Generated at Thu Aug 7 20:15:43 2025 by rpki-client