$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: kQWjKV3YL5KwGTNZUvcL6WjbppVNurGSzvSMVI+StUs= Subject key identifier: F2:7E:07:83:59:2B:D8:BA:81:9E:DC:6B:E7:7E:E4:F0:C6:2C:43:42 Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 6C49C945516ED5A4154A6F29DF8CBA49B5E5B4A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 051F Signing time: Tue 04 Nov 2025 17:12:08 +0000 Manifest this update: Tue 04 Nov 2025 17:07:08 +0000 Manifest next update: Sat 08 Nov 2025 02:34:08 +0000 Files and hashes: 1: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: 94RScoOXr2V9PeYq1ZDXGz18HHvMB7pU9aTAWni6C68=) 2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:49:c9:45:51:6e:d5:a4:15:4a:6f:29:df:8c:ba:49:b5:e5:b4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Nov 4 17:07:08 2025 GMT Not After : Nov 8 02:34:08 2025 GMT Subject: CN=F27E0783592BD8BA819EDC6BE77EE4F0C62C4342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cd:52:cd:83:78:42:c5:cf:06:50:10:23:e9: e2:a2:ac:14:b4:0d:73:27:a4:a9:90:d4:f9:ca:38: 70:74:ea:6e:77:d4:3d:b0:59:2d:80:63:2d:b2:e5: d4:43:68:89:b7:6c:32:6c:25:1b:bd:0d:de:24:9e: 09:ec:49:7c:c2:38:f3:08:9b:e2:ad:74:a0:d6:57: 9e:e4:01:96:63:ef:85:90:0b:b8:2c:f4:76:1c:09: a1:90:d6:30:04:ab:f7:33:c6:12:c7:e6:b2:2e:aa: cc:ed:b6:4d:3c:d3:6e:4f:97:f0:19:7f:31:99:a5: 3b:67:ce:e6:c1:ac:13:3c:70:2e:72:59:61:74:34: 67:7d:fd:fe:d2:75:dd:28:94:a0:01:7b:b0:14:02: 98:0e:1a:53:ac:92:60:8d:4c:0b:13:f4:34:48:53: da:bd:06:a9:d6:5c:26:36:0d:f8:d3:84:97:96:b7: 5e:cf:cb:14:58:f7:e4:33:a2:c1:d4:bd:d2:90:fe: f9:62:65:a4:ea:16:c7:c8:de:8e:77:59:b7:07:58: 9f:71:51:26:a2:bf:7c:81:33:23:6a:fb:8c:32:db: 7c:08:cb:11:9b:88:95:a9:4d:15:5e:cb:41:9e:35: 3d:6f:18:fd:d6:49:55:e9:38:4d:17:42:89:d3:6f: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7E:07:83:59:2B:D8:BA:81:9E:DC:6B:E7:7E:E4:F0:C6:2C:43:42 X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6a:b9:b0:d0:fa:b6:e4:fe:a3:6d:3b:48:63:3f:59:20:75: 2c:59:4d:8b:7e:b1:37:55:7f:38:92:1b:0c:df:b4:0d:9d:9e: 00:38:ef:52:e8:a0:2b:81:f8:57:d8:df:86:ff:28:1e:05:20: cb:75:3c:9e:37:28:6b:7b:23:19:c5:67:07:d4:0d:7b:7b:40: 23:12:1f:85:e1:65:07:c6:15:38:2b:7a:03:4f:56:41:6d:9c: 56:0f:75:b0:66:95:e7:52:4d:4b:f6:4e:b8:39:48:8c:49:43: 0b:7e:21:64:08:2d:eb:42:c5:53:3b:6b:16:b3:d5:9c:ba:c2: 71:75:2c:01:9a:fa:1e:c6:f4:fd:b9:8a:09:6e:62:0d:03:c0: 4a:ae:4e:4b:ab:54:70:f4:3f:a4:eb:53:60:36:57:89:79:9d: 02:55:a8:bb:ec:70:51:e0:fb:e9:4d:9c:5c:77:88:ba:26:ab: ba:67:e2:f2:dd:62:bb:e0:35:37:67:b7:3e:de:dc:d6:f1:ee: 63:7e:4d:37:e1:4b:ad:16:59:e1:5a:0c:98:d5:07:c9:ef:54: b3:1d:9b:2d:02:04:4e:bd:d4:c2:e4:c7:82:fc:2e:6b:e3:18: 84:05:8c:7f:34:bf:e5:66:4c:4a:06:b5:7e:58:73:55:2f:03: dd:08:25:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEnJRVFu1aQVSm8p34y6SbXltKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNTExMDQxNzA3MDhaFw0yNTExMDgwMjM0MDhaMDMxMTAvBgNV BAMTKEYyN0UwNzgzNTkyQkQ4QkE4MTlFREM2QkU3N0VFNEYwQzYyQzQzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWzVLNg3hCxc8GUBAj6eKirBS0 DXMnpKmQ1PnKOHB06m531D2wWS2AYy2y5dRDaIm3bDJsJRu9Dd4kngnsSXzCOPMI m+KtdKDWV57kAZZj74WQC7gs9HYcCaGQ1jAEq/czxhLH5rIuqszttk08025Pl/AZ fzGZpTtnzubBrBM8cC5yWWF0NGd9/f7Sdd0olKABe7AUApgOGlOskmCNTAsT9DRI U9q9BqnWXCY2DfjThJeWt17PyxRY9+QzosHUvdKQ/vliZaTqFsfI3o53WbcHWJ9x USaiv3yBMyNq+4wy23wIyxGbiJWpTRVey0GeNT1vGP3WSVXpOE0XQonTbz1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8n4Hg1kr2LqBntxr537k8MYsQ0IwHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhqubDQ+rbk/qNtO0hjP1kgdSxZTYt+sTdV fziSGwzftA2dngA471LooCuB+FfY34b/KB4FIMt1PJ43KGt7IxnFZwfUDXt7QCMS H4XhZQfGFTgregNPVkFtnFYPdbBmledSTUv2Trg5SIxJQwt+IWQILetCxVM7axaz 1Zy6wnF1LAGa+h7G9P25igluYg0DwEquTkurVHD0P6TrU2A2V4l5nQJVqLvscFHg ++lNnFx3iLomq7pn4vLdYrvgNTdntz7e3Nbx7mN+TTfhS60WWeFaDJjVB8nvVLMd my0CBE691MLkx4L8LmvjGIQFjH80v+VmTEoGtX5Yc1UvA90IJVs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:47 2025 by rpki-client