$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: 2Yyta3vecw4/moT3Kur+9KPKufJAqBwvFahGgIkFTF4= Subject key identifier: 01:B8:E9:39:5C:72:66:2F:D6:B4:54:46:D8:BE:D0:32:2A:95:F8:A8 Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 6444838E4956C5A68EAAF8402FFD369B0278AD6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: F5 Signing time: Sun 02 Nov 2025 19:50:44 +0000 Manifest this update: Sun 02 Nov 2025 19:45:44 +0000 Manifest next update: Thu 06 Nov 2025 03:55:44 +0000 Files and hashes: 1: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: YqyxswfHIwylTwGGIMZG3FQdsI1euasSQeuLRbqT/LU=) 2: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: DLWclu8uy8JSlK6YCxN5IXWbtmAWhKFu/en0aAcy1Mk=) 3: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=) 4: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: p4y1Kid4bua3BAmOQsrU62lGS5brjVvxzb0i5nn8dXA=) 5: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w=) 6: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:44:83:8e:49:56:c5:a6:8e:aa:f8:40:2f:fd:36:9b:02:78:ad:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Nov 2 19:45:44 2025 GMT Not After : Nov 6 03:55:44 2025 GMT Subject: CN=01B8E9395C72662FD6B45446D8BED0322A95F8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:0f:46:c9:1d:c7:99:4e:1c:bb:13:0d:75: d4:3c:38:00:3e:51:aa:14:50:8a:3f:1f:ff:25:e9: 15:fb:44:be:90:08:27:10:d3:2e:11:00:e0:49:06: 11:be:32:bb:ea:31:03:7f:ad:b3:d5:66:03:1d:c4: 28:4d:c8:e7:b5:90:89:52:d6:69:31:c3:94:7d:66: f3:39:13:e8:6a:de:0b:46:07:e3:21:9f:79:44:92: 16:92:fd:da:75:18:13:26:90:0e:c1:cb:3f:8d:8d: 1a:07:30:4b:7b:d7:b5:fd:5c:88:91:8b:c0:4e:2a: aa:8d:44:be:5e:45:99:7c:99:97:49:31:25:1e:36: 8f:4e:6d:2c:a5:db:ba:2f:2e:5f:3d:28:30:11:95: 13:a9:eb:b1:e0:32:c8:29:7c:65:0a:76:e5:f5:98: 1c:6c:8d:85:ba:2f:06:69:19:19:32:08:c9:40:64: 1f:8c:40:b9:06:66:f8:ac:8e:26:79:8d:9f:18:ea: 75:37:3d:3d:5d:ac:d1:04:fd:71:6c:ad:19:22:5b: 92:ea:e5:c5:a7:a6:a0:7b:5b:ae:1c:3e:50:b7:d0: 12:e1:82:6a:9d:c6:55:36:ea:aa:89:9e:88:46:01: e1:d4:f3:d7:ec:b1:ee:bc:1d:54:7b:d5:47:9a:25: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B8:E9:39:5C:72:66:2F:D6:B4:54:46:D8:BE:D0:32:2A:95:F8:A8 X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:54:9e:2d:c0:df:94:21:1b:fe:b9:10:51:08:fc:d6:2e:3f: e6:a4:8e:21:a5:f2:ef:66:dd:dd:5e:de:89:d2:d5:d4:80:8c: 49:3d:ed:14:e2:e6:80:ac:ee:50:8a:16:b8:a5:43:3a:8a:f2: 0f:0f:8f:7a:37:e8:59:8e:63:ac:ca:75:b8:43:e4:b1:ff:a0: 9f:ab:2d:f0:ce:7e:f8:6c:39:11:c8:70:d7:20:bb:90:4c:e0: 95:49:58:73:52:89:c8:54:89:a9:fe:e9:5b:9f:6c:c7:4b:a1: 37:76:51:9c:0d:89:ab:b0:e2:6a:07:05:15:d1:31:52:75:af: d7:f3:8c:2d:3c:bd:7c:8b:37:fa:f5:43:1c:f1:ef:6d:16:a4: 9b:92:2c:78:6c:54:b9:f0:8f:d9:8c:81:aa:27:65:a8:e1:56: 58:2a:49:d0:6d:52:6a:0b:62:84:ab:69:f9:c1:11:68:3d:3a: 76:14:6c:3d:19:01:ae:56:17:6d:75:1b:f4:f3:82:b7:d5:90: ff:ab:5a:df:9d:44:95:d5:1f:fc:79:d8:3b:a5:20:1a:12:76: d0:06:28:04:23:cf:54:5c:83:e8:17:85:ba:e2:6e:0f:54:35: 26:ba:02:d8:f0:42:54:a2:a0:b1:8d:cf:51:63:24:f9:de:81: 2b:ce:a5:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZESDjklWxaaOqvhAL/02mwJ4rW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNTExMDIxOTQ1NDRaFw0yNTExMDYwMzU1NDRaMDMxMTAvBgNV BAMTKDAxQjhFOTM5NUM3MjY2MkZENkI0NTQ0NkQ4QkVEMDMyMkE5NUY4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7g9GyR3HmU4cuxMNddQ8OAA+ UaoUUIo/H/8l6RX7RL6QCCcQ0y4RAOBJBhG+MrvqMQN/rbPVZgMdxChNyOe1kIlS 1mkxw5R9ZvM5E+hq3gtGB+Mhn3lEkhaS/dp1GBMmkA7Byz+NjRoHMEt717X9XIiR i8BOKqqNRL5eRZl8mZdJMSUeNo9ObSyl27ovLl89KDARlROp67HgMsgpfGUKduX1 mBxsjYW6LwZpGRkyCMlAZB+MQLkGZvisjiZ5jZ8Y6nU3PT1drNEE/XFsrRkiW5Lq 5cWnpqB7W64cPlC30BLhgmqdxlU26qqJnohGAeHU89fsse68HVR71UeaJSpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAbjpOVxyZi/WtFRG2L7QMiqV+KgwHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRUni3A35QhG/65EFEI/NYuP+akjiGl8u9m 3d1e3onS1dSAjEk97RTi5oCs7lCKFrilQzqK8g8Pj3o36FmOY6zKdbhD5LH/oJ+r LfDOfvhsORHIcNcgu5BM4JVJWHNSichUian+6VufbMdLoTd2UZwNiauw4moHBRXR MVJ1r9fzjC08vXyLN/r1Qxzx720WpJuSLHhsVLnwj9mMgaonZajhVlgqSdBtUmoL YoSrafnBEWg9OnYUbD0ZAa5WF211G/TzgrfVkP+rWt+dRJXVH/x52DulIBoSdtAG KAQjz1Rcg+gXhbribg9UNSa6AtjwQlSioLGNz1FjJPnegSvOpZk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:55 2025 by rpki-client