$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: G0Qt4tDPg77UICqrYJ36R5OO+3MPE3NILzZbnoDrcUw= Subject key identifier: 50:CE:27:D4:50:45:90:1E:E0:C3:D9:51:F5:06:22:66:21:02:FE:9A Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 304D8710DAD28F9E9891F4E1803353A174BD2FD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: CE Signing time: Thu 07 Aug 2025 20:10:46 +0000 Manifest this update: Thu 07 Aug 2025 20:05:46 +0000 Manifest next update: Mon 11 Aug 2025 01:27:46 +0000 Files and hashes: 1: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w=) 2: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: p4y1Kid4bua3BAmOQsrU62lGS5brjVvxzb0i5nn8dXA=) 3: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=) 4: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=) 5: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: D7TRWTtk854lq56MtcCclI9+0v5u+FmyTOb9MDAG2CM=) 6: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: DLWclu8uy8JSlK6YCxN5IXWbtmAWhKFu/en0aAcy1Mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 01:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4d:87:10:da:d2:8f:9e:98:91:f4:e1:80:33:53:a1:74:bd:2f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Aug 7 20:05:46 2025 GMT Not After : Aug 11 01:27:46 2025 GMT Subject: CN=50CE27D45045901EE0C3D951F50622662102FE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:8c:e5:1b:57:e0:80:8e:66:4d:e3:df:d3: 13:77:0d:03:e3:c2:31:91:a7:86:d5:3e:52:2a:60: ca:91:c7:bb:c1:50:9e:42:f4:70:d6:95:ee:f1:2a: 9b:b7:af:59:21:d5:e7:60:a9:82:69:54:ba:a0:3d: a0:56:b5:18:31:97:46:97:12:06:34:0e:23:21:b3: c9:13:4d:10:ae:24:35:0c:4b:ac:ec:64:53:3b:3a: 71:b7:2f:7d:03:81:ab:5e:25:bd:68:c7:66:1c:51: 01:28:f8:83:1d:79:b2:6f:48:e5:0e:15:94:97:85: 7e:93:b4:8c:31:28:1a:b1:7c:02:5c:1d:af:95:42: d0:03:5b:f2:b2:e7:20:55:77:6c:28:3c:40:b9:27: 85:12:6e:a0:ac:ed:14:cc:e0:94:f6:d7:11:5e:00: 41:23:85:0d:93:d7:90:c5:97:86:15:2f:72:fb:0a: 49:30:08:17:9a:b6:7c:b9:44:6a:43:8b:41:fe:82: 96:96:9d:17:4e:ca:ff:18:60:fb:7a:f9:0e:a9:a4: ad:fb:2f:55:39:35:f8:58:0c:7e:10:1e:3c:06:32: fd:5f:64:45:e1:5c:e4:f7:8d:7a:12:67:26:c2:2c: ee:29:8a:17:15:26:ea:2b:73:a5:c7:4d:ae:bd:8d: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CE:27:D4:50:45:90:1E:E0:C3:D9:51:F5:06:22:66:21:02:FE:9A X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b5:4d:3f:06:62:f9:98:14:6f:9d:65:e9:ee:0e:73:f8:a2: be:b5:ae:bb:3d:cf:40:93:a0:25:08:9a:ce:ba:c6:7c:16:d3: 91:8d:e0:13:60:a8:cf:76:e0:f2:43:08:ad:e9:5d:41:08:92: 5f:cd:89:9f:cc:e4:71:5e:a3:b6:7f:0c:ca:a6:f9:aa:57:9c: 1b:57:98:c7:4d:46:19:68:b6:45:a0:e8:72:be:32:84:8f:22: b4:a3:be:0b:07:e6:19:e6:a8:a8:1a:69:69:7b:1d:17:38:3f: 1c:ac:16:2a:4e:d7:58:31:1a:f3:15:e0:df:78:49:dd:9a:cc: 7e:3f:1e:74:19:92:17:a0:c5:1e:41:05:7d:27:63:b3:c1:8e: c4:73:d8:84:ba:eb:75:df:0f:a3:74:a0:3d:14:49:5d:e7:0c: 34:90:dd:78:6a:18:79:7d:d9:27:0a:27:e0:38:04:d6:11:4f: 41:1f:22:a0:69:0b:c2:88:b1:fa:62:4f:11:39:d7:ca:71:bb: d0:3d:fa:db:9c:62:30:f9:c5:01:fe:26:e2:f3:e7:10:3d:89: dc:08:f2:b9:9b:63:bf:49:ec:58:1c:4e:75:93:3b:3c:71:a7: d3:20:4f:15:80:e5:0e:71:98:d6:64:6a:11:52:31:84:62:b8: 66:84:48:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUME2HENrSj56YkfThgDNToXS9L9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNTA4MDcyMDA1NDZaFw0yNTA4MTEwMTI3NDZaMDMxMTAvBgNV BAMTKDUwQ0UyN0Q0NTA0NTkwMUVFMEMzRDk1MUY1MDYyMjY2MjEwMkZFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFH4zlG1fggI5mTePf0xN3DQPj wjGRp4bVPlIqYMqRx7vBUJ5C9HDWle7xKpu3r1kh1edgqYJpVLqgPaBWtRgxl0aX EgY0DiMhs8kTTRCuJDUMS6zsZFM7OnG3L30DgateJb1ox2YcUQEo+IMdebJvSOUO FZSXhX6TtIwxKBqxfAJcHa+VQtADW/Ky5yBVd2woPEC5J4USbqCs7RTM4JT21xFe AEEjhQ2T15DFl4YVL3L7CkkwCBeatny5RGpDi0H+gpaWnRdOyv8YYPt6+Q6ppK37 L1U5NfhYDH4QHjwGMv1fZEXhXOT3jXoSZybCLO4pihcVJuorc6XHTa69jaGTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUM4n1FBFkB7gw9lR9QYiZiEC/powHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW1TT8GYvmYFG+dZenuDnP4or61rrs9z0CT oCUIms66xnwW05GN4BNgqM924PJDCK3pXUEIkl/NiZ/M5HFeo7Z/DMqm+apXnBtX mMdNRhlotkWg6HK+MoSPIrSjvgsH5hnmqKgaaWl7HRc4PxysFipO11gxGvMV4N94 Sd2azH4/HnQZkhegxR5BBX0nY7PBjsRz2IS663XfD6N0oD0USV3nDDSQ3XhqGHl9 2ScKJ+A4BNYRT0EfIqBpC8KIsfpiTxE518pxu9A9+tucYjD5xQH+JuLz5xA9idwI 8rmbY79J7FgcTnWTOzxxp9MgTxWA5Q5xmNZkahFSMYRiuGaESOE= -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:24 2025 by rpki-client