$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: RKowkSOECJpdo4OttOt64QkydCA3XVRbtf8Co0KKT9A= Subject key identifier: B3:EC:07:98:1F:74:6D:55:4B:02:EC:87:EE:49:B8:66:4F:34:5C:B7 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 3B9A08E04999D4F82A8BF4274D6C0F174B11F0F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 0266 Signing time: Thu 07 Aug 2025 13:31:52 +0000 Manifest this update: Thu 07 Aug 2025 13:26:52 +0000 Manifest next update: Sun 10 Aug 2025 21:15:52 +0000 Files and hashes: 1: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=) 2: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=) 3: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: rytQqZuCR0KcI3sSEItCueOxMt9uvmfcQXkd56aIiRI=) 4: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9a:08:e0:49:99:d4:f8:2a:8b:f4:27:4d:6c:0f:17:4b:11:f0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Aug 7 13:26:52 2025 GMT Not After : Aug 10 21:15:52 2025 GMT Subject: CN=B3EC07981F746D554B02EC87EE49B8664F345CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:54:1d:4b:e1:07:5f:77:c8:40:7b:d7:c6: f3:56:6b:6c:e6:42:0a:1e:ae:e6:26:1f:ed:21:d9: ee:4b:a3:06:d5:27:ee:62:b7:9b:04:e4:2b:62:cd: 07:b8:95:56:fa:fa:d5:51:5c:32:b4:9d:dd:4e:14: 38:26:29:39:c4:ce:9b:41:7f:f2:ae:58:52:e4:0d: 3b:93:38:fd:2f:88:a9:29:5b:c2:cc:a3:bc:24:62: 81:64:9a:86:c4:55:a7:e3:95:e7:6e:6f:f9:25:90: 08:df:ad:46:94:e8:b6:1f:36:b0:25:18:4d:d1:4d: b4:4a:ca:81:2e:a5:74:fa:02:ef:1a:d3:46:da:35: e9:fb:81:4c:88:38:07:5b:fd:57:9c:8e:27:f3:31: 7c:15:a3:97:75:8b:73:10:fc:b4:69:61:b8:61:f6: 7c:89:e6:9d:2f:3e:b2:b1:40:2b:f7:8a:0d:81:41: 21:65:48:04:3c:d7:d9:45:70:f7:29:b6:e7:79:92: b1:cc:2e:8a:c6:91:67:2a:c4:6f:77:c6:25:a9:10: 87:6e:a5:0d:a4:c6:05:51:79:f3:5c:9f:bf:bd:98: 3a:48:e2:0e:84:f1:e3:c4:23:d5:5b:e2:91:1a:c9: 79:4b:0b:cc:f2:38:a5:56:fb:b6:b7:21:32:0e:fd: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EC:07:98:1F:74:6D:55:4B:02:EC:87:EE:49:B8:66:4F:34:5C:B7 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e6:38:90:63:6e:66:77:14:03:8f:38:47:c3:e1:f6:b4:b7: 63:ab:57:22:f1:78:3f:98:b2:c2:0a:d6:34:59:de:3f:37:61: 02:96:63:ae:d9:24:b6:26:47:21:af:97:a8:70:48:96:f1:99: 7d:8b:a3:e0:ab:a3:33:12:74:e5:da:e0:f5:53:ba:79:04:46: 0c:6e:ee:89:76:29:89:a0:ea:62:8b:e8:80:5c:fc:4a:53:97: 3a:bc:0d:cb:ce:b0:4c:72:2b:9a:42:99:1d:af:2d:d7:78:18: 94:19:7a:96:05:09:fc:e8:5a:cb:1d:b9:c3:9c:88:b7:27:b0: 87:24:1e:39:4e:22:ee:f3:46:74:93:37:6e:c6:ad:84:55:11: a3:40:c3:90:5c:d8:c7:e1:4b:f5:2e:d1:f4:a0:28:61:ef:c5: cd:80:99:f9:aa:0d:30:76:e8:16:31:03:6d:ad:47:b4:91:38: 96:93:f0:a3:a7:83:83:ec:7d:da:fc:b1:7e:5f:21:08:f2:89: d7:f0:57:a7:3d:8b:83:43:1b:87:ce:2e:ab:68:5e:da:9c:28: ea:19:08:51:66:d3:b0:61:65:8a:0d:f6:e2:a8:14:19:37:7c: cd:b4:55:13:47:72:4b:54:55:bc:c0:cb:d3:ed:3c:5f:02:87: c1:41:07:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5oI4EmZ1Pgqi/QnTWwPF0sR8PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTA4MDcxMzI2NTJaFw0yNTA4MTAyMTE1NTJaMDMxMTAvBgNV BAMTKEIzRUMwNzk4MUY3NDZENTU0QjAyRUM4N0VFNDlCODY2NEYzNDVDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyVQdS+EHX3fIQHvXxvNWa2zm QgoeruYmH+0h2e5LowbVJ+5it5sE5CtizQe4lVb6+tVRXDK0nd1OFDgmKTnEzptB f/KuWFLkDTuTOP0viKkpW8LMo7wkYoFkmobEVafjledub/klkAjfrUaU6LYfNrAl GE3RTbRKyoEupXT6Au8a00baNen7gUyIOAdb/VecjifzMXwVo5d1i3MQ/LRpYbhh 9nyJ5p0vPrKxQCv3ig2BQSFlSAQ819lFcPcptud5krHMLorGkWcqxG93xiWpEIdu pQ2kxgVRefNcn7+9mDpI4g6E8ePEI9Vb4pEayXlLC8zyOKVW+7a3ITIO/SsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+wHmB90bVVLAuyH7km4Zk80XLcwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrmOJBjbmZ3FAOPOEfD4fa0t2OrVyLxeD+Y ssIK1jRZ3j83YQKWY67ZJLYmRyGvl6hwSJbxmX2Lo+CrozMSdOXa4PVTunkERgxu 7ol2KYmg6mKL6IBc/EpTlzq8DcvOsExyK5pCmR2vLdd4GJQZepYFCfzoWssducOc iLcnsIckHjlOIu7zRnSTN27GrYRVEaNAw5Bc2MfhS/Uu0fSgKGHvxc2AmfmqDTB2 6BYxA22tR7SROJaT8KOng4Psfdr8sX5fIQjyidfwV6c9i4NDG4fOLqtoXtqcKOoZ CFFm07BhZYoN9uKoFBk3fM20VRNHcktUVbzAy9PtPF8Ch8FBBxw= -----END CERTIFICATE-----Generated at Fri Aug 8 12:51:29 2025 by rpki-client