$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: RgaEvd57xD1aQ6DEuQGkfnAgCzLMPCf+7J3jIQcntZc= Subject key identifier: 5B:40:85:AC:A5:77:E8:7D:9F:0E:AF:CA:9E:ED:EC:5E:51:3D:92:4D Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 7178A1B718A6F3624B6E9874EE2002F0D6D66124 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 0250 Signing time: Wed 18 Jun 2025 11:21:48 +0000 Manifest this update: Wed 18 Jun 2025 11:16:48 +0000 Manifest next update: Sat 21 Jun 2025 17:44:48 +0000 Files and hashes: 1: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: EUT6CbjOTmZfSa4GAVb99tMgody1042MeBq9kPz0lcg=) 2: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=) 3: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:78:a1:b7:18:a6:f3:62:4b:6e:98:74:ee:20:02:f0:d6:d6:61:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Jun 18 11:16:48 2025 GMT Not After : Jun 21 17:44:48 2025 GMT Subject: CN=5B4085ACA577E87D9F0EAFCA9EEDEC5E513D924D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:d1:79:a2:58:07:28:6b:10:92:ae:56:5c: 92:b9:28:d8:85:6f:20:90:d9:4e:eb:4a:13:cf:b8: df:f9:b2:05:67:00:4e:e3:75:a6:4e:be:ed:b6:cd: 84:9a:71:3e:9a:06:4c:e8:ab:38:4d:67:69:7e:4c: fd:a6:57:ed:1e:eb:e7:b6:8c:b7:bc:fe:81:d5:45: 53:98:75:bc:f8:5a:e4:c1:d5:1a:69:d7:73:3f:aa: 37:71:ad:99:09:a5:9a:57:7e:8f:c3:a0:12:a2:03: 15:ef:16:1a:23:0e:51:97:74:c8:9b:8d:3c:2f:98: a9:8b:ab:d3:cd:41:a3:ed:eb:10:a2:da:13:00:2f: 75:86:fa:f6:71:63:f6:f0:64:a2:7a:a1:66:bb:ba: d9:cc:d2:eb:65:3e:52:5b:a2:b9:71:f1:d0:f0:b0: 17:73:73:5b:f9:72:0b:dd:49:97:b6:c0:39:81:6d: d1:67:f8:f7:00:41:1c:db:4d:ed:bf:b9:cb:a1:93: da:30:b6:2f:0c:8e:19:59:b0:60:6a:05:57:25:f7: 20:bd:97:1e:7c:b5:66:7c:d1:c2:08:6b:45:88:6a: 6b:f7:53:94:01:50:07:82:ae:fd:59:f2:53:83:4a: ee:43:71:3a:85:be:a8:20:50:06:e8:bd:46:7f:8f: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:40:85:AC:A5:77:E8:7D:9F:0E:AF:CA:9E:ED:EC:5E:51:3D:92:4D X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:9e:00:0c:bd:f6:1e:94:25:c1:8f:fc:dc:ef:39:a7:50:3f: f4:85:12:c0:d4:1d:15:f1:99:68:68:d9:a5:f3:1c:fb:14:e1: 98:4a:0a:cc:38:c5:ee:ca:8f:1f:e8:48:6d:42:7e:4a:b1:a3: 8e:df:f2:c1:9c:e5:9b:b9:0f:19:d8:35:a4:13:98:fa:89:97: dc:ad:a6:86:a8:3d:6c:ac:e2:f9:a4:95:bf:94:28:d3:33:ab: fa:7a:42:9a:95:aa:63:98:e4:78:48:e5:b4:1c:7a:b1:de:71: a6:bf:18:9c:0a:26:ee:24:13:12:8c:2f:0e:94:e5:36:f5:d5: 1c:46:89:ef:4c:36:f4:97:ef:48:2f:e9:c1:34:8c:70:f8:d5: 93:18:8f:90:53:22:ae:31:47:f8:f0:2a:ad:61:85:71:85:ef: 16:e9:6d:dc:8a:f7:6b:87:c3:7c:b1:90:ac:bf:31:b6:d6:05: 86:9a:dd:87:ef:08:ee:4f:81:c4:e0:33:61:ce:21:b4:24:66: 29:2f:12:74:3e:5c:d0:49:ed:60:ab:3a:24:c1:8e:a2:43:c7: 36:bb:ce:56:bb:93:1d:d4:45:b9:07:e6:fe:0c:fd:b0:49:b7: c2:d7:19:fe:31:ef:16:15:db:86:d7:3a:48:f1:8c:ad:be:92: 43:2e:ed:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXihtxim82JLbph07iAC8NbWYSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTA2MTgxMTE2NDhaFw0yNTA2MjExNzQ0NDhaMDMxMTAvBgNV BAMTKDVCNDA4NUFDQTU3N0U4N0Q5RjBFQUZDQTlFRURFQzVFNTEzRDkyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66dF5olgHKGsQkq5WXJK5KNiF byCQ2U7rShPPuN/5sgVnAE7jdaZOvu22zYSacT6aBkzoqzhNZ2l+TP2mV+0e6+e2 jLe8/oHVRVOYdbz4WuTB1Rpp13M/qjdxrZkJpZpXfo/DoBKiAxXvFhojDlGXdMib jTwvmKmLq9PNQaPt6xCi2hMAL3WG+vZxY/bwZKJ6oWa7utnM0utlPlJborlx8dDw sBdzc1v5cgvdSZe2wDmBbdFn+PcAQRzbTe2/ucuhk9owti8MjhlZsGBqBVcl9yC9 lx58tWZ80cIIa0WIamv3U5QBUAeCrv1Z8lODSu5DcTqFvqggUAbovUZ/j/HDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0CFrKV36H2fDq/Knu3sXlE9kk0wHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOeAAy99h6UJcGP/NzvOadQP/SFEsDUHRXx mWho2aXzHPsU4ZhKCsw4xe7Kjx/oSG1Cfkqxo47f8sGc5Zu5DxnYNaQTmPqJl9yt poaoPWys4vmklb+UKNMzq/p6QpqVqmOY5HhI5bQcerHecaa/GJwKJu4kExKMLw6U 5Tb11RxGie9MNvSX70gv6cE0jHD41ZMYj5BTIq4xR/jwKq1hhXGF7xbpbdyK92uH w3yxkKy/MbbWBYaa3YfvCO5PgcTgM2HOIbQkZikvEnQ+XNBJ7WCrOiTBjqJDxza7 zla7kx3URbkH5v4M/bBJt8LXGf4x7xYV24bXOkjxjK2+kkMu7TM= -----END CERTIFICATE-----Generated at Wed Jun 18 17:53:16 2025 by rpki-client