$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: TNs/lTZAtYmPNef8snhyZAw834+8HIxejacYZcuk0BI= Subject key identifier: A1:12:55:3E:4A:DB:AA:49:C7:1D:4E:B7:92:A8:9C:2D:5D:19:AC:D9 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 4AF5EFB130E81E7D5110436C31E809EE9247F99C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 04F8 Signing time: Wed 06 Aug 2025 11:21:46 +0000 Manifest this update: Wed 06 Aug 2025 11:16:46 +0000 Manifest next update: Sat 09 Aug 2025 16:07:46 +0000 Files and hashes: 1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=) 2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) 3: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: cLyFIT2oaut2xCQTg8vHaVrwqS/BMpBD3l/F2CTgNC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f5:ef:b1:30:e8:1e:7d:51:10:43:6c:31:e8:09:ee:92:47:f9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Aug 6 11:16:46 2025 GMT Not After : Aug 9 16:07:46 2025 GMT Subject: CN=A112553E4ADBAA49C71D4EB792A89C2D5D19ACD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b0:02:84:68:b9:e6:c3:e4:71:b3:c4:ad:2f: 08:4a:30:f3:8e:30:11:2b:13:38:43:a8:bf:83:39: 11:a9:54:81:ef:a5:8c:44:c4:30:98:f7:26:c8:54: c3:33:7c:f8:fe:5c:93:73:f0:25:3c:2d:a4:43:18: 32:8f:80:66:95:7b:22:80:39:97:10:2c:ec:08:ac: 2a:9d:47:db:5e:08:c5:14:44:1c:16:85:dc:c7:76: 6b:c5:39:77:1b:50:65:50:60:78:e7:5c:d5:77:cc: 4a:e0:f2:cb:43:ed:a1:c0:e3:c9:6a:fa:69:5d:01: 48:c2:41:53:fb:4f:0a:2c:f3:a5:16:3f:d3:ec:7f: cc:e8:2e:51:75:a0:f1:25:19:9a:64:75:aa:e6:ec: 66:e0:8b:15:e5:bb:32:cc:2c:78:7e:9a:d4:e8:84: 2f:e5:ab:20:19:aa:38:c7:52:93:3a:16:e0:60:40: 13:fa:f8:3f:d5:e7:77:1b:3f:f8:bf:2a:47:ff:00: 65:f8:7c:90:fb:4a:af:49:d3:76:7e:7b:7c:32:00: c0:cd:2c:0d:c8:ea:37:b9:ef:74:e6:22:88:d2:f2: d8:10:ba:65:85:f2:35:c3:91:57:d9:ae:a2:4a:90: 13:fd:7a:17:0f:04:d6:10:03:9a:b2:fc:18:32:5d: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:12:55:3E:4A:DB:AA:49:C7:1D:4E:B7:92:A8:9C:2D:5D:19:AC:D9 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:58:46:d4:df:98:73:78:25:a0:0e:77:ad:6d:ca:db:59:a3: 63:16:d8:c2:58:c0:ab:4e:6b:78:f8:02:8a:b2:c8:05:1b:68: db:24:c4:8b:6d:b5:34:d5:8d:00:b2:8d:92:5d:31:99:ac:7f: 3f:26:c4:cd:4c:35:23:90:53:cd:13:b8:ec:e0:1a:8e:e2:11: 95:1a:46:32:4b:82:55:6b:c3:4d:5c:bd:bf:24:e9:3a:13:4b: af:37:a8:f4:66:95:b9:3e:3d:10:0e:f1:2b:36:61:1f:d7:5f: d6:77:4d:5a:a9:8e:aa:9c:25:10:59:c6:a1:77:6e:64:87:f3: 1e:24:09:01:de:af:fe:55:2c:40:05:10:be:df:5b:56:54:39: 65:80:9a:cd:02:69:af:61:c3:06:7e:5e:9c:07:81:ba:a0:03: 30:95:8a:73:b4:65:d2:8c:bf:1b:47:17:d1:f1:55:b9:30:7b: fd:f4:5a:31:db:4d:c7:8b:62:22:86:43:82:ff:0e:bd:51:03: 3a:02:05:b4:7e:e8:fe:b8:1b:eb:77:e0:01:88:ba:91:2c:f9: cb:73:a7:0a:66:80:f2:c8:9b:66:89:57:19:fd:5b:71:a0:67: af:60:e2:cd:08:7d:c3:47:58:93:b7:e8:cf:8f:5c:e2:62:b0: 1f:10:d3:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvXvsTDoHn1REENsMegJ7pJH+ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTA4MDYxMTE2NDZaFw0yNTA4MDkxNjA3NDZaMDMxMTAvBgNV BAMTKEExMTI1NTNFNEFEQkFBNDlDNzFENEVCNzkyQTg5QzJENUQxOUFDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdsAKEaLnmw+Rxs8StLwhKMPOO MBErEzhDqL+DORGpVIHvpYxExDCY9ybIVMMzfPj+XJNz8CU8LaRDGDKPgGaVeyKA OZcQLOwIrCqdR9teCMUURBwWhdzHdmvFOXcbUGVQYHjnXNV3zErg8stD7aHA48lq +mldAUjCQVP7Twos86UWP9Psf8zoLlF1oPElGZpkdarm7GbgixXluzLMLHh+mtTo hC/lqyAZqjjHUpM6FuBgQBP6+D/V53cbP/i/Kkf/AGX4fJD7Sq9J03Z+e3wyAMDN LA3I6je573TmIojS8tgQumWF8jXDkVfZrqJKkBP9ehcPBNYQA5qy/BgyXYwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoRJVPkrbqknHHU63kqicLV0ZrNkwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9YRtTfmHN4JaAOd61tyttZo2MW2MJYwKtO a3j4AoqyyAUbaNskxItttTTVjQCyjZJdMZmsfz8mxM1MNSOQU80TuOzgGo7iEZUa RjJLglVrw01cvb8k6ToTS683qPRmlbk+PRAO8Ss2YR/XX9Z3TVqpjqqcJRBZxqF3 bmSH8x4kCQHer/5VLEAFEL7fW1ZUOWWAms0Caa9hwwZ+XpwHgbqgAzCVinO0ZdKM vxtHF9HxVbkwe/30WjHbTceLYiKGQ4L/Dr1RAzoCBbR+6P64G+t34AGIupEs+ctz pwpmgPLIm2aJVxn9W3GgZ69g4s0IfcNHWJO36M+PXOJisB8Q0+w= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:56 2025 by rpki-client