$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: kCoqxxhD7u9u251ipM5aZ+e37VX5gyXBbhjbiUIinU4= Subject key identifier: 6D:C7:B1:ED:98:6C:75:F4:2F:27:70:72:4E:4A:DD:BD:76:DB:81:49 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 1AC5E102C9491E914E9BCF30052ADD160B4ED789 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 034F Signing time: Wed 18 Jun 2025 21:11:19 +0000 Manifest this update: Wed 18 Jun 2025 21:06:19 +0000 Manifest next update: Sun 22 Jun 2025 02:23:19 +0000 Files and hashes: 1: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: o/XPIxEOoSM+ewVQORf2z9ekU/Am/x12mniWIOMm4l0=) 2: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) 3: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c5:e1:02:c9:49:1e:91:4e:9b:cf:30:05:2a:dd:16:0b:4e:d7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Jun 18 21:06:19 2025 GMT Not After : Jun 22 02:23:19 2025 GMT Subject: CN=6DC7B1ED986C75F42F2770724E4ADDBD76DB8149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:e9:90:27:77:2f:99:fc:d6:b6:2d:6b:35: 6e:0a:33:14:2b:b2:43:e0:c2:a0:44:59:a5:95:d6: f5:a0:90:0e:60:83:c7:46:1f:3c:65:2c:c8:bc:19: 18:84:31:d2:15:d0:a7:3e:8b:cb:5e:8b:22:82:16: aa:35:6c:c9:c0:2b:32:45:ab:96:a3:c3:8e:47:84: 38:62:82:6a:bc:55:6b:be:87:7c:ed:34:db:39:75: 0c:c3:ed:b3:ae:76:d4:ed:49:70:f6:39:9f:01:b1: 0b:a3:ca:09:dc:7d:56:45:c4:61:bd:a9:53:8f:37: c8:20:8b:c2:df:91:f0:ab:bd:c0:73:39:ef:c1:29: 39:9b:ae:a2:f6:fa:74:cc:65:13:ce:18:12:44:69: e2:00:9a:17:1b:79:ff:6c:78:57:1e:cc:3a:70:df: 75:e1:57:4a:ba:16:e9:3a:a3:87:46:da:33:6a:5d: 87:9c:2b:80:d8:6d:c9:80:84:b4:66:2d:91:a6:0f: f1:86:a2:07:93:b0:08:6b:43:bb:69:6b:21:18:cc: 1d:bf:98:0a:a4:49:ee:58:4c:de:b2:84:34:f7:48: eb:11:08:30:a1:10:b4:e5:81:e7:4c:05:c1:67:d4: ef:8c:a4:ef:c1:4a:4c:1c:15:68:e6:b5:ce:45:62: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C7:B1:ED:98:6C:75:F4:2F:27:70:72:4E:4A:DD:BD:76:DB:81:49 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:08:1b:61:cd:41:e0:d9:37:43:44:88:75:7f:2a:bc:ad:b7: cf:c5:a7:bb:85:10:a4:76:d1:2a:e2:cd:79:42:b2:b1:06:66: b3:81:da:79:e1:c9:ae:96:38:4f:96:1d:b2:ab:36:bf:45:73: 5d:1a:c0:ab:16:82:be:a7:6a:ad:45:48:46:76:dd:7b:9c:58: bd:25:65:c1:54:4b:44:ea:bb:8d:dc:47:3c:22:be:1e:23:2e: f9:0b:56:aa:c1:82:72:e3:7b:b3:fe:d2:6a:74:cf:c7:ff:5f: c2:c0:4e:95:46:6f:05:1d:d8:d8:86:04:ec:bc:70:d3:68:56: 4b:d5:54:11:fe:e0:38:42:39:1c:30:e4:94:3f:4e:f2:ad:50: e6:fa:26:2e:3d:4d:0e:f9:fc:8f:70:7a:8a:c4:55:b5:da:e2: 0a:04:8b:3c:50:a8:f6:ad:d8:c3:9f:ec:b9:38:a4:2c:d1:f4: 50:ed:69:22:c9:23:a4:bc:b7:a9:d8:0f:2c:ed:e4:ba:c2:bd: df:ba:46:28:17:31:56:f1:a6:06:9d:72:f0:00:1c:03:66:a2: 5a:36:54:45:a3:6e:df:59:46:15:af:64:0f:81:de:a0:ae:81: 77:6a:87:d9:52:3d:d4:44:d4:11:c2:02:ac:ae:12:76:94:dc: 7a:92:72:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsXhAslJHpFOm88wBSrdFgtO14kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTA2MTgyMTA2MTlaFw0yNTA2MjIwMjIzMTlaMDMxMTAvBgNV BAMTKDZEQzdCMUVEOTg2Qzc1RjQyRjI3NzA3MjRFNEFEREJENzZEQjgxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33+mQJ3cvmfzWti1rNW4KMxQr skPgwqBEWaWV1vWgkA5gg8dGHzxlLMi8GRiEMdIV0Kc+i8teiyKCFqo1bMnAKzJF q5ajw45HhDhigmq8VWu+h3ztNNs5dQzD7bOudtTtSXD2OZ8BsQujygncfVZFxGG9 qVOPN8ggi8LfkfCrvcBzOe/BKTmbrqL2+nTMZRPOGBJEaeIAmhcbef9seFcezDpw 33XhV0q6Fuk6o4dG2jNqXYecK4DYbcmAhLRmLZGmD/GGogeTsAhrQ7tpayEYzB2/ mAqkSe5YTN6yhDT3SOsRCDChELTlgedMBcFn1O+MpO/BSkwcFWjmtc5FYh5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbcex7ZhsdfQvJ3ByTkrdvXbbgUkwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8IG2HNQeDZN0NEiHV/Krytt8/Fp7uFEKR2 0SrizXlCsrEGZrOB2nnhya6WOE+WHbKrNr9Fc10awKsWgr6naq1FSEZ23XucWL0l ZcFUS0Tqu43cRzwivh4jLvkLVqrBgnLje7P+0mp0z8f/X8LATpVGbwUd2NiGBOy8 cNNoVkvVVBH+4DhCORww5JQ/TvKtUOb6Ji49TQ75/I9weorEVbXa4goEizxQqPat 2MOf7Lk4pCzR9FDtaSLJI6S8t6nYDyzt5LrCvd+6RigXMVbxpgadcvAAHANmolo2 VEWjbt9ZRhWvZA+B3qCugXdqh9lSPdRE1BHCAqyuEnaU3HqSctg= -----END CERTIFICATE-----Generated at Thu Jun 19 15:02:49 2025 by rpki-client