$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: CoAvPp+KwHAMld76Tvc9rHUrIiM6Mk6qATs2QBDGLNk= Subject key identifier: D3:0A:E5:CF:F7:D2:5A:9A:75:74:17:92:09:C7:9E:76:A8:DE:11:F1 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 326A3A47BDC37C5041C0B7E42AA9432780EAA71A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 0367 Signing time: Mon 11 Aug 2025 18:31:20 +0000 Manifest this update: Mon 11 Aug 2025 18:26:20 +0000 Manifest next update: Fri 15 Aug 2025 05:14:20 +0000 Files and hashes: 1: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) 2: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: 2uxz/x3YAqSwmVcGz6r9ftLnnwDJPwwEWdglnx1ys2Q=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 05:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6a:3a:47:bd:c3:7c:50:41:c0:b7:e4:2a:a9:43:27:80:ea:a7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Aug 11 18:26:20 2025 GMT Not After : Aug 15 05:14:20 2025 GMT Subject: CN=D30AE5CFF7D25A9A7574179209C79E76A8DE11F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:e0:e6:dc:c6:16:83:ae:70:dd:b8:90:9c: f2:52:d9:0e:f6:62:77:1b:44:24:17:d1:7c:b7:91: 9e:04:3b:78:60:93:e5:ce:9b:c6:2f:6e:f1:12:60: c0:f9:85:23:e8:e0:77:f1:de:30:3f:49:c2:42:e1: c1:10:bf:8d:09:0e:a2:24:24:70:e3:64:5b:f1:02: 55:a1:cd:dc:d1:b5:b5:61:51:4d:f1:0c:d0:c5:8a: af:93:7b:f2:92:69:39:74:e9:aa:e6:ee:d3:5b:b0: 3a:e1:f1:00:4a:06:da:d7:3f:60:42:95:7e:02:e3: 72:fc:76:01:c4:e4:ca:9c:5e:e9:4a:b4:fa:5f:35: f2:a7:38:40:4f:12:c6:d5:6e:0e:42:bc:7c:5e:e8: af:ae:28:fd:d7:b8:f2:77:fd:fb:30:8b:4e:3d:ce: a5:31:4a:29:42:10:99:38:8c:a5:a1:70:7e:d5:5b: 79:04:64:72:ed:c4:12:2d:96:34:71:ad:8b:75:db: b0:5a:b3:a5:06:9d:c4:0d:ce:5f:f5:c7:f4:d3:24: 78:4a:3b:af:1e:c5:74:1a:83:54:39:72:7d:e5:10: 09:c1:9f:10:58:66:0d:bb:28:34:9a:11:2f:48:e6: cc:0b:19:9c:d3:10:b9:71:26:44:c9:e1:c1:24:0d: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0A:E5:CF:F7:D2:5A:9A:75:74:17:92:09:C7:9E:76:A8:DE:11:F1 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fb:1f:77:6c:2b:87:d4:e9:02:22:a0:11:a1:c1:51:4a:44: 35:cf:1a:39:04:2c:db:90:b3:58:52:75:b3:fc:08:2c:84:ed: 1f:13:38:f6:6e:20:5f:b4:34:30:fd:2f:15:71:d1:49:46:2d: b0:71:11:42:7c:47:92:f4:c9:78:a8:b2:3a:21:b2:73:91:da: 0a:29:14:1e:5a:b0:70:cb:ad:ca:c6:87:12:4d:f4:f1:ce:ce: ae:58:50:46:9f:55:a1:ae:af:94:1b:91:fc:ec:fa:4e:43:f5: 35:24:e2:10:92:df:d2:ba:e0:ec:2e:f7:9e:f1:9e:6d:6c:27: 57:ca:53:34:ee:07:f3:f4:fc:06:0c:76:f4:b4:10:a0:4d:e0: 13:21:a4:0c:4d:fa:c2:77:1a:58:35:05:40:d3:d2:6e:76:9f: a7:2c:67:f9:10:ff:83:9c:94:a6:9b:62:9f:9b:c5:69:0e:47: 06:48:2b:bf:33:d9:a2:27:00:3f:10:4c:43:48:94:a7:81:50: e8:00:46:91:18:70:e4:cb:f5:a4:3d:85:9b:cc:e7:f2:9b:50: da:06:b6:a5:56:83:77:8d:de:db:3e:5c:a4:47:f8:67:d2:f8: e2:09:d4:b1:c1:f2:b6:09:e5:ca:36:23:e9:d4:fc:d1:af:02: 72:59:58:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmo6R73DfFBBwLfkKqlDJ4DqpxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTA4MTExODI2MjBaFw0yNTA4MTUwNTE0MjBaMDMxMTAvBgNV BAMTKEQzMEFFNUNGRjdEMjVBOUE3NTc0MTc5MjA5Qzc5RTc2QThERTExRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21uDm3MYWg65w3biQnPJS2Q72 YncbRCQX0Xy3kZ4EO3hgk+XOm8YvbvESYMD5hSPo4Hfx3jA/ScJC4cEQv40JDqIk JHDjZFvxAlWhzdzRtbVhUU3xDNDFiq+Te/KSaTl06arm7tNbsDrh8QBKBtrXP2BC lX4C43L8dgHE5MqcXulKtPpfNfKnOEBPEsbVbg5CvHxe6K+uKP3XuPJ3/fswi049 zqUxSilCEJk4jKWhcH7VW3kEZHLtxBItljRxrYt127Bas6UGncQNzl/1x/TTJHhK O68exXQag1Q5cn3lEAnBnxBYZg27KDSaES9I5swLGZzTELlxJkTJ4cEkDaXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wrlz/fSWpp1dBeSCceedqjeEfEwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb7H3dsK4fU6QIioBGhwVFKRDXPGjkELNuQ s1hSdbP8CCyE7R8TOPZuIF+0NDD9LxVx0UlGLbBxEUJ8R5L0yXiosjohsnOR2gop FB5asHDLrcrGhxJN9PHOzq5YUEafVaGur5Qbkfzs+k5D9TUk4hCS39K64Owu957x nm1sJ1fKUzTuB/P0/AYMdvS0EKBN4BMhpAxN+sJ3Glg1BUDT0m52n6csZ/kQ/4Oc lKabYp+bxWkORwZIK78z2aInAD8QTENIlKeBUOgARpEYcOTL9aQ9hZvM5/KbUNoG tqVWg3eN3ts+XKRH+GfS+OIJ1LHB8rYJ5co2I+nU/NGvAnJZWJw= -----END CERTIFICATE-----Generated at Wed Aug 13 05:53:48 2025 by rpki-client