$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: VNjlQ8s8+dDHTTf4evvnb2KLluceLZ5ojqvlOvQDjZM= Subject key identifier: F7:49:6F:07:E1:E0:B4:B4:46:8F:34:AC:A0:F0:9E:83:8C:3F:5B:1E Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 07F1552ED090E27211431AC06EB2C4840C7C581A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 034C Signing time: Tue 04 Nov 2025 17:21:41 +0000 Manifest this update: Tue 04 Nov 2025 17:16:41 +0000 Manifest next update: Fri 07 Nov 2025 23:36:41 +0000 Files and hashes: 1: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: dAzl7GnUhBKurNkYn0whjPDAW8/1LWt0NgH43JcAPLc=) 2: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) 3: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 23:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f1:55:2e:d0:90:e2:72:11:43:1a:c0:6e:b2:c4:84:0c:7c:58:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Nov 4 17:16:41 2025 GMT Not After : Nov 7 23:36:41 2025 GMT Subject: CN=F7496F07E1E0B4B4468F34ACA0F09E838C3F5B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:09:38:15:13:80:6f:a5:3d:89:b6:77:4a:e3: c2:53:8f:57:4e:20:d1:2a:83:b0:54:1e:cf:62:82: 1c:fe:54:b8:a6:1a:bb:f2:14:d9:d8:9f:8f:fd:7c: 43:18:d4:01:46:e6:af:73:ac:41:f4:73:e6:97:63: a3:d0:1b:70:7c:72:6c:a7:93:33:b9:76:2e:58:6d: fa:c4:47:53:59:42:e0:1b:14:e4:6d:07:f3:1b:4c: 85:b1:75:7e:19:54:60:6e:22:79:09:d1:05:3a:4e: 0a:b2:80:e2:82:25:2c:3d:85:7a:8b:5a:95:f6:a1: 93:cf:e5:db:57:a5:27:ef:01:a0:6e:76:48:69:7a: d7:bd:2f:c4:42:7d:12:48:2c:b9:29:21:f8:e2:67: a6:6c:19:22:21:b3:57:83:dc:a7:5b:d1:c1:1a:9c: e6:1e:6c:9c:9f:d8:e8:b7:cc:ab:1d:b3:16:d1:e7: af:c8:81:df:e6:64:c5:12:9e:60:bc:49:e0:2a:04: 43:ad:23:da:92:29:81:3b:b8:11:d9:f0:0e:75:88: d3:0e:32:da:e8:4d:99:30:46:44:23:24:e0:48:2f: b7:c4:e1:fa:be:84:22:32:cb:d9:29:36:f7:3d:ed: ec:05:b4:81:a9:cf:55:e4:f9:14:e0:98:3f:f0:4c: e1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:49:6F:07:E1:E0:B4:B4:46:8F:34:AC:A0:F0:9E:83:8C:3F:5B:1E X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6d:41:cc:3e:81:93:22:2f:b6:67:75:d3:fa:3b:96:e4:e2: 7b:aa:bc:6e:e8:c1:31:fe:8c:4c:a8:05:54:56:b5:98:c9:7f: e5:cf:7e:3f:9d:11:f8:ee:19:fe:85:df:b8:1b:69:d3:81:b6: 4f:2d:68:67:74:9d:bd:4f:41:84:95:6c:83:3e:0a:9f:02:85: 99:2d:e7:df:1b:25:27:2a:ec:5e:3a:e6:b6:2e:f6:99:bb:c0: 85:ca:0b:5e:aa:0d:18:93:93:38:87:80:f5:c3:13:96:91:1a: 36:ba:7b:e4:18:0f:23:9f:89:6c:1b:14:68:f1:e6:22:7f:4b: bf:55:cb:09:d2:8f:51:ff:41:c0:a1:46:46:2f:e1:5f:cc:04: 49:40:61:2d:2c:fa:fa:d1:20:08:de:3c:2f:fe:30:26:4d:64: 06:fd:84:52:7c:0e:a7:cc:43:5e:07:c0:92:59:d9:91:d5:57: 89:cf:78:3e:f6:d1:6b:ba:7a:19:fe:7f:7f:ca:01:b3:2f:5b: 33:c3:f3:cc:9d:4a:06:64:32:e2:19:eb:3f:e1:d1:d0:93:92: 41:97:a0:e5:1a:ce:61:87:d7:71:7c:97:4c:9b:a2:ea:56:4f: 68:ff:30:43:14:b5:bd:1b:39:7b:55:f9:f6:28:8a:15:06:9f: 64:01:c1:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/FVLtCQ4nIRQxrAbrLEhAx8WBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNTExMDQxNzE2NDFaFw0yNTExMDcyMzM2NDFaMDMxMTAvBgNV BAMTKEY3NDk2RjA3RTFFMEI0QjQ0NjhGMzRBQ0EwRjA5RTgzOEMzRjVCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCTgVE4BvpT2JtndK48JTj1dO INEqg7BUHs9ighz+VLimGrvyFNnYn4/9fEMY1AFG5q9zrEH0c+aXY6PQG3B8cmyn kzO5di5YbfrER1NZQuAbFORtB/MbTIWxdX4ZVGBuInkJ0QU6TgqygOKCJSw9hXqL WpX2oZPP5dtXpSfvAaBudkhpete9L8RCfRJILLkpIfjiZ6ZsGSIhs1eD3Kdb0cEa nOYebJyf2Oi3zKsdsxbR56/Igd/mZMUSnmC8SeAqBEOtI9qSKYE7uBHZ8A51iNMO MtroTZkwRkQjJOBIL7fE4fq+hCIyy9kpNvc97ewFtIGpz1Xk+RTgmD/wTOGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90lvB+HgtLRGjzSsoPCeg4w/Wx4wHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFtQcw+gZMiL7ZnddP6O5bk4nuqvG7owTH+ jEyoBVRWtZjJf+XPfj+dEfjuGf6F37gbadOBtk8taGd0nb1PQYSVbIM+Cp8ChZkt 598bJScq7F465rYu9pm7wIXKC16qDRiTkziHgPXDE5aRGja6e+QYDyOfiWwbFGjx 5iJ/S79VywnSj1H/QcChRkYv4V/MBElAYS0s+vrRIAjePC/+MCZNZAb9hFJ8DqfM Q14HwJJZ2ZHVV4nPeD720Wu6ehn+f3/KAbMvWzPD88ydSgZkMuIZ6z/h0dCTkkGX oOUazmGH13F8l0yboupWT2j/MEMUtb0bOXtV+fYoihUGn2QBwZ0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:21:15 2025 by rpki-client