$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: XSiD4arlLpnMNzYRxZO2UYW8H5I+MMYEpXP2Di/ruI8= Subject key identifier: 40:71:5C:4E:8C:BF:62:B2:CB:0A:D0:C7:5A:50:16:C9:03:7D:50:7E Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 61B4235E4900A2A398A8E9F4DA8A8E76E024791E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: A0 Signing time: Mon 05 May 2025 23:42:15 +0000 Manifest this update: Mon 05 May 2025 23:37:15 +0000 Manifest next update: Fri 09 May 2025 10:36:15 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: ASB8REIAsL44H2neiX5fhcWj7sLe88Ms82T9Rkqpuig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 10:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b4:23:5e:49:00:a2:a3:98:a8:e9:f4:da:8a:8e:76:e0:24:79:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: May 5 23:37:15 2025 GMT Not After : May 9 10:36:15 2025 GMT Subject: CN=40715C4E8CBF62B2CB0AD0C75A5016C9037D507E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:21:9a:30:18:7e:5b:f3:85:db:0e:bb:70: c4:79:c4:87:90:d1:b7:24:c6:0c:6c:1c:76:7f:74: d5:a0:52:1f:e8:8f:42:f2:5c:df:43:d4:a7:2b:12: ee:aa:30:bf:0a:33:88:29:fe:f5:85:08:7e:47:b4: 42:0d:1f:94:e8:51:91:61:bd:44:d9:21:0e:67:12: 51:bc:9f:85:70:77:94:68:9d:31:02:df:b2:82:89: eb:31:06:84:b3:c4:76:e9:bc:fd:b2:ae:36:6b:66: b9:a8:63:6f:aa:ba:b4:64:52:62:35:2d:d0:70:92: 89:23:f6:d1:a3:1f:53:03:03:44:7c:b2:17:9d:72: 28:75:9e:63:70:b4:87:ad:4d:b7:0d:25:7b:3c:45: fa:55:d9:d0:20:c3:77:a9:fa:0e:be:52:cc:0a:74: 72:63:0d:48:ae:c8:29:e7:60:48:a1:a7:42:25:14: fa:3b:b0:28:96:05:3c:63:ac:ae:dc:8d:3a:83:1a: 05:4f:ea:01:9f:cf:e4:f0:d8:ac:80:06:a2:cb:d1: 90:b9:a5:49:b1:bf:15:68:38:89:36:58:59:de:56: ef:b7:32:2a:1d:1c:37:7c:21:1a:05:ac:94:75:f0: 26:6f:53:d4:fc:c0:a4:51:08:45:2a:51:21:bb:c7: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:71:5C:4E:8C:BF:62:B2:CB:0A:D0:C7:5A:50:16:C9:03:7D:50:7E X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9d:e4:69:6b:d2:1f:d2:f2:1c:d0:b7:af:5f:68:a8:af:8d: 58:6e:e3:ac:f7:c1:5f:cd:50:56:99:25:d6:c5:ab:e3:1c:70: 57:f5:13:fd:a3:42:1f:dd:72:33:c3:d1:b8:02:c1:b2:96:f3: 4c:30:80:be:9e:46:19:b7:ac:17:66:95:32:f7:96:83:39:5f: d4:0c:48:ea:a7:eb:05:33:2d:f3:07:91:c5:88:49:36:21:22: 7f:b4:af:7d:ec:8d:8a:98:88:fd:f7:7d:8d:e6:ae:a4:ea:50: d5:c3:ca:44:35:30:df:4a:af:20:3d:ca:0a:18:27:92:c7:b0: 86:8a:60:03:43:0f:31:ee:35:63:ed:da:9b:cb:a8:f6:c4:6f: 19:07:ac:26:eb:31:66:ef:0a:30:8a:2d:a8:56:d6:69:e8:bd: 6e:02:b0:86:c3:6f:f2:5a:40:b0:79:53:c3:40:08:17:08:dd: 9f:15:d8:39:cd:be:26:17:42:a6:4e:a3:ae:46:31:4b:ed:58: 1a:06:e7:4b:74:3b:97:8e:7e:2d:0c:95:17:9d:68:1b:dd:46: 06:e6:18:ef:e8:7a:18:ef:35:26:0d:48:b1:47:43:97:5c:3e: 5d:5e:45:73:cc:2a:4d:1a:50:60:18:33:0d:33:2a:a8:21:ca: af:70:7b:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbQjXkkAoqOYqOn02oqOduAkeR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTA1MDUyMzM3MTVaFw0yNTA1MDkxMDM2MTVaMDMxMTAvBgNV BAMTKDQwNzE1QzRFOENCRjYyQjJDQjBBRDBDNzVBNTAxNkM5MDM3RDUwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwSGaMBh+W/OF2w67cMR5xIeQ 0bckxgxsHHZ/dNWgUh/oj0LyXN9D1KcrEu6qML8KM4gp/vWFCH5HtEINH5ToUZFh vUTZIQ5nElG8n4Vwd5RonTEC37KCiesxBoSzxHbpvP2yrjZrZrmoY2+qurRkUmI1 LdBwkokj9tGjH1MDA0R8shedcih1nmNwtIetTbcNJXs8RfpV2dAgw3ep+g6+UswK dHJjDUiuyCnnYEihp0IlFPo7sCiWBTxjrK7cjTqDGgVP6gGfz+Tw2KyABqLL0ZC5 pUmxvxVoOIk2WFneVu+3MiodHDd8IRoFrJR18CZvU9T8wKRRCEUqUSG7x09hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQHFcToy/YrLLCtDHWlAWyQN9UH4wHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABad5Glr0h/S8hzQt69faKivjVhu46z3wV/N UFaZJdbFq+MccFf1E/2jQh/dcjPD0bgCwbKW80wwgL6eRhm3rBdmlTL3loM5X9QM SOqn6wUzLfMHkcWISTYhIn+0r33sjYqYiP33fY3mrqTqUNXDykQ1MN9KryA9ygoY J5LHsIaKYANDDzHuNWPt2pvLqPbEbxkHrCbrMWbvCjCKLahW1mnovW4CsIbDb/Ja QLB5U8NACBcI3Z8V2DnNviYXQqZOo65GMUvtWBoG50t0O5eOfi0MlRedaBvdRgbm GO/oehjvNSYNSLFHQ5dcPl1eRXPMKk0aUGAYMw0zKqghyq9weyk= -----END CERTIFICATE-----Generated at Thu May 8 01:33:45 2025 by rpki-client