$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: 6DJaq1VcJfORacE/a5trxKeb61BcdmsEaIgTLH6jT7s= Subject key identifier: 0C:C9:E8:83:C8:FA:43:3A:63:EC:38:6B:F4:80:4B:11:3F:17:A9:E5 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 4E9D8BC788AAB024AA5F57A89347D02043D2B9FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: EA Signing time: Sun 19 Oct 2025 14:12:18 +0000 Manifest this update: Sun 19 Oct 2025 14:07:18 +0000 Manifest next update: Wed 22 Oct 2025 17:24:18 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: WvkpiXFdS79dq5QxTAufGA4Mvf0/5YO+Jdq1COukycE=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:8b:c7:88:aa:b0:24:aa:5f:57:a8:93:47:d0:20:43:d2:b9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Oct 19 14:07:18 2025 GMT Not After : Oct 22 17:24:18 2025 GMT Subject: CN=0CC9E883C8FA433A63EC386BF4804B113F17A9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:8b:86:36:e9:d3:7f:8f:f7:9e:d1:bb:3c: 05:af:d5:9a:0c:e0:8b:c5:5a:ee:ed:d9:7f:05:f9: 3b:64:27:36:bc:61:70:5c:db:a2:ea:35:a1:d7:55: ea:2a:69:ab:67:79:2d:22:8f:23:25:5f:61:ed:df: 40:42:c0:18:15:0f:c9:56:98:e4:60:6c:08:74:30: 38:f3:6e:a1:64:e9:ae:c4:87:66:47:a0:01:12:fb: 76:24:0e:42:9f:f2:4a:e3:ac:19:72:e4:56:46:f0: 69:65:71:52:2e:80:95:6d:1d:15:70:05:16:91:7a: b2:17:f5:49:0a:43:48:5c:06:0f:80:60:a5:25:40: df:96:b9:83:b6:95:6d:ce:25:29:a9:d6:89:dc:c1: 33:29:24:d4:74:95:42:53:08:ad:c9:fd:98:d7:eb: 96:26:e1:3f:2b:5a:a7:7c:c4:a9:a2:ae:86:54:36: 90:9f:3c:2b:1d:7d:ff:9e:68:20:f8:b2:73:03:ca: be:13:69:3f:1e:2f:c8:db:6d:31:07:13:d1:fb:ec: 89:a6:b7:a4:92:bf:93:d2:2f:e7:8e:4b:b0:ab:9e: 32:4e:74:7d:b3:4d:0f:a2:37:5b:06:f6:88:57:67: 57:c8:3a:00:4e:da:cd:70:13:a5:0b:cc:56:8b:2a: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C9:E8:83:C8:FA:43:3A:63:EC:38:6B:F4:80:4B:11:3F:17:A9:E5 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f0:a0:19:42:20:5d:dc:c6:b2:f3:b6:36:5b:ef:89:c1:02: d3:cd:fc:e0:71:10:7b:cd:21:f9:94:cb:7a:c2:c7:5a:d4:b8: 26:67:80:97:0d:f4:4f:21:fb:fc:fe:29:86:19:70:2b:95:b2: fe:1a:3c:c5:b0:65:83:f8:43:71:b4:d5:72:85:3b:1d:b5:b7: e7:79:6e:3a:0e:a6:94:04:6f:42:bd:1d:e9:6b:7c:56:73:e5: a3:46:b1:3e:b6:4f:68:b3:01:75:a2:3d:a0:8d:b1:4c:7e:6c: 4d:3e:92:b8:f6:27:c6:f9:22:15:ec:5f:d6:5f:42:ab:e2:66: c6:49:f0:0b:c9:16:56:f4:2a:fd:5f:79:0c:2e:5a:8f:28:e4: d7:4d:d9:c3:da:a2:d2:30:04:9c:65:82:49:fa:26:88:6c:87: a7:37:ed:91:bc:e7:37:48:84:b3:32:bb:7e:9d:b0:95:1e:0b: 8a:2e:c9:7a:a6:bd:6a:d4:1e:ad:c3:14:3a:bf:1f:70:3e:de: 5f:5b:cc:ca:b0:4b:3c:9c:b1:b2:ba:b4:c4:0b:65:a8:41:73: 89:2b:fb:80:d3:ee:41:15:9b:9b:ca:60:35:7a:a8:d3:e9:1d: a1:1a:5f:98:93:67:79:f3:57:52:4d:25:6d:4d:6c:ae:a4:8a: 6f:21:f7:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTp2Lx4iqsCSqX1eok0fQIEPSuf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTEwMTkxNDA3MThaFw0yNTEwMjIxNzI0MThaMDMxMTAvBgNV BAMTKDBDQzlFODgzQzhGQTQzM0E2M0VDMzg2QkY0ODA0QjExM0YxN0E5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJouGNunTf4/3ntG7PAWv1ZoM 4IvFWu7t2X8F+TtkJza8YXBc26LqNaHXVeoqaatneS0ijyMlX2Ht30BCwBgVD8lW mORgbAh0MDjzbqFk6a7Eh2ZHoAES+3YkDkKf8krjrBly5FZG8GllcVIugJVtHRVw BRaRerIX9UkKQ0hcBg+AYKUlQN+WuYO2lW3OJSmp1oncwTMpJNR0lUJTCK3J/ZjX 65Ym4T8rWqd8xKmiroZUNpCfPCsdff+eaCD4snMDyr4TaT8eL8jbbTEHE9H77Imm t6SSv5PSL+eOS7CrnjJOdH2zTQ+iN1sG9ohXZ1fIOgBO2s1wE6ULzFaLKqN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDMnog8j6Qzpj7Dhr9IBLET8XqeUwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLwoBlCIF3cxrLztjZb74nBAtPN/OBxEHvN IfmUy3rCx1rUuCZngJcN9E8h+/z+KYYZcCuVsv4aPMWwZYP4Q3G01XKFOx21t+d5 bjoOppQEb0K9HelrfFZz5aNGsT62T2izAXWiPaCNsUx+bE0+krj2J8b5IhXsX9Zf QqviZsZJ8AvJFlb0Kv1feQwuWo8o5NdN2cPaotIwBJxlgkn6Johsh6c37ZG85zdI hLMyu36dsJUeC4ouyXqmvWrUHq3DFDq/H3A+3l9bzMqwSzycsbK6tMQLZahBc4kr +4DT7kEVm5vKYDV6qNPpHaEaX5iTZ3nzV1JNJW1NbK6kim8h9y4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:42:57 2025 by rpki-client