$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: gQMRDYZwevjzrrtNM7XyPZcUfLyDPOAE2TarbF4tzic= Subject key identifier: 79:A5:11:C6:CC:B7:12:B6:D0:18:02:A6:23:7A:EB:A9:01:C7:51:CA Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 0C0BCEF61AD9993592A3A8CD49498104B64E542F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: B8 Signing time: Sat 28 Jun 2025 21:02:15 +0000 Manifest this update: Sat 28 Jun 2025 20:57:15 +0000 Manifest next update: Tue 01 Jul 2025 23:19:15 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: 5g5VuOQcGgERc2EVqoObVJl4tYTvWEm6eGx1nnkhqSQ=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0b:ce:f6:1a:d9:99:35:92:a3:a8:cd:49:49:81:04:b6:4e:54:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Jun 28 20:57:15 2025 GMT Not After : Jul 1 23:19:15 2025 GMT Subject: CN=79A511C6CCB712B6D01802A6237AEBA901C751CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:ee:43:28:98:c4:f9:9b:bb:6e:89:a9:b3: 3b:74:b8:6c:3f:a3:55:57:91:8e:28:95:81:32:c2: 73:4f:ff:17:cf:88:57:1a:94:eb:f8:83:5c:4d:48: 2f:5f:11:33:ca:dc:de:5d:d5:0f:bb:4c:18:14:91: 28:6b:ce:1e:13:e7:71:ad:62:bf:bf:46:36:fd:9b: d1:8f:fb:db:25:1d:b4:2c:8e:8d:3a:47:90:c1:90: 9d:61:c6:36:48:24:8e:d4:eb:72:99:74:48:c2:ba: ab:7b:86:15:10:d6:70:24:42:c6:72:e2:4f:07:c7: 6e:a0:a7:f5:56:3e:42:44:02:b2:94:ad:c9:f2:ec: 2f:55:b8:99:cd:55:91:e5:71:0d:76:40:74:b3:b2: 39:b1:09:32:ab:b5:90:a5:7f:67:dd:52:3d:ea:e7: 25:90:49:ac:70:86:02:66:cc:93:bc:ef:27:e4:c8: f5:6e:d8:a4:3e:2a:54:5e:d7:08:ce:93:e5:30:79: aa:a1:88:50:f2:59:f7:34:cb:d9:62:be:7e:e5:f8: 83:f9:ff:c5:a5:b3:5d:03:9a:a3:3f:b7:04:e0:9f: cd:3b:32:ec:9d:7e:b9:0f:d6:93:7f:93:8a:e4:60: b7:f1:f4:13:ff:f6:40:12:e4:ad:81:b4:8c:7e:0c: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A5:11:C6:CC:B7:12:B6:D0:18:02:A6:23:7A:EB:A9:01:C7:51:CA X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:20:bb:8d:4d:2b:50:90:b2:f3:d0:9c:07:64:4e:6a:ee:38: 29:92:91:72:cd:de:b9:63:8c:3d:09:0c:21:a0:88:24:b0:48: eb:3a:e6:31:09:ce:7e:81:d8:98:45:09:ff:11:eb:7e:2a:33: 85:fd:89:b2:7e:2f:50:20:d9:c7:0f:4a:d0:90:f4:af:18:e2: 3c:32:59:1d:0f:b6:e6:08:70:68:08:3b:52:99:11:d4:6a:9b: 89:13:c7:30:3b:96:82:af:3d:4f:b0:c2:3e:d8:d4:d9:d8:2c: a5:ce:e4:65:aa:49:34:73:6d:78:c8:1b:53:1d:70:e4:af:db: 33:69:19:3c:9e:48:bf:3e:3d:a7:4f:43:07:01:ba:82:2c:a5: cf:86:f5:02:49:8f:e7:2f:37:b7:fc:32:e5:96:b7:5c:7e:8b: 88:db:1f:0f:e7:35:c9:df:44:db:cc:0f:79:2f:2c:5e:5b:f7: 91:08:c7:cd:ed:a5:b4:3e:a3:88:e7:73:4f:70:63:56:5a:d9: ca:63:96:c4:01:e6:43:18:6e:a5:fd:7b:0c:f3:c1:9e:99:ae: a2:bb:1e:da:a3:94:f4:0e:90:76:9d:32:b5:19:07:05:56:24: a1:fd:70:bd:d4:87:49:fd:2d:a0:46:e4:7a:07:0c:47:e6:75: 7b:d1:0b:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAvO9hrZmTWSo6jNSUmBBLZOVC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTA2MjgyMDU3MTVaFw0yNTA3MDEyMzE5MTVaMDMxMTAvBgNV BAMTKDc5QTUxMUM2Q0NCNzEyQjZEMDE4MDJBNjIzN0FFQkE5MDFDNzUxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Me5DKJjE+Zu7bompszt0uGw/ o1VXkY4olYEywnNP/xfPiFcalOv4g1xNSC9fETPK3N5d1Q+7TBgUkShrzh4T53Gt Yr+/Rjb9m9GP+9slHbQsjo06R5DBkJ1hxjZIJI7U63KZdEjCuqt7hhUQ1nAkQsZy 4k8Hx26gp/VWPkJEArKUrcny7C9VuJnNVZHlcQ12QHSzsjmxCTKrtZClf2fdUj3q 5yWQSaxwhgJmzJO87yfkyPVu2KQ+KlRe1wjOk+UweaqhiFDyWfc0y9livn7l+IP5 /8Wls10DmqM/twTgn807MuydfrkP1pN/k4rkYLfx9BP/9kAS5K2BtIx+DHoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeaURxsy3ErbQGAKmI3rrqQHHUcowHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAgu41NK1CQsvPQnAdkTmruOCmSkXLN3rlj jD0JDCGgiCSwSOs65jEJzn6B2JhFCf8R634qM4X9ibJ+L1Ag2ccPStCQ9K8Y4jwy WR0PtuYIcGgIO1KZEdRqm4kTxzA7loKvPU+wwj7Y1NnYLKXO5GWqSTRzbXjIG1Md cOSv2zNpGTyeSL8+PadPQwcBuoIspc+G9QJJj+cvN7f8MuWWt1x+i4jbHw/nNcnf RNvMD3kvLF5b95EIx83tpbQ+o4jnc09wY1Za2cpjlsQB5kMYbqX9ewzzwZ6ZrqK7 HtqjlPQOkHadMrUZBwVWJKH9cL3Uh0n9LaBG5HoHDEfmdXvRC8U= -----END CERTIFICATE-----Generated at Mon Jun 30 07:19:56 2025 by rpki-client