$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: Vhd5ph3OlZj8A390OLnh2hnJZ/CTr4NxKvHgEWBsJio= Subject key identifier: B1:E1:3B:53:33:B7:03:0F:F5:36:9A:A9:60:3F:0F:1A:6C:FD:BE:8D Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 4FEBC7CC43BC3FF9E4380E9644E776B68B862F74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: D1 Signing time: Sat 23 Aug 2025 11:02:20 +0000 Manifest this update: Sat 23 Aug 2025 10:57:20 +0000 Manifest next update: Tue 26 Aug 2025 21:43:20 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: bW2MqU0QI2S/iWAcTWcxN/LZ25NtbItK/HTdkWF+mvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:eb:c7:cc:43:bc:3f:f9:e4:38:0e:96:44:e7:76:b6:8b:86:2f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Aug 23 10:57:20 2025 GMT Not After : Aug 26 21:43:20 2025 GMT Subject: CN=B1E13B5333B7030FF5369AA9603F0F1A6CFDBE8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:15:20:2d:a2:97:ac:8b:63:b2:95:77:4d: c1:30:6a:bf:bb:03:79:b7:47:ad:78:1e:ba:cd:bc: 80:52:b0:d7:62:ec:0d:08:fe:aa:c6:54:d1:d5:81: 99:74:a3:37:a3:d3:a0:86:fe:e2:15:0d:33:ea:e2: e6:6a:2c:e8:41:ac:da:70:0c:78:58:4c:8a:aa:6b: 29:59:b0:13:71:46:56:04:a7:70:d2:d3:06:15:bf: 16:34:cc:74:c8:d6:3d:fc:a7:d0:fd:5d:5e:ab:43: 3b:2a:27:65:db:0d:4a:92:9d:8a:d1:9f:e1:9b:45: 6f:5b:40:d0:2f:79:d3:76:d0:69:85:a9:2a:81:bd: 13:13:26:7b:64:a6:c3:19:1e:24:73:31:2e:bb:95: 60:fc:de:87:6d:e7:d9:8b:47:68:94:08:ca:97:e6: 5a:e1:1e:30:c3:4e:fb:41:f0:83:62:f3:50:de:fa: 5d:3a:05:63:84:de:5d:96:3e:7b:73:1e:f9:9d:93: 73:8a:09:67:a8:66:5b:7c:94:e2:06:00:df:4a:29: f8:64:90:e1:da:d9:9a:a6:4d:b5:0b:2b:62:75:21: 32:57:2e:cf:3f:61:30:79:80:fb:77:ec:89:98:eb: 5b:5e:47:aa:e1:90:24:7c:ec:1c:89:2c:ac:e2:ab: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:3B:53:33:B7:03:0F:F5:36:9A:A9:60:3F:0F:1A:6C:FD:BE:8D X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:11:f2:18:06:20:ec:8f:ed:3e:10:a4:3e:7f:6c:83:dc:ab: 29:dc:ce:ce:fb:d3:aa:7f:a4:07:b5:f2:5a:1f:cc:ca:c0:17: 3c:e7:62:9e:fa:e6:38:bd:20:06:30:1d:fc:e9:1c:b0:18:f7: 18:ac:4a:29:98:f8:13:6b:34:9f:3e:5b:f8:d1:e6:f4:0e:8b: e4:f6:1a:0a:4b:31:56:57:23:50:cf:a6:2c:9d:db:d0:87:2d: 0c:be:50:0a:8d:6b:e5:04:4d:f1:6d:4e:d7:74:7b:47:29:6c: 5b:3f:2f:2c:cf:74:53:75:f4:5e:46:a7:18:94:98:68:57:7e: df:0e:31:5a:05:75:30:06:10:f2:1b:63:7c:57:94:7b:04:91: a5:45:42:a9:59:ed:fc:49:aa:ab:7c:91:d3:25:75:12:3a:5f: 7b:65:85:63:b4:cb:4e:0a:2a:d0:d8:f0:aa:24:ca:1c:d1:47: 2e:2e:34:9f:01:14:eb:10:6c:62:73:eb:82:31:37:b9:ba:f9: f3:6f:fd:2c:30:4a:97:ec:21:3e:f2:2a:ca:f6:b8:56:c7:07: 04:02:72:a4:bb:fc:3d:91:2f:75:e9:81:ef:2d:ba:78:03:1e: 52:a8:82:08:3d:d1:b4:3d:f9:fc:83:05:a3:5a:fb:6a:fb:1c: e1:c6:4e:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+vHzEO8P/nkOA6WROd2touGL3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTA4MjMxMDU3MjBaFw0yNTA4MjYyMTQzMjBaMDMxMTAvBgNV BAMTKEIxRTEzQjUzMzNCNzAzMEZGNTM2OUFBOTYwM0YwRjFBNkNGREJFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWBUgLaKXrItjspV3TcEwar+7 A3m3R614HrrNvIBSsNdi7A0I/qrGVNHVgZl0ozej06CG/uIVDTPq4uZqLOhBrNpw DHhYTIqqaylZsBNxRlYEp3DS0wYVvxY0zHTI1j38p9D9XV6rQzsqJ2XbDUqSnYrR n+GbRW9bQNAvedN20GmFqSqBvRMTJntkpsMZHiRzMS67lWD83odt59mLR2iUCMqX 5lrhHjDDTvtB8INi81De+l06BWOE3l2WPntzHvmdk3OKCWeoZlt8lOIGAN9KKfhk kOHa2ZqmTbULK2J1ITJXLs8/YTB5gPt37ImY61teR6rhkCR87ByJLKziq3bZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseE7UzO3Aw/1NpqpYD8PGmz9vo0wHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUR8hgGIOyP7T4QpD5/bIPcqynczs7706p/ pAe18lofzMrAFzznYp765ji9IAYwHfzpHLAY9xisSimY+BNrNJ8+W/jR5vQOi+T2 GgpLMVZXI1DPpiyd29CHLQy+UAqNa+UETfFtTtd0e0cpbFs/LyzPdFN19F5GpxiU mGhXft8OMVoFdTAGEPIbY3xXlHsEkaVFQqlZ7fxJqqt8kdMldRI6X3tlhWO0y04K KtDY8KokyhzRRy4uNJ8BFOsQbGJz64IxN7m6+fNv/SwwSpfsIT7yKsr2uFbHBwQC cqS7/D2RL3Xpge8tungDHlKoggg90bQ9+fyDBaNa+2r7HOHGTmI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:05:17 2025 by rpki-client