$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: Yz5FavXFTMR61polKmVh/gPdfFrL07GFEcBLfguBLo8= Subject key identifier: 0A:75:48:69:1D:D1:C5:EB:19:77:89:0A:84:B5:2A:57:E1:E2:F2:49 Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 0CF2F5B2C77BE085DE1080DF38466D531AB3BE80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 16:32:11 +0000 Manifest this update: Fri 22 Aug 2025 16:27:11 +0000 Manifest next update: Mon 25 Aug 2025 22:53:11 +0000 Files and hashes: 1: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=) 2: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: om+FheZwZiY4SfbUhhFfQ626ArZI3+CdfvYtE3FgLSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f2:f5:b2:c7:7b:e0:85:de:10:80:df:38:46:6d:53:1a:b3:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Aug 22 16:27:11 2025 GMT Not After : Aug 25 22:53:11 2025 GMT Subject: CN=0A7548691DD1C5EB1977890A84B52A57E1E2F249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:30:cb:ec:ad:13:bc:9d:3d:77:b7:a8:bc:30: 27:c4:9f:8b:9a:ce:15:b9:e5:fb:d5:f6:5c:6f:1c: 10:ca:be:fc:bc:0d:42:89:29:2a:ec:60:39:02:a5: 77:61:16:9b:95:16:64:93:61:52:34:b5:42:24:72: cf:96:27:6b:72:43:01:72:75:5e:1f:0b:94:4e:22: eb:76:44:82:b8:8a:9f:6f:3c:78:82:02:64:bf:07: 26:de:c1:94:97:97:98:a7:e3:eb:8e:ac:2e:da:fc: e9:f6:02:bc:0b:42:ab:40:02:9e:fa:7c:81:0c:41: 32:8b:2f:f9:13:0b:ea:f0:b2:f7:c4:ca:d1:49:b2: a3:52:e9:eb:a6:14:17:6a:5a:fb:0c:43:0a:bb:1d: b6:2d:1b:ce:41:6d:3a:90:c3:23:b5:c4:f9:fa:a7: b1:af:97:f0:b3:a6:ff:8d:02:87:d0:74:ed:cd:e6: 0a:67:83:9e:ba:fa:e8:a1:60:73:52:ef:7b:94:93: 16:bc:d8:c7:7b:8a:b2:28:39:d0:20:cb:b1:a1:8e: 0e:c5:ea:32:12:f6:78:02:a5:ca:05:56:1e:ea:b1: f1:25:8e:2f:c6:9e:80:3c:d7:56:ce:a4:4d:d9:f6: 34:2e:77:ef:1a:fc:c0:2d:fe:18:3f:a2:51:ad:8c: 8e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:75:48:69:1D:D1:C5:EB:19:77:89:0A:84:B5:2A:57:E1:E2:F2:49 X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:f0:ca:9b:35:34:df:95:02:c8:c1:15:b1:2f:ac:c6:54:bf: b8:4b:65:4b:68:8f:bd:b6:bb:ec:16:10:89:fd:67:3b:d0:bf: a8:16:45:66:6d:87:79:1e:49:34:bd:16:ad:12:ce:fe:e1:fb: 9a:b8:87:e4:33:a4:00:0b:13:d1:b3:d6:7d:8b:1e:e4:90:24: cb:eb:33:ae:2a:7e:87:ce:7a:1a:19:cc:b2:d8:3e:98:30:bd: ae:14:f6:33:b3:f9:14:b2:40:18:b9:a0:f2:7f:d5:c0:1d:ff: 6c:c8:0a:00:e1:51:e8:e4:fe:ca:09:e7:4b:a7:e6:7d:81:e3: f7:3b:27:48:cf:32:8d:96:bc:42:1b:13:36:30:0d:ec:ee:39: 0e:89:47:ed:3b:5c:b5:ba:72:2b:22:e7:23:32:e3:d3:47:ab: ea:ab:1e:5a:e0:db:9d:02:8d:c2:dc:d1:09:bd:64:1a:2b:fb: c0:14:18:56:fc:fb:0b:81:67:26:12:db:37:c7:64:1f:96:0e: 08:9b:cf:9c:10:a3:ec:29:c0:c3:ce:ed:70:29:14:a6:a7:f0: 00:0b:d8:91:85:6d:b4:d6:c8:bb:bf:d8:d1:03:81:16:7f:a9: da:d4:6f:95:47:e6:1b:ca:7e:6f:45:8f:0f:c6:c7:1c:26:fc: 47:58:04:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPL1ssd74IXeEIDfOEZtUxqzvoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNTA4MjIxNjI3MTFaFw0yNTA4MjUyMjUzMTFaMDMxMTAvBgNV BAMTKDBBNzU0ODY5MUREMUM1RUIxOTc3ODkwQTg0QjUyQTU3RTFFMkYyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0MMvsrRO8nT13t6i8MCfEn4ua zhW55fvV9lxvHBDKvvy8DUKJKSrsYDkCpXdhFpuVFmSTYVI0tUIkcs+WJ2tyQwFy dV4fC5ROIut2RIK4ip9vPHiCAmS/BybewZSXl5in4+uOrC7a/On2ArwLQqtAAp76 fIEMQTKLL/kTC+rwsvfEytFJsqNS6eumFBdqWvsMQwq7HbYtG85BbTqQwyO1xPn6 p7Gvl/Czpv+NAofQdO3N5gpng566+uihYHNS73uUkxa82Md7irIoOdAgy7Ghjg7F 6jIS9ngCpcoFVh7qsfElji/GnoA811bOpE3Z9jQud+8a/MAt/hg/olGtjI7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCnVIaR3RxesZd4kKhLUqV+Hi8kkwHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM7wyps1NN+VAsjBFbEvrMZUv7hLZUtoj722 u+wWEIn9ZzvQv6gWRWZth3keSTS9Fq0Szv7h+5q4h+QzpAALE9Gz1n2LHuSQJMvr M64qfofOehoZzLLYPpgwva4U9jOz+RSyQBi5oPJ/1cAd/2zICgDhUejk/soJ50un 5n2B4/c7J0jPMo2WvEIbEzYwDezuOQ6JR+07XLW6cisi5yMy49NHq+qrHlrg250C jcLc0Qm9ZBor+8AUGFb8+wuBZyYS2zfHZB+WDgibz5wQo+wpwMPO7XApFKan8AAL 2JGFbbTWyLu/2NEDgRZ/qdrUb5VH5hvKfm9Fjw/Gxxwm/EdYBD0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:14 2025 by rpki-client